<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_0{
style=filled;
color=gray75;
53[label="133.72.177.101s;1pkt 1fpkt", shape=rectangle, color=red];
108[label="1.145.126.101d;1pkt 1fpkt", shape=rectangle, color=red];
992[label="1.145.126.101;d;24pkt 24fpkt", shape=diamond, color=yellow];
2300[label="133.72.177.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
5694[label="133.72.177.101;s;1pkt 1fpkt", shape=hexagon, color=black];
6088[label="1.145.126.101;d;24pkt 24fpkt", shape=hexagon, color=black];
stat0[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.168.216:*, 1.145.126.101:80}[75%]&lt;BR/&gt;{*:*, 1.145.126.101:554}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 554: (15.3846%)&lt;BR/&gt; 2585: (5.76923%)&lt;BR/&gt; 48965: (1.92308%)&lt;BR/&gt; 48537: (1.92308%)&gt;];
}
53--108[label="1;1pkt 1fpkt"];
53--992[label="1;1pkt 1fpkt"];
53--2300[label="1;1pkt 1fpkt"];
53--5694[label="1;1pkt 1fpkt"];
53--6088[label="1;1pkt 1fpkt"];
108--992[label="1;1pkt 1fpkt"];
108--2300[label="1;1pkt 1fpkt"];
108--5694[label="1;1pkt 1fpkt"];
108--6088[label="1;1pkt 1fpkt"];
992--1047[label="0.75;18pkt 18fpkt"];
992--2300[label="1;1pkt 1fpkt"];
992--5694[label="1;1pkt 1fpkt"];
992--6088[label="1;24pkt 24fpkt"];
992--8119[label="0.208333;5pkt 5fpkt"];
992--8134[label="0.166667;4pkt 4fpkt"];
992--8165[label="0.166667;4pkt 4fpkt"];
992--8208[label="0.166667;4pkt 4fpkt"];
992--8241[label="0.166667;4pkt 4fpkt"];
2300--5694[label="1;1pkt 1fpkt"];
2300--6088[label="1;1pkt 1fpkt"];
5694--6088[label="1;1pkt 1fpkt"];
6088--8119[label="0.208333;5pkt 5fpkt"];
6088--8134[label="0.166667;4pkt 4fpkt"];
6088--8165[label="0.166667;4pkt 4fpkt"];
6088--8208[label="0.166667;4pkt 4fpkt"];
6088--8241[label="0.166667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="1.145.126.101" dst_port="554"/>
      <filter dst_ip="1.145.126.101" dst_port="80" src_ip="133.72.168.216"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.57.138.245" dst_port="80" proto="tcp" src_ip="133.72.206.11" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="80" proto="udp" src_ip="133.72.206.11" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="53" proto="tcp" src_ip="133.72.206.11" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="53" proto="udp" src_ip="133.72.206.11" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="139" proto="tcp" src_ip="133.72.206.11" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="139" proto="udp" src_ip="133.72.206.11" src_port="80"/>
      <from sec="1229058517" usec="0"/>
      <to sec="1229058739" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.57.138.245" dst_port="80" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="80" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="53" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="53" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="139" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="214.57.138.245" dst_port="139" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <from sec="1229058516" usec="0"/>
      <to sec="1229058545" usec="0"/>
    </slice>
    <from sec="1229058516" usec="0"/>
    <to sec="1229058739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.57.103.48" dst_port="443" proto="tcp" src_ip="133.72.133.44" src_port="80"/>
      <filter dst_ip="214.57.103.48" dst_port="443" proto="udp" src_ip="133.72.133.44" src_port="80"/>
      <filter dst_ip="214.4.227.51" dst_port="443" proto="tcp" src_ip="133.72.133.44" src_port="80"/>
      <filter dst_ip="214.4.227.51" dst_port="443" proto="udp" src_ip="133.72.133.44" src_port="80"/>
      <from sec="1229058283" usec="0"/>
      <to sec="1229058505" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.57.103.48" dst_port="443" proto="tcp" src_ip="174.194.122.0" src_port="80"/>
      <filter dst_ip="214.57.103.48" dst_port="443" proto="udp" src_ip="174.194.122.0" src_port="80"/>
      <filter dst_ip="214.4.227.51" dst_port="443" proto="tcp" src_ip="174.194.122.0" src_port="80"/>
      <filter dst_ip="214.4.227.51" dst_port="443" proto="udp" src_ip="174.194.122.0" src_port="80"/>
      <from sec="1229058504" usec="0"/>
      <to sec="1229058507" usec="0"/>
    </slice>
    <from sec="1229058283" usec="0"/>
    <to sec="1229058508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="215.40.227.25" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="215.40.227.25" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="215.40.227.25" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="215.40.227.25" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="133.72.152.32" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="133.72.152.32" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="133.72.152.32" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="133.72.152.32" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="128.64.242.149" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="128.64.242.149" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="128.64.242.149" src_port="80"/>
      <filter dst_ip="215.40.227.25" dst_port="80" proto="tcp" src_ip="128.64.242.149" src_port="80"/>
      <from sec="1229058076" usec="0"/>
      <to sec="1229058657" usec="0"/>
    </slice>
    <from sec="1229058076" usec="0"/>
    <to sec="1229058657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="128.64.203.74" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <from sec="1229058119" usec="0"/>
      <to sec="1229058897" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="128.64.203.74" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="133.72.167.124" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="25" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <filter dst_ip="1.145.163.122" dst_port="80" proto="tcp" src_ip="97.115.79.123" src_port="3236"/>
      <from sec="1229058183" usec="0"/>
      <to sec="1229058184" usec="0"/>
    </slice>
    <from sec="1229058119" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="80" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="udp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="tcp" src_ip="165.181.120.204"/>
      <filter dst_ip="165.181.120.204" dst_port="53" proto="udp" src_ip="165.181.120.204"/>
      <from sec="1229058090" usec="0"/>
      <to sec="1229058465" usec="0"/>
    </slice>
    <from sec="1229058090" usec="0"/>
    <to sec="1229058465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="53" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="udp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="tcp" src_ip="216.36.61.210"/>
      <filter dst_ip="216.36.61.210" dst_port="80" proto="udp" src_ip="216.36.61.210"/>
      <from sec="1229058032" usec="0"/>
      <to sec="1229058707" usec="0"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.40.144.48" src_port="35202"/>
      <from sec="1229058120" usec="0"/>
      <to sec="1229058134" usec="0"/>
    </slice>
    <from sec="1229058120" usec="0"/>
    <to sec="1229058134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.194.89.80" src_port="10000"/>
      <filter dst_port="137" proto="icmp" src_ip="1.194.89.80" src_port="10000"/>
      <from sec="1229058419" usec="0"/>
      <to sec="1229058430" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="134.104.181.80" src_port="10000"/>
      <filter dst_port="137" proto="icmp" src_ip="134.104.181.80" src_port="10000"/>
      <from sec="1229058428" usec="0"/>
      <to sec="1229058430" usec="0"/>
    </slice>
    <from sec="1229058419" usec="0"/>
    <to sec="1229058430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="196.219.165.233" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="25" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="53" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="tcp" src_ip="128.81.139.12" src_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="139" proto="udp" src_ip="128.81.139.12" src_port="80"/>
      <from sec="1229058563" usec="0"/>
      <to sec="1229058897" usec="0"/>
    </slice>
    <from sec="1229058562" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.73.50.157" dst_port="80" proto="tcp" src_ip="133.72.62.83" src_port="53"/>
      <filter dst_ip="45.73.50.157" dst_port="80" proto="udp" src_ip="133.72.62.83" src_port="53"/>
      <filter dst_ip="45.73.50.157" dst_port="53" proto="tcp" src_ip="133.72.62.83" src_port="53"/>
      <filter dst_ip="45.73.50.157" dst_port="53" proto="udp" src_ip="133.72.62.83" src_port="53"/>
      <from sec="1229058157" usec="0"/>
      <to sec="1229058158" usec="0"/>
    </slice>
    <from sec="1229058157" usec="0"/>
    <to sec="1229058160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10599,1.96945,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="133.72.158.129" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="133.72.158.129" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="133.72.158.129" src_port="4004"/>
      <from sec="1229058567" usec="0"/>
      <to sec="1229058570" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="202.38.167.236" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="202.38.167.236" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="202.38.167.236" src_port="4004"/>
      <from sec="1229058566" usec="0"/>
      <to sec="1229058569" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="38.125.1.23" src_port="3998"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="tcp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="80" proto="udp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="tcp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="53" proto="udp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="tcp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="139" proto="udp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="tcp" src_ip="38.125.1.23" src_port="4004"/>
      <filter dst_ip="4.250.162.24" dst_port="135" proto="udp" src_ip="38.125.1.23" src_port="4004"/>
      <from sec="1229058566" usec="0"/>
      <to sec="1229058567" usec="0"/>
    </slice>
    <from sec="1229058565" usec="0"/>
    <to sec="1229058570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11585,1.86582,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
48[label="58.134.34.86s;1pkt 1fpkt", shape=rectangle, color=red];
297[label="58.134.34.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
9199[label="58.134.34.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.134.34.86:42424, 169.18.150.178:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42424: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
48--105[label="1;1pkt 1fpkt"];
48--296[label="1;1pkt 1fpkt"];
48--297[label="1;1pkt 1fpkt"];
48--9199[label="1;1pkt 1fpkt"];
297--9199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.150.178" dst_port="20" src_ip="58.134.34.86" src_port="42424"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16033,1.80748,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
18[label="5.1.67.28s;2pkt 2fpkt", shape=rectangle, color=red];
36[label="5.1.67.65s;2pkt 2fpkt", shape=rectangle, color=red];
310[label="172.45.37.169;d;32pkt 32fpkt", shape=diamond, color=yellow];
311[label="5.1.67.54;s;8pkt 8fpkt", shape=diamond, color=yellow];
1093[label="5.1.67.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1259[label="5.1.67.9;s;6pkt 6fpkt", shape=diamond, color=yellow];
1739[label="5.1.67.65;s;12pkt 12fpkt", shape=diamond, color=yellow];
3161[label="5.1.67.28;s;3pkt 3fpkt", shape=diamond, color=yellow];
4822[label="172.45.37.169;d;32pkt 32fpkt", shape=hexagon, color=black];
5064[label="5.1.67.37;s;1pkt 1fpkt", shape=hexagon, color=black];
5116[label="5.1.67.9;s;6pkt 6fpkt", shape=hexagon, color=black];
5649[label="5.1.67.65;s;12pkt 12fpkt", shape=hexagon, color=black];
7304[label="65.54.88.8;s;7pkt 7fpkt", shape=hexagon, color=black];
8674[label="5.1.67.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.1.67.65:80, 172.45.37.169:*}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1273: (2%)&lt;BR/&gt; 1118: (2%)&lt;BR/&gt; 1272: (1.6%)&lt;BR/&gt; 1271: (1.6%)&gt;];
}
18--310[label="0.5;1pkt 1fpkt"];
18--2098[label="0.5;1pkt 1fpkt"];
18--3161[label="0.5;1pkt 1fpkt"];
18--3775[label="0.5;1pkt 1fpkt"];
18--4822[label="0.5;1pkt 1fpkt"];
18--6551[label="0.5;1pkt 1fpkt"];
36--310[label="0.5;1pkt 1fpkt"];
36--1179[label="0.5;1pkt 1fpkt"];
36--1739[label="0.5;1pkt 1fpkt"];
36--2290[label="0.5;1pkt 1fpkt"];
36--4822[label="0.5;1pkt 1fpkt"];
36--5649[label="0.5;1pkt 1fpkt"];
36--7585[label="0.5;1pkt 1fpkt"];
36--10374[label="0.5;1pkt 1fpkt"];
310--311[label="0.375;3pkt 3fpkt"];
310--666[label="0.0769231;1pkt 1fpkt"];
310--726[label="0.09375;3pkt 3fpkt"];
310--1093[label="1;1pkt 1fpkt"];
310--1259[label="1;6pkt 6fpkt"];
310--1739[label="1;12pkt 12fpkt"];
310--3161[label="0.333333;1pkt 1fpkt"];
310--3975[label="0.142857;1pkt 1fpkt"];
310--4156[label="0.03125;1pkt 1fpkt"];
310--4822[label="1;32pkt 32fpkt"];
310--5064[label="1;1pkt 1fpkt"];
310--5116[label="1;6pkt 6fpkt"];
310--5140[label="0.375;3pkt 3fpkt"];
310--5649[label="1;12pkt 12fpkt"];
310--7184[label="0.0322581;1pkt 1fpkt"];
310--7304[label="0.142857;1pkt 1fpkt"];
310--8034[label="0.0322581;1pkt 1fpkt"];
310--8131[label="0.25;8pkt 8fpkt"];
310--8180[label="0.25;8pkt 8fpkt"];
310--8219[label="0.25;8pkt 8fpkt"];
310--8311[label="0.09375;3pkt 3fpkt"];
310--8345[label="0.0769231;1pkt 1fpkt"];
310--8674[label="1;1pkt 1fpkt"];
310--10674[label="0.09375;3pkt 3fpkt"];
310--10692[label="0.0769231;1pkt 1fpkt"];
310--11856[label="0.09375;3pkt 3fpkt"];
311--956[label="0.625;5pkt 5fpkt"];
311--4822[label="0.375;3pkt 3fpkt"];
311--5140[label="1;8pkt 8fpkt"];
311--5824[label="0.625;5pkt 5fpkt"];
311--8131[label="0.375;3pkt 3fpkt"];
311--8180[label="0.375;3pkt 3fpkt"];
311--8219[label="0.375;3pkt 3fpkt"];
1093--4822[label="1;1pkt 1fpkt"];
1093--5064[label="1;1pkt 1fpkt"];
1093--8674[label="1;1pkt 1fpkt"];
1259--4822[label="1;6pkt 6fpkt"];
1259--5116[label="1;6pkt 6fpkt"];
1259--8131[label="0.5;3pkt 3fpkt"];
1259--8180[label="0.5;3pkt 3fpkt"];
1259--8219[label="0.5;3pkt 3fpkt"];
1739--4822[label="1;12pkt 12fpkt"];
1739--5649[label="1;12pkt 12fpkt"];
1739--8131[label="0.166667;2pkt 2fpkt"];
1739--8180[label="0.166667;2pkt 2fpkt"];
1739--8219[label="0.166667;2pkt 2fpkt"];
3161--4822[label="0.333333;1pkt 1fpkt"];
4822--5064[label="1;1pkt 1fpkt"];
4822--5116[label="1;6pkt 6fpkt"];
4822--5140[label="0.375;3pkt 3fpkt"];
4822--5649[label="1;12pkt 12fpkt"];
4822--7184[label="0.0322581;1pkt 1fpkt"];
4822--7304[label="0.142857;1pkt 1fpkt"];
4822--8034[label="0.0322581;1pkt 1fpkt"];
4822--8131[label="0.25;8pkt 8fpkt"];
4822--8180[label="0.25;8pkt 8fpkt"];
4822--8219[label="0.25;8pkt 8fpkt"];
4822--8311[label="0.09375;3pkt 3fpkt"];
4822--8345[label="0.0769231;1pkt 1fpkt"];
4822--8674[label="1;1pkt 1fpkt"];
4822--10674[label="0.09375;3pkt 3fpkt"];
4822--10692[label="0.0769231;1pkt 1fpkt"];
4822--11856[label="0.09375;3pkt 3fpkt"];
5064--8674[label="1;1pkt 1fpkt"];
5116--8131[label="0.5;3pkt 3fpkt"];
5116--8180[label="0.5;3pkt 3fpkt"];
5116--8219[label="0.5;3pkt 3fpkt"];
5649--8131[label="0.166667;2pkt 2fpkt"];
5649--8180[label="0.166667;2pkt 2fpkt"];
5649--8219[label="0.166667;2pkt 2fpkt"];
7304--7447[label="0.714286;5pkt 5fpkt"];
7304--8345[label="0.857143;6pkt 6fpkt"];
7304--10692[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.37.169" src_ip="5.1.67.65" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
281[label="133.72.88.207;d;88pkt 88fpkt", shape=diamond, color=yellow];
283[label="101.84.16.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
318[label="5.87.66.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
4815[label="101.84.16.210;s;1pkt 1fpkt", shape=hexagon, color=black];
7105[label="133.72.88.207;d;74pkt 74fpkt", shape=hexagon, color=black];
7918[label="101.84.16.210;s;1pkt 1fpkt", shape=polygon, color=gold];
10372[label="101.84.16.219;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.168.237.245:80, 133.72.88.207:*}[24.5455%]&lt;BR/&gt;{101.84.16.219:80, *:*}[23.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5312%)&lt;BR/&gt; 7024: (2.08333%)&lt;BR/&gt; 2592: (2.08333%)&lt;BR/&gt; 3401: (1.30208%)&lt;BR/&gt; 6359: (0.78125%)&gt;];
}
281--283[label="1;1pkt 1fpkt"];
281--318[label="1;1pkt 1fpkt"];
281--2029[label="0.0340909;3pkt 3fpkt"];
281--4750[label="1;1pkt 1fpkt"];
281--4815[label="1;1pkt 1fpkt"];
281--5852[label="0.0340909;3pkt 3fpkt"];
281--7105[label="1;74pkt 74fpkt"];
281--7749[label="1;1pkt 1fpkt"];
281--7918[label="1;1pkt 1fpkt"];
281--8131[label="0.113636;10pkt 10fpkt"];
281--8180[label="0.113636;10pkt 10fpkt"];
281--8219[label="0.113636;10pkt 10fpkt"];
281--10372[label="0.153846;4pkt 4fpkt"];
283--4815[label="1;1pkt 1fpkt"];
283--7105[label="1;1pkt 1fpkt"];
283--7918[label="1;1pkt 1fpkt"];
283--8131[label="1;1pkt 1fpkt"];
283--8180[label="1;1pkt 1fpkt"];
283--8219[label="1;1pkt 1fpkt"];
318--7105[label="1;1pkt 1fpkt"];
4815--7105[label="1;1pkt 1fpkt"];
4815--7918[label="1;1pkt 1fpkt"];
4815--8131[label="1;1pkt 1fpkt"];
4815--8180[label="1;1pkt 1fpkt"];
4815--8219[label="1;1pkt 1fpkt"];
7105--7918[label="1;1pkt 1fpkt"];
7105--8131[label="0.135135;10pkt 10fpkt"];
7105--8180[label="0.135135;10pkt 10fpkt"];
7105--8219[label="0.135135;10pkt 10fpkt"];
7105--10372[label="0.0769231;2pkt 2fpkt"];
7918--8131[label="1;1pkt 1fpkt"];
7918--8180[label="1;1pkt 1fpkt"];
7918--8219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="101.84.16.219" src_port="80"/>
      <filter dst_ip="133.72.88.207" src_ip="206.168.237.245" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="39816024" usec="0"/>
    <to sec="39816024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="39816024" usec="0"/>
    <to sec="39816024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
67[label="174.194.231.151s;1pkt 1fpkt", shape=rectangle, color=red];
419[label="174.194.231.151;s;194pkt 194fpkt", shape=diamond, color=yellow];
5729[label="174.194.231.151;s;153pkt 153fpkt", shape=hexagon, color=black];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.231.151:*, 40.161.37.15:80}[57.732%]&lt;BR/&gt;{174.194.231.151:11984, *:*}[26.8041%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.4885%)&lt;BR/&gt; 11984: (9.62644%)&lt;BR/&gt; 2083: (4.74138%)&lt;BR/&gt; 55739: (0.431034%)&lt;BR/&gt; 60809: (0.287356%)&gt;];
}
67--419[label="1;1pkt 1fpkt"];
67--420[label="1;1pkt 1fpkt"];
67--5729[label="1;1pkt 1fpkt"];
419--420[label="0.977444;130pkt 130fpkt"];
419--1656[label="0.00657895;1pkt 1fpkt"];
419--5338[label="0.00657895;1pkt 1fpkt"];
419--5729[label="1;153pkt 153fpkt"];
419--7864[label="0.015625;1pkt 1fpkt"];
419--8119[label="0.123711;24pkt 24fpkt"];
419--8134[label="0.164948;32pkt 32fpkt"];
5729--7864[label="0.015625;1pkt 1fpkt"];
5729--8119[label="0.156863;24pkt 24fpkt"];
5729--8134[label="0.20915;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.231.151" src_port="11984"/>
      <filter dst_ip="40.161.37.15" dst_port="80" src_ip="174.194.231.151"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
21[label="133.72.105.32s;2pkt 2fpkt", shape=rectangle, color=red];
360[label="196.11.45.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
361[label="133.72.105.32;s;24pkt 24fpkt", shape=diamond, color=yellow];
423[label="128.208.178.49;s;1661pkt 1661fpkt", shape=diamond, color=yellow];
427[label="196.11.45.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1151[label="194.149.61.204;d;1028pkt 1028fpkt", shape=diamond, color=yellow];
1304[label="194.149.61.245;d;654pkt 654fpkt", shape=diamond, color=yellow];
4834[label="196.11.45.49;d;1pkt 1fpkt", shape=hexagon, color=black];
5080[label="194.149.61.204;d;1028pkt 1028fpkt", shape=hexagon, color=black];
5155[label="133.72.105.32;s;24pkt 24fpkt", shape=hexagon, color=black];
6748[label="128.208.178.49;s;1480pkt 1480fpkt", shape=hexagon, color=black];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.178.49:*, 194.149.61.204:80}[59.4356%]&lt;BR/&gt;{128.208.178.49:*, 194.149.61.245:80}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 8907: (0.0423442%)&lt;BR/&gt; 57065: (0.0338753%)&lt;BR/&gt; 57063: (0.0338753%)&lt;BR/&gt; 57062: (0.0338753%)&gt;];
}
21--360[label="1;1pkt 1fpkt"];
21--361[label="1;2pkt 2fpkt"];
21--427[label="1;1pkt 1fpkt"];
21--4834[label="1;1pkt 1fpkt"];
21--5155[label="1;2pkt 2fpkt"];
21--8119[label="1;2pkt 2fpkt"];
21--8134[label="1;2pkt 2fpkt"];
360--361[label="1;1pkt 1fpkt"];
360--4834[label="1;1pkt 1fpkt"];
360--5155[label="1;1pkt 1fpkt"];
360--8119[label="1;1pkt 1fpkt"];
360--8134[label="1;1pkt 1fpkt"];
361--427[label="1;1pkt 1fpkt"];
361--1151[label="0.25;6pkt 6fpkt"];
361--1304[label="0.0416667;1pkt 1fpkt"];
361--4834[label="1;1pkt 1fpkt"];
361--5080[label="0.25;6pkt 6fpkt"];
361--5155[label="1;24pkt 24fpkt"];
361--8119[label="0.0833333;2pkt 2fpkt"];
361--8134[label="0.416667;10pkt 10fpkt"];
423--1151[label="0.983463;1011pkt 1011fpkt"];
423--1304[label="0.990826;648pkt 648fpkt"];
423--1449[label="0.00171527;1pkt 1fpkt"];
423--4546[label="0.0116279;1pkt 1fpkt"];
423--5080[label="0.983463;1011pkt 1011fpkt"];
423--5253[label="0.00171527;1pkt 1fpkt"];
423--6748[label="1;1480pkt 1480fpkt"];
423--7527[label="0.0116279;1pkt 1fpkt"];
423--8119[label="0.0571945;95pkt 95fpkt"];
423--8134[label="0.0547863;91pkt 91fpkt"];
423--8165[label="0.0234798;39pkt 39fpkt"];
423--8208[label="0.0234798;39pkt 39fpkt"];
423--8241[label="0.0234798;39pkt 39fpkt"];
427--5155[label="1;1pkt 1fpkt"];
427--8119[label="1;1pkt 1fpkt"];
427--8134[label="1;1pkt 1fpkt"];
1151--5080[label="1;1028pkt 1028fpkt"];
1151--5155[label="0.25;6pkt 6fpkt"];
1151--6748[label="0.868677;893pkt 893fpkt"];
1151--8119[label="0.0496109;51pkt 51fpkt"];
1151--8134[label="0.020428;21pkt 21fpkt"];
1151--8165[label="0.0359922;37pkt 37fpkt"];
1151--8208[label="0.0359922;37pkt 37fpkt"];
1151--8241[label="0.0359922;37pkt 37fpkt"];
1151--8412[label="0.0013369;1pkt 1fpkt"];
1151--9599[label="0.0175439;1pkt 1fpkt"];
1151--10736[label="0.00133511;1pkt 1fpkt"];
1304--5155[label="0.0416667;1pkt 1fpkt"];
1304--6316[label="0.00152905;1pkt 1fpkt"];
1304--6748[label="0.894495;585pkt 585fpkt"];
1304--8119[label="0.0672783;44pkt 44fpkt"];
1304--8134[label="0.117737;77pkt 77fpkt"];
1304--8165[label="0.0030581;2pkt 2fpkt"];
1304--8208[label="0.0030581;2pkt 2fpkt"];
1304--8241[label="0.0030581;2pkt 2fpkt"];
1304--9076[label="0.00925926;2pkt 2fpkt"];
1304--9818[label="0.0217391;1pkt 1fpkt"];
4834--5155[label="1;1pkt 1fpkt"];
4834--8119[label="1;1pkt 1fpkt"];
4834--8134[label="1;1pkt 1fpkt"];
5080--5155[label="0.25;6pkt 6fpkt"];
5080--6748[label="0.868677;893pkt 893fpkt"];
5080--8119[label="0.0496109;51pkt 51fpkt"];
5080--8134[label="0.020428;21pkt 21fpkt"];
5080--8165[label="0.0359922;37pkt 37fpkt"];
5080--8208[label="0.0359922;37pkt 37fpkt"];
5080--8241[label="0.0359922;37pkt 37fpkt"];
5080--8412[label="0.0013369;1pkt 1fpkt"];
5080--9599[label="0.0175439;1pkt 1fpkt"];
5080--10736[label="0.00133511;1pkt 1fpkt"];
5155--8119[label="0.0833333;2pkt 2fpkt"];
5155--8134[label="0.416667;10pkt 10fpkt"];
6748--7527[label="0.0116279;1pkt 1fpkt"];
6748--8119[label="0.0641892;95pkt 95fpkt"];
6748--8134[label="0.0614865;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="194.149.61.204" dst_port="80" src_ip="128.208.178.49"/>
      <filter dst_ip="194.149.61.245" dst_port="80" src_ip="128.208.178.49"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
494[label="192.130.117.52;d;80pkt 80fpkt", shape=diamond, color=yellow];
1028[label="192.7.131.52;d;307pkt 307fpkt", shape=diamond, color=yellow];
2345[label="203.72.56.176;d;4pkt 4fpkt", shape=diamond, color=yellow];
3222[label="128.64.39.72;s;26pkt 26fpkt", shape=diamond, color=yellow];
3444[label="128.64.82.195;s;65pkt 65fpkt", shape=diamond, color=yellow];
3830[label="192.70.169.74;d;51pkt 51fpkt", shape=diamond, color=yellow];
3935[label="128.208.179.28;s;43pkt 43fpkt", shape=diamond, color=yellow];
6689[label="128.64.39.72;s;26pkt 26fpkt", shape=hexagon, color=black];
7541[label="192.70.169.74;d;51pkt 51fpkt", shape=hexagon, color=black];
7562[label="128.64.82.195;s;65pkt 65fpkt", shape=hexagon, color=black];
8087[label="128.64.82.195;s;65pkt 65fpkt", shape=polygon, color=gold];
8570[label="128.208.179.28;52pkt 52fpkt", shape=pentagon, color=darkviolet];
9039[label="128.64.39.72;26pkt 26fpkt", shape=pentagon, color=darkviolet];
10197[label="128.64.242.197;39pkt 39fpkt", shape=pentagon, color=darkviolet];
10351[label="174.194.98.217;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10805[label="128.208.179.28;52pkt 52fpkt", shape=invtriangle, color=brown];
11129[label="128.64.151.88;84pkt 84fpkt", shape=invtriangle, color=brown];
11621[label="128.64.242.197;39pkt 39fpkt", shape=invtriangle, color=brown];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[54.8991%]&lt;BR/&gt;{214.56.220.81:*, 192.7.131.52:443}[39.9135%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0826%)&lt;BR/&gt; 443: (14.4495%)&lt;BR/&gt; 7874: (0.688073%)&lt;BR/&gt; 5050: (0.275229%)&lt;BR/&gt; 49211: (0.229358%)&gt;];
}
494--1025[label="0.05;4pkt 4fpkt"];
494--1047[label="0.0375;3pkt 3fpkt"];
494--1303[label="0.0125;1pkt 1fpkt"];
494--2075[label="0.122449;6pkt 6fpkt"];
494--2091[label="0.0375;3pkt 3fpkt"];
494--3222[label="0.0769231;2pkt 2fpkt"];
494--3935[label="0.116279;5pkt 5fpkt"];
494--3971[label="0.0875;7pkt 7fpkt"];
494--4152[label="0.025;2pkt 2fpkt"];
494--4796[label="0.0375;3pkt 3fpkt"];
494--5288[label="0.05;4pkt 4fpkt"];
494--5984[label="0.0875;7pkt 7fpkt"];
494--5994[label="0.0125;1pkt 1fpkt"];
494--6164[label="0.0375;3pkt 3fpkt"];
494--6689[label="0.0769231;2pkt 2fpkt"];
494--7053[label="0.0875;7pkt 7fpkt"];
494--7484[label="0.025;2pkt 2fpkt"];
494--7653[label="0.122449;6pkt 6fpkt"];
494--7773[label="0.0375;3pkt 3fpkt"];
494--7871[label="0.0125;1pkt 1fpkt"];
494--7897[label="0.0375;3pkt 3fpkt"];
494--8119[label="0.0625;5pkt 5fpkt"];
494--8134[label="0.0375;3pkt 3fpkt"];
494--8570[label="0.0961538;5pkt 5fpkt"];
494--8575[label="0.0875;7pkt 7fpkt"];
494--9039[label="0.0769231;2pkt 2fpkt"];
494--9146[label="0.2;16pkt 16fpkt"];
494--10197[label="0.025641;1pkt 1fpkt"];
494--10351[label="0.2;3pkt 3fpkt"];
494--10805[label="0.0961538;5pkt 5fpkt"];
494--10809[label="0.0875;7pkt 7fpkt"];
494--11089[label="0.2;16pkt 16fpkt"];
494--11129[label="0.075;6pkt 6fpkt"];
494--11621[label="0.025641;1pkt 1fpkt"];
494--11909[label="0.0875;7pkt 7fpkt"];
494--12014[label="0.2;16pkt 16fpkt"];
1028--2091[label="0.0240964;2pkt 2fpkt"];
1028--2114[label="0.105263;2pkt 2fpkt"];
1028--3222[label="0.153846;4pkt 4fpkt"];
1028--3444[label="0.0153846;1pkt 1fpkt"];
1028--3971[label="0.0681818;6pkt 6fpkt"];
1028--5129[label="0.00518135;1pkt 1fpkt"];
1028--6164[label="0.0240964;2pkt 2fpkt"];
1028--6322[label="0.00325733;1pkt 1fpkt"];
1028--6689[label="0.153846;4pkt 4fpkt"];
1028--7053[label="0.0681818;6pkt 6fpkt"];
1028--7562[label="0.0153846;1pkt 1fpkt"];
1028--7897[label="0.0240964;2pkt 2fpkt"];
1028--8087[label="0.0153846;1pkt 1fpkt"];
1028--8122[label="0.0814332;25pkt 25fpkt"];
1028--8134[label="0.0130293;4pkt 4fpkt"];
1028--8154[label="0.0944625;29pkt 29fpkt"];
1028--8198[label="0.0944625;29pkt 29fpkt"];
1028--8231[label="0.0944625;29pkt 29fpkt"];
1028--8575[label="0.0681818;6pkt 6fpkt"];
1028--9039[label="0.153846;4pkt 4fpkt"];
1028--9146[label="0.928339;285pkt 285fpkt"];
1028--10197[label="0.0512821;2pkt 2fpkt"];
1028--10460[label="0.00483092;1pkt 1fpkt"];
1028--10809[label="0.0681818;6pkt 6fpkt"];
1028--11089[label="0.928339;285pkt 285fpkt"];
1028--11621[label="0.0512821;2pkt 2fpkt"];
1028--11762[label="0.00483092;1pkt 1fpkt"];
1028--11909[label="0.0681818;6pkt 6fpkt"];
1028--12014[label="0.928339;285pkt 285fpkt"];
1028--12288[label="0.00483092;1pkt 1fpkt"];
2345--3222[label="1;4pkt 4fpkt"];
2345--6689[label="1;4pkt 4fpkt"];
2345--9039[label="1;4pkt 4fpkt"];
3222--6689[label="1;26pkt 26fpkt"];
3222--9039[label="1;26pkt 26fpkt"];
3444--5601[label="0.0153846;1pkt 1fpkt"];
3444--5884[label="0.015873;1pkt 1fpkt"];
3444--5983[label="0.0461538;3pkt 3fpkt"];
3444--6420[label="0.0172414;1pkt 1fpkt"];
3444--7562[label="1;65pkt 65fpkt"];
3444--8087[label="1;65pkt 65fpkt"];
3830--7541[label="1;51pkt 51fpkt"];
3830--8119[label="0.0392157;2pkt 2fpkt"];
3830--8134[label="0.0784314;4pkt 4fpkt"];
3830--8165[label="0.0392157;2pkt 2fpkt"];
3830--8208[label="0.0392157;2pkt 2fpkt"];
3830--8241[label="0.0392157;2pkt 2fpkt"];
3830--9146[label="0.980392;50pkt 50fpkt"];
3830--10197[label="0.025641;1pkt 1fpkt"];
3830--11089[label="0.980392;50pkt 50fpkt"];
3830--11621[label="0.025641;1pkt 1fpkt"];
3830--12014[label="0.980392;50pkt 50fpkt"];
3935--8570[label="1;43pkt 43fpkt"];
3935--10805[label="1;43pkt 43fpkt"];
6689--9039[label="1;26pkt 26fpkt"];
7541--8119[label="0.0392157;2pkt 2fpkt"];
7541--8134[label="0.0784314;4pkt 4fpkt"];
7541--8165[label="0.0392157;2pkt 2fpkt"];
7541--8208[label="0.0392157;2pkt 2fpkt"];
7541--8241[label="0.0392157;2pkt 2fpkt"];
7541--9146[label="0.980392;50pkt 50fpkt"];
7541--10197[label="0.025641;1pkt 1fpkt"];
7541--11089[label="0.980392;50pkt 50fpkt"];
7541--11621[label="0.025641;1pkt 1fpkt"];
7541--12014[label="0.980392;50pkt 50fpkt"];
7562--8087[label="1;65pkt 65fpkt"];
8570--10805[label="1;52pkt 52fpkt"];
10197--11621[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="192.7.131.52" dst_port="443" src_ip="214.56.220.81"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
516[label="128.208.192.101;d;195pkt 195fpkt", shape=diamond, color=yellow];
518[label="97.100.73.42;s;14pkt 14fpkt", shape=diamond, color=yellow];
3582[label="21.105.197.108;s;41pkt 41fpkt", shape=diamond, color=yellow];
4638[label="100.204.89.34;s;20pkt 20fpkt", shape=diamond, color=yellow];
6759[label="128.208.192.101;d;164pkt 164fpkt", shape=hexagon, color=black];
7529[label="174.194.207.3;d;36pkt 36fpkt", shape=hexagon, color=black];
8577[label="33.128.181.29;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9072[label="44.154.70.74;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9174[label="6.30.33.84;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9431[label="21.105.197.108;41pkt 41fpkt", shape=pentagon, color=darkviolet];
10504[label="91.96.83.236;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11100[label="6.30.33.84;12pkt 12fpkt", shape=invtriangle, color=brown];
11786[label="91.96.83.236;6pkt 6fpkt", shape=invtriangle, color=brown];
12017[label="6.30.33.84;12pkt 12fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.208.192.101:80}[84.4156%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61999: (0.437828%)&lt;BR/&gt; 61998: (0.437828%)&lt;BR/&gt; 61997: (0.437828%)&lt;BR/&gt; 61996: (0.437828%)&gt;];
}
516--518[label="1;14pkt 14fpkt"];
516--3092[label="0.00653595;1pkt 1fpkt"];
516--3093[label="0.00724638;1pkt 1fpkt"];
516--3582[label="0.853659;35pkt 35fpkt"];
516--4638[label="1;20pkt 20fpkt"];
516--6224[label="0.010989;1pkt 1fpkt"];
516--6225[label="0.00724638;1pkt 1fpkt"];
516--6759[label="1;164pkt 164fpkt"];
516--8119[label="0.0461538;9pkt 9fpkt"];
516--8134[label="0.0769231;15pkt 15fpkt"];
516--8165[label="0.00512821;1pkt 1fpkt"];
516--8208[label="0.00512821;1pkt 1fpkt"];
516--8241[label="0.00512821;1pkt 1fpkt"];
516--8577[label="1;6pkt 6fpkt"];
516--9072[label="1;6pkt 6fpkt"];
516--9174[label="1;12pkt 12fpkt"];
516--9431[label="0.853659;35pkt 35fpkt"];
516--10504[label="1;6pkt 6fpkt"];
516--11100[label="1;12pkt 12fpkt"];
516--11786[label="1;6pkt 6fpkt"];
516--12017[label="1;12pkt 12fpkt"];
518--6759[label="1;14pkt 14fpkt"];
3582--6759[label="0.853659;35pkt 35fpkt"];
3582--7529[label="0.166667;6pkt 6fpkt"];
3582--9431[label="1;41pkt 41fpkt"];
4638--6759[label="0.3;6pkt 6fpkt"];
6759--8119[label="0.054878;9pkt 9fpkt"];
6759--8134[label="0.0914634;15pkt 15fpkt"];
6759--8577[label="1;6pkt 6fpkt"];
6759--9072[label="1;6pkt 6fpkt"];
6759--9174[label="1;12pkt 12fpkt"];
6759--9431[label="0.853659;35pkt 35fpkt"];
6759--10504[label="1;6pkt 6fpkt"];
6759--11100[label="1;12pkt 12fpkt"];
6759--11786[label="1;6pkt 6fpkt"];
6759--12017[label="1;12pkt 12fpkt"];
7529--8119[label="0.0277778;1pkt 1fpkt"];
7529--9045[label="0.136364;3pkt 3fpkt"];
7529--9431[label="0.166667;6pkt 6fpkt"];
7529--11045[label="0.136364;3pkt 3fpkt"];
9174--11100[label="1;12pkt 12fpkt"];
9174--12017[label="1;12pkt 12fpkt"];
10504--11786[label="1;6pkt 6fpkt"];
11100--12017[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.192.101" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
612[label="42.147.36.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
613[label="172.45.244.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.45.244.24:3317, 42.147.36.200:21}[50%]&lt;BR/&gt;{172.45.244.24:3319, 42.147.36.200:59993}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59993: (25%)&lt;BR/&gt; 3319: (25%)&lt;BR/&gt; 3317: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
612--613[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.147.36.200" dst_port="59993" src_ip="172.45.244.24" src_port="3319"/>
      <filter dst_ip="42.147.36.200" dst_port="21" src_ip="172.45.244.24" src_port="3317"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
17[label="174.194.41.28s;1pkt 1fpkt", shape=rectangle, color=red];
668[label="174.194.41.28;s;41pkt 41fpkt", shape=diamond, color=yellow];
669[label="205.138.138.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
5464[label="174.194.41.28;s;41pkt 41fpkt", shape=hexagon, color=black];
6345[label="205.138.138.245;d;1pkt 1fpkt", shape=hexagon, color=black];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.41.28:*, 197.133.134.147:80}[48.7805%]&lt;BR/&gt;{174.194.41.28:*, 194.21.55.88:80}[34.1463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7059%)&lt;BR/&gt; 56986: (2.94118%)&lt;BR/&gt; 554: (2.94118%)&lt;BR/&gt; 443: (2.35294%)&lt;BR/&gt; 57628: (1.17647%)&gt;];
}
17--668[label="1;1pkt 1fpkt"];
17--669[label="1;1pkt 1fpkt"];
17--5464[label="1;1pkt 1fpkt"];
17--6345[label="1;1pkt 1fpkt"];
668--669[label="1;1pkt 1fpkt"];
668--5464[label="1;41pkt 41fpkt"];
668--6345[label="1;1pkt 1fpkt"];
668--8119[label="0.0487805;2pkt 2fpkt"];
668--8134[label="0.0243902;1pkt 1fpkt"];
669--5464[label="1;1pkt 1fpkt"];
669--6345[label="1;1pkt 1fpkt"];
5464--6345[label="1;1pkt 1fpkt"];
5464--8119[label="0.0487805;2pkt 2fpkt"];
5464--8134[label="0.0243902;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.133.134.147" dst_port="80" src_ip="174.194.41.28"/>
      <filter dst_ip="194.21.55.88" dst_port="80" src_ip="174.194.41.28"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
657[label="174.194.194.209;s;25pkt 25fpkt", shape=diamond, color=yellow];
658[label="215.160.185.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
682[label="208.165.30.132;d;6pkt 6fpkt", shape=diamond, color=yellow];
4922[label="215.160.185.222;d;1pkt 1fpkt", shape=hexagon, color=black];
10292[label="174.194.194.209;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11677[label="174.194.194.209;25pkt 25fpkt", shape=invtriangle, color=brown];
12245[label="174.194.194.209;25pkt 25fpkt", shape=invhouse, color=bisque];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.194.209:*, *:80}[39.2857%]&lt;BR/&gt;{174.194.194.209:24894, *:*}[25%]&lt;BR/&gt;{*:*, 208.165.30.132:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.1481%)&lt;BR/&gt; 24894: (12.963%)&lt;BR/&gt; 58040: (3.7037%)&lt;BR/&gt; 49325: (2.77778%)&lt;BR/&gt; 3724: (2.77778%)&gt;];
}
657--658[label="1;1pkt 1fpkt"];
657--682[label="0.5;3pkt 3fpkt"];
657--2485[label="0.04;1pkt 1fpkt"];
657--4922[label="1;1pkt 1fpkt"];
657--8119[label="0.2;5pkt 5fpkt"];
657--8134[label="0.12;3pkt 3fpkt"];
657--10292[label="1;25pkt 25fpkt"];
657--11677[label="1;25pkt 25fpkt"];
657--12245[label="1;25pkt 25fpkt"];
658--4922[label="1;1pkt 1fpkt"];
658--10292[label="1;1pkt 1fpkt"];
658--11677[label="1;1pkt 1fpkt"];
658--12245[label="1;1pkt 1fpkt"];
682--683[label="0.5;2pkt 2fpkt"];
682--761[label="0.25;1pkt 1fpkt"];
682--4929[label="0.666667;2pkt 2fpkt"];
682--4963[label="0.25;1pkt 1fpkt"];
682--8119[label="0.833333;5pkt 5fpkt"];
682--10292[label="0.5;3pkt 3fpkt"];
682--11677[label="0.5;3pkt 3fpkt"];
682--12245[label="0.5;3pkt 3fpkt"];
4922--10292[label="1;1pkt 1fpkt"];
4922--11677[label="1;1pkt 1fpkt"];
4922--12245[label="1;1pkt 1fpkt"];
10292--11677[label="1;25pkt 25fpkt"];
10292--12245[label="1;25pkt 25fpkt"];
11677--12245[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.194.209" src_port="24894"/>
      <filter dst_port="80" src_ip="174.194.194.209"/>
      <filter dst_ip="208.165.30.132" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
474[label="133.72.165.92;d;356pkt 356fpkt", shape=diamond, color=yellow];
699[label="5.81.214.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
707[label="46.196.72.31;s;2pkt 2fpkt", shape=diamond, color=yellow];
4866[label="133.72.165.92;d;356pkt 356fpkt", shape=hexagon, color=black];
4936[label="5.81.214.241;s;1pkt 1fpkt", shape=hexagon, color=black];
6352[label="46.196.72.31;s;2pkt 2fpkt", shape=hexagon, color=black];
10264[label="7.200.252.205;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10545[label="5.81.214.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11658[label="7.200.252.205;11pkt 11fpkt", shape=invtriangle, color=brown];
12238[label="7.200.252.205;11pkt 11fpkt", shape=invhouse, color=bisque];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.72.165.92:28805}[41.2921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28805: (19.8803%)&lt;BR/&gt; 80: (7.97872%)&lt;BR/&gt; 11835: (3.32447%)&lt;BR/&gt; 0: (1.59574%)&lt;BR/&gt; 29774: (1.32979%)&gt;];
}
474--699[label="1;1pkt 1fpkt"];
474--707[label="1;2pkt 2fpkt"];
474--2106[label="0.164557;13pkt 13fpkt"];
474--4866[label="1;356pkt 356fpkt"];
474--4936[label="1;1pkt 1fpkt"];
474--6352[label="1;2pkt 2fpkt"];
474--8131[label="0.00561798;2pkt 2fpkt"];
474--8180[label="0.00561798;2pkt 2fpkt"];
474--8219[label="0.00561798;2pkt 2fpkt"];
474--8939[label="0.407407;11pkt 11fpkt"];
474--9704[label="0.298077;31pkt 31fpkt"];
474--10264[label="1;11pkt 11fpkt"];
474--10545[label="1;1pkt 1fpkt"];
474--10995[label="0.407407;11pkt 11fpkt"];
474--11353[label="0.298077;31pkt 31fpkt"];
474--11658[label="1;11pkt 11fpkt"];
474--11981[label="0.384615;10pkt 10fpkt"];
474--12117[label="0.298077;31pkt 31fpkt"];
474--12238[label="1;11pkt 11fpkt"];
699--4866[label="1;1pkt 1fpkt"];
699--4936[label="1;1pkt 1fpkt"];
699--10545[label="1;1pkt 1fpkt"];
707--4866[label="1;2pkt 2fpkt"];
707--6352[label="1;2pkt 2fpkt"];
4866--4936[label="1;1pkt 1fpkt"];
4866--6352[label="1;2pkt 2fpkt"];
4866--8131[label="0.00561798;2pkt 2fpkt"];
4866--8180[label="0.00561798;2pkt 2fpkt"];
4866--8219[label="0.00561798;2pkt 2fpkt"];
4866--8939[label="0.407407;11pkt 11fpkt"];
4866--9704[label="0.298077;31pkt 31fpkt"];
4866--10264[label="1;11pkt 11fpkt"];
4866--10545[label="1;1pkt 1fpkt"];
4866--10995[label="0.407407;11pkt 11fpkt"];
4866--11353[label="0.298077;31pkt 31fpkt"];
4866--11658[label="1;11pkt 11fpkt"];
4866--11981[label="0.384615;10pkt 10fpkt"];
4866--12117[label="0.298077;31pkt 31fpkt"];
4866--12238[label="1;11pkt 11fpkt"];
4936--10545[label="1;1pkt 1fpkt"];
10264--11658[label="1;11pkt 11fpkt"];
10264--12238[label="1;11pkt 11fpkt"];
11658--12238[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.165.92" dst_port="28805"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
716[label="42.133.166.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
717[label="128.208.241.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
4944[label="42.133.166.185;d;1pkt 1fpkt", shape=hexagon, color=black];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.241.122:2502, 42.133.166.185:8650}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8650: (50%)&lt;BR/&gt; 2502: (50%)&gt;];
}
716--717[label="1;1pkt 1fpkt"];
716--4944[label="1;1pkt 1fpkt"];
717--4944[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.133.166.185" dst_port="8650" src_ip="128.208.241.122" src_port="2502"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
745[label="174.194.111.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
746[label="41.5.212.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
4956[label="41.5.212.34;d;1pkt 1fpkt", shape=hexagon, color=black];
5773[label="174.194.111.115;s;1pkt 1fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.111.115:56251, 41.5.212.34:8004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56251: (50%)&lt;BR/&gt; 8004: (50%)&gt;];
}
745--746[label="1;1pkt 1fpkt"];
745--4956[label="1;1pkt 1fpkt"];
745--5773[label="1;1pkt 1fpkt"];
746--4956[label="1;1pkt 1fpkt"];
746--5773[label="1;1pkt 1fpkt"];
4956--5773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.5.212.34" dst_port="8004" src_ip="174.194.111.115" src_port="56251"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
744[label="174.194.111.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
747[label="41.5.212.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
5480[label="174.194.111.115;d;1pkt 1fpkt", shape=hexagon, color=black];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.5.212.34:8004, 174.194.111.115:56251}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56251: (50%)&lt;BR/&gt; 8004: (50%)&gt;];
}
744--747[label="1;1pkt 1fpkt"];
744--5480[label="1;1pkt 1fpkt"];
747--5480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.111.115" dst_port="56251" src_ip="41.5.212.34" src_port="8004"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
840[label="169.18.168.234;d;2pkt 2fpkt", shape=diamond, color=yellow];
841[label="211.8.120.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
4992[label="169.18.168.234;d;2pkt 2fpkt", shape=hexagon, color=black];
4993[label="211.8.120.12;s;2pkt 2fpkt", shape=hexagon, color=black];
7786[label="211.8.120.12;s;2pkt 2fpkt", shape=polygon, color=gold];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.8.120.12:3128, 169.18.168.234:1402}[50%]&lt;BR/&gt;{211.8.120.12:3128, 169.18.168.234:2307}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 2307: (25%)&lt;BR/&gt; 1402: (25%)&gt;];
}
840--841[label="1;2pkt 2fpkt"];
840--4992[label="1;2pkt 2fpkt"];
840--4993[label="1;2pkt 2fpkt"];
840--7786[label="1;2pkt 2fpkt"];
841--4992[label="1;2pkt 2fpkt"];
841--4993[label="1;2pkt 2fpkt"];
841--7786[label="1;2pkt 2fpkt"];
4992--4993[label="1;2pkt 2fpkt"];
4992--7786[label="1;2pkt 2fpkt"];
4993--7786[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.168.234" dst_port="2307" src_ip="211.8.120.12" src_port="3128"/>
      <filter dst_ip="169.18.168.234" dst_port="1402" src_ip="211.8.120.12" src_port="3128"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
914[label="172.45.94.32;d;17pkt 17fpkt", shape=diamond, color=yellow];
931[label="1.150.76.50;s;3pkt 3fpkt", shape=diamond, color=yellow];
5018[label="1.150.76.50;s;3pkt 3fpkt", shape=hexagon, color=black];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.50.211.166:80, 172.45.94.32:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2520: (6.52174%)&lt;BR/&gt; 2510: (6.52174%)&lt;BR/&gt; 2509: (6.52174%)&lt;BR/&gt; 2527: (2.17391%)&gt;];
}
914--931[label="1;3pkt 3fpkt"];
914--5018[label="1;3pkt 3fpkt"];
931--5018[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.94.32" src_ip="214.50.211.166" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
954[label="169.18.188.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
955[label="45.73.52.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
6076[label="169.18.188.203;d;1pkt 1fpkt", shape=hexagon, color=black];
6826[label="45.73.52.248;s;1pkt 1fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.73.52.248:5999, 169.18.188.203:56116}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56116: (50%)&lt;BR/&gt; 5999: (50%)&gt;];
}
954--955[label="1;1pkt 1fpkt"];
954--6076[label="1;1pkt 1fpkt"];
954--6826[label="1;1pkt 1fpkt"];
955--6076[label="1;1pkt 1fpkt"];
955--6826[label="1;1pkt 1fpkt"];
6076--6826[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.188.203" dst_port="56116" src_ip="45.73.52.248" src_port="5999"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
891[label="128.208.192.24;s;62pkt 62fpkt", shape=diamond, color=yellow];
1097[label="41.207.116.29;d;55pkt 55fpkt", shape=diamond, color=yellow];
5005[label="128.208.192.24;s;53pkt 53fpkt", shape=hexagon, color=black];
5066[label="41.207.116.29;d;42pkt 42fpkt", shape=hexagon, color=black];
7789[label="41.207.116.29;d;36pkt 36fpkt", shape=polygon, color=gold];
8530[label="128.208.192.24;66pkt 66fpkt", shape=pentagon, color=darkviolet];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.24:80, 41.207.116.29:*}[83.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64912: (0.955414%)&lt;BR/&gt; 62813: (0.955414%)&lt;BR/&gt; 61215: (0.955414%)&lt;BR/&gt; 60019: (0.955414%)&gt;];
}
891--1097[label="0.963636;53pkt 53fpkt"];
891--5005[label="1;53pkt 53fpkt"];
891--5066[label="0.952381;40pkt 40fpkt"];
891--7789[label="0.944444;34pkt 34fpkt"];
891--8131[label="0.0645161;4pkt 4fpkt"];
891--8180[label="0.0645161;4pkt 4fpkt"];
891--8219[label="0.0645161;4pkt 4fpkt"];
891--8530[label="1;62pkt 62fpkt"];
1097--5005[label="0.867925;46pkt 46fpkt"];
1097--5066[label="1;42pkt 42fpkt"];
1097--7789[label="1;36pkt 36fpkt"];
1097--8131[label="0.0363636;2pkt 2fpkt"];
1097--8180[label="0.0363636;2pkt 2fpkt"];
1097--8219[label="0.0363636;2pkt 2fpkt"];
1097--8530[label="0.963636;53pkt 53fpkt"];
5005--5066[label="0.952381;40pkt 40fpkt"];
5005--7789[label="0.944444;34pkt 34fpkt"];
5005--8131[label="0.0754717;4pkt 4fpkt"];
5005--8180[label="0.0754717;4pkt 4fpkt"];
5005--8219[label="0.0754717;4pkt 4fpkt"];
5005--8530[label="1;53pkt 53fpkt"];
5066--7789[label="1;36pkt 36fpkt"];
5066--8131[label="0.047619;2pkt 2fpkt"];
5066--8180[label="0.047619;2pkt 2fpkt"];
5066--8219[label="0.047619;2pkt 2fpkt"];
5066--8530[label="0.952381;40pkt 40fpkt"];
7789--8131[label="0.0555556;2pkt 2fpkt"];
7789--8180[label="0.0555556;2pkt 2fpkt"];
7789--8219[label="0.0555556;2pkt 2fpkt"];
7789--8530[label="0.944444;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.29" src_ip="128.208.192.24" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
19[label="128.208.134.28s;1pkt 1fpkt", shape=rectangle, color=red];
1113[label="128.208.134.28;s;19pkt 19fpkt", shape=diamond, color=yellow];
5947[label="128.208.134.28;s;19pkt 19fpkt", shape=hexagon, color=black];
6440[label="214.57.136.235;d;110pkt 110fpkt", shape=hexagon, color=black];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.57.136.235:110}[87.4016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (39.2617%)&lt;BR/&gt; 80: (7.38255%)&lt;BR/&gt; 443: (3.3557%)&lt;BR/&gt; 1353: (1.34228%)&lt;BR/&gt; 1430: (1.00671%)&gt;];
}
19--991[label="1;1pkt 1fpkt"];
19--1113[label="1;1pkt 1fpkt"];
19--5947[label="1;1pkt 1fpkt"];
19--6440[label="1;1pkt 1fpkt"];
1113--1909[label="0.105263;2pkt 2fpkt"];
1113--2002[label="0.105263;2pkt 2fpkt"];
1113--2589[label="0.0526316;1pkt 1fpkt"];
1113--4920[label="0.210526;4pkt 4fpkt"];
1113--4984[label="0.0526316;1pkt 1fpkt"];
1113--5520[label="0.105263;2pkt 2fpkt"];
1113--5563[label="0.105263;2pkt 2fpkt"];
1113--5947[label="1;19pkt 19fpkt"];
1113--6440[label="0.105263;2pkt 2fpkt"];
1113--6913[label="0.0526316;1pkt 1fpkt"];
5947--6440[label="0.105263;2pkt 2fpkt"];
5947--6913[label="0.0526316;1pkt 1fpkt"];
6440--7618[label="0.04;1pkt 1fpkt"];
6440--7895[label="0.0909091;10pkt 10fpkt"];
6440--7921[label="0.00934579;1pkt 1fpkt"];
6440--8024[label="0.00909091;1pkt 1fpkt"];
6440--8609[label="0.4;2pkt 2fpkt"];
6440--8613[label="0.0909091;10pkt 10fpkt"];
6440--8660[label="0.0272727;3pkt 3fpkt"];
6440--8757[label="0.181818;2pkt 2fpkt"];
6440--8951[label="0.333333;2pkt 2fpkt"];
6440--9109[label="0.00909091;1pkt 1fpkt"];
6440--9478[label="0.0322581;2pkt 2fpkt"];
6440--9598[label="0.391304;9pkt 9fpkt"];
6440--10460[label="0.0272727;3pkt 3fpkt"];
6440--10828[label="0.25;1pkt 1fpkt"];
6440--10829[label="0.0909091;10pkt 10fpkt"];
6440--10900[label="0.181818;2pkt 2fpkt"];
6440--11001[label="0.333333;2pkt 2fpkt"];
6440--11247[label="0.0322581;2pkt 2fpkt"];
6440--11301[label="0.391304;9pkt 9fpkt"];
6440--11762[label="0.0272727;3pkt 3fpkt"];
6440--11918[label="0.4;2pkt 2fpkt"];
6440--11943[label="0.181818;2pkt 2fpkt"];
6440--11985[label="0.333333;2pkt 2fpkt"];
6440--12080[label="0.0322581;1pkt 1fpkt"];
6440--12288[label="0.0272727;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.136.235" dst_port="110"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
42[label="133.72.177.73s;1pkt 1fpkt", shape=rectangle, color=red];
107[label="1.145.126.97d;1pkt 1fpkt", shape=rectangle, color=red];
1124[label="1.145.126.97;d;8pkt 8fpkt", shape=diamond, color=yellow];
1125[label="133.72.177.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
5076[label="133.72.177.73;s;1pkt 1fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.168.216:*, 1.145.126.97:80}[75%]&lt;BR/&gt;{*:*, 1.145.126.97:554}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 4066: (20.8333%)&lt;BR/&gt; 49000: (4.16667%)&lt;BR/&gt; 44170: (4.16667%)&gt;];
}
42--107[label="1;1pkt 1fpkt"];
42--1124[label="1;1pkt 1fpkt"];
42--1125[label="1;1pkt 1fpkt"];
42--5076[label="1;1pkt 1fpkt"];
107--1124[label="1;1pkt 1fpkt"];
107--1125[label="1;1pkt 1fpkt"];
107--5076[label="1;1pkt 1fpkt"];
1124--1125[label="1;1pkt 1fpkt"];
1124--5076[label="1;1pkt 1fpkt"];
1124--8134[label="0.125;1pkt 1fpkt"];
1124--8165[label="0.125;1pkt 1fpkt"];
1124--8208[label="0.125;1pkt 1fpkt"];
1124--8241[label="0.125;1pkt 1fpkt"];
1125--5076[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.145.126.97" dst_port="554"/>
      <filter dst_ip="1.145.126.97" dst_port="80" src_ip="133.72.168.216"/>
    </slice>
    <from sec="1229058014" usec="0"/>
    <to sec="1229058770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
987[label="128.150.65.195;d;92pkt 92fpkt", shape=diamond, color=yellow];
1168[label="128.88.109.72;s;4pkt 4fpkt", shape=diamond, color=yellow];
1217[label="128.88.198.50;s;4pkt 4fpkt", shape=diamond, color=yellow];
1688[label="128.88.38.160;s;4pkt 4fpkt", shape=diamond, color=yellow];
1760[label="128.88.82.224;s;4pkt 4fpkt", shape=diamond, color=yellow];
2296[label="128.88.109.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
2726[label="128.88.74.105;s;4pkt 4fpkt", shape=diamond, color=yellow];
4054[label="128.88.77.19;s;4pkt 4fpkt", shape=diamond, color=yellow];
4759[label="128.88.198.245;s;4pkt 4fpkt", shape=diamond, color=yellow];
8825[label="128.88.109.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9042[label="128.88.109.72;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10414[label="128.88.82.224;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11042[label="128.88.109.72;4pkt 4fpkt", shape=invtriangle, color=brown];
11737[label="128.88.82.224;4pkt 4fpkt", shape=invtriangle, color=brown];
12280[label="128.88.82.224;4pkt 4fpkt", shape=invhouse, color=bisque];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:135, 128.150.65.195:*}[46.7391%]&lt;BR/&gt;{*:0, 128.150.65.195:0}[27.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (28.7162%)&lt;BR/&gt; 0: (16.8919%)&lt;BR/&gt; 69: (8.44595%)&lt;BR/&gt; 33942: (2.7027%)&lt;BR/&gt; 33935: (2.36486%)&gt;];
}
987--1168[label="1;4pkt 4fpkt"];
987--1194[label="1;4pkt 4fpkt"];
987--1217[label="1;4pkt 4fpkt"];
987--1688[label="1;4pkt 4fpkt"];
987--1760[label="1;4pkt 4fpkt"];
987--1832[label="0.0108696;1pkt 1fpkt"];
987--1964[label="0.0108696;1pkt 1fpkt"];
987--2296[label="1;4pkt 4fpkt"];
987--2726[label="1;4pkt 4fpkt"];
987--2897[label="0.0108696;1pkt 1fpkt"];
987--3649[label="0.8;4pkt 4fpkt"];
987--4054[label="1;4pkt 4fpkt"];
987--4734[label="0.8;4pkt 4fpkt"];
987--4759[label="1;4pkt 4fpkt"];
987--5202[label="0.0108696;1pkt 1fpkt"];
987--5334[label="1;4pkt 4fpkt"];
987--6012[label="0.0108696;1pkt 1fpkt"];
987--6821[label="0.0108696;1pkt 1fpkt"];
987--7301[label="0.8;4pkt 4fpkt"];
987--7444[label="0.0108696;1pkt 1fpkt"];
987--7742[label="0.8;4pkt 4fpkt"];
987--8106[label="0.8;4pkt 4fpkt"];
987--8745[label="0.0108696;1pkt 1fpkt"];
987--8825[label="1;4pkt 4fpkt"];
987--8909[label="1;4pkt 4fpkt"];
987--9042[label="1;4pkt 4fpkt"];
987--10239[label="0.8;4pkt 4fpkt"];
987--10414[label="1;4pkt 4fpkt"];
987--11042[label="1;4pkt 4fpkt"];
987--11737[label="1;4pkt 4fpkt"];
987--12280[label="1;4pkt 4fpkt"];
1168--9042[label="1;4pkt 4fpkt"];
1168--11042[label="1;4pkt 4fpkt"];
1760--10414[label="1;4pkt 4fpkt"];
1760--11737[label="1;4pkt 4fpkt"];
1760--12280[label="1;4pkt 4fpkt"];
2296--8825[label="1;4pkt 4fpkt"];
9042--11042[label="1;4pkt 4fpkt"];
10414--11737[label="1;4pkt 4fpkt"];
10414--12280[label="1;4pkt 4fpkt"];
11737--12280[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.150.65.195" src_port="135"/>
      <filter dst_ip="128.150.65.195"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
517[label="128.208.192.101;s;288pkt 288fpkt", shape=diamond, color=yellow];
1239[label="200.204.154.180;d;40pkt 40fpkt", shape=diamond, color=yellow];
3191[label="200.96.6.242;d;18pkt 18fpkt", shape=diamond, color=yellow];
4637[label="100.204.89.34;d;20pkt 20fpkt", shape=diamond, color=yellow];
4877[label="128.208.192.101;s;288pkt 288fpkt", shape=hexagon, color=black];
6693[label="21.105.197.108;d;41pkt 41fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.101:80, *:*}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58231: (0.215827%)&lt;BR/&gt; 58230: (0.215827%)&lt;BR/&gt; 58223: (0.215827%)&lt;BR/&gt; 58220: (0.215827%)&gt;];
}
517--1239[label="1;40pkt 40fpkt"];
517--3191[label="1;18pkt 18fpkt"];
517--3508[label="0.00735294;1pkt 1fpkt"];
517--3581[label="0.853659;35pkt 35fpkt"];
517--4637[label="1;20pkt 20fpkt"];
517--4877[label="1;288pkt 288fpkt"];
517--6693[label="0.853659;35pkt 35fpkt"];
517--6975[label="0.00813008;1pkt 1fpkt"];
517--8131[label="0.0555556;16pkt 16fpkt"];
517--8180[label="0.0555556;16pkt 16fpkt"];
517--8219[label="0.0555556;16pkt 16fpkt"];
1239--4877[label="1;40pkt 40fpkt"];
3191--4877[label="1;18pkt 18fpkt"];
4637--4877[label="1;20pkt 20fpkt"];
4877--6693[label="0.853659;35pkt 35fpkt"];
4877--6975[label="0.00813008;1pkt 1fpkt"];
4877--8131[label="0.0555556;16pkt 16fpkt"];
4877--8180[label="0.0555556;16pkt 16fpkt"];
4877--8219[label="0.0555556;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="128.208.192.101" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
1243[label="203.90.53.107;d;45pkt 45fpkt", shape=diamond, color=yellow];
1244[label="133.72.45.196;s;28pkt 28fpkt", shape=diamond, color=yellow];
5107[label="203.90.53.107;d;45pkt 45fpkt", shape=hexagon, color=black];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.45.196:*, 203.90.53.107:80}[62.2222%]&lt;BR/&gt;{133.72.220.184:*, 203.90.53.107:80}[37.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2576: (1.27119%)&lt;BR/&gt; 2574: (1.27119%)&lt;BR/&gt; 2573: (1.27119%)&lt;BR/&gt; 2570: (1.27119%)&gt;];
}
1243--1244[label="1;28pkt 28fpkt"];
1243--5107[label="1;45pkt 45fpkt"];
1244--5107[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="203.90.53.107" dst_port="80" src_ip="133.72.45.196"/>
      <filter dst_ip="203.90.53.107" dst_port="80" src_ip="133.72.220.184"/>
    </slice>
    <from sec="1229058286" usec="0"/>
    <to sec="1229058464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
275[label="214.56.221.60;d;673pkt 673fpkt", shape=diamond, color=yellow];
1323[label="32.203.198.212;s;142pkt 142fpkt", shape=diamond, color=yellow];
3562[label="54.176.253.203;s;29pkt 29fpkt", shape=diamond, color=yellow];
5715[label="214.56.221.60;d;656pkt 656fpkt", shape=hexagon, color=black];
7012[label="54.176.253.203;s;29pkt 29fpkt", shape=hexagon, color=black];
8364[label="193.247.64.10;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8563[label="33.179.38.28;71pkt 71fpkt", shape=pentagon, color=darkviolet];
9118[label="44.111.231.78;53pkt 53fpkt", shape=pentagon, color=darkviolet];
10249[label="54.176.253.203;28pkt 28fpkt", shape=pentagon, color=darkviolet];
10706[label="193.247.64.10;34pkt 34fpkt", shape=invtriangle, color=brown];
10741[label="41.100.134.16;36pkt 36fpkt", shape=invtriangle, color=brown];
10801[label="33.179.38.28;71pkt 71fpkt", shape=invtriangle, color=brown];
11648[label="54.176.253.203;28pkt 28fpkt", shape=invtriangle, color=brown];
12235[label="54.176.253.203;28pkt 28fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.56.221.60:*}[80.7125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0063%)&lt;BR/&gt; 443: (0.889121%)&lt;BR/&gt; 43520: (0.261506%)&lt;BR/&gt; 34980: (0.235356%)&lt;BR/&gt; 0: (0.209205%)&gt;];
}
275--1291[label="0.0133929;3pkt 3fpkt"];
275--1323[label="0.028169;4pkt 4fpkt"];
275--1644[label="0.0424242;7pkt 7fpkt"];
275--1655[label="1;84pkt 84fpkt"];
275--1657[label="0.0552147;9pkt 9fpkt"];
275--2066[label="0.0031348;1pkt 1fpkt"];
275--2095[label="0.00406504;1pkt 1fpkt"];
275--2749[label="0.852941;29pkt 29fpkt"];
275--3003[label="0.00434783;1pkt 1fpkt"];
275--3055[label="0.0120482;2pkt 2fpkt"];
275--3321[label="0.101449;7pkt 7fpkt"];
275--3562[label="1;29pkt 29fpkt"];
275--4478[label="0.51;51pkt 51fpkt"];
275--5337[label="1;84pkt 84fpkt"];
275--5715[label="1;656pkt 656fpkt"];
275--5893[label="0.0552147;9pkt 9fpkt"];
275--6145[label="0.0031348;1pkt 1fpkt"];
275--6166[label="0.00406504;1pkt 1fpkt"];
275--6190[label="0.0120482;2pkt 2fpkt"];
275--6236[label="0.852941;29pkt 29fpkt"];
275--6421[label="0.116667;7pkt 7fpkt"];
275--7012[label="1;29pkt 29fpkt"];
275--8091[label="0.0552147;9pkt 9fpkt"];
275--8131[label="0.121842;82pkt 82fpkt"];
275--8180[label="0.121842;82pkt 82fpkt"];
275--8219[label="0.121842;82pkt 82fpkt"];
275--8349[label="1;95pkt 95fpkt"];
275--8364[label="1;34pkt 34fpkt"];
275--8423[label="0.972973;36pkt 36fpkt"];
275--8563[label="0.985915;70pkt 70fpkt"];
275--8776[label="0.0424242;7pkt 7fpkt"];
275--8801[label="0.617021;29pkt 29fpkt"];
275--8870[label="0.0909091;1pkt 1fpkt"];
275--9118[label="0.962264;51pkt 51fpkt"];
275--9989[label="0.00392157;1pkt 1fpkt"];
275--10249[label="1;28pkt 28fpkt"];
275--10269[label="0.00404858;1pkt 1fpkt"];
275--10706[label="1;34pkt 34fpkt"];
275--10741[label="1;36pkt 36fpkt"];
275--10801[label="0.985915;70pkt 70fpkt"];
275--10926[label="0.613636;27pkt 27fpkt"];
275--11648[label="1;28pkt 28fpkt"];
275--11661[label="0.00404858;1pkt 1fpkt"];
275--12235[label="1;28pkt 28fpkt"];
1323--2180[label="0.415842;42pkt 42fpkt"];
1323--4616[label="0.0555556;4pkt 4fpkt"];
1323--5660[label="0.427083;41pkt 41fpkt"];
1323--5715[label="0.028169;4pkt 4fpkt"];
1323--7371[label="0.591549;84pkt 84fpkt"];
1323--7635[label="0.0555556;4pkt 4fpkt"];
1323--8131[label="0.239437;34pkt 34fpkt"];
1323--8180[label="0.239437;34pkt 34fpkt"];
1323--8219[label="0.239437;34pkt 34fpkt"];
3562--5715[label="1;29pkt 29fpkt"];
3562--7012[label="1;29pkt 29fpkt"];
3562--10249[label="1;28pkt 28fpkt"];
3562--11648[label="1;28pkt 28fpkt"];
3562--12235[label="1;28pkt 28fpkt"];
5715--5893[label="0.0368098;6pkt 6fpkt"];
5715--6145[label="0.0031348;1pkt 1fpkt"];
5715--6166[label="0.00406504;1pkt 1fpkt"];
5715--6190[label="0.0120482;2pkt 2fpkt"];
5715--6236[label="0.852941;29pkt 29fpkt"];
5715--6421[label="0.116667;7pkt 7fpkt"];
5715--7012[label="1;29pkt 29fpkt"];
5715--8091[label="0.0368098;6pkt 6fpkt"];
5715--8131[label="0.125;82pkt 82fpkt"];
5715--8180[label="0.125;82pkt 82fpkt"];
5715--8219[label="0.125;82pkt 82fpkt"];
5715--8349[label="1;95pkt 95fpkt"];
5715--8364[label="1;34pkt 34fpkt"];
5715--8423[label="0.972973;36pkt 36fpkt"];
5715--8563[label="0.985915;70pkt 70fpkt"];
5715--8776[label="0.0424242;7pkt 7fpkt"];
5715--8801[label="0.617021;29pkt 29fpkt"];
5715--8870[label="0.0909091;1pkt 1fpkt"];
5715--9118[label="0.867925;46pkt 46fpkt"];
5715--9989[label="0.00392157;1pkt 1fpkt"];
5715--10249[label="1;28pkt 28fpkt"];
5715--10269[label="0.00404858;1pkt 1fpkt"];
5715--10706[label="1;34pkt 34fpkt"];
5715--10741[label="1;36pkt 36fpkt"];
5715--10801[label="0.985915;70pkt 70fpkt"];
5715--10926[label="0.613636;27pkt 27fpkt"];
5715--11648[label="1;28pkt 28fpkt"];
5715--11661[label="0.00404858;1pkt 1fpkt"];
5715--12235[label="1;28pkt 28fpkt"];
7012--10249[label="1;28pkt 28fpkt"];
7012--11648[label="1;28pkt 28fpkt"];
7012--12235[label="1;28pkt 28fpkt"];
8364--10706[label="1;34pkt 34fpkt"];
8563--10801[label="1;71pkt 71fpkt"];
10249--11648[label="1;28pkt 28fpkt"];
10249--12235[label="1;28pkt 28fpkt"];
11648--12235[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.221.60" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
438[label="192.153.108.205;s;1445pkt 1445fpkt", shape=diamond, color=yellow];
1308[label="172.45.248.176;d;726pkt 726fpkt", shape=diamond, color=yellow];
6306[label="172.45.248.176;d;567pkt 567fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.153.108.205:*, 172.45.248.187:1433}[49.8965%]&lt;BR/&gt;{192.153.108.205:*, 172.45.248.176:1433}[49.8275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.8904%)&lt;BR/&gt; 49824: (0.109569%)&lt;BR/&gt; 46549: (0.073046%)&lt;BR/&gt; 46312: (0.073046%)&lt;BR/&gt; 44249: (0.073046%)&gt;];
}
438--1308[label="0.99449;722pkt 722fpkt"];
438--1359[label="1;645pkt 645fpkt"];
438--5467[label="1;256pkt 256fpkt"];
438--6306[label="0.996473;565pkt 565fpkt"];
1308--6306[label="1;567pkt 567fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.248.176" dst_port="1433" src_ip="192.153.108.205"/>
      <filter dst_ip="172.45.248.187" dst_port="1433" src_ip="192.153.108.205"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
555[label="169.18.131.118;d;222pkt 222fpkt", shape=diamond, color=yellow];
580[label="41.128.198.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
988[label="55.123.121.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
1543[label="180.188.152.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
1932[label="60.100.181.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
1947[label="39.128.247.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
1952[label="23.74.95.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
4617[label="37.29.7.128;s;6pkt 6fpkt", shape=diamond, color=yellow];
10023[label="39.128.247.175;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10167[label="213.81.240.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.18.131.118:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (3.36134%)&lt;BR/&gt; 10816: (1.89076%)&lt;BR/&gt; 57091: (1.68067%)&lt;BR/&gt; 51413: (1.68067%)&lt;BR/&gt; 0: (1.68067%)&gt;];
}
555--580[label="1;1pkt 1fpkt"];
555--928[label="1;7pkt 7fpkt"];
555--988[label="1;1pkt 1fpkt"];
555--1335[label="1;4pkt 4fpkt"];
555--1433[label="1;1pkt 1fpkt"];
555--1543[label="1;1pkt 1fpkt"];
555--1569[label="1;1pkt 1fpkt"];
555--1867[label="1;1pkt 1fpkt"];
555--1932[label="1;1pkt 1fpkt"];
555--1947[label="1;2pkt 2fpkt"];
555--1952[label="1;1pkt 1fpkt"];
555--2073[label="1;2pkt 2fpkt"];
555--2451[label="1;1pkt 1fpkt"];
555--2939[label="0.5;2pkt 2fpkt"];
555--4617[label="1;6pkt 6fpkt"];
555--5492[label="1;1pkt 1fpkt"];
555--5825[label="1;1pkt 1fpkt"];
555--6154[label="1;2pkt 2fpkt"];
555--6323[label="1;4pkt 4fpkt"];
555--6386[label="1;1pkt 1fpkt"];
555--6411[label="1;7pkt 7fpkt"];
555--6456[label="0.5;1pkt 1fpkt"];
555--6505[label="1;1pkt 1fpkt"];
555--7820[label="1;1pkt 1fpkt"];
555--8134[label="0.0045045;1pkt 1fpkt"];
555--10023[label="1;2pkt 2fpkt"];
555--10167[label="1;1pkt 1fpkt"];
1947--10023[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16033,1.80748,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
109[label="215.40.227.102d;2pkt 2fpkt", shape=rectangle, color=red];
618[label="215.40.227.102;d;516pkt 516fpkt", shape=diamond, color=yellow];
1350[label="215.169.194.114;s;27pkt 27fpkt", shape=diamond, color=yellow];
2498[label="195.14.245.244;s;405pkt 405fpkt", shape=diamond, color=yellow];
3305[label="97.56.35.118;s;270pkt 270fpkt", shape=diamond, color=yellow];
3370[label="100.183.74.214;s;122pkt 122fpkt", shape=diamond, color=yellow];
4192[label="195.14.245.246;s;106pkt 106fpkt", shape=diamond, color=yellow];
5758[label="215.169.194.114;s;25pkt 25fpkt", shape=hexagon, color=black];
5840[label="195.14.245.244;s;363pkt 363fpkt", shape=hexagon, color=black];
6337[label="215.40.227.102;d;516pkt 516fpkt", shape=hexagon, color=black];
7483[label="100.183.74.214;s;122pkt 122fpkt", shape=hexagon, color=black];
7528[label="195.14.245.246;s;106pkt 106fpkt", shape=hexagon, color=black];
10582[label="195.14.245.246;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.40.227.102:80}[53.9832%]&lt;BR/&gt;{97.56.35.118:*, *:80}[28.3019%]&lt;BR/&gt;{195.14.245.244:*, 215.40.227.32:80}[28.0922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.777%)&lt;BR/&gt; 1314: (0.204385%)&lt;BR/&gt; 1310: (0.204385%)&lt;BR/&gt; 1242: (0.204385%)&lt;BR/&gt; 1238: (0.204385%)&gt;];
}
109--618[label="1;2pkt 2fpkt"];
109--1350[label="1;2pkt 2fpkt"];
109--5758[label="1;2pkt 2fpkt"];
109--6337[label="1;2pkt 2fpkt"];
109--8134[label="1;2pkt 2fpkt"];
618--1350[label="1;27pkt 27fpkt"];
618--2498[label="0.338272;137pkt 137fpkt"];
618--3305[label="0.388889;105pkt 105fpkt"];
618--3370[label="1;122pkt 122fpkt"];
618--4192[label="1;106pkt 106fpkt"];
618--4752[label="0.0116279;6pkt 6fpkt"];
618--5423[label="0.00193798;1pkt 1fpkt"];
618--5758[label="1;25pkt 25fpkt"];
618--5840[label="0.338843;123pkt 123fpkt"];
618--6337[label="1;516pkt 516fpkt"];
618--7483[label="1;122pkt 122fpkt"];
618--7528[label="1;106pkt 106fpkt"];
618--7751[label="0.0116279;6pkt 6fpkt"];
618--8109[label="0.0116279;6pkt 6fpkt"];
618--8119[label="0.0620155;32pkt 32fpkt"];
618--8134[label="0.0503876;26pkt 26fpkt"];
618--8160[label="0.00193798;1pkt 1fpkt"];
618--8161[label="0.00581395;3pkt 3fpkt"];
618--8162[label="0.00193798;1pkt 1fpkt"];
618--8165[label="0.0251938;13pkt 13fpkt"];
618--8203[label="0.00193798;1pkt 1fpkt"];
618--8204[label="0.00581395;3pkt 3fpkt"];
618--8205[label="0.00193798;1pkt 1fpkt"];
618--8208[label="0.0251938;13pkt 13fpkt"];
618--8236[label="0.00193798;1pkt 1fpkt"];
618--8237[label="0.00581395;3pkt 3fpkt"];
618--8238[label="0.00193798;1pkt 1fpkt"];
618--8241[label="0.0251938;13pkt 13fpkt"];
618--8509[label="0.00193798;1pkt 1fpkt"];
618--10582[label="0.954955;106pkt 106fpkt"];
618--11717[label="0.0116279;6pkt 6fpkt"];
618--12267[label="0.0116279;6pkt 6fpkt"];
1350--5758[label="1;25pkt 25fpkt"];
1350--6337[label="1;27pkt 27fpkt"];
1350--8119[label="0.037037;1pkt 1fpkt"];
1350--8134[label="0.0740741;2pkt 2fpkt"];
2498--5840[label="1;363pkt 363fpkt"];
2498--6337[label="0.338272;137pkt 137fpkt"];
2498--8119[label="0.0592593;24pkt 24fpkt"];
2498--8134[label="0.0592593;24pkt 24fpkt"];
2498--8165[label="0.0222222;9pkt 9fpkt"];
2498--8208[label="0.0222222;9pkt 9fpkt"];
2498--8241[label="0.0222222;9pkt 9fpkt"];
3305--6337[label="0.388889;105pkt 105fpkt"];
3305--8119[label="0.062963;17pkt 17fpkt"];
3305--8134[label="0.0518519;14pkt 14fpkt"];
3305--8165[label="0.0222222;6pkt 6fpkt"];
3305--8208[label="0.0222222;6pkt 6fpkt"];
3305--8241[label="0.0222222;6pkt 6fpkt"];
3370--6337[label="1;122pkt 122fpkt"];
3370--7483[label="1;122pkt 122fpkt"];
3370--8119[label="0.0737705;9pkt 9fpkt"];
3370--8134[label="0.0409836;5pkt 5fpkt"];
3370--8165[label="0.0245902;3pkt 3fpkt"];
3370--8208[label="0.0245902;3pkt 3fpkt"];
3370--8241[label="0.0245902;3pkt 3fpkt"];
4192--6337[label="1;106pkt 106fpkt"];
4192--7528[label="1;106pkt 106fpkt"];
4192--8119[label="0.0660377;7pkt 7fpkt"];
4192--8134[label="0.0471698;5pkt 5fpkt"];
4192--8165[label="0.0283019;3pkt 3fpkt"];
4192--8208[label="0.0283019;3pkt 3fpkt"];
4192--8241[label="0.0283019;3pkt 3fpkt"];
4192--10582[label="1;106pkt 106fpkt"];
5758--6337[label="1;25pkt 25fpkt"];
5758--8119[label="0.04;1pkt 1fpkt"];
5758--8134[label="0.08;2pkt 2fpkt"];
5840--6337[label="0.338843;123pkt 123fpkt"];
5840--8119[label="0.0661157;24pkt 24fpkt"];
5840--8134[label="0.0661157;24pkt 24fpkt"];
6337--7483[label="1;122pkt 122fpkt"];
6337--7528[label="1;106pkt 106fpkt"];
6337--7751[label="0.0116279;6pkt 6fpkt"];
6337--8109[label="0.0116279;6pkt 6fpkt"];
6337--8119[label="0.0620155;32pkt 32fpkt"];
6337--8134[label="0.0503876;26pkt 26fpkt"];
6337--8160[label="0.00193798;1pkt 1fpkt"];
6337--8161[label="0.00581395;3pkt 3fpkt"];
6337--8162[label="0.00193798;1pkt 1fpkt"];
6337--8165[label="0.0251938;13pkt 13fpkt"];
6337--8203[label="0.00193798;1pkt 1fpkt"];
6337--8204[label="0.00581395;3pkt 3fpkt"];
6337--8205[label="0.00193798;1pkt 1fpkt"];
6337--8208[label="0.0251938;13pkt 13fpkt"];
6337--8236[label="0.00193798;1pkt 1fpkt"];
6337--8237[label="0.00581395;3pkt 3fpkt"];
6337--8238[label="0.00193798;1pkt 1fpkt"];
6337--8241[label="0.0251938;13pkt 13fpkt"];
6337--8509[label="0.00193798;1pkt 1fpkt"];
6337--10582[label="0.954955;106pkt 106fpkt"];
6337--11717[label="0.0116279;6pkt 6fpkt"];
6337--12267[label="0.0116279;6pkt 6fpkt"];
7483--8119[label="0.0737705;9pkt 9fpkt"];
7483--8134[label="0.0409836;5pkt 5fpkt"];
7483--8165[label="0.0245902;3pkt 3fpkt"];
7483--8208[label="0.0245902;3pkt 3fpkt"];
7483--8241[label="0.0245902;3pkt 3fpkt"];
7528--8119[label="0.0660377;7pkt 7fpkt"];
7528--8134[label="0.0471698;5pkt 5fpkt"];
7528--8165[label="0.0283019;3pkt 3fpkt"];
7528--8208[label="0.0283019;3pkt 3fpkt"];
7528--8241[label="0.0283019;3pkt 3fpkt"];
7528--10582[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="97.56.35.118"/>
      <filter dst_ip="215.40.227.102" dst_port="80"/>
      <filter dst_ip="215.40.227.32" dst_port="80" src_ip="195.14.245.244"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
302[label="128.64.35.93;d;176pkt 176fpkt", shape=diamond, color=yellow];
867[label="97.53.117.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
1390[label="204.82.202.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
1403[label="7.215.31.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1808[label="5.5.254.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
2361[label="101.153.59.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
3540[label="205.195.225.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
4997[label="97.53.117.175;s;1pkt 1fpkt", shape=hexagon, color=black];
5493[label="7.215.31.20;s;1pkt 1fpkt", shape=hexagon, color=black];
5718[label="5.5.254.82;s;1pkt 1fpkt", shape=hexagon, color=black];
5986[label="101.153.59.84;s;1pkt 1fpkt", shape=hexagon, color=black];
6289[label="128.64.35.93;d;176pkt 176fpkt", shape=hexagon, color=black];
6660[label="205.195.225.78;s;1pkt 1fpkt", shape=hexagon, color=black];
6779[label="204.82.202.41;s;1pkt 1fpkt", shape=hexagon, color=black];
7970[label="205.195.225.78;s;1pkt 1fpkt", shape=polygon, color=gold];
9159[label="5.5.254.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11095[label="5.5.254.82;1pkt 1fpkt", shape=invtriangle, color=brown];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.35.93:35801}[24.4318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35801: (11.7166%)&lt;BR/&gt; 4662: (4.08719%)&lt;BR/&gt; 4672: (2.17984%)&lt;BR/&gt; 7118: (1.08992%)&lt;BR/&gt; 4035: (1.08992%)&gt;];
}
302--867[label="1;1pkt 1fpkt"];
302--1357[label="1;1pkt 1fpkt"];
302--1390[label="1;1pkt 1fpkt"];
302--1403[label="1;1pkt 1fpkt"];
302--1807[label="1;1pkt 1fpkt"];
302--1808[label="1;1pkt 1fpkt"];
302--2361[label="1;1pkt 1fpkt"];
302--3540[label="1;1pkt 1fpkt"];
302--4997[label="1;1pkt 1fpkt"];
302--5466[label="1;1pkt 1fpkt"];
302--5493[label="1;1pkt 1fpkt"];
302--5718[label="1;1pkt 1fpkt"];
302--5986[label="1;1pkt 1fpkt"];
302--6289[label="1;176pkt 176fpkt"];
302--6660[label="1;1pkt 1fpkt"];
302--6779[label="1;1pkt 1fpkt"];
302--7817[label="1;1pkt 1fpkt"];
302--7970[label="1;1pkt 1fpkt"];
302--8878[label="1;1pkt 1fpkt"];
302--9159[label="1;1pkt 1fpkt"];
302--10966[label="1;1pkt 1fpkt"];
302--11095[label="1;1pkt 1fpkt"];
867--4997[label="1;1pkt 1fpkt"];
867--6289[label="1;1pkt 1fpkt"];
1390--6289[label="1;1pkt 1fpkt"];
1390--6779[label="1;1pkt 1fpkt"];
1403--5493[label="1;1pkt 1fpkt"];
1403--6289[label="1;1pkt 1fpkt"];
1808--5718[label="1;1pkt 1fpkt"];
1808--6289[label="1;1pkt 1fpkt"];
1808--9159[label="1;1pkt 1fpkt"];
1808--11095[label="1;1pkt 1fpkt"];
2361--5986[label="1;1pkt 1fpkt"];
2361--6289[label="1;1pkt 1fpkt"];
3540--6289[label="1;1pkt 1fpkt"];
3540--6660[label="1;1pkt 1fpkt"];
3540--7970[label="1;1pkt 1fpkt"];
4997--6289[label="1;1pkt 1fpkt"];
5493--6289[label="1;1pkt 1fpkt"];
5718--6289[label="1;1pkt 1fpkt"];
5718--9159[label="1;1pkt 1fpkt"];
5718--11095[label="1;1pkt 1fpkt"];
5986--6289[label="1;1pkt 1fpkt"];
6289--6660[label="1;1pkt 1fpkt"];
6289--6779[label="1;1pkt 1fpkt"];
6289--7817[label="1;1pkt 1fpkt"];
6289--7970[label="1;1pkt 1fpkt"];
6289--8878[label="1;1pkt 1fpkt"];
6289--9159[label="1;1pkt 1fpkt"];
6289--10966[label="1;1pkt 1fpkt"];
6289--11095[label="1;1pkt 1fpkt"];
6660--7970[label="1;1pkt 1fpkt"];
9159--11095[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.35.93" dst_port="35801"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
1600[label="128.208.134.142;d;5pkt 5fpkt", shape=diamond, color=yellow];
5312[label="128.208.134.142;d;5pkt 5fpkt", shape=hexagon, color=black];
5885[label="192.22.44.164;s;25pkt 25fpkt", shape=hexagon, color=black];
7139[label="6.224.44.17;s;1619pkt 1619fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.224.44.17:1298, *:1434}[98.2999%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (49.0024%)&lt;BR/&gt; 1298: (49.0024%)&lt;BR/&gt; 80: (0.906892%)&lt;BR/&gt; 1151: (0.0906892%)&lt;BR/&gt; 443: (0.0906892%)&gt;];
}
1600--1631[label="0.2;1pkt 1fpkt"];
1600--1914[label="0.2;1pkt 1fpkt"];
1600--3780[label="0.4;2pkt 2fpkt"];
1600--5312[label="1;5pkt 5fpkt"];
1600--5885[label="0.2;1pkt 1fpkt"];
1600--6852[label="0.4;2pkt 2fpkt"];
1600--7139[label="0.2;1pkt 1fpkt"];
1600--7987[label="0.4;2pkt 2fpkt"];
1600--8124[label="0.2;1pkt 1fpkt"];
5312--5885[label="0.2;1pkt 1fpkt"];
5312--6852[label="0.4;2pkt 2fpkt"];
5312--7139[label="0.2;1pkt 1fpkt"];
5312--7987[label="0.4;2pkt 2fpkt"];
5312--8124[label="0.2;1pkt 1fpkt"];
5885--8131[label="0.24;6pkt 6fpkt"];
5885--8180[label="0.24;6pkt 6fpkt"];
5885--8219[label="0.24;6pkt 6fpkt"];
7139--8124[label="0.0691785;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="6.224.44.17" src_port="1298"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
85[label="144.203.168.225s;1pkt 1fpkt", shape=rectangle, color=red];
1180[label="200.204.193.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1640[label="144.203.168.225;s;3pkt 3fpkt", shape=diamond, color=yellow];
6183[label="200.204.193.89;d;1pkt 1fpkt", shape=hexagon, color=black];
6933[label="144.203.168.225;s;2pkt 2fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.168.225:80, 97.3.154.7:80}[33.3333%]&lt;BR/&gt;{144.203.168.225:80, 200.204.193.89:80}[33.3333%]&lt;BR/&gt;{144.203.168.225:80, 97.3.180.204:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (100%)&gt;];
}
85--1180[label="1;1pkt 1fpkt"];
85--1640[label="1;1pkt 1fpkt"];
85--6183[label="1;1pkt 1fpkt"];
85--6933[label="1;1pkt 1fpkt"];
85--8119[label="1;1pkt 1fpkt"];
85--8131[label="1;1pkt 1fpkt"];
85--8134[label="1;1pkt 1fpkt"];
85--8165[label="1;1pkt 1fpkt"];
85--8180[label="1;1pkt 1fpkt"];
85--8208[label="1;1pkt 1fpkt"];
85--8219[label="1;1pkt 1fpkt"];
85--8241[label="1;1pkt 1fpkt"];
1180--1640[label="1;1pkt 1fpkt"];
1180--6183[label="1;1pkt 1fpkt"];
1180--6933[label="1;1pkt 1fpkt"];
1180--8119[label="1;1pkt 1fpkt"];
1180--8131[label="1;1pkt 1fpkt"];
1180--8134[label="1;1pkt 1fpkt"];
1180--8165[label="1;1pkt 1fpkt"];
1180--8180[label="1;1pkt 1fpkt"];
1180--8208[label="1;1pkt 1fpkt"];
1180--8219[label="1;1pkt 1fpkt"];
1180--8241[label="1;1pkt 1fpkt"];
1640--6183[label="1;1pkt 1fpkt"];
1640--6933[label="1;2pkt 2fpkt"];
1640--8119[label="0.333333;1pkt 1fpkt"];
1640--8131[label="0.333333;1pkt 1fpkt"];
1640--8134[label="0.333333;1pkt 1fpkt"];
1640--8165[label="0.666667;2pkt 2fpkt"];
1640--8180[label="0.333333;1pkt 1fpkt"];
1640--8208[label="0.666667;2pkt 2fpkt"];
1640--8219[label="0.333333;1pkt 1fpkt"];
1640--8241[label="0.666667;2pkt 2fpkt"];
6183--6933[label="1;1pkt 1fpkt"];
6183--8119[label="1;1pkt 1fpkt"];
6183--8131[label="1;1pkt 1fpkt"];
6183--8134[label="1;1pkt 1fpkt"];
6183--8165[label="1;1pkt 1fpkt"];
6183--8180[label="1;1pkt 1fpkt"];
6183--8208[label="1;1pkt 1fpkt"];
6183--8219[label="1;1pkt 1fpkt"];
6183--8241[label="1;1pkt 1fpkt"];
6933--8119[label="0.5;1pkt 1fpkt"];
6933--8131[label="0.5;1pkt 1fpkt"];
6933--8134[label="0.5;1pkt 1fpkt"];
6933--8165[label="0.5;1pkt 1fpkt"];
6933--8180[label="0.5;1pkt 1fpkt"];
6933--8208[label="0.5;1pkt 1fpkt"];
6933--8219[label="0.5;1pkt 1fpkt"];
6933--8241[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="97.3.180.204" dst_port="80" src_ip="144.203.168.225" src_port="80"/>
      <filter dst_ip="200.204.193.89" dst_port="80" src_ip="144.203.168.225" src_port="80"/>
      <filter dst_ip="97.3.154.7" dst_port="80" src_ip="144.203.168.225" src_port="80"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
1749[label="128.87.199.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
1750[label="214.190.237.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.190.237.218:3908, 128.87.199.164:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3908: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1749--1750[label="1;1pkt 1fpkt"];
1749--8134[label="1;1pkt 1fpkt"];
1750--8134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.199.164" dst_port="80" src_ip="214.190.237.218" src_port="3908"/>
    </slice>
    <from sec="1229058132" usec="0"/>
    <to sec="1229058173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
249[label="215.40.245.120;d;152pkt 152fpkt", shape=diamond, color=yellow];
1273[label="193.195.146.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
1799[label="32.131.112.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
2134[label="214.49.6.194;d;231pkt 231fpkt", shape=diamond, color=yellow];
2305[label="32.131.112.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2400[label="44.77.5.115;s;258pkt 258fpkt", shape=diamond, color=yellow];
2742[label="200.236.34.142;s;10pkt 10fpkt", shape=diamond, color=yellow];
2813[label="42.236.40.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
3245[label="32.131.112.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
3519[label="192.22.41.5;s;46pkt 46fpkt", shape=diamond, color=yellow];
4061[label="193.195.131.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
4319[label="193.195.157.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
5122[label="193.195.146.221;s;1pkt 1fpkt", shape=hexagon, color=black];
5622[label="214.49.6.194;d;170pkt 170fpkt", shape=hexagon, color=black];
5781[label="44.77.5.115;s;194pkt 194fpkt", shape=hexagon, color=black];
6281[label="215.40.245.120;d;140pkt 140fpkt", shape=hexagon, color=black];
7091[label="193.195.131.34;s;1pkt 1fpkt", shape=hexagon, color=black];
7442[label="192.22.44.147;s;20pkt 20fpkt", shape=hexagon, color=black];
8244[label="192.22.41.0;23pkt 23fpkt", shape=pentagon, color=darkviolet];
8309[label="192.22.41.5;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8625[label="193.195.131.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8948[label="193.195.157.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9318[label="214.241.1.99;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9361[label="32.131.112.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9380[label="42.236.40.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9729[label="200.236.34.142;33pkt 33fpkt", shape=pentagon, color=darkviolet];
11000[label="193.195.157.64;1pkt 1fpkt", shape=invtriangle, color=brown];
11197[label="32.131.112.102;1pkt 1fpkt", shape=invtriangle, color=brown];
11919[label="193.195.131.34;1pkt 1fpkt", shape=invhouse, color=bisque];
11984[label="193.195.157.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.77.5.115:80, 214.49.6.194:*}[38.4615%]&lt;BR/&gt;{*:80, 215.40.245.120:*}[27.4725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6347%)&lt;BR/&gt; 52898: (0.885609%)&lt;BR/&gt; 0: (0.516605%)&lt;BR/&gt; 30229: (0.221402%)&lt;BR/&gt; 30202: (0.221402%)&gt;];
}
249--251[label="0.105263;10pkt 10fpkt"];
249--439[label="0.00657895;1pkt 1fpkt"];
249--492[label="0.0986842;15pkt 15fpkt"];
249--608[label="0.0136986;1pkt 1fpkt"];
249--738[label="0.00657895;1pkt 1fpkt"];
249--1273[label="1;1pkt 1fpkt"];
249--1457[label="0.0131579;2pkt 2fpkt"];
249--1613[label="0.37931;11pkt 11fpkt"];
249--1691[label="0.95122;39pkt 39fpkt"];
249--1783[label="1;1pkt 1fpkt"];
249--1799[label="1;1pkt 1fpkt"];
249--2305[label="1;1pkt 1fpkt"];
249--2400[label="0.0723684;11pkt 11fpkt"];
249--2742[label="0.4;4pkt 4fpkt"];
249--2813[label="1;1pkt 1fpkt"];
249--3245[label="1;1pkt 1fpkt"];
249--3519[label="0.0434783;2pkt 2fpkt"];
249--3521[label="0.0952381;2pkt 2fpkt"];
249--3533[label="0.0952381;2pkt 2fpkt"];
249--4061[label="1;1pkt 1fpkt"];
249--4124[label="0.1;2pkt 2fpkt"];
249--4156[label="0.03125;1pkt 1fpkt"];
249--4319[label="1;1pkt 1fpkt"];
249--4752[label="0.00657895;1pkt 1fpkt"];
249--4910[label="0.0136986;1pkt 1fpkt"];
249--4953[label="0.00657895;1pkt 1fpkt"];
249--5122[label="1;1pkt 1fpkt"];
249--5423[label="0.00657895;1pkt 1fpkt"];
249--5781[label="0.0657895;10pkt 10fpkt"];
249--6005[label="0.0855263;13pkt 13fpkt"];
249--6281[label="1;140pkt 140fpkt"];
249--6638[label="0.0952381;2pkt 2fpkt"];
249--6645[label="0.05;1pkt 1fpkt"];
249--6739[label="0.105263;10pkt 10fpkt"];
249--7091[label="1;1pkt 1fpkt"];
249--7184[label="0.0322581;1pkt 1fpkt"];
249--7231[label="0.37931;11pkt 11fpkt"];
249--7426[label="0.0131579;2pkt 2fpkt"];
249--7442[label="0.1;2pkt 2fpkt"];
249--7751[label="0.00657895;1pkt 1fpkt"];
249--8034[label="0.0322581;1pkt 1fpkt"];
249--8063[label="0.0136986;1pkt 1fpkt"];
249--8109[label="0.00657895;1pkt 1fpkt"];
249--8131[label="0.125;19pkt 19fpkt"];
249--8180[label="0.125;19pkt 19fpkt"];
249--8219[label="0.125;19pkt 19fpkt"];
249--8244[label="0.0869565;2pkt 2fpkt"];
249--8309[label="0.0416667;2pkt 2fpkt"];
249--8509[label="0.00657895;1pkt 1fpkt"];
249--8625[label="1;1pkt 1fpkt"];
249--8712[label="1;1pkt 1fpkt"];
249--8948[label="1;1pkt 1fpkt"];
249--9160[label="0.0555556;1pkt 1fpkt"];
249--9318[label="0.0769231;1pkt 1fpkt"];
249--9361[label="1;1pkt 1fpkt"];
249--9380[label="1;1pkt 1fpkt"];
249--9729[label="0.121212;4pkt 4fpkt"];
249--9810[label="0.0943396;10pkt 10fpkt"];
249--9908[label="0.0909091;2pkt 2fpkt"];
249--10875[label="1;1pkt 1fpkt"];
249--11000[label="1;1pkt 1fpkt"];
249--11096[label="0.0555556;1pkt 1fpkt"];
249--11197[label="1;1pkt 1fpkt"];
249--11717[label="0.00657895;1pkt 1fpkt"];
249--11919[label="1;1pkt 1fpkt"];
249--11934[label="1;1pkt 1fpkt"];
249--11984[label="1;1pkt 1fpkt"];
249--12267[label="0.00657895;1pkt 1fpkt"];
1273--5122[label="1;1pkt 1fpkt"];
1273--6281[label="1;1pkt 1fpkt"];
1799--6281[label="1;1pkt 1fpkt"];
2134--2400[label="0.909091;210pkt 210fpkt"];
2134--2496[label="0.0746269;5pkt 5fpkt"];
2134--5622[label="1;170pkt 170fpkt"];
2134--5781[label="0.809278;157pkt 157fpkt"];
2134--8131[label="0.038961;9pkt 9fpkt"];
2134--8180[label="0.038961;9pkt 9fpkt"];
2134--8219[label="0.038961;9pkt 9fpkt"];
2305--6281[label="1;1pkt 1fpkt"];
2400--2966[label="0.00387597;1pkt 1fpkt"];
2400--3108[label="0.0877193;10pkt 10fpkt"];
2400--5011[label="0.0232558;6pkt 6fpkt"];
2400--5014[label="0.00387597;1pkt 1fpkt"];
2400--5158[label="0.00775194;2pkt 2fpkt"];
2400--5622[label="0.923529;157pkt 157fpkt"];
2400--5781[label="1;194pkt 194fpkt"];
2400--6281[label="0.0714286;10pkt 10fpkt"];
2400--6488[label="0.00387597;1pkt 1fpkt"];
2400--7880[label="0.0155039;4pkt 4fpkt"];
2400--8131[label="0.0348837;9pkt 9fpkt"];
2400--8180[label="0.0348837;9pkt 9fpkt"];
2400--8219[label="0.0348837;9pkt 9fpkt"];
2742--6281[label="0.4;4pkt 4fpkt"];
2742--9729[label="1;10pkt 10fpkt"];
2813--6281[label="1;1pkt 1fpkt"];
2813--9380[label="1;1pkt 1fpkt"];
3245--6281[label="1;1pkt 1fpkt"];
3245--9361[label="1;1pkt 1fpkt"];
3245--11197[label="1;1pkt 1fpkt"];
3519--5175[label="0.76087;35pkt 35fpkt"];
3519--6281[label="0.0434783;2pkt 2fpkt"];
3519--6530[label="0.264706;9pkt 9fpkt"];
3519--7956[label="0.264706;9pkt 9fpkt"];
3519--8309[label="1;46pkt 46fpkt"];
4061--6281[label="1;1pkt 1fpkt"];
4061--7091[label="1;1pkt 1fpkt"];
4061--8625[label="1;1pkt 1fpkt"];
4061--11919[label="1;1pkt 1fpkt"];
4319--6281[label="1;1pkt 1fpkt"];
4319--8948[label="1;1pkt 1fpkt"];
4319--11000[label="1;1pkt 1fpkt"];
4319--11984[label="1;1pkt 1fpkt"];
5122--6281[label="1;1pkt 1fpkt"];
5622--5781[label="0.923529;157pkt 157fpkt"];
5622--8131[label="0.0529412;9pkt 9fpkt"];
5622--8180[label="0.0529412;9pkt 9fpkt"];
5622--8219[label="0.0529412;9pkt 9fpkt"];
5781--6281[label="0.0714286;10pkt 10fpkt"];
5781--6488[label="0.00515464;1pkt 1fpkt"];
5781--7880[label="0.0206186;4pkt 4fpkt"];
5781--8131[label="0.0463918;9pkt 9fpkt"];
5781--8180[label="0.0463918;9pkt 9fpkt"];
5781--8219[label="0.0463918;9pkt 9fpkt"];
6281--6638[label="0.047619;1pkt 1fpkt"];
6281--6645[label="0.05;1pkt 1fpkt"];
6281--6739[label="0.105263;10pkt 10fpkt"];
6281--7091[label="1;1pkt 1fpkt"];
6281--7184[label="0.0322581;1pkt 1fpkt"];
6281--7231[label="0.37931;11pkt 11fpkt"];
6281--7426[label="0.0142857;2pkt 2fpkt"];
6281--7442[label="0.1;2pkt 2fpkt"];
6281--8034[label="0.0322581;1pkt 1fpkt"];
6281--8063[label="0.0136986;1pkt 1fpkt"];
6281--8131[label="0.135714;19pkt 19fpkt"];
6281--8180[label="0.135714;19pkt 19fpkt"];
6281--8219[label="0.135714;19pkt 19fpkt"];
6281--8244[label="0.0869565;2pkt 2fpkt"];
6281--8309[label="0.0416667;2pkt 2fpkt"];
6281--8509[label="0.00714286;1pkt 1fpkt"];
6281--8625[label="1;1pkt 1fpkt"];
6281--8712[label="1;1pkt 1fpkt"];
6281--8948[label="1;1pkt 1fpkt"];
6281--9160[label="0.0555556;1pkt 1fpkt"];
6281--9318[label="0.0769231;1pkt 1fpkt"];
6281--9361[label="1;1pkt 1fpkt"];
6281--9380[label="1;1pkt 1fpkt"];
6281--9729[label="0.121212;4pkt 4fpkt"];
6281--9810[label="0.0943396;10pkt 10fpkt"];
6281--9908[label="0.0454545;1pkt 1fpkt"];
6281--10875[label="1;1pkt 1fpkt"];
6281--11000[label="1;1pkt 1fpkt"];
6281--11096[label="0.0555556;1pkt 1fpkt"];
6281--11197[label="1;1pkt 1fpkt"];
6281--11919[label="1;1pkt 1fpkt"];
6281--11934[label="1;1pkt 1fpkt"];
6281--11984[label="1;1pkt 1fpkt"];
7091--8625[label="1;1pkt 1fpkt"];
7091--11919[label="1;1pkt 1fpkt"];
7442--8131[label="0.15;3pkt 3fpkt"];
7442--8180[label="0.15;3pkt 3fpkt"];
7442--8219[label="0.15;3pkt 3fpkt"];
8625--11919[label="1;1pkt 1fpkt"];
8948--11000[label="1;1pkt 1fpkt"];
8948--11984[label="1;1pkt 1fpkt"];
9361--11197[label="1;1pkt 1fpkt"];
11000--11984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.245.120" src_port="80"/>
      <filter dst_ip="214.49.6.194" src_ip="44.77.5.115" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
4322[label="42.236.34.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
7322[label="42.236.34.234;s;1pkt 1fpkt", shape=hexagon, color=black];
10493[label="42.236.34.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11776[label="42.236.34.234;2pkt 2fpkt", shape=invtriangle, color=brown];
12293[label="42.236.34.234;2pkt 2fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.34.234:80, 214.49.29.37:52163}[50%]&lt;BR/&gt;{42.236.34.234:80, 214.49.29.37:52174}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52163: (31.25%)&lt;BR/&gt; 52174: (18.75%)&gt;];
}
4322--7322[label="1;1pkt 1fpkt"];
4322--10493[label="1;1pkt 1fpkt"];
4322--11776[label="1;1pkt 1fpkt"];
4322--12293[label="1;1pkt 1fpkt"];
7322--10493[label="1;1pkt 1fpkt"];
7322--11776[label="1;1pkt 1fpkt"];
7322--12293[label="1;1pkt 1fpkt"];
10493--11776[label="1;2pkt 2fpkt"];
10493--12293[label="1;2pkt 2fpkt"];
11776--12293[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.29.37" dst_port="52174" src_ip="42.236.34.234" src_port="80"/>
      <filter dst_ip="214.49.29.37" dst_port="52163" src_ip="42.236.34.234" src_port="80"/>
    </slice>
    <from sec="1229058590" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
462[label="128.64.244.78;s;1114pkt 1114fpkt", shape=diamond, color=yellow];
1821[label="0.137.122.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
1898[label="136.140.210.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
2441[label="6.68.32.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
6003[label="0.137.122.93;d;1pkt 1fpkt", shape=hexagon, color=black];
6004[label="128.64.244.78;s;1114pkt 1114fpkt", shape=hexagon, color=black];
7431[label="6.68.32.71;d;1pkt 1fpkt", shape=hexagon, color=black];
9120[label="128.64.244.78;1196pkt 1196fpkt", shape=pentagon, color=darkviolet];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.244.78:56959, *:*}[93.311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56959: (46.4567%)&lt;BR/&gt; 4672: (7.59697%)&lt;BR/&gt; 5901: (2.05599%)&lt;BR/&gt; 1985: (0.422864%)&lt;BR/&gt; 4671: (0.379119%)&gt;];
}
462--491[label="0.00105485;1pkt 1fpkt"];
462--1821[label="1;1pkt 1fpkt"];
462--1898[label="1;1pkt 1fpkt"];
462--2441[label="1;1pkt 1fpkt"];
462--6003[label="1;1pkt 1fpkt"];
462--6004[label="1;1114pkt 1114fpkt"];
462--7378[label="0.00105485;1pkt 1fpkt"];
462--7431[label="1;1pkt 1fpkt"];
462--9120[label="1;1114pkt 1114fpkt"];
1821--6003[label="1;1pkt 1fpkt"];
1821--6004[label="1;1pkt 1fpkt"];
1821--9120[label="1;1pkt 1fpkt"];
1898--6004[label="1;1pkt 1fpkt"];
1898--9120[label="1;1pkt 1fpkt"];
2441--6004[label="1;1pkt 1fpkt"];
2441--7431[label="1;1pkt 1fpkt"];
2441--9120[label="1;1pkt 1fpkt"];
6003--6004[label="1;1pkt 1fpkt"];
6003--9120[label="1;1pkt 1fpkt"];
6004--7378[label="0.00105485;1pkt 1fpkt"];
6004--7431[label="1;1pkt 1fpkt"];
6004--9120[label="1;1114pkt 1114fpkt"];
7431--9120[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.244.78" src_port="56959"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1142[label="128.208.138.116;d;16pkt 16fpkt", shape=diamond, color=yellow];
1234[label="197.30.247.119;s;2pkt 2fpkt", shape=diamond, color=yellow];
2987[label="41.168.42.201;s;100pkt 100fpkt", shape=diamond, color=yellow];
7237[label="128.208.138.116;d;16pkt 16fpkt", shape=hexagon, color=black];
9531[label="197.30.247.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11268[label="197.30.247.119;2pkt 2fpkt", shape=invtriangle, color=brown];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.168.42.201:80, 128.64.2.244:*}[20.5357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62711: (1.81159%)&lt;BR/&gt; 62706: (1.81159%)&lt;BR/&gt; 62715: (1.08696%)&lt;BR/&gt; 62714: (1.08696%)&gt;];
}
1142--1234[label="1;2pkt 2fpkt"];
1142--2006[label="0.125;2pkt 2fpkt"];
1142--2987[label="0.25;4pkt 4fpkt"];
1142--7179[label="0.125;2pkt 2fpkt"];
1142--7201[label="0.25;4pkt 4fpkt"];
1142--7237[label="1;16pkt 16fpkt"];
1142--8031[label="0.125;2pkt 2fpkt"];
1142--9531[label="1;2pkt 2fpkt"];
1142--11268[label="1;2pkt 2fpkt"];
1234--7237[label="1;2pkt 2fpkt"];
1234--9531[label="1;2pkt 2fpkt"];
1234--11268[label="1;2pkt 2fpkt"];
2987--3108[label="0.07;7pkt 7fpkt"];
2987--4087[label="0.0104167;1pkt 1fpkt"];
2987--4513[label="0.0350877;2pkt 2fpkt"];
2987--4854[label="0.133333;8pkt 8fpkt"];
2987--4915[label="0.037037;1pkt 1fpkt"];
2987--5175[label="0.02;2pkt 2fpkt"];
2987--5390[label="0.01;1pkt 1fpkt"];
2987--5441[label="0.283951;23pkt 23fpkt"];
2987--5723[label="0.03;3pkt 3fpkt"];
2987--6463[label="0.01;1pkt 1fpkt"];
2987--7201[label="1;100pkt 100fpkt"];
2987--7237[label="0.25;4pkt 4fpkt"];
2987--8131[label="0.09;9pkt 9fpkt"];
2987--8180[label="0.09;9pkt 9fpkt"];
2987--8219[label="0.09;9pkt 9fpkt"];
7237--8031[label="0.125;2pkt 2fpkt"];
7237--9531[label="1;2pkt 2fpkt"];
7237--11268[label="1;2pkt 2fpkt"];
9531--11268[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.2.244" src_ip="41.168.42.201" src_port="80"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
2144[label="133.72.18.16;s;2pkt 2fpkt", shape=diamond, color=yellow];
2235[label="5.155.238.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
8415[label="133.72.18.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10738[label="133.72.18.16;1pkt 1fpkt", shape=invtriangle, color=brown];
11882[label="133.72.18.16;2pkt 2fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.18.16:80, 5.155.238.2:33417}[50%]&lt;BR/&gt;{133.72.18.16:80, 5.155.238.2:33418}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33418: (31.25%)&lt;BR/&gt; 33417: (18.75%)&gt;];
}
2144--2235[label="1;2pkt 2fpkt"];
2144--8415[label="1;1pkt 1fpkt"];
2144--10738[label="1;1pkt 1fpkt"];
2144--11882[label="1;2pkt 2fpkt"];
2235--8415[label="1;1pkt 1fpkt"];
2235--10738[label="1;1pkt 1fpkt"];
2235--11882[label="1;2pkt 2fpkt"];
8415--10738[label="1;1pkt 1fpkt"];
8415--11882[label="1;1pkt 1fpkt"];
10738--11882[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="5.155.238.2" dst_port="33418" src_ip="133.72.18.16" src_port="80"/>
      <filter dst_ip="5.155.238.2" dst_port="33417" src_ip="133.72.18.16" src_port="80"/>
    </slice>
    <from sec="1229058075" usec="0"/>
    <to sec="1229058219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
2159[label="133.72.162.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
2266[label="42.236.33.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.33.32:80, 133.72.162.196:3712}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3712: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2159--2266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.162.196" dst_port="3712" src_ip="42.236.33.32" src_port="80"/>
    </slice>
    <from sec="1229058107" usec="0"/>
    <to sec="1229058363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
2267[label="128.64.43.192;d;7pkt 7fpkt", shape=diamond, color=yellow];
2302[label="101.84.16.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
5687[label="128.64.43.192;d;7pkt 7fpkt", shape=hexagon, color=black];
5695[label="101.84.16.198;s;1pkt 1fpkt", shape=hexagon, color=black];
7843[label="128.64.43.192;d;7pkt 7fpkt", shape=polygon, color=gold];
7844[label="101.84.16.198;s;1pkt 1fpkt", shape=polygon, color=gold];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.84.16.219:80, 128.64.43.192:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2749: (12.5%)&lt;BR/&gt; 2747: (6.25%)&lt;BR/&gt; 2723: (6.25%)&lt;BR/&gt; 2707: (6.25%)&gt;];
}
2267--2302[label="1;1pkt 1fpkt"];
2267--5687[label="1;7pkt 7fpkt"];
2267--5695[label="1;1pkt 1fpkt"];
2267--7843[label="1;7pkt 7fpkt"];
2267--7844[label="1;1pkt 1fpkt"];
2267--10372[label="0.714286;5pkt 5fpkt"];
2302--5687[label="1;1pkt 1fpkt"];
2302--5695[label="1;1pkt 1fpkt"];
2302--7843[label="1;1pkt 1fpkt"];
2302--7844[label="1;1pkt 1fpkt"];
5687--5695[label="1;1pkt 1fpkt"];
5687--7843[label="1;7pkt 7fpkt"];
5687--7844[label="1;1pkt 1fpkt"];
5687--10372[label="0.714286;5pkt 5fpkt"];
5695--7843[label="1;1pkt 1fpkt"];
5695--7844[label="1;1pkt 1fpkt"];
7843--7844[label="1;1pkt 1fpkt"];
7843--10372[label="0.714286;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.43.192" src_ip="101.84.16.219" src_port="80"/>
    </slice>
    <from sec="1229058215" usec="0"/>
    <to sec="1229058302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
304[label="169.18.168.241;d;556pkt 556fpkt", shape=diamond, color=yellow];
916[label="169.18.168.240;d;994pkt 994fpkt", shape=diamond, color=yellow];
2303[label="46.35.235.75;s;7pkt 7fpkt", shape=diamond, color=yellow];
2314[label="40.190.240.165;s;7pkt 7fpkt", shape=diamond, color=yellow];
2343[label="34.60.76.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
2433[label="192.22.138.99;s;183pkt 183fpkt", shape=diamond, color=yellow];
2769[label="33.176.229.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
2905[label="169.18.166.137;d;289pkt 289fpkt", shape=diamond, color=yellow];
3082[label="32.225.214.69;s;71pkt 71fpkt", shape=diamond, color=yellow];
4557[label="203.6.59.126;s;41pkt 41fpkt", shape=diamond, color=yellow];
4783[label="32.224.211.167;s;80pkt 80fpkt", shape=diamond, color=yellow];
4821[label="169.18.168.241;d;556pkt 556fpkt", shape=hexagon, color=black];
5014[label="169.18.168.240;d;721pkt 721fpkt", shape=hexagon, color=black];
5967[label="33.176.229.194;s;1pkt 1fpkt", shape=hexagon, color=black];
6077[label="169.18.166.137;d;257pkt 257fpkt", shape=hexagon, color=black];
6222[label="40.190.240.165;s;7pkt 7fpkt", shape=hexagon, color=black];
6421[label="203.72.63.1;s;60pkt 60fpkt", shape=hexagon, color=black];
6813[label="192.22.138.99;s;183pkt 183fpkt", shape=hexagon, color=black];
6841[label="41.142.25.98;s;22pkt 22fpkt", shape=hexagon, color=black];
7453[label="41.142.25.107;s;23pkt 23fpkt", shape=hexagon, color=black];
7552[label="203.6.59.126;s;41pkt 41fpkt", shape=hexagon, color=black];
7766[label="32.224.211.167;s;80pkt 80fpkt", shape=hexagon, color=black];
8086[label="203.6.59.126;s;41pkt 41fpkt", shape=polygon, color=gold];
8496[label="44.77.30.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9084[label="46.35.235.75;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9091[label="34.60.76.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9209[label="216.93.21.87;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9245[label="41.99.118.91;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9305[label="41.142.25.98;22pkt 22fpkt", shape=pentagon, color=darkviolet];
9412[label="41.142.25.107;23pkt 23fpkt", shape=pentagon, color=darkviolet];
9651[label="33.176.101.135;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9802[label="34.61.46.149;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9929[label="40.190.240.165;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10166[label="33.176.229.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10279[label="40.190.205.207;31pkt 31fpkt", shape=pentagon, color=darkviolet];
10538[label="32.227.58.240;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10565[label="46.33.24.244;39pkt 39fpkt", shape=pentagon, color=darkviolet];
11170[label="41.142.25.98;22pkt 22fpkt", shape=invtriangle, color=brown];
11602[label="33.176.229.194;2pkt 2fpkt", shape=invtriangle, color=brown];
11667[label="40.190.205.207;31pkt 31fpkt", shape=invtriangle, color=brown];
11802[label="32.227.58.240;22pkt 22fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 169.18.168.240:0}[26.8366%]&lt;BR/&gt;{*:80, 169.18.168.241:*}[25.3373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1877%)&lt;BR/&gt; 0: (21.6656%)&lt;BR/&gt; 53: (6.07882%)&lt;BR/&gt; 2265: (5.41082%)&lt;BR/&gt; 443: (3.96348%)&gt;];
}
304--2303[label="0.571429;4pkt 4fpkt"];
304--2314[label="0.428571;3pkt 3fpkt"];
304--2382[label="0.030303;1pkt 1fpkt"];
304--2433[label="0.595628;109pkt 109fpkt"];
304--2769[label="0.5;1pkt 1fpkt"];
304--3082[label="0.577465;41pkt 41fpkt"];
304--3312[label="0.0625;1pkt 1fpkt"];
304--3343[label="0.0454545;1pkt 1fpkt"];
304--4160[label="0.142857;2pkt 2fpkt"];
304--4783[label="0.7125;57pkt 57fpkt"];
304--4821[label="1;556pkt 556fpkt"];
304--5967[label="1;1pkt 1fpkt"];
304--6016[label="0.030303;1pkt 1fpkt"];
304--6222[label="0.428571;3pkt 3fpkt"];
304--6813[label="0.595628;109pkt 109fpkt"];
304--6817[label="0.0625;1pkt 1fpkt"];
304--6841[label="0.0454545;1pkt 1fpkt"];
304--7766[label="0.7125;57pkt 57fpkt"];
304--8131[label="0.0233813;13pkt 13fpkt"];
304--8132[label="0.00899281;5pkt 5fpkt"];
304--8180[label="0.0233813;13pkt 13fpkt"];
304--8181[label="0.00899281;5pkt 5fpkt"];
304--8219[label="0.0233813;13pkt 13fpkt"];
304--8220[label="0.00899281;5pkt 5fpkt"];
304--9073[label="0.387097;12pkt 12fpkt"];
304--9084[label="0.5;3pkt 3fpkt"];
304--9305[label="0.0454545;1pkt 1fpkt"];
304--9651[label="0.8;8pkt 8fpkt"];
304--9802[label="0.666667;4pkt 4fpkt"];
304--9929[label="0.428571;3pkt 3fpkt"];
304--10166[label="0.5;1pkt 1fpkt"];
304--10279[label="1;31pkt 31fpkt"];
304--10538[label="1;22pkt 22fpkt"];
304--10565[label="0.230769;9pkt 9fpkt"];
304--11059[label="0.387097;12pkt 12fpkt"];
304--11170[label="0.0454545;1pkt 1fpkt"];
304--11602[label="0.5;1pkt 1fpkt"];
304--11667[label="1;31pkt 31fpkt"];
304--11802[label="1;22pkt 22fpkt"];
916--1023[label="0.00235294;1pkt 1fpkt"];
916--1055[label="0.00127389;1pkt 1fpkt"];
916--1323[label="0.00704225;1pkt 1fpkt"];
916--1927[label="0.5;1pkt 1fpkt"];
916--2011[label="0.0333333;1pkt 1fpkt"];
916--2029[label="0.00571429;1pkt 1fpkt"];
916--2303[label="0.428571;3pkt 3fpkt"];
916--2314[label="0.285714;2pkt 2fpkt"];
916--2343[label="1;1pkt 1fpkt"];
916--2382[label="0.0606061;2pkt 2fpkt"];
916--2400[label="0.00387597;1pkt 1fpkt"];
916--2433[label="0.404372;74pkt 74fpkt"];
916--2496[label="0.0149254;1pkt 1fpkt"];
916--2670[label="0.5;1pkt 1fpkt"];
916--3082[label="0.422535;30pkt 30fpkt"];
916--3321[label="0.0144928;1pkt 1fpkt"];
916--3343[label="0.0454545;1pkt 1fpkt"];
916--3753[label="0.0434783;1pkt 1fpkt"];
916--3764[label="0.0555556;1pkt 1fpkt"];
916--4159[label="0.0107527;1pkt 1fpkt"];
916--4216[label="0.00854701;1pkt 1fpkt"];
916--4233[label="0.00990099;1pkt 1fpkt"];
916--4478[label="0.01;1pkt 1fpkt"];
916--4501[label="0.0192308;1pkt 1fpkt"];
916--4557[label="0.0487805;2pkt 2fpkt"];
916--4783[label="0.2875;23pkt 23fpkt"];
916--5014[label="1;721pkt 721fpkt"];
916--5781[label="0.00515464;1pkt 1fpkt"];
916--5852[label="0.0103093;1pkt 1fpkt"];
916--6016[label="0.0606061;2pkt 2fpkt"];
916--6222[label="0.285714;2pkt 2fpkt"];
916--6406[label="0.5;1pkt 1fpkt"];
916--6421[label="0.0166667;1pkt 1fpkt"];
916--6481[label="0.0333333;1pkt 1fpkt"];
916--6487[label="0.00141243;1pkt 1fpkt"];
916--6813[label="0.404372;74pkt 74fpkt"];
916--6841[label="0.0454545;1pkt 1fpkt"];
916--6845[label="0.0555556;1pkt 1fpkt"];
916--7453[label="0.0434783;1pkt 1fpkt"];
916--7466[label="0.00235294;1pkt 1fpkt"];
916--7494[label="0.0107527;1pkt 1fpkt"];
916--7552[label="0.0487805;2pkt 2fpkt"];
916--7607[label="0.5;1pkt 1fpkt"];
916--7766[label="0.2875;23pkt 23fpkt"];
916--8035[label="0.00141243;1pkt 1fpkt"];
916--8086[label="0.0487805;2pkt 2fpkt"];
916--8131[label="0.0291751;29pkt 29fpkt"];
916--8132[label="0.00804829;8pkt 8fpkt"];
916--8180[label="0.0291751;29pkt 29fpkt"];
916--8181[label="0.00804829;8pkt 8fpkt"];
916--8219[label="0.0291751;29pkt 29fpkt"];
916--8220[label="0.00804829;8pkt 8fpkt"];
916--8391[label="0.0714286;1pkt 1fpkt"];
916--8496[label="0.333333;1pkt 1fpkt"];
916--8563[label="0.0140845;1pkt 1fpkt"];
916--8567[label="0.5;1pkt 1fpkt"];
916--9073[label="0.258065;8pkt 8fpkt"];
916--9084[label="0.5;3pkt 3fpkt"];
916--9091[label="1;1pkt 1fpkt"];
916--9209[label="0.0714286;1pkt 1fpkt"];
916--9245[label="0.2;1pkt 1fpkt"];
916--9305[label="0.0454545;1pkt 1fpkt"];
916--9412[label="0.0434783;1pkt 1fpkt"];
916--9542[label="0.025641;1pkt 1fpkt"];
916--9651[label="0.2;2pkt 2fpkt"];
916--9740[label="0.0232558;1pkt 1fpkt"];
916--9802[label="0.333333;2pkt 2fpkt"];
916--9929[label="0.285714;2pkt 2fpkt"];
916--10053[label="0.0169492;1pkt 1fpkt"];
916--10178[label="1;1pkt 1fpkt"];
916--10396[label="0.142857;1pkt 1fpkt"];
916--10526[label="0.00970874;1pkt 1fpkt"];
916--10565[label="0.769231;30pkt 30fpkt"];
916--10580[label="0.0416667;1pkt 1fpkt"];
916--10620[label="0.0163934;1pkt 1fpkt"];
916--10801[label="0.0140845;1pkt 1fpkt"];
916--11059[label="0.258065;8pkt 8fpkt"];
916--11170[label="0.0454545;1pkt 1fpkt"];
916--11272[label="0.025641;1pkt 1fpkt"];
916--11532[label="0.0169492;1pkt 1fpkt"];
916--11725[label="0.142857;1pkt 1fpkt"];
916--11798[label="0.00970874;1pkt 1fpkt"];
916--11818[label="0.0416667;1pkt 1fpkt"];
916--12192[label="0.0169492;1pkt 1fpkt"];
2303--4821[label="0.571429;4pkt 4fpkt"];
2303--5014[label="0.428571;3pkt 3fpkt"];
2303--9084[label="1;6pkt 6fpkt"];
2314--4821[label="0.428571;3pkt 3fpkt"];
2314--5014[label="0.285714;2pkt 2fpkt"];
2314--6222[label="1;7pkt 7fpkt"];
2314--7134[label="0.285714;2pkt 2fpkt"];
2314--9929[label="0.857143;6pkt 6fpkt"];
2343--5014[label="1;1pkt 1fpkt"];
2343--9091[label="1;1pkt 1fpkt"];
2433--4821[label="0.595628;109pkt 109fpkt"];
2433--5014[label="0.245902;45pkt 45fpkt"];
2433--6813[label="1;183pkt 183fpkt"];
2433--8131[label="0.0327869;6pkt 6fpkt"];
2433--8180[label="0.0327869;6pkt 6fpkt"];
2433--8219[label="0.0327869;6pkt 6fpkt"];
2769--4821[label="0.5;1pkt 1fpkt"];
2769--5175[label="0.5;1pkt 1fpkt"];
2769--5967[label="1;1pkt 1fpkt"];
2769--10166[label="1;2pkt 2fpkt"];
2769--11602[label="1;2pkt 2fpkt"];
2905--3290[label="0.00346021;1pkt 1fpkt"];
2905--6074[label="0.00346021;1pkt 1fpkt"];
2905--6077[label="1;257pkt 257fpkt"];
2905--6408[label="0.00346021;1pkt 1fpkt"];
2905--7161[label="0.00346021;1pkt 1fpkt"];
2905--8153[label="0.00692042;2pkt 2fpkt"];
2905--8164[label="0.00346021;1pkt 1fpkt"];
2905--8196[label="0.00692042;2pkt 2fpkt"];
2905--8207[label="0.00346021;1pkt 1fpkt"];
2905--8229[label="0.00692042;2pkt 2fpkt"];
2905--8240[label="0.00346021;1pkt 1fpkt"];
2905--8639[label="0.00465116;1pkt 1fpkt"];
2905--8715[label="0.0108696;1pkt 1fpkt"];
2905--8955[label="0.00609756;1pkt 1fpkt"];
2905--9185[label="0.00769231;1pkt 1fpkt"];
2905--9210[label="0.00346021;1pkt 1fpkt"];
2905--9929[label="0.142857;1pkt 1fpkt"];
3082--4821[label="0.577465;41pkt 41fpkt"];
3082--5014[label="0.422535;30pkt 30fpkt"];
4557--5014[label="0.0487805;2pkt 2fpkt"];
4557--5070[label="0.0243902;1pkt 1fpkt"];
4557--5175[label="0.121951;5pkt 5fpkt"];
4557--5750[label="0.0487805;2pkt 2fpkt"];
4557--6174[label="0.0487805;2pkt 2fpkt"];
4557--6200[label="0.0384615;1pkt 1fpkt"];
4557--6596[label="0.0243902;1pkt 1fpkt"];
4557--7552[label="1;41pkt 41fpkt"];
4557--8086[label="1;41pkt 41fpkt"];
4783--4821[label="0.7125;57pkt 57fpkt"];
4783--7766[label="1;80pkt 80fpkt"];
4821--5967[label="1;1pkt 1fpkt"];
4821--6016[label="0.030303;1pkt 1fpkt"];
4821--6222[label="0.428571;3pkt 3fpkt"];
4821--6813[label="0.595628;109pkt 109fpkt"];
4821--6817[label="0.0625;1pkt 1fpkt"];
4821--6841[label="0.0454545;1pkt 1fpkt"];
4821--7766[label="0.7125;57pkt 57fpkt"];
4821--8131[label="0.0233813;13pkt 13fpkt"];
4821--8132[label="0.00899281;5pkt 5fpkt"];
4821--8180[label="0.0233813;13pkt 13fpkt"];
4821--8181[label="0.00899281;5pkt 5fpkt"];
4821--8219[label="0.0233813;13pkt 13fpkt"];
4821--8220[label="0.00899281;5pkt 5fpkt"];
4821--9073[label="0.387097;12pkt 12fpkt"];
4821--9084[label="0.5;3pkt 3fpkt"];
4821--9305[label="0.0454545;1pkt 1fpkt"];
4821--9651[label="0.8;8pkt 8fpkt"];
4821--9802[label="0.666667;4pkt 4fpkt"];
4821--9929[label="0.428571;3pkt 3fpkt"];
4821--10166[label="0.5;1pkt 1fpkt"];
4821--10279[label="1;31pkt 31fpkt"];
4821--10538[label="1;22pkt 22fpkt"];
4821--10565[label="0.230769;9pkt 9fpkt"];
4821--11059[label="0.387097;12pkt 12fpkt"];
4821--11170[label="0.0454545;1pkt 1fpkt"];
4821--11602[label="0.5;1pkt 1fpkt"];
4821--11667[label="1;31pkt 31fpkt"];
4821--11802[label="1;22pkt 22fpkt"];
5014--5781[label="0.00515464;1pkt 1fpkt"];
5014--5852[label="0.0103093;1pkt 1fpkt"];
5014--6016[label="0.0606061;2pkt 2fpkt"];
5014--6222[label="0.285714;2pkt 2fpkt"];
5014--6406[label="0.5;1pkt 1fpkt"];
5014--6421[label="0.0166667;1pkt 1fpkt"];
5014--6481[label="0.0333333;1pkt 1fpkt"];
5014--6487[label="0.00141243;1pkt 1fpkt"];
5014--6813[label="0.245902;45pkt 45fpkt"];
5014--6841[label="0.0454545;1pkt 1fpkt"];
5014--6845[label="0.0555556;1pkt 1fpkt"];
5014--7453[label="0.0434783;1pkt 1fpkt"];
5014--7466[label="0.00235294;1pkt 1fpkt"];
5014--7494[label="0.0107527;1pkt 1fpkt"];
5014--7552[label="0.0487805;2pkt 2fpkt"];
5014--7607[label="0.5;1pkt 1fpkt"];
5014--8035[label="0.00141243;1pkt 1fpkt"];
5014--8086[label="0.0487805;2pkt 2fpkt"];
5014--8131[label="0.0402219;29pkt 29fpkt"];
5014--8132[label="0.0110957;8pkt 8fpkt"];
5014--8180[label="0.0402219;29pkt 29fpkt"];
5014--8181[label="0.0110957;8pkt 8fpkt"];
5014--8219[label="0.0402219;29pkt 29fpkt"];
5014--8220[label="0.0110957;8pkt 8fpkt"];
5014--8391[label="0.0714286;1pkt 1fpkt"];
5014--8496[label="0.333333;1pkt 1fpkt"];
5014--8567[label="0.5;1pkt 1fpkt"];
5014--9073[label="0.16129;5pkt 5fpkt"];
5014--9084[label="0.5;3pkt 3fpkt"];
5014--9091[label="1;1pkt 1fpkt"];
5014--9209[label="0.0714286;1pkt 1fpkt"];
5014--9245[label="0.2;1pkt 1fpkt"];
5014--9305[label="0.0454545;1pkt 1fpkt"];
5014--9412[label="0.0434783;1pkt 1fpkt"];
5014--9542[label="0.025641;1pkt 1fpkt"];
5014--9651[label="0.2;2pkt 2fpkt"];
5014--9802[label="0.333333;2pkt 2fpkt"];
5014--9929[label="0.285714;2pkt 2fpkt"];
5014--10053[label="0.0169492;1pkt 1fpkt"];
5014--10178[label="1;1pkt 1fpkt"];
5014--10526[label="0.00970874;1pkt 1fpkt"];
5014--10565[label="0.666667;26pkt 26fpkt"];
5014--10580[label="0.0416667;1pkt 1fpkt"];
5014--10620[label="0.0163934;1pkt 1fpkt"];
5014--11059[label="0.16129;5pkt 5fpkt"];
5014--11170[label="0.0454545;1pkt 1fpkt"];
5014--11272[label="0.025641;1pkt 1fpkt"];
5014--11532[label="0.0169492;1pkt 1fpkt"];
5014--11798[label="0.00970874;1pkt 1fpkt"];
5014--11818[label="0.0416667;1pkt 1fpkt"];
5014--12192[label="0.0169492;1pkt 1fpkt"];
5967--10166[label="1;1pkt 1fpkt"];
5967--11602[label="1;1pkt 1fpkt"];
6077--6408[label="0.00389105;1pkt 1fpkt"];
6077--7161[label="0.00389105;1pkt 1fpkt"];
6077--8715[label="0.0108696;1pkt 1fpkt"];
6077--8955[label="0.00609756;1pkt 1fpkt"];
6077--9185[label="0.00769231;1pkt 1fpkt"];
6077--9210[label="0.00389105;1pkt 1fpkt"];
6222--7134[label="0.285714;2pkt 2fpkt"];
6222--9929[label="0.857143;6pkt 6fpkt"];
6421--7371[label="0.766667;46pkt 46fpkt"];
6421--8131[label="0.0166667;1pkt 1fpkt"];
6421--8180[label="0.0166667;1pkt 1fpkt"];
6421--8219[label="0.0166667;1pkt 1fpkt"];
6813--8131[label="0.0327869;6pkt 6fpkt"];
6813--8180[label="0.0327869;6pkt 6fpkt"];
6813--8219[label="0.0327869;6pkt 6fpkt"];
6841--8132[label="0.863636;19pkt 19fpkt"];
6841--8181[label="0.863636;19pkt 19fpkt"];
6841--8220[label="0.863636;19pkt 19fpkt"];
6841--9305[label="1;22pkt 22fpkt"];
6841--11170[label="1;22pkt 22fpkt"];
7453--8132[label="0.73913;17pkt 17fpkt"];
7453--8181[label="0.73913;17pkt 17fpkt"];
7453--8220[label="0.73913;17pkt 17fpkt"];
7453--9412[label="1;23pkt 23fpkt"];
7552--8086[label="1;41pkt 41fpkt"];
9305--11170[label="1;22pkt 22fpkt"];
10166--11602[label="1;2pkt 2fpkt"];
10279--11667[label="1;31pkt 31fpkt"];
10538--11802[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.168.241" src_port="80"/>
      <filter dst_ip="169.18.168.240"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2355[label="195.254.59.217;s;5pkt 5fpkt", shape=diamond, color=yellow];
2356[label="133.72.177.18;d;5pkt 5fpkt", shape=diamond, color=yellow];
5960[label="133.72.177.18;d;5pkt 5fpkt", shape=hexagon, color=black];
10349[label="195.254.59.217;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11704[label="195.254.59.217;5pkt 5fpkt", shape=invtriangle, color=brown];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.254.59.217:80, 133.72.177.18:4049}[20%]&lt;BR/&gt;{195.254.59.217:80, 133.72.177.18:4051}[20%]&lt;BR/&gt;{195.254.59.217:80, 133.72.177.18:4053}[20%]&lt;BR/&gt;{195.254.59.217:80, 133.72.177.18:4055}[20%]&lt;BR/&gt;{195.254.59.217:80, 133.72.177.18:4057}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4057: (10%)&lt;BR/&gt; 4055: (10%)&lt;BR/&gt; 4053: (10%)&lt;BR/&gt; 4051: (10%)&gt;];
}
2355--2356[label="1;5pkt 5fpkt"];
2355--5960[label="1;5pkt 5fpkt"];
2355--10349[label="1;5pkt 5fpkt"];
2355--11704[label="1;5pkt 5fpkt"];
2356--5960[label="1;5pkt 5fpkt"];
2356--10349[label="1;5pkt 5fpkt"];
2356--11704[label="1;5pkt 5fpkt"];
5960--10349[label="1;5pkt 5fpkt"];
5960--11704[label="1;5pkt 5fpkt"];
10349--11704[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.177.18" dst_port="4057" src_ip="195.254.59.217" src_port="80"/>
      <filter dst_ip="133.72.177.18" dst_port="4055" src_ip="195.254.59.217" src_port="80"/>
      <filter dst_ip="133.72.177.18" dst_port="4053" src_ip="195.254.59.217" src_port="80"/>
      <filter dst_ip="133.72.177.18" dst_port="4051" src_ip="195.254.59.217" src_port="80"/>
      <filter dst_ip="133.72.177.18" dst_port="4049" src_ip="195.254.59.217" src_port="80"/>
    </slice>
    <from sec="1229058275" usec="0"/>
    <to sec="1229058317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.72.61.139"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058825" usec="0"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
587[label="128.208.233.26;s;203pkt 203fpkt", shape=diamond, color=yellow];
1978[label="43.10.64.105;d;6pkt 6fpkt", shape=diamond, color=yellow];
2377[label="101.225.20.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
3101[label="55.115.19.83;d;9pkt 9fpkt", shape=diamond, color=yellow];
6099[label="43.10.64.105;d;6pkt 6fpkt", shape=hexagon, color=black];
6230[label="55.115.19.83;d;9pkt 9fpkt", shape=hexagon, color=black];
8554[label="128.208.233.26;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10798[label="128.208.233.26;3pkt 3fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.233.26:*, 222.160.112.162:80}[35.468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.875%)&lt;BR/&gt; 443: (9.58333%)&lt;BR/&gt; 8601: (1.25%)&lt;BR/&gt; 3020: (1.04167%)&lt;BR/&gt; 1973: (1.04167%)&gt;];
}
587--1598[label="0.0106952;2pkt 2fpkt"];
587--1978[label="1;6pkt 6fpkt"];
587--2023[label="0.00492611;1pkt 1fpkt"];
587--2377[label="1;1pkt 1fpkt"];
587--2901[label="0.03125;3pkt 3fpkt"];
587--3101[label="1;9pkt 9fpkt"];
587--3430[label="1;27pkt 27fpkt"];
587--3458[label="0.0247934;3pkt 3fpkt"];
587--3537[label="0.247525;25pkt 25fpkt"];
587--3796[label="1;73pkt 73fpkt"];
587--5571[label="0.00492611;1pkt 1fpkt"];
587--6099[label="1;6pkt 6fpkt"];
587--6230[label="1;9pkt 9fpkt"];
587--6420[label="0.0344828;2pkt 2fpkt"];
587--6542[label="0.0155039;2pkt 2fpkt"];
587--6561[label="0.0322581;3pkt 3fpkt"];
587--6869[label="1;73pkt 73fpkt"];
587--6995[label="0.247525;25pkt 25fpkt"];
587--7546[label="1;27pkt 27fpkt"];
587--7958[label="0.0155039;2pkt 2fpkt"];
587--8119[label="0.0295567;6pkt 6fpkt"];
587--8134[label="0.0492611;10pkt 10fpkt"];
587--8154[label="0.00985222;2pkt 2fpkt"];
587--8165[label="0.00985222;2pkt 2fpkt"];
587--8198[label="0.00985222;2pkt 2fpkt"];
587--8208[label="0.00985222;2pkt 2fpkt"];
587--8231[label="0.00985222;2pkt 2fpkt"];
587--8241[label="0.00985222;2pkt 2fpkt"];
587--8554[label="1;3pkt 3fpkt"];
587--10798[label="1;3pkt 3fpkt"];
1978--6099[label="1;6pkt 6fpkt"];
1978--8554[label="0.333333;1pkt 1fpkt"];
1978--10798[label="0.333333;1pkt 1fpkt"];
2377--8554[label="1;1pkt 1fpkt"];
2377--10798[label="1;1pkt 1fpkt"];
3101--6230[label="1;9pkt 9fpkt"];
6099--8554[label="0.333333;1pkt 1fpkt"];
6099--10798[label="0.333333;1pkt 1fpkt"];
8554--10798[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="222.160.112.162" dst_port="80" src_ip="128.208.233.26"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
2420[label="128.87.90.222;d;226pkt 226fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 128.87.90.222:54464}[69.0265%]&lt;BR/&gt;{*:*, 128.87.90.222:53}[27.8761%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.6726%)&lt;BR/&gt; 54464: (34.5133%)&lt;BR/&gt; 0: (0.884956%)&lt;BR/&gt; 33436: (0.442478%)&lt;BR/&gt; 10088: (0.442478%)&gt;];
}
2420--2447[label="0.00442478;1pkt 1fpkt"];
2420--2478[label="0.00442478;1pkt 1fpkt"];
2420--2892[label="0.00442478;1pkt 1fpkt"];
2420--3290[label="0.00442478;1pkt 1fpkt"];
2420--3736[label="0.00442478;1pkt 1fpkt"];
2420--4166[label="0.00442478;1pkt 1fpkt"];
2420--4493[label="0.00442478;1pkt 1fpkt"];
2420--4509[label="0.00442478;1pkt 1fpkt"];
2420--6074[label="0.00442478;1pkt 1fpkt"];
2420--6408[label="0.00442478;1pkt 1fpkt"];
2420--6453[label="0.00442478;1pkt 1fpkt"];
2420--6820[label="0.00442478;1pkt 1fpkt"];
2420--7161[label="0.00442478;1pkt 1fpkt"];
2420--7500[label="0.00442478;1pkt 1fpkt"];
2420--8639[label="0.00465116;1pkt 1fpkt"];
2420--8697[label="0.00512821;1pkt 1fpkt"];
2420--8724[label="0.00442478;1pkt 1fpkt"];
2420--8916[label="0.00543478;1pkt 1fpkt"];
2420--8974[label="0.00442478;1pkt 1fpkt"];
2420--9234[label="0.00653595;1pkt 1fpkt"];
2420--10035[label="0.00934579;1pkt 1fpkt"];
2420--10868[label="0.00515464;1pkt 1fpkt"];
2420--10984[label="0.00543478;1pkt 1fpkt"];
2420--11977[label="0.00543478;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.222" dst_port="53"/>
      <filter dst_ip="128.87.90.222" dst_port="54464" src_port="53"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
1498[label="133.72.218.102;s;78pkt 78fpkt", shape=diamond, color=yellow];
2459[label="1.92.87.107;d;10pkt 10fpkt", shape=diamond, color=yellow];
4560[label="206.17.209.247;d;2pkt 2fpkt", shape=diamond, color=yellow];
6432[label="1.92.87.107;d;10pkt 10fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.218.102:63309, *:*}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63309: (48.5%)&lt;BR/&gt; 38625: (1.5%)&lt;BR/&gt; 38579: (1.5%)&lt;BR/&gt; 38555: (1.5%)&lt;BR/&gt; 38536: (1.5%)&gt;];
}
1498--2459[label="1;10pkt 10fpkt"];
1498--4560[label="1;2pkt 2fpkt"];
1498--6432[label="1;10pkt 10fpkt"];
2459--6432[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.218.102" src_port="63309"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.64.206.67"/>
      <from sec="1229058001" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
362[label="128.87.90.182;d;740pkt 740fpkt", shape=diamond, color=yellow];
363[label="197.30.228.71;s;2pkt 2fpkt", shape=diamond, color=yellow];
1115[label="128.87.90.176;d;360pkt 360fpkt", shape=diamond, color=yellow];
1144[label="194.184.244.95;s;4pkt 4fpkt", shape=diamond, color=yellow];
1187[label="0.169.139.107;s;5pkt 5fpkt", shape=diamond, color=yellow];
1190[label="214.7.36.88;s;20pkt 20fpkt", shape=diamond, color=yellow];
1271[label="4.250.162.28;s;66pkt 66fpkt", shape=diamond, color=yellow];
3192[label="97.163.2.26;s;10pkt 10fpkt", shape=diamond, color=yellow];
3578[label="4.250.162.24;s;10pkt 10fpkt", shape=diamond, color=yellow];
4248[label="4.250.163.3;s;20pkt 20fpkt", shape=diamond, color=yellow];
4584[label="4.250.163.41;s;25pkt 25fpkt", shape=diamond, color=yellow];
4835[label="197.30.228.71;s;2pkt 2fpkt", shape=hexagon, color=black];
5090[label="0.169.139.107;s;11pkt 11fpkt", shape=hexagon, color=black];
5092[label="214.7.36.88;s;16pkt 16fpkt", shape=hexagon, color=black];
5120[label="4.250.162.28;s;66pkt 66fpkt", shape=hexagon, color=black];
5723[label="128.87.90.182;d;740pkt 740fpkt", shape=hexagon, color=black];
6149[label="214.241.3.43;s;64pkt 64fpkt", shape=hexagon, color=black];
7014[label="100.176.19.27;s;7pkt 7fpkt", shape=hexagon, color=black];
8243[label="216.254.24.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8322[label="96.99.141.6;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8372[label="195.40.24.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8469[label="0.169.163.19;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8520[label="197.30.229.23;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8522[label="195.40.46.24;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8569[label="4.250.162.28;66pkt 66fpkt", shape=pentagon, color=darkviolet];
8582[label="4.250.162.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8701[label="0.169.164.40;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8729[label="195.40.35.43;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8821[label="211.198.62.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9220[label="214.7.36.88;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9330[label="4.250.165.99;89pkt 89fpkt", shape=pentagon, color=darkviolet];
9552[label="205.242.251.122;46pkt 46fpkt", shape=pentagon, color=darkviolet];
9722[label="4.250.162.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9821[label="101.184.79.152;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9903[label="223.69.225.162;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9980[label="204.64.98.170;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10254[label="208.251.71.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10639[label="216.254.24.0;8pkt 8fpkt", shape=invtriangle, color=brown];
10678[label="96.99.141.6;13pkt 13fpkt", shape=invtriangle, color=brown];
10761[label="0.169.163.19;42pkt 42fpkt", shape=invtriangle, color=brown];
10780[label="195.40.46.24;25pkt 25fpkt", shape=invtriangle, color=brown];
10804[label="4.250.162.28;66pkt 66fpkt", shape=invtriangle, color=brown];
10812[label="4.250.162.30;3pkt 3fpkt", shape=invtriangle, color=brown];
10871[label="0.169.164.40;18pkt 18fpkt", shape=invtriangle, color=brown];
10886[label="195.40.35.43;24pkt 24fpkt", shape=invtriangle, color=brown];
10938[label="211.198.62.52;1pkt 1fpkt", shape=invtriangle, color=brown];
11127[label="214.7.36.88;20pkt 20fpkt", shape=invtriangle, color=brown];
11184[label="4.250.165.99;89pkt 89fpkt", shape=invtriangle, color=brown];
11280[label="205.242.251.122;46pkt 46fpkt", shape=invtriangle, color=brown];
11411[label="101.184.79.152;8pkt 8fpkt", shape=invtriangle, color=brown];
11841[label="216.254.24.0;9pkt 9fpkt", shape=invhouse, color=bisque];
11858[label="96.99.141.6;13pkt 13fpkt", shape=invhouse, color=bisque];
11936[label="195.40.35.43;23pkt 23fpkt", shape=invhouse, color=bisque];
11956[label="211.198.62.52;2pkt 2fpkt", shape=invhouse, color=bisque];
12047[label="4.250.165.99;89pkt 89fpkt", shape=invhouse, color=bisque];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.87.90.182:*}[58.8647%]&lt;BR/&gt;{*:80, 128.87.90.176:*}[27.3717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.432%)&lt;BR/&gt; 443: (0.340798%)&lt;BR/&gt; 50118: (0.146056%)&lt;BR/&gt; 554: (0.129828%)&lt;BR/&gt; 65347: (0.097371%)&gt;];
}
362--363[label="1;2pkt 2fpkt"];
362--436[label="0.031746;4pkt 4fpkt"];
362--1023[label="0.00235294;1pkt 1fpkt"];
362--1144[label="1;4pkt 4fpkt"];
362--1190[label="0.6;12pkt 12fpkt"];
362--1271[label="1;66pkt 66fpkt"];
362--1974[label="0.0517711;19pkt 19fpkt"];
362--2006[label="0.010101;1pkt 1fpkt"];
362--2066[label="0.159875;51pkt 51fpkt"];
362--2176[label="1;1pkt 1fpkt"];
362--2277[label="0.0106383;5pkt 5fpkt"];
362--2562[label="0.046875;3pkt 3fpkt"];
362--2987[label="0.03;3pkt 3fpkt"];
362--3003[label="0.213043;49pkt 49fpkt"];
362--3192[label="0.6;6pkt 6fpkt"];
362--3578[label="0.8;8pkt 8fpkt"];
362--3772[label="0.015873;1pkt 1fpkt"];
362--3896[label="0.909091;20pkt 20fpkt"];
362--4248[label="1;20pkt 20fpkt"];
362--4584[label="0.8;20pkt 20fpkt"];
362--4624[label="0.428571;3pkt 3fpkt"];
362--4835[label="1;2pkt 2fpkt"];
362--4857[label="0.0353982;4pkt 4fpkt"];
362--5090[label="0.454545;5pkt 5fpkt"];
362--5092[label="0.625;10pkt 10fpkt"];
362--5120[label="1;66pkt 66fpkt"];
362--5723[label="1;740pkt 740fpkt"];
362--6097[label="0.0559441;16pkt 16fpkt"];
362--6145[label="0.159875;51pkt 51fpkt"];
362--6149[label="0.046875;3pkt 3fpkt"];
362--6198[label="1;1pkt 1fpkt"];
362--6214[label="0.0106383;5pkt 5fpkt"];
362--7179[label="0.0105263;1pkt 1fpkt"];
362--7201[label="0.03;3pkt 3fpkt"];
362--7466[label="0.00235294;1pkt 1fpkt"];
362--7469[label="0.015873;1pkt 1fpkt"];
362--8031[label="0.0105263;1pkt 1fpkt"];
362--8131[label="0.183784;136pkt 136fpkt"];
362--8180[label="0.183784;136pkt 136fpkt"];
362--8219[label="0.183784;136pkt 136fpkt"];
362--8243[label="0.25;2pkt 2fpkt"];
362--8322[label="0.846154;11pkt 11fpkt"];
362--8372[label="1;3pkt 3fpkt"];
362--8469[label="0.0697674;3pkt 3fpkt"];
362--8520[label="0.142857;1pkt 1fpkt"];
362--8522[label="1;25pkt 25fpkt"];
362--8569[label="1;66pkt 66fpkt"];
362--8582[label="1;3pkt 3fpkt"];
362--8701[label="0.0555556;1pkt 1fpkt"];
362--8729[label="1;24pkt 24fpkt"];
362--9220[label="0.571429;12pkt 12fpkt"];
362--9330[label="0.764045;68pkt 68fpkt"];
362--9552[label="0.5;23pkt 23fpkt"];
362--9722[label="1;3pkt 3fpkt"];
362--9821[label="0.125;1pkt 1fpkt"];
362--9903[label="0.266667;4pkt 4fpkt"];
362--9980[label="0.333333;4pkt 4fpkt"];
362--9989[label="0.192157;49pkt 49fpkt"];
362--10254[label="0.25;2pkt 2fpkt"];
362--10579[label="0.5;3pkt 3fpkt"];
362--10639[label="0.25;2pkt 2fpkt"];
362--10678[label="0.846154;11pkt 11fpkt"];
362--10761[label="0.047619;2pkt 2fpkt"];
362--10780[label="1;25pkt 25fpkt"];
362--10804[label="1;66pkt 66fpkt"];
362--10812[label="1;3pkt 3fpkt"];
362--10871[label="0.0555556;1pkt 1fpkt"];
362--10886[label="1;24pkt 24fpkt"];
362--11127[label="0.6;12pkt 12fpkt"];
362--11184[label="0.764045;68pkt 68fpkt"];
362--11280[label="0.5;23pkt 23fpkt"];
362--11411[label="0.125;1pkt 1fpkt"];
362--11841[label="0.333333;3pkt 3fpkt"];
362--11858[label="0.846154;11pkt 11fpkt"];
362--11936[label="1;23pkt 23fpkt"];
362--12047[label="0.764045;68pkt 68fpkt"];
363--4835[label="1;2pkt 2fpkt"];
363--5723[label="1;2pkt 2fpkt"];
1115--1187[label="1;5pkt 5fpkt"];
1115--1190[label="0.25;5pkt 5fpkt"];
1115--1207[label="0.0344828;1pkt 1fpkt"];
1115--1291[label="0.0625;14pkt 14fpkt"];
1115--1394[label="0.0877193;5pkt 5fpkt"];
1115--1657[label="0.00613497;1pkt 1fpkt"];
1115--1974[label="0.0166667;6pkt 6fpkt"];
1115--2006[label="0.010101;1pkt 1fpkt"];
1115--2066[label="0.00940439;3pkt 3fpkt"];
1115--2578[label="0.0858896;14pkt 14fpkt"];
1115--3003[label="0.00434783;1pkt 1fpkt"];
1115--3192[label="0.4;4pkt 4fpkt"];
1115--3257[label="0.205882;7pkt 7fpkt"];
1115--3464[label="0.0923077;12pkt 12fpkt"];
1115--3772[label="0.0793651;5pkt 5fpkt"];
1115--3792[label="0.157895;3pkt 3fpkt"];
1115--3806[label="0.0697674;6pkt 6fpkt"];
1115--3924[label="0.179487;7pkt 7fpkt"];
1115--4273[label="0.26087;6pkt 6fpkt"];
1115--4435[label="0.2;1pkt 1fpkt"];
1115--4597[label="0.0588235;1pkt 1fpkt"];
1115--4624[label="0.142857;1pkt 1fpkt"];
1115--4857[label="0.0707965;8pkt 8fpkt"];
1115--5090[label="0.545455;6pkt 6fpkt"];
1115--5092[label="0.3125;5pkt 5fpkt"];
1115--5096[label="0.0344828;1pkt 1fpkt"];
1115--5893[label="0.00613497;1pkt 1fpkt"];
1115--6097[label="0.0104895;3pkt 3fpkt"];
1115--6145[label="0.00940439;3pkt 3fpkt"];
1115--6929[label="0.157895;12pkt 12fpkt"];
1115--7014[label="1;7pkt 7fpkt"];
1115--7128[label="0.0877193;5pkt 5fpkt"];
1115--7466[label="0.0138889;5pkt 5fpkt"];
1115--7469[label="0.0793651;5pkt 5fpkt"];
1115--7493[label="0.157895;3pkt 3fpkt"];
1115--7517[label="0.0758929;17pkt 17fpkt"];
1115--7605[label="0.0588235;1pkt 1fpkt"];
1115--8042[label="0.037037;1pkt 1fpkt"];
1115--8091[label="0.00613497;1pkt 1fpkt"];
1115--8131[label="0.0805556;29pkt 29fpkt"];
1115--8180[label="0.0805556;29pkt 29fpkt"];
1115--8219[label="0.0805556;29pkt 29fpkt"];
1115--8243[label="0.5;4pkt 4fpkt"];
1115--8322[label="0.153846;2pkt 2fpkt"];
1115--8351[label="0.0537634;5pkt 5fpkt"];
1115--8659[label="0.03125;1pkt 1fpkt"];
1115--8701[label="0.0555556;1pkt 1fpkt"];
1115--8821[label="0.5;1pkt 1fpkt"];
1115--8988[label="0.5;6pkt 6fpkt"];
1115--8989[label="0.12;3pkt 3fpkt"];
1115--9220[label="0.238095;5pkt 5fpkt"];
1115--9249[label="0.15;3pkt 3fpkt"];
1115--9552[label="0.195652;9pkt 9fpkt"];
1115--9903[label="0.733333;11pkt 11fpkt"];
1115--9980[label="0.0833333;1pkt 1fpkt"];
1115--9989[label="0.00392157;1pkt 1fpkt"];
1115--10254[label="0.75;6pkt 6fpkt"];
1115--10255[label="0.0745614;17pkt 17fpkt"];
1115--10304[label="0.5;1pkt 1fpkt"];
1115--10579[label="0.333333;2pkt 2fpkt"];
1115--10639[label="0.5;4pkt 4fpkt"];
1115--10678[label="0.153846;2pkt 2fpkt"];
1115--10871[label="0.0555556;1pkt 1fpkt"];
1115--11016[label="0.12;3pkt 3fpkt"];
1115--11127[label="0.25;5pkt 5fpkt"];
1115--11139[label="0.15;3pkt 3fpkt"];
1115--11280[label="0.195652;9pkt 9fpkt"];
1115--11841[label="0.444444;4pkt 4fpkt"];
1115--11858[label="0.153846;2pkt 2fpkt"];
1115--11956[label="0.5;1pkt 1fpkt"];
1115--12028[label="0.15;3pkt 3fpkt"];
1144--5723[label="1;4pkt 4fpkt"];
1190--5092[label="1;16pkt 16fpkt"];
1190--5723[label="0.6;12pkt 12fpkt"];
1190--6463[label="0.1;2pkt 2fpkt"];
1190--9220[label="1;20pkt 20fpkt"];
1190--11127[label="1;20pkt 20fpkt"];
1271--5120[label="1;66pkt 66fpkt"];
1271--5723[label="1;66pkt 66fpkt"];
1271--8131[label="0.242424;16pkt 16fpkt"];
1271--8180[label="0.242424;16pkt 16fpkt"];
1271--8219[label="0.242424;16pkt 16fpkt"];
1271--8569[label="1;66pkt 66fpkt"];
1271--10804[label="1;66pkt 66fpkt"];
3192--5723[label="0.6;6pkt 6fpkt"];
3578--5723[label="0.8;8pkt 8fpkt"];
4248--5723[label="1;20pkt 20fpkt"];
4248--8131[label="0.15;3pkt 3fpkt"];
4248--8180[label="0.15;3pkt 3fpkt"];
4248--8219[label="0.15;3pkt 3fpkt"];
4584--5723[label="0.8;20pkt 20fpkt"];
4584--8131[label="0.12;3pkt 3fpkt"];
4584--8180[label="0.12;3pkt 3fpkt"];
4584--8219[label="0.12;3pkt 3fpkt"];
4835--5723[label="1;2pkt 2fpkt"];
5090--5723[label="0.454545;5pkt 5fpkt"];
5092--5723[label="0.625;10pkt 10fpkt"];
5092--9220[label="1;16pkt 16fpkt"];
5092--11127[label="1;16pkt 16fpkt"];
5120--5723[label="1;66pkt 66fpkt"];
5120--8131[label="0.242424;16pkt 16fpkt"];
5120--8180[label="0.242424;16pkt 16fpkt"];
5120--8219[label="0.242424;16pkt 16fpkt"];
5120--8569[label="1;66pkt 66fpkt"];
5120--10804[label="1;66pkt 66fpkt"];
5723--6097[label="0.0559441;16pkt 16fpkt"];
5723--6145[label="0.159875;51pkt 51fpkt"];
5723--6149[label="0.046875;3pkt 3fpkt"];
5723--6198[label="1;1pkt 1fpkt"];
5723--6214[label="0.0106383;5pkt 5fpkt"];
5723--7179[label="0.0105263;1pkt 1fpkt"];
5723--7201[label="0.03;3pkt 3fpkt"];
5723--7466[label="0.00235294;1pkt 1fpkt"];
5723--7469[label="0.015873;1pkt 1fpkt"];
5723--8031[label="0.0105263;1pkt 1fpkt"];
5723--8131[label="0.183784;136pkt 136fpkt"];
5723--8180[label="0.183784;136pkt 136fpkt"];
5723--8219[label="0.183784;136pkt 136fpkt"];
5723--8243[label="0.25;2pkt 2fpkt"];
5723--8322[label="0.846154;11pkt 11fpkt"];
5723--8372[label="1;3pkt 3fpkt"];
5723--8469[label="0.0697674;3pkt 3fpkt"];
5723--8520[label="0.142857;1pkt 1fpkt"];
5723--8522[label="1;25pkt 25fpkt"];
5723--8569[label="1;66pkt 66fpkt"];
5723--8582[label="1;3pkt 3fpkt"];
5723--8701[label="0.0555556;1pkt 1fpkt"];
5723--8729[label="1;24pkt 24fpkt"];
5723--9220[label="0.571429;12pkt 12fpkt"];
5723--9330[label="0.764045;68pkt 68fpkt"];
5723--9552[label="0.5;23pkt 23fpkt"];
5723--9722[label="1;3pkt 3fpkt"];
5723--9821[label="0.125;1pkt 1fpkt"];
5723--9903[label="0.266667;4pkt 4fpkt"];
5723--9980[label="0.333333;4pkt 4fpkt"];
5723--9989[label="0.192157;49pkt 49fpkt"];
5723--10254[label="0.25;2pkt 2fpkt"];
5723--10579[label="0.5;3pkt 3fpkt"];
5723--10639[label="0.25;2pkt 2fpkt"];
5723--10678[label="0.846154;11pkt 11fpkt"];
5723--10761[label="0.047619;2pkt 2fpkt"];
5723--10780[label="1;25pkt 25fpkt"];
5723--10804[label="1;66pkt 66fpkt"];
5723--10812[label="1;3pkt 3fpkt"];
5723--10871[label="0.0555556;1pkt 1fpkt"];
5723--10886[label="1;24pkt 24fpkt"];
5723--11127[label="0.6;12pkt 12fpkt"];
5723--11184[label="0.764045;68pkt 68fpkt"];
5723--11280[label="0.5;23pkt 23fpkt"];
5723--11411[label="0.125;1pkt 1fpkt"];
5723--11841[label="0.333333;3pkt 3fpkt"];
5723--11858[label="0.846154;11pkt 11fpkt"];
5723--11936[label="1;23pkt 23fpkt"];
5723--12047[label="0.764045;68pkt 68fpkt"];
6149--7264[label="0.2;5pkt 5fpkt"];
6149--8131[label="0.125;8pkt 8fpkt"];
6149--8180[label="0.125;8pkt 8fpkt"];
6149--8219[label="0.125;8pkt 8fpkt"];
8243--10639[label="1;8pkt 8fpkt"];
8243--11841[label="1;8pkt 8fpkt"];
8322--10678[label="1;13pkt 13fpkt"];
8322--11858[label="1;13pkt 13fpkt"];
8469--10761[label="1;42pkt 42fpkt"];
8522--10780[label="1;25pkt 25fpkt"];
8569--10804[label="1;66pkt 66fpkt"];
8582--10812[label="1;3pkt 3fpkt"];
8701--10871[label="1;18pkt 18fpkt"];
8729--10886[label="1;24pkt 24fpkt"];
8729--11936[label="1;23pkt 23fpkt"];
8821--10938[label="1;1pkt 1fpkt"];
8821--11956[label="1;2pkt 2fpkt"];
9220--11127[label="1;20pkt 20fpkt"];
9330--11184[label="1;89pkt 89fpkt"];
9330--12047[label="1;89pkt 89fpkt"];
9552--11280[label="1;46pkt 46fpkt"];
9821--11411[label="1;8pkt 8fpkt"];
10639--11841[label="1;8pkt 8fpkt"];
10678--11858[label="1;13pkt 13fpkt"];
10886--11936[label="1;23pkt 23fpkt"];
10938--11956[label="1;1pkt 1fpkt"];
11184--12047[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.182" src_port="80"/>
      <filter dst_ip="128.87.90.176" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
1862[label="133.72.206.40;d;473pkt 473fpkt", shape=diamond, color=yellow];
2341[label="214.241.3.146;s;6pkt 6fpkt", shape=diamond, color=yellow];
2787[label="214.241.0.39;s;4pkt 4fpkt", shape=diamond, color=yellow];
2818[label="135.74.123.98;s;15pkt 15fpkt", shape=diamond, color=yellow];
3230[label="171.20.35.216;s;372pkt 372fpkt", shape=diamond, color=yellow];
6255[label="135.74.123.98;s;15pkt 15fpkt", shape=hexagon, color=black];
7023[label="171.20.35.216;s;372pkt 372fpkt", shape=hexagon, color=black];
9311[label="135.74.123.98;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9766[label="214.241.3.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10341[label="171.20.35.216;372pkt 372fpkt", shape=pentagon, color=darkviolet];
11175[label="135.74.123.98;15pkt 15fpkt", shape=invtriangle, color=brown];
11700[label="171.20.35.216;372pkt 372fpkt", shape=invtriangle, color=brown];
12044[label="135.74.123.98;15pkt 15fpkt", shape=invhouse, color=bisque];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.20.35.216:443, 133.72.206.40:*}[78.6469%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.3216%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 25: (0.804094%)&lt;BR/&gt; 53: (0.170565%)&lt;BR/&gt; 60121: (0.146199%)&gt;];
}
1862--1974[label="0.00544959;2pkt 2fpkt"];
1862--2003[label="0.0083682;2pkt 2fpkt"];
1862--2341[label="1;6pkt 6fpkt"];
1862--2578[label="0.0245399;4pkt 4fpkt"];
1862--2787[label="1;4pkt 4fpkt"];
1862--2818[label="1;15pkt 15fpkt"];
1862--3230[label="1;372pkt 372fpkt"];
1862--4985[label="0.0190275;9pkt 9fpkt"];
1862--5461[label="0.0105708;5pkt 5fpkt"];
1862--5991[label="0.025;2pkt 2fpkt"];
1862--6097[label="0.00699301;2pkt 2fpkt"];
1862--6255[label="1;15pkt 15fpkt"];
1862--7023[label="1;372pkt 372fpkt"];
1862--7821[label="0.0208333;9pkt 9fpkt"];
1862--8118[label="0.00422833;2pkt 2fpkt"];
1862--8131[label="0.00845666;4pkt 4fpkt"];
1862--8180[label="0.00845666;4pkt 4fpkt"];
1862--8219[label="0.00845666;4pkt 4fpkt"];
1862--9224[label="0.0105708;5pkt 5fpkt"];
1862--9311[label="1;15pkt 15fpkt"];
1862--9766[label="1;6pkt 6fpkt"];
1862--10341[label="1;372pkt 372fpkt"];
1862--11128[label="0.0105708;5pkt 5fpkt"];
1862--11175[label="1;15pkt 15fpkt"];
1862--11700[label="1;372pkt 372fpkt"];
1862--12025[label="0.0105708;5pkt 5fpkt"];
1862--12044[label="1;15pkt 15fpkt"];
2341--9766[label="1;6pkt 6fpkt"];
2818--6255[label="1;15pkt 15fpkt"];
2818--9311[label="1;15pkt 15fpkt"];
2818--11175[label="1;15pkt 15fpkt"];
2818--12044[label="1;15pkt 15fpkt"];
3230--7023[label="1;372pkt 372fpkt"];
3230--10341[label="1;372pkt 372fpkt"];
3230--11700[label="1;372pkt 372fpkt"];
6255--9311[label="1;15pkt 15fpkt"];
6255--11175[label="1;15pkt 15fpkt"];
6255--12044[label="1;15pkt 15fpkt"];
7023--10341[label="1;372pkt 372fpkt"];
7023--11700[label="1;372pkt 372fpkt"];
9311--11175[label="1;15pkt 15fpkt"];
9311--12044[label="1;15pkt 15fpkt"];
10341--11700[label="1;372pkt 372fpkt"];
11175--12044[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.206.40" src_ip="171.20.35.216" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
2674[label="21.49.10.49;d;4pkt 4fpkt", shape=diamond, color=yellow];
2677[label="215.40.239.58;s;12pkt 12fpkt", shape=diamond, color=yellow];
7263[label="21.49.10.49;d;4pkt 4fpkt", shape=hexagon, color=black];
8886[label="215.40.239.58;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10971[label="215.40.239.58;12pkt 12fpkt", shape=invtriangle, color=brown];
11973[label="215.40.239.58;12pkt 12fpkt", shape=invhouse, color=bisque];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.239.58:*, 21.49.10.49:*}[33.3333%]&lt;BR/&gt;{215.40.239.58:39142, *:3478}[25%]&lt;BR/&gt;{215.40.239.58:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39142: (16.0714%)&lt;BR/&gt; 80: (16.0714%)&lt;BR/&gt; 3478: (14.2857%)&lt;BR/&gt; 2624: (8.92857%)&lt;BR/&gt; 21388: (5.35714%)&gt;];
}
2674--2677[label="1;4pkt 4fpkt"];
2674--7263[label="1;4pkt 4fpkt"];
2674--8886[label="1;4pkt 4fpkt"];
2674--10971[label="1;4pkt 4fpkt"];
2674--11973[label="1;4pkt 4fpkt"];
2677--4193[label="0.0833333;1pkt 1fpkt"];
2677--7263[label="1;4pkt 4fpkt"];
2677--7533[label="0.0833333;1pkt 1fpkt"];
2677--8886[label="1;12pkt 12fpkt"];
2677--10971[label="1;12pkt 12fpkt"];
2677--11973[label="1;12pkt 12fpkt"];
7263--8886[label="1;4pkt 4fpkt"];
7263--10971[label="1;4pkt 4fpkt"];
7263--11973[label="1;4pkt 4fpkt"];
8886--10971[label="1;12pkt 12fpkt"];
8886--11973[label="1;12pkt 12fpkt"];
10971--11973[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="21.49.10.49" src_ip="215.40.239.58"/>
      <filter dst_port="80" src_ip="215.40.239.58"/>
      <filter dst_port="3478" src_ip="215.40.239.58" src_port="39142"/>
    </slice>
    <from sec="1229058200" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
2220[label="133.72.122.65;s;138pkt 138fpkt", shape=diamond, color=yellow];
2691[label="192.241.11.70;d;78pkt 78fpkt", shape=diamond, color=yellow];
5943[label="192.241.11.70;d;78pkt 78fpkt", shape=hexagon, color=black];
8958[label="133.72.122.65;138pkt 138fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.122.65:*, 192.241.11.70:80}[56.5217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44992: (0.462963%)&lt;BR/&gt; 44991: (0.462963%)&lt;BR/&gt; 44990: (0.462963%)&lt;BR/&gt; 44989: (0.462963%)&gt;];
}
2220--2691[label="1;78pkt 78fpkt"];
2220--4193[label="0.0103093;1pkt 1fpkt"];
2220--5943[label="1;78pkt 78fpkt"];
2220--7533[label="0.0103093;1pkt 1fpkt"];
2220--8958[label="1;138pkt 138fpkt"];
2691--5943[label="1;78pkt 78fpkt"];
2691--8958[label="1;78pkt 78fpkt"];
5943--8958[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="192.241.11.70" dst_port="80" src_ip="133.72.122.65"/>
    </slice>
    <from sec="1229058187" usec="0"/>
    <to sec="1229058379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.69.41.12"/>
      <from sec="1229058251" usec="0"/>
      <to sec="1229058393" usec="0"/>
    </slice>
    <from sec="1229058251" usec="0"/>
    <to sec="1229058393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
2085[label="128.208.175.139;d;419pkt 419fpkt", shape=diamond, color=yellow];
2202[label="100.143.115.114;s;32pkt 32fpkt", shape=diamond, color=yellow];
2718[label="101.208.96.6;s;197pkt 197fpkt", shape=diamond, color=yellow];
5917[label="100.143.115.114;s;29pkt 29fpkt", shape=hexagon, color=black];
6910[label="128.208.175.139;d;419pkt 419fpkt", shape=hexagon, color=black];
8531[label="205.217.2.25;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9235[label="200.106.212.89;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10437[label="7.214.226.226;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10786[label="205.217.2.25;15pkt 15fpkt", shape=invtriangle, color=brown];
11137[label="200.106.212.89;16pkt 16fpkt", shape=invtriangle, color=brown];
11747[label="7.214.226.226;5pkt 5fpkt", shape=invtriangle, color=brown];
11901[label="205.217.2.25;15pkt 15fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.208.96.6:80, 128.208.175.139:*}[46.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1967: (0.211327%)&lt;BR/&gt; 1935: (0.211327%)&lt;BR/&gt; 1921: (0.211327%)&lt;BR/&gt; 1919: (0.211327%)&gt;];
}
2085--2202[label="1;32pkt 32fpkt"];
2085--2578[label="0.00613497;1pkt 1fpkt"];
2085--2718[label="1;197pkt 197fpkt"];
2085--5917[label="1;29pkt 29fpkt"];
2085--6910[label="1;419pkt 419fpkt"];
2085--8131[label="0.0548926;23pkt 23fpkt"];
2085--8180[label="0.0548926;23pkt 23fpkt"];
2085--8219[label="0.0548926;23pkt 23fpkt"];
2085--8531[label="0.866667;13pkt 13fpkt"];
2085--9235[label="0.75;12pkt 12fpkt"];
2085--10437[label="1;5pkt 5fpkt"];
2085--10786[label="0.866667;13pkt 13fpkt"];
2085--11137[label="0.75;12pkt 12fpkt"];
2085--11747[label="1;5pkt 5fpkt"];
2085--11901[label="0.866667;13pkt 13fpkt"];
2202--5917[label="1;29pkt 29fpkt"];
2202--6910[label="1;32pkt 32fpkt"];
2202--8131[label="0.125;4pkt 4fpkt"];
2202--8180[label="0.125;4pkt 4fpkt"];
2202--8219[label="0.125;4pkt 4fpkt"];
2718--6910[label="1;197pkt 197fpkt"];
5917--6910[label="1;29pkt 29fpkt"];
5917--8131[label="0.137931;4pkt 4fpkt"];
5917--8180[label="0.137931;4pkt 4fpkt"];
5917--8219[label="0.137931;4pkt 4fpkt"];
6910--8131[label="0.0548926;23pkt 23fpkt"];
6910--8180[label="0.0548926;23pkt 23fpkt"];
6910--8219[label="0.0548926;23pkt 23fpkt"];
6910--8531[label="0.866667;13pkt 13fpkt"];
6910--9235[label="0.75;12pkt 12fpkt"];
6910--10437[label="1;5pkt 5fpkt"];
6910--10786[label="0.866667;13pkt 13fpkt"];
6910--11137[label="0.75;12pkt 12fpkt"];
6910--11747[label="1;5pkt 5fpkt"];
6910--11901[label="0.866667;13pkt 13fpkt"];
8531--10786[label="1;15pkt 15fpkt"];
8531--11901[label="1;15pkt 15fpkt"];
9235--11137[label="1;16pkt 16fpkt"];
10437--11747[label="1;5pkt 5fpkt"];
10786--11901[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.175.139" src_ip="101.208.96.6" src_port="80"/>
    </slice>
    <from sec="1229058012" usec="0"/>
    <to sec="1229058888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
2354[label="195.254.59.217;d;5pkt 5fpkt", shape=diamond, color=yellow];
2727[label="133.72.177.18;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.177.18:4049, 195.254.59.217:80}[20%]&lt;BR/&gt;{133.72.177.18:4051, 195.254.59.217:80}[20%]&lt;BR/&gt;{133.72.177.18:4053, 195.254.59.217:80}[20%]&lt;BR/&gt;{133.72.177.18:4055, 195.254.59.217:80}[20%]&lt;BR/&gt;{133.72.177.18:4057, 195.254.59.217:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4057: (10%)&lt;BR/&gt; 4055: (10%)&lt;BR/&gt; 4053: (10%)&lt;BR/&gt; 4051: (10%)&gt;];
}
2354--2727[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="195.254.59.217" dst_port="80" src_ip="133.72.177.18" src_port="4057"/>
      <filter dst_ip="195.254.59.217" dst_port="80" src_ip="133.72.177.18" src_port="4055"/>
      <filter dst_ip="195.254.59.217" dst_port="80" src_ip="133.72.177.18" src_port="4053"/>
      <filter dst_ip="195.254.59.217" dst_port="80" src_ip="133.72.177.18" src_port="4051"/>
      <filter dst_ip="195.254.59.217" dst_port="80" src_ip="133.72.177.18" src_port="4049"/>
    </slice>
    <from sec="1229058275" usec="0"/>
    <to sec="1229058316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.72.163.176"/>
      <from sec="1229058328" usec="0"/>
      <to sec="1229058346" usec="0"/>
    </slice>
    <from sec="1229058328" usec="0"/>
    <to sec="1229058346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
2794[label="50.163.19.15;s;110pkt 110fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.163.19.15:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60924: (0.454545%)&lt;BR/&gt; 60923: (0.454545%)&lt;BR/&gt; 60922: (0.454545%)&lt;BR/&gt; 60921: (0.454545%)&gt;];
}
2794--3039[label="0.00909091;1pkt 1fpkt"];
2794--4476[label="0.0116279;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="50.163.19.15"/>
    </slice>
    <from sec="1229058339" usec="0"/>
    <to sec="1229058363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
57[label="133.72.177.104s;1pkt 1fpkt", shape=rectangle, color=red];
2819[label="193.234.91.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
6258[label="193.234.91.146;d;1pkt 1fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.177.104:4550, 193.234.91.146:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4550: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
57--2327[label="1;1pkt 1fpkt"];
57--2819[label="1;1pkt 1fpkt"];
57--6258[label="1;1pkt 1fpkt"];
2819--6258[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.234.91.146" dst_port="80" src_ip="133.72.177.104" src_port="4550"/>
    </slice>
    <from sec="1229058285" usec="0"/>
    <to sec="1229058761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
943[label="169.18.162.244;d;186pkt 186fpkt", shape=diamond, color=yellow];
1981[label="213.234.115.250;s;2pkt 2fpkt", shape=diamond, color=yellow];
4260[label="39.71.69.135;s;2pkt 2fpkt", shape=diamond, color=yellow];
5536[label="169.18.162.244;d;173pkt 173fpkt", shape=hexagon, color=black];
6461[label="213.234.115.250;s;2pkt 2fpkt", shape=hexagon, color=black];
8883[label="52.13.188.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8945[label="36.130.105.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9524[label="58.173.31.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9649[label="39.71.69.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10327[label="36.130.130.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.18.162.244:20}[52.1505%]&lt;BR/&gt;{*:*, 169.18.162.244:21}[43.0108%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (25.4054%)&lt;BR/&gt; 21: (22.1622%)&lt;BR/&gt; 0: (3.78378%)&lt;BR/&gt; 6881: (0.810811%)&lt;BR/&gt; 58043: (0.675676%)&gt;];
}
943--944[label="1;1pkt 1fpkt"];
943--1981[label="1;2pkt 2fpkt"];
943--2882[label="0.0416667;1pkt 1fpkt"];
943--4260[label="1;2pkt 2fpkt"];
943--5259[label="1;1pkt 1fpkt"];
943--5536[label="1;173pkt 173fpkt"];
943--6461[label="1;2pkt 2fpkt"];
943--7858[label="1;1pkt 1fpkt"];
943--8132[label="0.00537634;1pkt 1fpkt"];
943--8181[label="0.00537634;1pkt 1fpkt"];
943--8220[label="0.00537634;1pkt 1fpkt"];
943--8883[label="1;1pkt 1fpkt"];
943--8945[label="1;1pkt 1fpkt"];
943--9524[label="1;1pkt 1fpkt"];
943--9649[label="1;1pkt 1fpkt"];
943--10237[label="1;1pkt 1fpkt"];
943--10327[label="1;1pkt 1fpkt"];
943--11641[label="1;1pkt 1fpkt"];
1981--5536[label="1;2pkt 2fpkt"];
1981--6461[label="1;2pkt 2fpkt"];
4260--5536[label="1;2pkt 2fpkt"];
4260--9649[label="1;1pkt 1fpkt"];
5536--6461[label="1;2pkt 2fpkt"];
5536--7858[label="1;1pkt 1fpkt"];
5536--8132[label="0.00578035;1pkt 1fpkt"];
5536--8181[label="0.00578035;1pkt 1fpkt"];
5536--8220[label="0.00578035;1pkt 1fpkt"];
5536--8883[label="1;1pkt 1fpkt"];
5536--9524[label="1;1pkt 1fpkt"];
5536--9649[label="1;1pkt 1fpkt"];
5536--10237[label="1;1pkt 1fpkt"];
5536--10327[label="1;1pkt 1fpkt"];
5536--11641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.162.244" dst_port="20"/>
      <filter dst_ip="169.18.162.244" dst_port="21"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
2894[label="133.72.225.169;d;185pkt 185fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 133.72.225.169:59173}[96.2162%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.6486%)&lt;BR/&gt; 59173: (48.1081%)&lt;BR/&gt; 0: (3.24324%)&gt;];
}
2894--3373[label="0.00540541;1pkt 1fpkt"];
2894--3736[label="0.00540541;1pkt 1fpkt"];
2894--6408[label="0.00540541;1pkt 1fpkt"];
2894--6453[label="0.00540541;1pkt 1fpkt"];
2894--6820[label="0.00540541;1pkt 1fpkt"];
2894--6858[label="0.00540541;1pkt 1fpkt"];
2894--9480[label="0.00769231;1pkt 1fpkt"];
2894--9504[label="0.00540541;1pkt 1fpkt"];
2894--9522[label="0.00540541;1pkt 1fpkt"];
2894--9883[label="0.00540541;1pkt 1fpkt"];
2894--10035[label="0.00934579;1pkt 1fpkt"];
2894--10477[label="0.00884956;1pkt 1fpkt"];
2894--11257[label="0.00540541;1pkt 1fpkt"];
2894--11265[label="0.00540541;1pkt 1fpkt"];
2894--12074[label="0.00540541;1pkt 1fpkt"];
2894--12078[label="0.00540541;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.225.169" dst_port="59173" src_port="53"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.72.132.153"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058827" usec="0"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
2786[label="214.239.132.157;s;2pkt 2fpkt", shape=diamond, color=yellow];
9867[label="214.239.132.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11435[label="214.239.132.157;1pkt 1fpkt", shape=invtriangle, color=brown];
12152[label="214.239.132.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.239.132.157:554, 174.194.126.218:51195}[50%]&lt;BR/&gt;{214.239.132.157:9762, 174.194.126.218:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9762: (40%)&lt;BR/&gt; 6970: (40%)&lt;BR/&gt; 51195: (10%)&lt;BR/&gt; 554: (10%)&gt;];
}
2786--9867[label="1;1pkt 1fpkt"];
2786--11435[label="1;1pkt 1fpkt"];
2786--12152[label="1;1pkt 1fpkt"];
9867--11435[label="1;1pkt 1fpkt"];
9867--12152[label="1;1pkt 1fpkt"];
11435--12152[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.126.218" dst_port="6970" src_ip="214.239.132.157" src_port="9762"/>
      <filter dst_ip="174.194.126.218" dst_port="51195" src_ip="214.239.132.157" src_port="554"/>
    </slice>
    <from sec="1229058331" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3043[label="41.207.126.8;d;44pkt 44fpkt", shape=diamond, color=yellow];
3044[label="128.81.228.79;s;45pkt 45fpkt", shape=diamond, color=yellow];
6572[label="128.81.228.79;s;30pkt 30fpkt", shape=hexagon, color=black];
9130[label="128.81.228.79;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.228.79:80, 41.207.126.8:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.6108%)&lt;BR/&gt; 443: (5.38922%)&lt;BR/&gt; 64327: (1.1976%)&lt;BR/&gt; 63757: (1.1976%)&lt;BR/&gt; 61947: (1.1976%)&gt;];
}
3043--3044[label="1;44pkt 44fpkt"];
3043--6572[label="0.966667;29pkt 29fpkt"];
3043--8131[label="0.0454545;2pkt 2fpkt"];
3043--8180[label="0.0454545;2pkt 2fpkt"];
3043--8219[label="0.0454545;2pkt 2fpkt"];
3043--9130[label="1;44pkt 44fpkt"];
3044--3443[label="0.0243902;1pkt 1fpkt"];
3044--6572[label="1;30pkt 30fpkt"];
3044--7234[label="0.0294118;1pkt 1fpkt"];
3044--8131[label="0.0444444;2pkt 2fpkt"];
3044--8180[label="0.0444444;2pkt 2fpkt"];
3044--8219[label="0.0444444;2pkt 2fpkt"];
3044--9130[label="1;45pkt 45fpkt"];
6572--7234[label="0.0333333;1pkt 1fpkt"];
6572--8131[label="0.0666667;2pkt 2fpkt"];
6572--8180[label="0.0666667;2pkt 2fpkt"];
6572--8219[label="0.0666667;2pkt 2fpkt"];
6572--9130[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.8" src_ip="128.81.228.79" src_port="80"/>
    </slice>
    <from sec="1229058034" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
2574[label="133.72.218.74;d;195pkt 195fpkt", shape=diamond, color=yellow];
2802[label="172.0.134.77;s;195pkt 195fpkt", shape=diamond, color=yellow];
3050[label="172.0.134.75;s;4pkt 4fpkt", shape=diamond, color=yellow];
6994[label="172.0.134.77;s;195pkt 195fpkt", shape=hexagon, color=black];
7226[label="133.72.218.74;d;195pkt 195fpkt", shape=hexagon, color=black];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.0.134.77:443, 133.72.218.74:*}[91.5842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.9592%)&lt;BR/&gt; 80: (1.02041%)&lt;BR/&gt; 554: (0.637755%)&lt;BR/&gt; 1579: (0.255102%)&lt;BR/&gt; 1576: (0.255102%)&gt;];
}
2574--2802[label="0.969231;189pkt 189fpkt"];
2574--3050[label="0.75;3pkt 3fpkt"];
2574--6994[label="0.969231;189pkt 189fpkt"];
2574--7226[label="1;195pkt 195fpkt"];
2802--6994[label="1;195pkt 195fpkt"];
2802--7226[label="0.969231;189pkt 189fpkt"];
3050--7226[label="0.75;3pkt 3fpkt"];
6994--7226[label="0.969231;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.218.74" src_ip="172.0.134.77" src_port="443"/>
    </slice>
    <from sec="1229058012" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
2765[label="100.176.17.42;s;41pkt 41fpkt", shape=diamond, color=yellow];
3074[label="133.72.85.166;d;43pkt 43fpkt", shape=diamond, color=yellow];
8720[label="100.176.17.42;41pkt 41fpkt", shape=pentagon, color=darkviolet];
10881[label="100.176.17.42;41pkt 41fpkt", shape=invtriangle, color=brown];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.176.17.42:443, 133.72.85.166:*}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49262: (1.20482%)&lt;BR/&gt; 49261: (1.20482%)&lt;BR/&gt; 49251: (1.20482%)&lt;BR/&gt; 49247: (1.20482%)&gt;];
}
2765--3074[label="1;41pkt 41fpkt"];
2765--8720[label="1;41pkt 41fpkt"];
2765--10881[label="1;41pkt 41fpkt"];
3074--8720[label="1;41pkt 41fpkt"];
3074--10881[label="1;41pkt 41fpkt"];
8720--10881[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.85.166" src_ip="100.176.17.42" src_port="443"/>
    </slice>
    <from sec="1229058189" usec="0"/>
    <to sec="1229058361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14636,1.90612,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
145[label="85.215.16.201d;1pkt 1fpkt", shape=rectangle, color=red];
10030[label="133.72.196.176;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11517[label="133.72.196.176;12pkt 12fpkt", shape=invtriangle, color=brown];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.196.176:*, *:80}[41.6667%]&lt;BR/&gt;{133.72.196.176:*, 85.215.16.5:5354}[33.3333%]&lt;BR/&gt;{133.72.196.176:*, 85.215.16.215:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22%)&lt;BR/&gt; 5354: (16%)&lt;BR/&gt; 443: (12%)&lt;BR/&gt; 52949: (6%)&lt;BR/&gt; 53005: (4%)&gt;];
}
145--3076[label="1;1pkt 1fpkt"];
145--10030[label="1;1pkt 1fpkt"];
145--11517[label="1;1pkt 1fpkt"];
10030--11517[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.196.176"/>
      <filter dst_ip="85.215.16.5" dst_port="5354" src_ip="133.72.196.176"/>
      <filter dst_ip="85.215.16.215" dst_port="443" src_ip="133.72.196.176"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
2814[label="42.236.33.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
3112[label="133.72.37.56;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.33.69:80, 133.72.37.56:49405}[50%]&lt;BR/&gt;{42.236.33.69:80, 133.72.37.56:49408}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49408: (25%)&lt;BR/&gt; 49405: (25%)&gt;];
}
2814--3112[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.37.56" dst_port="49408" src_ip="42.236.33.69" src_port="80"/>
      <filter dst_ip="133.72.37.56" dst_port="49405" src_ip="42.236.33.69" src_port="80"/>
    </slice>
    <from sec="1229058302" usec="0"/>
    <to sec="1229058371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.72.166.66"/>
      <from sec="1229058360" usec="0"/>
      <to sec="1229058421" usec="0"/>
    </slice>
    <from sec="1229058360" usec="0"/>
    <to sec="1229058421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
43[label="192.208.53.74s;1pkt 1fpkt", shape=rectangle, color=red];
3173[label="192.208.53.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
6263[label="192.208.53.74;s;1pkt 1fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.208.53.74:80, 133.72.57.36:1627}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1627: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
43--1983[label="1;1pkt 1fpkt"];
43--3173[label="1;1pkt 1fpkt"];
43--6102[label="1;1pkt 1fpkt"];
43--6263[label="1;1pkt 1fpkt"];
3173--6102[label="1;1pkt 1fpkt"];
3173--6263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.57.36" dst_port="1627" src_ip="192.208.53.74" src_port="80"/>
    </slice>
    <from sec="1229058379" usec="0"/>
    <to sec="1229058405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
713[label="101.84.16.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
3184[label="133.72.177.92;d;7pkt 7fpkt", shape=diamond, color=yellow];
5067[label="101.84.16.208;s;11pkt 11fpkt", shape=hexagon, color=black];
7279[label="133.72.177.92;d;7pkt 7fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.177.92:*}[43.75%]&lt;BR/&gt;{101.84.16.208:80, 133.72.88.17:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3146: (5.76923%)&lt;BR/&gt; 3087: (5.76923%)&lt;BR/&gt; 3085: (5.76923%)&lt;BR/&gt; 3144: (3.84615%)&gt;];
}
713--3184[label="1;1pkt 1fpkt"];
713--7279[label="1;1pkt 1fpkt"];
3184--5067[label="0.285714;2pkt 2fpkt"];
3184--7279[label="1;7pkt 7fpkt"];
3184--10360[label="0.142857;1pkt 1fpkt"];
3184--10372[label="0.285714;2pkt 2fpkt"];
5067--5175[label="0.0909091;1pkt 1fpkt"];
5067--7279[label="0.285714;2pkt 2fpkt"];
7279--10360[label="0.142857;1pkt 1fpkt"];
7279--10372[label="0.285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.177.92" src_port="80"/>
      <filter dst_ip="133.72.88.17" src_ip="101.84.16.208" src_port="80"/>
    </slice>
    <from sec="1229058261" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.90.40.74"/>
      <from sec="1229058393" usec="0"/>
      <to sec="1229058630" usec="0"/>
    </slice>
    <from sec="1229058393" usec="0"/>
    <to sec="1229058630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
816[label="133.72.34.49;s;28pkt 28fpkt", shape=diamond, color=yellow];
999[label="133.72.138.180;s;46pkt 46fpkt", shape=diamond, color=yellow];
1140[label="130.34.125.93;d;20pkt 20fpkt", shape=diamond, color=yellow];
2033[label="133.72.3.31;s;56pkt 56fpkt", shape=diamond, color=yellow];
2182[label="49.59.37.195;d;191pkt 191fpkt", shape=diamond, color=yellow];
2448[label="192.22.10.113;d;103pkt 103fpkt", shape=diamond, color=yellow];
2618[label="133.72.132.176;s;76pkt 76fpkt", shape=diamond, color=yellow];
3171[label="0.138.150.144;d;9pkt 9fpkt", shape=diamond, color=yellow];
3218[label="41.207.116.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
3324[label="34.227.54.4;d;60pkt 60fpkt", shape=diamond, color=yellow];
3412[label="174.194.207.3;s;50pkt 50fpkt", shape=diamond, color=yellow];
3581[label="21.105.197.108;d;41pkt 41fpkt", shape=diamond, color=yellow];
3656[label="133.72.64.72;s;35pkt 35fpkt", shape=diamond, color=yellow];
4116[label="41.207.116.207;d;22pkt 22fpkt", shape=diamond, color=yellow];
4294[label="41.207.125.196;d;5pkt 5fpkt", shape=diamond, color=yellow];
4428[label="194.148.180.197;d;3pkt 3fpkt", shape=diamond, color=yellow];
4627[label="128.64.212.81;s;17pkt 17fpkt", shape=diamond, color=yellow];
4633[label="133.72.94.118;s;6pkt 6fpkt", shape=diamond, color=yellow];
5041[label="133.72.138.180;s;31pkt 31fpkt", shape=hexagon, color=black];
5821[label="192.22.10.113;d;103pkt 103fpkt", shape=hexagon, color=black];
6528[label="174.194.207.3;s;50pkt 50fpkt", shape=hexagon, color=black];
6573[label="133.72.132.176;s;57pkt 57fpkt", shape=hexagon, color=black];
6608[label="49.59.37.195;d;120pkt 120fpkt", shape=hexagon, color=black];
6686[label="41.207.116.45;d;2pkt 2fpkt", shape=hexagon, color=black];
7522[label="133.72.145.218;s;98pkt 98fpkt", shape=hexagon, color=black];
7643[label="41.207.125.196;d;5pkt 5fpkt", shape=hexagon, color=black];
7645[label="128.64.212.81;s;17pkt 17fpkt", shape=hexagon, color=black];
7656[label="133.72.94.118;s;6pkt 6fpkt", shape=hexagon, color=black];
9040[label="133.72.64.72;40pkt 40fpkt", shape=pentagon, color=darkviolet];
9378[label="128.81.4.104;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9962[label="144.203.227.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10028[label="133.72.132.176;100pkt 100fpkt", shape=pentagon, color=darkviolet];
10062[label="133.72.138.180;46pkt 46fpkt", shape=pentagon, color=darkviolet];
11040[label="133.72.64.72;40pkt 40fpkt", shape=invtriangle, color=brown];
11348[label="133.72.88.139;6pkt 6fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 49.59.37.195:*}[25.2218%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3605%)&lt;BR/&gt; 0: (5.20694%)&lt;BR/&gt; 53: (1.26836%)&lt;BR/&gt; 25: (0.634179%)&lt;BR/&gt; 60619: (0.166889%)&gt;];
}
816--1154[label="1;23pkt 23fpkt"];
816--2448[label="0.107143;3pkt 3fpkt"];
816--5081[label="1;23pkt 23fpkt"];
816--5821[label="0.107143;3pkt 3fpkt"];
999--1140[label="1;20pkt 20fpkt"];
999--2182[label="0.0217391;1pkt 1fpkt"];
999--3508[label="0.0217391;1pkt 1fpkt"];
999--5041[label="1;31pkt 31fpkt"];
999--6608[label="0.0217391;1pkt 1fpkt"];
999--6975[label="0.0217391;1pkt 1fpkt"];
999--10062[label="1;46pkt 46fpkt"];
1140--5041[label="1;20pkt 20fpkt"];
1140--10062[label="1;20pkt 20fpkt"];
2033--2182[label="0.0178571;1pkt 1fpkt"];
2033--3508[label="0.0178571;1pkt 1fpkt"];
2033--6608[label="0.0178571;1pkt 1fpkt"];
2033--6975[label="0.0178571;1pkt 1fpkt"];
2033--8131[label="0.0178571;1pkt 1fpkt"];
2033--8180[label="0.0178571;1pkt 1fpkt"];
2033--8219[label="0.0178571;1pkt 1fpkt"];
2182--2618[label="0.118421;9pkt 9fpkt"];
2182--3176[label="0.666667;12pkt 12fpkt"];
2182--3783[label="0.148649;11pkt 11fpkt"];
2182--4627[label="0.176471;3pkt 3fpkt"];
2182--4633[label="0.166667;1pkt 1fpkt"];
2182--4849[label="0.0157068;3pkt 3fpkt"];
2182--5153[label="0.204188;39pkt 39fpkt"];
2182--5190[label="0.0052356;1pkt 1fpkt"];
2182--5214[label="0.0213904;4pkt 4fpkt"];
2182--5306[label="0.126506;21pkt 21fpkt"];
2182--5572[label="0.226562;29pkt 29fpkt"];
2182--5626[label="0.266667;4pkt 4fpkt"];
2182--6573[label="0.140351;8pkt 8fpkt"];
2182--6608[label="1;120pkt 120fpkt"];
2182--7645[label="0.176471;3pkt 3fpkt"];
2182--7656[label="0.166667;1pkt 1fpkt"];
2182--7893[label="0.162791;7pkt 7fpkt"];
2182--8131[label="0.146597;28pkt 28fpkt"];
2182--8180[label="0.146597;28pkt 28fpkt"];
2182--8219[label="0.146597;28pkt 28fpkt"];
2182--9040[label="0.025;1pkt 1fpkt"];
2182--9591[label="0.117978;21pkt 21fpkt"];
2182--9624[label="0.0052356;1pkt 1fpkt"];
2182--10028[label="0.09;9pkt 9fpkt"];
2182--10062[label="0.0217391;1pkt 1fpkt"];
2182--10155[label="0.125;1pkt 1fpkt"];
2182--10215[label="0.00740741;1pkt 1fpkt"];
2182--11040[label="0.025;1pkt 1fpkt"];
2182--11297[label="0.117978;21pkt 21fpkt"];
2182--11315[label="0.0052356;1pkt 1fpkt"];
2182--11594[label="0.125;1pkt 1fpkt"];
2182--12093[label="0.117978;21pkt 21fpkt"];
2182--12214[label="0.125;1pkt 1fpkt"];
2448--2618[label="0.368421;28pkt 28fpkt"];
2448--3404[label="0.0204082;2pkt 2fpkt"];
2448--3412[label="0.3;15pkt 15fpkt"];
2448--5023[label="0.0909091;2pkt 2fpkt"];
2448--5153[label="0.194175;20pkt 20fpkt"];
2448--5572[label="0.0194175;2pkt 2fpkt"];
2448--5575[label="0.0485437;5pkt 5fpkt"];
2448--5712[label="0.0194175;2pkt 2fpkt"];
2448--5793[label="0.0194175;2pkt 2fpkt"];
2448--5821[label="1;103pkt 103fpkt"];
2448--6528[label="0.3;15pkt 15fpkt"];
2448--6573[label="0.298246;17pkt 17fpkt"];
2448--7114[label="0.0194175;2pkt 2fpkt"];
2448--7522[label="0.0204082;2pkt 2fpkt"];
2448--8131[label="0.0194175;2pkt 2fpkt"];
2448--8180[label="0.0194175;2pkt 2fpkt"];
2448--8219[label="0.0194175;2pkt 2fpkt"];
2448--9509[label="0.0194175;2pkt 2fpkt"];
2448--9692[label="0.833333;5pkt 5fpkt"];
2448--10028[label="0.28;28pkt 28fpkt"];
2448--10215[label="0.038835;4pkt 4fpkt"];
2448--10364[label="0.0194175;2pkt 2fpkt"];
2448--11348[label="0.833333;5pkt 5fpkt"];
2618--3171[label="1;9pkt 9fpkt"];
2618--3218[label="0.5;1pkt 1fpkt"];
2618--3508[label="0.0131579;1pkt 1fpkt"];
2618--5821[label="0.368421;28pkt 28fpkt"];
2618--6573[label="1;57pkt 57fpkt"];
2618--6608[label="0.0789474;6pkt 6fpkt"];
2618--6686[label="0.5;1pkt 1fpkt"];
2618--8131[label="0.0526316;4pkt 4fpkt"];
2618--8180[label="0.0526316;4pkt 4fpkt"];
2618--8219[label="0.0526316;4pkt 4fpkt"];
2618--10028[label="1;76pkt 76fpkt"];
3171--6573[label="1;9pkt 9fpkt"];
3171--10028[label="1;9pkt 9fpkt"];
3218--3241[label="1;1pkt 1fpkt"];
3218--6573[label="0.5;1pkt 1fpkt"];
3218--6686[label="1;2pkt 2fpkt"];
3218--9205[label="0.5;1pkt 1fpkt"];
3218--10028[label="0.5;1pkt 1fpkt"];
3218--11117[label="0.5;1pkt 1fpkt"];
3324--3404[label="0.0333333;2pkt 2fpkt"];
3324--4218[label="0.0740741;4pkt 4fpkt"];
3324--5306[label="0.0333333;2pkt 2fpkt"];
3324--5308[label="0.0333333;2pkt 2fpkt"];
3324--6828[label="1;50pkt 50fpkt"];
3324--7522[label="0.0333333;2pkt 2fpkt"];
3324--7556[label="0.0740741;4pkt 4fpkt"];
3324--7893[label="0.0232558;1pkt 1fpkt"];
3324--8131[label="0.0833333;5pkt 5fpkt"];
3324--8180[label="0.0833333;5pkt 5fpkt"];
3324--8219[label="0.0833333;5pkt 5fpkt"];
3324--9019[label="0.0333333;2pkt 2fpkt"];
3324--9197[label="0.113636;5pkt 5fpkt"];
3324--9378[label="0.25;1pkt 1fpkt"];
3324--9591[label="0.0333333;2pkt 2fpkt"];
3324--9962[label="0.333333;1pkt 1fpkt"];
3324--10364[label="0.0333333;2pkt 2fpkt"];
3324--11297[label="0.0333333;2pkt 2fpkt"];
3324--12093[label="0.0333333;2pkt 2fpkt"];
3412--3508[label="0.02;1pkt 1fpkt"];
3412--3581[label="0.146341;6pkt 6fpkt"];
3412--4294[label="1;5pkt 5fpkt"];
3412--5821[label="0.3;15pkt 15fpkt"];
3412--6180[label="0.02;1pkt 1fpkt"];
3412--6528[label="1;50pkt 50fpkt"];
3412--6693[label="0.146341;6pkt 6fpkt"];
3412--6975[label="0.02;1pkt 1fpkt"];
3412--7643[label="1;5pkt 5fpkt"];
3412--8131[label="0.02;1pkt 1fpkt"];
3412--8180[label="0.02;1pkt 1fpkt"];
3412--8219[label="0.02;1pkt 1fpkt"];
3581--4877[label="0.853659;35pkt 35fpkt"];
3581--6528[label="0.146341;6pkt 6fpkt"];
3581--6693[label="1;41pkt 41fpkt"];
3656--9040[label="1;35pkt 35fpkt"];
3656--11040[label="1;35pkt 35fpkt"];
4116--4633[label="0.666667;4pkt 4fpkt"];
4116--5260[label="0.545455;12pkt 12fpkt"];
4116--7656[label="0.666667;4pkt 4fpkt"];
4116--8131[label="0.0454545;1pkt 1fpkt"];
4116--8180[label="0.0454545;1pkt 1fpkt"];
4116--8219[label="0.0454545;1pkt 1fpkt"];
4294--6528[label="1;5pkt 5fpkt"];
4294--7643[label="1;5pkt 5fpkt"];
4428--4627[label="1;3pkt 3fpkt"];
4428--7645[label="1;3pkt 3fpkt"];
4627--6608[label="0.176471;3pkt 3fpkt"];
4627--7645[label="1;17pkt 17fpkt"];
4627--8131[label="0.0588235;1pkt 1fpkt"];
4627--8180[label="0.0588235;1pkt 1fpkt"];
4627--8219[label="0.0588235;1pkt 1fpkt"];
4633--6608[label="0.166667;1pkt 1fpkt"];
4633--7656[label="1;6pkt 6fpkt"];
5041--6975[label="0.0322581;1pkt 1fpkt"];
5041--10062[label="1;31pkt 31fpkt"];
5821--6528[label="0.3;15pkt 15fpkt"];
5821--6573[label="0.298246;17pkt 17fpkt"];
5821--7114[label="0.0194175;2pkt 2fpkt"];
5821--7522[label="0.0204082;2pkt 2fpkt"];
5821--8131[label="0.0194175;2pkt 2fpkt"];
5821--8180[label="0.0194175;2pkt 2fpkt"];
5821--8219[label="0.0194175;2pkt 2fpkt"];
5821--9509[label="0.0194175;2pkt 2fpkt"];
5821--9692[label="0.833333;5pkt 5fpkt"];
5821--10028[label="0.28;28pkt 28fpkt"];
5821--10215[label="0.038835;4pkt 4fpkt"];
5821--10364[label="0.0194175;2pkt 2fpkt"];
5821--11348[label="0.833333;5pkt 5fpkt"];
6528--6693[label="0.146341;6pkt 6fpkt"];
6528--6975[label="0.02;1pkt 1fpkt"];
6528--7643[label="1;5pkt 5fpkt"];
6528--8131[label="0.02;1pkt 1fpkt"];
6528--8180[label="0.02;1pkt 1fpkt"];
6528--8219[label="0.02;1pkt 1fpkt"];
6573--6608[label="0.105263;6pkt 6fpkt"];
6573--6686[label="0.5;1pkt 1fpkt"];
6573--8131[label="0.0701754;4pkt 4fpkt"];
6573--8180[label="0.0701754;4pkt 4fpkt"];
6573--8219[label="0.0701754;4pkt 4fpkt"];
6573--10028[label="1;57pkt 57fpkt"];
6608--7645[label="0.176471;3pkt 3fpkt"];
6608--7656[label="0.166667;1pkt 1fpkt"];
6608--7893[label="0.162791;7pkt 7fpkt"];
6608--8131[label="0.233333;28pkt 28fpkt"];
6608--8180[label="0.233333;28pkt 28fpkt"];
6608--8219[label="0.233333;28pkt 28fpkt"];
6608--9040[label="0.025;1pkt 1fpkt"];
6608--9591[label="0.0666667;8pkt 8fpkt"];
6608--9624[label="0.00833333;1pkt 1fpkt"];
6608--10028[label="0.06;6pkt 6fpkt"];
6608--10062[label="0.0217391;1pkt 1fpkt"];
6608--10155[label="0.125;1pkt 1fpkt"];
6608--10215[label="0.00833333;1pkt 1fpkt"];
6608--11040[label="0.025;1pkt 1fpkt"];
6608--11297[label="0.0666667;8pkt 8fpkt"];
6608--11315[label="0.00833333;1pkt 1fpkt"];
6608--11594[label="0.125;1pkt 1fpkt"];
6608--12093[label="0.0666667;8pkt 8fpkt"];
6608--12214[label="0.125;1pkt 1fpkt"];
6686--9205[label="0.5;1pkt 1fpkt"];
6686--10028[label="0.5;1pkt 1fpkt"];
6686--11117[label="0.5;1pkt 1fpkt"];
7522--7567[label="0.0116279;1pkt 1fpkt"];
7522--8131[label="0.0408163;4pkt 4fpkt"];
7522--8180[label="0.0408163;4pkt 4fpkt"];
7522--8219[label="0.0408163;4pkt 4fpkt"];
7522--10364[label="1;98pkt 98fpkt"];
7645--8131[label="0.0588235;1pkt 1fpkt"];
7645--8180[label="0.0588235;1pkt 1fpkt"];
7645--8219[label="0.0588235;1pkt 1fpkt"];
9040--11040[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="49.59.37.195" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11585,1.86582,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
88[label="128.64.149.228s;1pkt 1fpkt", shape=rectangle, color=red];
3060[label="128.64.149.228;s;35pkt 35fpkt", shape=diamond, color=yellow];
3223[label="219.61.26.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
10451[label="128.64.149.228;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.149.228:*, *:80}[71.4286%]&lt;BR/&gt;{128.64.149.228:19992, *:*}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.1111%)&lt;BR/&gt; 19992: (12.5%)&lt;BR/&gt; 2379: (2.77778%)&lt;BR/&gt; 60991: (1.38889%)&lt;BR/&gt; 58171: (1.38889%)&gt;];
}
88--3060[label="1;1pkt 1fpkt"];
88--3223[label="1;1pkt 1fpkt"];
88--10451[label="1;1pkt 1fpkt"];
3060--3223[label="1;1pkt 1fpkt"];
3060--10451[label="1;35pkt 35fpkt"];
3223--10451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.149.228" src_port="19992"/>
      <filter dst_port="80" src_ip="128.64.149.228"/>
    </slice>
    <from sec="1229058108" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
3243[label="41.207.122.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
3244[label="144.203.246.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
6274[label="144.203.246.153;s;1pkt 1fpkt", shape=hexagon, color=black];
6695[label="41.207.122.97;d;1pkt 1fpkt", shape=hexagon, color=black];
9838[label="144.203.246.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.246.153:80, 41.207.122.97:35888}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35888: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3243--3244[label="1;1pkt 1fpkt"];
3243--6274[label="1;1pkt 1fpkt"];
3243--6695[label="1;1pkt 1fpkt"];
3243--9838[label="1;1pkt 1fpkt"];
3244--6274[label="1;1pkt 1fpkt"];
3244--6695[label="1;1pkt 1fpkt"];
3244--9838[label="1;1pkt 1fpkt"];
6274--6695[label="1;1pkt 1fpkt"];
6274--9838[label="1;1pkt 1fpkt"];
6695--9838[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.122.97" dst_port="35888" src_ip="144.203.246.153" src_port="80"/>
    </slice>
    <from sec="1229058444" usec="0"/>
    <to sec="1229058452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
3265[label="101.218.120.243;d;391pkt 391fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 101.218.120.243:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3265--3705[label="0.00657895;1pkt 1fpkt"];
3265--4534[label="0.0102041;1pkt 1fpkt"];
3265--5202[label="0.00290698;1pkt 1fpkt"];
3265--5434[label="0.00255754;1pkt 1fpkt"];
3265--6013[label="0.00255754;1pkt 1fpkt"];
3265--6071[label="0.00255754;1pkt 1fpkt"];
3265--6321[label="0.00398406;1pkt 1fpkt"];
3265--7125[label="0.00746269;1pkt 1fpkt"];
3265--7409[label="0.00255754;1pkt 1fpkt"];
3265--8291[label="0.00255754;1pkt 1fpkt"];
3265--8329[label="0.0030581;1pkt 1fpkt"];
3265--9488[label="0.00255754;1pkt 1fpkt"];
3265--10345[label="0.00255754;1pkt 1fpkt"];
3265--10664[label="0.00255754;1pkt 1fpkt"];
3265--10681[label="0.00304878;1pkt 1fpkt"];
3265--11252[label="0.00255754;1pkt 1fpkt"];
3265--11860[label="0.00304878;1pkt 1fpkt"];
3265--12070[label="0.00255754;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.218.120.243"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.134.85.218"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058737" usec="0"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
3285[label="214.137.41.239;d;377pkt 377fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.137.41.239:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3285--3705[label="0.00657895;1pkt 1fpkt"];
3285--5202[label="0.00290698;1pkt 1fpkt"];
3285--6013[label="0.00265252;1pkt 1fpkt"];
3285--6071[label="0.00265252;1pkt 1fpkt"];
3285--7125[label="0.00746269;1pkt 1fpkt"];
3285--7409[label="0.00265252;1pkt 1fpkt"];
3285--9488[label="0.00265252;1pkt 1fpkt"];
3285--10345[label="0.00265252;1pkt 1fpkt"];
3285--11252[label="0.00265252;1pkt 1fpkt"];
3285--12070[label="0.00265252;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.137.41.239"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.46.65.7"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
3176[label="133.72.132.142;s;18pkt 18fpkt", shape=diamond, color=yellow];
3380[label="41.207.116.139;d;6pkt 6fpkt", shape=diamond, color=yellow];
6489[label="41.207.116.139;d;6pkt 6fpkt", shape=hexagon, color=black];
7949[label="41.207.116.139;d;6pkt 6fpkt", shape=polygon, color=gold];
8705[label="128.81.213.40;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10873[label="128.81.213.40;14pkt 14fpkt", shape=invtriangle, color=brown];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.132.142:80, 49.59.37.195:*}[36.3636%]&lt;BR/&gt;{128.81.213.40:80, 41.207.125.66:*}[24.2424%]&lt;BR/&gt;{128.81.213.40:80, 41.207.116.139:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53759: (3.84615%)&lt;BR/&gt; 53461: (3.84615%)&lt;BR/&gt; 53046: (3.84615%)&lt;BR/&gt; 52424: (3.84615%)&gt;];
}
3176--3380[label="0.166667;1pkt 1fpkt"];
3176--6489[label="0.166667;1pkt 1fpkt"];
3176--6608[label="0.333333;6pkt 6fpkt"];
3176--7949[label="0.166667;1pkt 1fpkt"];
3380--6489[label="1;6pkt 6fpkt"];
3380--7949[label="1;6pkt 6fpkt"];
3380--8705[label="0.833333;5pkt 5fpkt"];
3380--10873[label="0.833333;5pkt 5fpkt"];
6489--7949[label="1;6pkt 6fpkt"];
6489--8705[label="0.833333;5pkt 5fpkt"];
6489--10873[label="0.833333;5pkt 5fpkt"];
7949--8705[label="0.833333;5pkt 5fpkt"];
7949--10873[label="0.833333;5pkt 5fpkt"];
8705--10873[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="49.59.37.195" src_ip="133.72.132.142" src_port="80"/>
      <filter dst_ip="41.207.116.139" src_ip="128.81.213.40" src_port="80"/>
      <filter dst_ip="41.207.125.66" src_ip="128.81.213.40" src_port="80"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.72.163.197"/>
      <from sec="1229058385" usec="0"/>
      <to sec="1229058590" usec="0"/>
    </slice>
    <from sec="1229058385" usec="0"/>
    <to sec="1229058590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
3555[label="214.56.229.99;s;11pkt 11fpkt", shape=diamond, color=yellow];
3556[label="6.163.40.26;d;11pkt 11fpkt", shape=diamond, color=yellow];
6674[label="6.163.40.26;d;11pkt 11fpkt", shape=hexagon, color=black];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.229.99:80, 6.163.40.26:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50393: (4.54545%)&lt;BR/&gt; 50385: (4.54545%)&lt;BR/&gt; 50383: (4.54545%)&lt;BR/&gt; 50377: (4.54545%)&gt;];
}
3555--3556[label="1;11pkt 11fpkt"];
3555--6674[label="1;11pkt 11fpkt"];
3556--6674[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="6.163.40.26" src_ip="214.56.229.99" src_port="80"/>
    </slice>
    <from sec="1229058391" usec="0"/>
    <to sec="1229058474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
3568[label="41.207.116.147;d;8pkt 8fpkt", shape=diamond, color=yellow];
3569[label="128.81.209.195;s;7pkt 7fpkt", shape=diamond, color=yellow];
6684[label="41.207.116.147;d;4pkt 4fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.209.195:80, 41.207.116.147:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63892: (7.89474%)&lt;BR/&gt; 62965: (7.89474%)&lt;BR/&gt; 40347: (7.89474%)&lt;BR/&gt; 63523: (5.26316%)&gt;];
}
3568--3569[label="1;7pkt 7fpkt"];
3568--6684[label="1;4pkt 4fpkt"];
3569--6684[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.147" src_ip="128.81.209.195" src_port="80"/>
    </slice>
    <from sec="1229058409" usec="0"/>
    <to sec="1229058803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,010,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
662[label="5.137.63.122;s;3060pkt 3060fpkt", shape=diamond, color=yellow];
3571[label="133.72.177.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
7123[label="5.137.63.122;s;2730pkt 2730fpkt", shape=hexagon, color=black];
8016[label="5.137.63.122;s;2730pkt 2730fpkt", shape=polygon, color=gold];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.137.63.122:7000, *:*}[99.9673%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (49.9941%)&lt;BR/&gt; 2306: (0.070406%)&lt;BR/&gt; 5381: (0.0528045%)&lt;BR/&gt; 36991: (0.0410702%)&lt;BR/&gt; 63067: (0.035203%)&gt;];
}
662--1427[label="0.00900901;1pkt 1fpkt"];
662--2837[label="0.00769231;1pkt 1fpkt"];
662--3571[label="0.5;1pkt 1fpkt"];
662--3726[label="0.00408163;1pkt 1fpkt"];
662--5747[label="0.00961538;1pkt 1fpkt"];
662--6304[label="0.00769231;1pkt 1fpkt"];
662--7123[label="1;2730pkt 2730fpkt"];
662--7416[label="0.00408163;1pkt 1fpkt"];
662--8016[label="1;2730pkt 2730fpkt"];
3571--5991[label="0.5;1pkt 1fpkt"];
3571--7123[label="0.5;1pkt 1fpkt"];
3571--8016[label="0.5;1pkt 1fpkt"];
7123--8016[label="1;2730pkt 2730fpkt"];
</description>
    <slice>
      <filter src_ip="5.137.63.122" src_port="7000"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12949,1.90726,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
78[label="174.194.19.213s;1pkt 1fpkt", shape=rectangle, color=red];
3608[label="219.61.26.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.19.213:4728, 219.61.26.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4728: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
78--1708[label="1;1pkt 1fpkt"];
78--3608[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.61.26.161" dst_port="80" src_ip="174.194.19.213" src_port="4728"/>
    </slice>
    <from sec="1229058410" usec="0"/>
    <to sec="1229058552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.72.219.6"/>
      <from sec="1229058495" usec="0"/>
      <to sec="1229058547" usec="0"/>
    </slice>
    <from sec="1229058495" usec="0"/>
    <to sec="1229058547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
3403[label="128.64.151.166;d;127pkt 127fpkt", shape=diamond, color=yellow];
3658[label="214.241.1.54;s;16pkt 16fpkt", shape=diamond, color=yellow];
6518[label="128.64.151.166;d;118pkt 118fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.151.166:16358}[73.6434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16358: (34.6743%)&lt;BR/&gt; 80: (9.1954%)&lt;BR/&gt; 0: (9.1954%)&lt;BR/&gt; 16001: (2.29885%)&lt;BR/&gt; 8080: (1.53257%)&gt;];
}
3403--3658[label="0.875;14pkt 14fpkt"];
3403--6518[label="1;118pkt 118fpkt"];
3658--6518[label="0.875;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.151.166" dst_port="16358"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
3635[label="133.72.177.65;d;5pkt 5fpkt", shape=diamond, color=yellow];
7046[label="133.72.177.65;d;5pkt 5fpkt", shape=hexagon, color=black];
10052[label="97.163.2.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11531[label="97.163.2.179;2pkt 2fpkt", shape=invtriangle, color=brown];
12191[label="97.163.2.179;2pkt 2fpkt", shape=invhouse, color=bisque];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.163.2.179:80, 133.72.177.65:3545}[20%]&lt;BR/&gt;{97.163.2.179:80, 133.72.177.65:3547}[20%]&lt;BR/&gt;{101.184.69.157:80, 133.72.177.65:3487}[20%]&lt;BR/&gt;{101.184.69.157:80, 133.72.177.65:3489}[20%]&lt;BR/&gt;{101.184.69.157:80, 133.72.177.65:3495}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3547: (15.625%)&lt;BR/&gt; 3545: (15.625%)&lt;BR/&gt; 3495: (6.25%)&lt;BR/&gt; 3489: (6.25%)&gt;];
}
3635--3696[label="0.6;3pkt 3fpkt"];
3635--7046[label="1;5pkt 5fpkt"];
3635--10052[label="1;2pkt 2fpkt"];
3635--11531[label="1;2pkt 2fpkt"];
3635--12191[label="1;2pkt 2fpkt"];
7046--10052[label="1;2pkt 2fpkt"];
7046--11531[label="1;2pkt 2fpkt"];
7046--12191[label="1;2pkt 2fpkt"];
10052--11531[label="1;2pkt 2fpkt"];
10052--12191[label="1;2pkt 2fpkt"];
11531--12191[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.177.65" dst_port="3495" src_ip="101.184.69.157" src_port="80"/>
      <filter dst_ip="133.72.177.65" dst_port="3489" src_ip="101.184.69.157" src_port="80"/>
      <filter dst_ip="133.72.177.65" dst_port="3487" src_ip="101.184.69.157" src_port="80"/>
      <filter dst_ip="133.72.177.65" dst_port="3547" src_ip="97.163.2.179" src_port="80"/>
      <filter dst_ip="133.72.177.65" dst_port="3545" src_ip="97.163.2.179" src_port="80"/>
    </slice>
    <from sec="1229058493" usec="0"/>
    <to sec="1229058818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
1895[label="169.18.165.190;d;456pkt 456fpkt", shape=diamond, color=yellow];
3713[label="41.142.25.25;s;23pkt 23fpkt", shape=diamond, color=yellow];
6391[label="169.18.165.190;d;347pkt 347fpkt", shape=hexagon, color=black];
8533[label="41.142.25.25;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10787[label="41.142.25.25;24pkt 24fpkt", shape=invtriangle, color=brown];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.153.57.136:6667, 169.18.165.190:*}[94.9896%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (45.8238%)&lt;BR/&gt; 5050: (3.71854%)&lt;BR/&gt; 1172: (0.286041%)&lt;BR/&gt; 1150: (0.286041%)&lt;BR/&gt; 1113: (0.286041%)&gt;];
}
1895--3713[label="0.0434783;1pkt 1fpkt"];
1895--4923[label="0.557018;254pkt 254fpkt"];
1895--6391[label="1;347pkt 347fpkt"];
1895--8533[label="0.0416667;1pkt 1fpkt"];
1895--9657[label="0.997807;455pkt 455fpkt"];
1895--10787[label="0.0416667;1pkt 1fpkt"];
1895--11330[label="0.997807;455pkt 455fpkt"];
3713--6391[label="0.0434783;1pkt 1fpkt"];
3713--8132[label="0.913043;21pkt 21fpkt"];
3713--8181[label="0.913043;21pkt 21fpkt"];
3713--8220[label="0.913043;21pkt 21fpkt"];
3713--8533[label="1;23pkt 23fpkt"];
3713--10787[label="1;23pkt 23fpkt"];
6391--8533[label="0.0416667;1pkt 1fpkt"];
6391--9657[label="0.997118;346pkt 346fpkt"];
6391--10787[label="0.0416667;1pkt 1fpkt"];
6391--11330[label="0.997118;346pkt 346fpkt"];
8533--10787[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.165.190" src_ip="152.153.57.136" src_port="6667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
4052[label="101.22.181.140;s;35pkt 35fpkt", shape=diamond, color=yellow];
7088[label="101.22.181.140;s;35pkt 35fpkt", shape=hexagon, color=black];
9711[label="101.22.181.140;35pkt 35fpkt", shape=pentagon, color=darkviolet];
11357[label="101.22.181.140;35pkt 35fpkt", shape=invtriangle, color=brown];
12119[label="101.22.181.140;35pkt 35fpkt", shape=invhouse, color=bisque];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.22.181.140:80, 214.49.185.136:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26370: (1.42857%)&lt;BR/&gt; 26369: (1.42857%)&lt;BR/&gt; 26368: (1.42857%)&lt;BR/&gt; 26367: (1.42857%)&gt;];
}
4052--7088[label="1;35pkt 35fpkt"];
4052--9711[label="1;35pkt 35fpkt"];
4052--11357[label="1;35pkt 35fpkt"];
4052--12119[label="1;35pkt 35fpkt"];
7088--9711[label="1;35pkt 35fpkt"];
7088--11357[label="1;35pkt 35fpkt"];
7088--12119[label="1;35pkt 35fpkt"];
9711--11357[label="1;35pkt 35fpkt"];
9711--12119[label="1;35pkt 35fpkt"];
11357--12119[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.136" src_ip="101.22.181.140" src_port="80"/>
    </slice>
    <from sec="1229058593" usec="0"/>
    <to sec="1229058680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1892[label="128.64.65.174;s;691pkt 691fpkt", shape=diamond, color=yellow];
10011[label="128.64.65.174;764pkt 764fpkt", shape=pentagon, color=darkviolet];
11511[label="128.64.65.174;764pkt 764fpkt", shape=invtriangle, color=brown];
12183[label="128.64.65.174;764pkt 764fpkt", shape=invhouse, color=bisque];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.65.174:*, *:53}[59.8168%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.819%)&lt;BR/&gt; 25: (9.52062%)&lt;BR/&gt; 113: (9.05129%)&lt;BR/&gt; 24441: (0.804559%)&lt;BR/&gt; 2703: (0.804559%)&gt;];
}
1892--2430[label="0.00434153;3pkt 3fpkt"];
1892--2468[label="0.00723589;5pkt 5fpkt"];
1892--2891[label="0.00434153;3pkt 3fpkt"];
1892--2928[label="0.00289436;2pkt 2fpkt"];
1892--2936[label="0.00289436;2pkt 2fpkt"];
1892--3304[label="0.00723589;5pkt 5fpkt"];
1892--3372[label="0.00868307;6pkt 6fpkt"];
1892--3729[label="0.027933;5pkt 5fpkt"];
1892--3735[label="0.0064;4pkt 4fpkt"];
1892--3745[label="0.00302572;2pkt 2fpkt"];
1892--4490[label="0.0154867;7pkt 7fpkt"];
1892--4573[label="0.037037;1pkt 1fpkt"];
1892--6284[label="0.00578871;4pkt 4fpkt"];
1892--6405[label="0.00434153;3pkt 3fpkt"];
1892--7166[label="0.00289436;2pkt 2fpkt"];
1892--7443[label="0.00302572;2pkt 2fpkt"];
1892--7454[label="0.00289436;2pkt 2fpkt"];
1892--7485[label="0.00868307;6pkt 6fpkt"];
1892--7582[label="0.037037;1pkt 1fpkt"];
1892--8056[label="0.00578871;4pkt 4fpkt"];
1892--8153[label="0.00868307;6pkt 6fpkt"];
1892--8164[label="0.0188133;13pkt 13fpkt"];
1892--8196[label="0.00868307;6pkt 6fpkt"];
1892--8207[label="0.0188133;13pkt 13fpkt"];
1892--8229[label="0.00868307;6pkt 6fpkt"];
1892--8240[label="0.0188133;13pkt 13fpkt"];
1892--10011[label="1;691pkt 691fpkt"];
1892--11511[label="1;691pkt 691fpkt"];
1892--12183[label="1;691pkt 691fpkt"];
10011--11511[label="1;764pkt 764fpkt"];
10011--12183[label="1;764pkt 764fpkt"];
11511--12183[label="1;764pkt 764fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.64.65.174"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
290[label="174.194.19.12;d;147pkt 147fpkt", shape=diamond, color=yellow];
687[label="200.216.51.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
773[label="45.6.125.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
1065[label="37.148.187.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1127[label="1.214.64.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
1435[label="201.184.187.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
2057[label="7.100.31.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
3251[label="100.180.193.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
3732[label="100.221.90.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
4817[label="174.194.19.12;d;126pkt 126fpkt", shape=hexagon, color=black];
5219[label="45.6.125.127;s;1pkt 1fpkt", shape=hexagon, color=black];
5297[label="37.148.187.1;s;1pkt 1fpkt", shape=hexagon, color=black];
5584[label="7.100.31.27;s;1pkt 1fpkt", shape=hexagon, color=black];
6350[label="200.216.51.51;s;1pkt 1fpkt", shape=hexagon, color=black];
6390[label="201.184.187.227;s;1pkt 1fpkt", shape=hexagon, color=black];
6698[label="100.180.193.24;s;1pkt 1fpkt", shape=hexagon, color=black];
7232[label="1.214.64.126;s;1pkt 1fpkt", shape=hexagon, color=black];
8811[label="200.216.51.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9222[label="101.208.72.88;50pkt 50fpkt", shape=pentagon, color=darkviolet];
9577[label="45.6.125.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9642[label="21.17.160.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11291[label="45.6.125.127;1pkt 1fpkt", shape=invtriangle, color=brown];
12090[label="45.6.125.127;1pkt 1fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.208.72.88:80, 174.194.19.12:*}[33.1126%]&lt;BR/&gt;{*:17788, 174.194.19.12:*}[28.4768%]&lt;BR/&gt;{*:*, 174.194.19.12:12014}[23.8411%]&lt;BR/&gt;{*:*, 174.194.19.12:12015}[21.8543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.5131%)&lt;BR/&gt; 12014: (12.828%)&lt;BR/&gt; 17788: (12.5364%)&lt;BR/&gt; 12015: (9.47522%)&lt;BR/&gt; 1478: (5.68513%)&gt;];
}
290--687[label="1;1pkt 1fpkt"];
290--773[label="1;1pkt 1fpkt"];
290--1065[label="1;1pkt 1fpkt"];
290--1127[label="1;1pkt 1fpkt"];
290--1435[label="1;1pkt 1fpkt"];
290--2057[label="1;1pkt 1fpkt"];
290--3251[label="1;1pkt 1fpkt"];
290--3732[label="1;1pkt 1fpkt"];
290--4451[label="1;1pkt 1fpkt"];
290--4817[label="1;126pkt 126fpkt"];
290--5219[label="1;1pkt 1fpkt"];
290--5297[label="1;1pkt 1fpkt"];
290--5584[label="1;1pkt 1fpkt"];
290--6350[label="1;1pkt 1fpkt"];
290--6390[label="1;1pkt 1fpkt"];
290--6698[label="1;1pkt 1fpkt"];
290--7232[label="1;1pkt 1fpkt"];
290--7723[label="1;1pkt 1fpkt"];
290--8131[label="0.0204082;3pkt 3fpkt"];
290--8180[label="0.0204082;3pkt 3fpkt"];
290--8219[label="0.0204082;3pkt 3fpkt"];
290--8811[label="1;1pkt 1fpkt"];
290--9222[label="0.92;46pkt 46fpkt"];
290--9577[label="1;1pkt 1fpkt"];
290--9642[label="1;1pkt 1fpkt"];
290--11291[label="1;1pkt 1fpkt"];
290--12090[label="1;1pkt 1fpkt"];
687--4817[label="1;1pkt 1fpkt"];
687--6350[label="1;1pkt 1fpkt"];
687--8811[label="1;1pkt 1fpkt"];
773--4817[label="1;1pkt 1fpkt"];
773--5219[label="1;1pkt 1fpkt"];
773--9577[label="1;1pkt 1fpkt"];
773--11291[label="1;1pkt 1fpkt"];
773--12090[label="1;1pkt 1fpkt"];
1065--4817[label="1;1pkt 1fpkt"];
1065--5297[label="1;1pkt 1fpkt"];
1127--4817[label="1;1pkt 1fpkt"];
1127--7232[label="1;1pkt 1fpkt"];
1435--4817[label="1;1pkt 1fpkt"];
1435--6390[label="1;1pkt 1fpkt"];
2057--4817[label="1;1pkt 1fpkt"];
2057--5584[label="1;1pkt 1fpkt"];
3251--4817[label="1;1pkt 1fpkt"];
3251--6698[label="1;1pkt 1fpkt"];
3732--4817[label="1;1pkt 1fpkt"];
4817--5219[label="1;1pkt 1fpkt"];
4817--5297[label="1;1pkt 1fpkt"];
4817--5584[label="1;1pkt 1fpkt"];
4817--6350[label="1;1pkt 1fpkt"];
4817--6390[label="1;1pkt 1fpkt"];
4817--6698[label="1;1pkt 1fpkt"];
4817--7232[label="1;1pkt 1fpkt"];
4817--8131[label="0.0238095;3pkt 3fpkt"];
4817--8180[label="0.0238095;3pkt 3fpkt"];
4817--8219[label="0.0238095;3pkt 3fpkt"];
4817--8811[label="1;1pkt 1fpkt"];
4817--9222[label="0.62;31pkt 31fpkt"];
4817--9577[label="1;1pkt 1fpkt"];
4817--9642[label="1;1pkt 1fpkt"];
4817--11291[label="1;1pkt 1fpkt"];
4817--12090[label="1;1pkt 1fpkt"];
5219--9577[label="1;1pkt 1fpkt"];
5219--11291[label="1;1pkt 1fpkt"];
5219--12090[label="1;1pkt 1fpkt"];
6350--8811[label="1;1pkt 1fpkt"];
9577--11291[label="1;1pkt 1fpkt"];
9577--12090[label="1;1pkt 1fpkt"];
11291--12090[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.12" src_port="17788"/>
      <filter dst_ip="174.194.19.12" dst_port="12014"/>
      <filter dst_ip="174.194.19.12" dst_port="12015"/>
      <filter dst_ip="174.194.19.12" src_ip="101.208.72.88" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
911[label="154.79.11.252;d;5671pkt 5671fpkt", shape=diamond, color=yellow];
3302[label="0.33.190.107;s;798pkt 798fpkt", shape=diamond, color=yellow];
3364[label="100.131.104.189;s;823pkt 823fpkt", shape=diamond, color=yellow];
6473[label="100.131.104.189;s;724pkt 724fpkt", shape=hexagon, color=black];
7421[label="0.33.190.107;s;798pkt 798fpkt", shape=hexagon, color=black];
8894[label="0.0.224.59;177pkt 177fpkt", shape=pentagon, color=darkviolet];
10144[label="1.4.9.192;266pkt 266fpkt", shape=pentagon, color=darkviolet];
10712[label="5.144.16.11;332pkt 332fpkt", shape=invtriangle, color=brown];
10975[label="0.0.224.59;177pkt 177fpkt", shape=invtriangle, color=brown];
11588[label="1.4.9.192;266pkt 266fpkt", shape=invtriangle, color=brown];
11976[label="0.0.224.59;176pkt 176fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 154.79.11.252:62997}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62997: (50%)&lt;BR/&gt; 4801: (0.0685737%)&lt;BR/&gt; 4802: (0.0587774%)&lt;BR/&gt; 4707: (0.0587774%)&lt;BR/&gt; 4543: (0.0587774%)&gt;];
}
911--2963[label="1;890pkt 890fpkt"];
911--3302[label="1;798pkt 798fpkt"];
911--3364[label="1;823pkt 823fpkt"];
911--3778[label="1;662pkt 662fpkt"];
911--6122[label="1;890pkt 890fpkt"];
911--6473[label="1;724pkt 724fpkt"];
911--7421[label="1;798pkt 798fpkt"];
911--8126[label="0.184987;345pkt 345fpkt"];
911--8158[label="0.140227;358pkt 358fpkt"];
911--8202[label="0.140227;358pkt 358fpkt"];
911--8235[label="0.140564;359pkt 359fpkt"];
911--8894[label="0.920904;163pkt 163fpkt"];
911--9706[label="0.931373;475pkt 475fpkt"];
911--10144[label="0.921053;245pkt 245fpkt"];
911--10712[label="0.978916;325pkt 325fpkt"];
911--10975[label="0.920904;163pkt 163fpkt"];
911--11355[label="0.931373;475pkt 475fpkt"];
911--11588[label="0.921053;245pkt 245fpkt"];
911--11976[label="0.920455;162pkt 162fpkt"];
3302--7421[label="1;798pkt 798fpkt"];
3302--8126[label="0.0626566;50pkt 50fpkt"];
3302--8158[label="0.0626566;50pkt 50fpkt"];
3302--8202[label="0.0626566;50pkt 50fpkt"];
3302--8235[label="0.0626566;50pkt 50fpkt"];
3364--6473[label="1;724pkt 724fpkt"];
3364--8126[label="0.0668287;55pkt 55fpkt"];
3364--8158[label="0.0558931;46pkt 46fpkt"];
3364--8202[label="0.0558931;46pkt 46fpkt"];
3364--8235[label="0.0558931;46pkt 46fpkt"];
6473--8126[label="0.0759669;55pkt 55fpkt"];
6473--8158[label="0.00276243;2pkt 2fpkt"];
6473--8202[label="0.00276243;2pkt 2fpkt"];
6473--8235[label="0.00276243;2pkt 2fpkt"];
7421--8126[label="0.0626566;50pkt 50fpkt"];
7421--8158[label="0.0626566;50pkt 50fpkt"];
7421--8202[label="0.0626566;50pkt 50fpkt"];
7421--8235[label="0.0626566;50pkt 50fpkt"];
8894--10975[label="1;177pkt 177fpkt"];
8894--11976[label="1;176pkt 176fpkt"];
10144--11588[label="1;266pkt 266fpkt"];
10975--11976[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.11.252" dst_port="62997"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
3779[label="215.40.227.40;d;157pkt 157fpkt", shape=diamond, color=yellow];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.40.227.40:57228}[98.0892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57228: (49.0446%)&lt;BR/&gt; 0: (0.636943%)&lt;BR/&gt; 64679: (0.318471%)&lt;BR/&gt; 64503: (0.318471%)&lt;BR/&gt; 64295: (0.318471%)&gt;];
}
3779--4864[label="0.00636943;1pkt 1fpkt"];
3779--5423[label="0.00636943;1pkt 1fpkt"];
3779--8509[label="0.00636943;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.227.40" dst_port="57228"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.64.198.221"/>
      <from sec="1229058008" usec="0"/>
      <to sec="1229058826" usec="0"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
3893[label="210.201.22.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
3894[label="133.72.171.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
6953[label="210.201.22.228;d;1pkt 1fpkt", shape=hexagon, color=black];
6954[label="133.72.171.215;s;1pkt 1fpkt", shape=hexagon, color=black];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.171.215:1086, 210.201.22.228:5190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 1086: (50%)&gt;];
}
3893--3894[label="1;1pkt 1fpkt"];
3893--6953[label="1;1pkt 1fpkt"];
3893--6954[label="1;1pkt 1fpkt"];
3894--6953[label="1;1pkt 1fpkt"];
3894--6954[label="1;1pkt 1fpkt"];
6953--6954[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.201.22.228" dst_port="5190" src_ip="133.72.171.215" src_port="1086"/>
    </slice>
    <from sec="1229058066" usec="0"/>
    <to sec="1229058800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
3178[label="200.137.165.145;d;54pkt 54fpkt", shape=diamond, color=yellow];
3926[label="133.72.163.197;s;67pkt 67fpkt", shape=diamond, color=yellow];
7001[label="133.72.163.197;s;67pkt 67fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.163.197:*, 200.137.165.145:80}[80.597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2576: (0.797872%)&lt;BR/&gt; 2574: (0.797872%)&lt;BR/&gt; 2572: (0.797872%)&lt;BR/&gt; 2570: (0.797872%)&gt;];
}
3178--3926[label="1;54pkt 54fpkt"];
3178--7001[label="1;54pkt 54fpkt"];
3926--7001[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="200.137.165.145" dst_port="80" src_ip="133.72.163.197"/>
    </slice>
    <from sec="1229058385" usec="0"/>
    <to sec="1229058590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.90.40.74"/>
      <from sec="1229058393" usec="0"/>
      <to sec="1229058630" usec="0"/>
    </slice>
    <from sec="1229058393" usec="0"/>
    <to sec="1229058630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1823[label="174.194.91.19;s;7pkt 7fpkt", shape=diamond, color=yellow];
1824[label="96.173.21.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
3959[label="206.54.22.32;d;4pkt 4fpkt", shape=diamond, color=yellow];
6314[label="174.194.91.19;s;4pkt 4fpkt", shape=hexagon, color=black];
6753[label="96.173.21.220;d;1pkt 1fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.91.19:*, 206.54.22.32:80}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62338: (11.7647%)&lt;BR/&gt; 62402: (8.82353%)&lt;BR/&gt; 62401: (8.82353%)&lt;BR/&gt; 62443: (5.88235%)&gt;];
}
1823--1824[label="1;1pkt 1fpkt"];
1823--3959[label="1;4pkt 4fpkt"];
1823--4125[label="0.142857;1pkt 1fpkt"];
1823--6314[label="1;4pkt 4fpkt"];
1823--6753[label="1;1pkt 1fpkt"];
1823--8119[label="0.142857;1pkt 1fpkt"];
1823--8134[label="0.142857;1pkt 1fpkt"];
1823--8165[label="0.142857;1pkt 1fpkt"];
1823--8208[label="0.142857;1pkt 1fpkt"];
1823--8241[label="0.142857;1pkt 1fpkt"];
1824--6314[label="1;1pkt 1fpkt"];
1824--6753[label="1;1pkt 1fpkt"];
1824--8119[label="1;1pkt 1fpkt"];
1824--8134[label="1;1pkt 1fpkt"];
3959--6314[label="0.5;2pkt 2fpkt"];
3959--8165[label="0.25;1pkt 1fpkt"];
3959--8208[label="0.25;1pkt 1fpkt"];
3959--8241[label="0.25;1pkt 1fpkt"];
6314--6753[label="1;1pkt 1fpkt"];
6314--8119[label="0.25;1pkt 1fpkt"];
6314--8134[label="0.25;1pkt 1fpkt"];
6753--8119[label="1;1pkt 1fpkt"];
6753--8134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.54.22.32" dst_port="80" src_ip="174.194.91.19"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
3539[label="128.64.117.102;s;8pkt 8fpkt", shape=diamond, color=yellow];
3972[label="34.227.28.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
9362[label="128.64.117.102;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11198[label="128.64.117.102;17pkt 17fpkt", shape=invtriangle, color=brown];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.117.102:*, *:25}[70.5882%]&lt;BR/&gt;{128.64.117.102:995, *:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.3953%)&lt;BR/&gt; 995: (18.6047%)&lt;BR/&gt; 56625: (4.65116%)&lt;BR/&gt; 57939: (3.48837%)&lt;BR/&gt; 50326: (3.48837%)&gt;];
}
3539--3972[label="1;1pkt 1fpkt"];
3539--9362[label="1;8pkt 8fpkt"];
3539--11198[label="1;8pkt 8fpkt"];
3972--9362[label="1;1pkt 1fpkt"];
3972--11198[label="1;1pkt 1fpkt"];
9362--11198[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.117.102" src_port="995"/>
      <filter dst_port="25" src_ip="128.64.117.102"/>
    </slice>
    <from sec="1229058350" usec="0"/>
    <to sec="1229058848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
3461[label="128.208.178.103;d;221pkt 221fpkt", shape=diamond, color=yellow];
4385[label="116.52.128.202;s;4pkt 4fpkt", shape=diamond, color=yellow];
8431[label="56.152.245.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9115[label="116.52.128.78;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10240[label="116.52.128.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10744[label="56.152.245.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.51.37.32:80, 128.208.178.103:*}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3671%)&lt;BR/&gt; 4833: (0.632911%)&lt;BR/&gt; 4832: (0.632911%)&lt;BR/&gt; 4824: (0.632911%)&lt;BR/&gt; 4820: (0.632911%)&gt;];
}
3461--3694[label="1;12pkt 12fpkt"];
3461--3985[label="1;130pkt 130fpkt"];
3461--4383[label="1;6pkt 6fpkt"];
3461--4385[label="1;4pkt 4fpkt"];
3461--6145[label="0.00904977;2pkt 2fpkt"];
3461--6567[label="1;194pkt 194fpkt"];
3461--7703[label="1;6pkt 6fpkt"];
3461--8132[label="0.00452489;1pkt 1fpkt"];
3461--8181[label="0.00452489;1pkt 1fpkt"];
3461--8220[label="0.00452489;1pkt 1fpkt"];
3461--8431[label="1;3pkt 3fpkt"];
3461--9115[label="1;3pkt 3fpkt"];
3461--9852[label="1;12pkt 12fpkt"];
3461--10240[label="1;4pkt 4fpkt"];
3461--10744[label="1;2pkt 2fpkt"];
3461--11427[label="1;12pkt 12fpkt"];
4385--10240[label="1;4pkt 4fpkt"];
8431--10744[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.178.103" src_ip="215.51.37.32" src_port="80"/>
    </slice>
    <from sec="1229058027" usec="0"/>
    <to sec="1229058825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
3934[label="128.64.5.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
3994[label="42.236.33.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
7066[label="42.236.33.85;s;1pkt 1fpkt", shape=hexagon, color=black];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.33.85:80, 128.64.5.162:60513}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60513: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3934--3994[label="1;1pkt 1fpkt"];
3934--7066[label="1;1pkt 1fpkt"];
3994--7066[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.5.162" dst_port="60513" src_ip="42.236.33.85" src_port="80"/>
    </slice>
    <from sec="1229058395" usec="0"/>
    <to sec="1229058782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
4019[label="128.64.244.120;d;24pkt 24fpkt", shape=diamond, color=yellow];
4024[label="45.142.236.239;s;22pkt 22fpkt", shape=diamond, color=yellow];
4030[label="128.64.4.78;d;3pkt 3fpkt", shape=diamond, color=yellow];
4326[label="45.142.236.247;s;6pkt 6fpkt", shape=diamond, color=yellow];
7075[label="128.64.244.120;d;24pkt 24fpkt", shape=hexagon, color=black];
7077[label="45.142.236.239;s;22pkt 22fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.142.236.239:80, 128.64.244.120:*}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49777: (1.9802%)&lt;BR/&gt; 49766: (1.9802%)&lt;BR/&gt; 49764: (1.9802%)&lt;BR/&gt; 49753: (1.9802%)&gt;];
}
4019--4024[label="0.954545;21pkt 21fpkt"];
4019--4326[label="0.166667;1pkt 1fpkt"];
4019--7075[label="1;24pkt 24fpkt"];
4019--7077[label="0.954545;21pkt 21fpkt"];
4024--4030[label="0.333333;1pkt 1fpkt"];
4024--7075[label="0.954545;21pkt 21fpkt"];
4024--7077[label="1;22pkt 22fpkt"];
4030--7026[label="0.666667;2pkt 2fpkt"];
4030--7077[label="0.333333;1pkt 1fpkt"];
4326--4354[label="0.333333;1pkt 1fpkt"];
4326--5702[label="0.5;3pkt 3fpkt"];
4326--7075[label="0.166667;1pkt 1fpkt"];
4326--7480[label="0.166667;1pkt 1fpkt"];
7075--7077[label="0.954545;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.244.120" src_ip="45.142.236.239" src_port="80"/>
    </slice>
    <from sec="1229058573" usec="0"/>
    <to sec="1229058782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
4026[label="223.116.67.107;s;18pkt 18fpkt", shape=diamond, color=yellow];
4027[label="133.72.199.40;d;17pkt 17fpkt", shape=diamond, color=yellow];
7078[label="133.72.199.40;d;10pkt 10fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.116.67.107:443, 133.72.199.40:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3923: (3.33333%)&lt;BR/&gt; 3922: (3.33333%)&lt;BR/&gt; 3921: (3.33333%)&lt;BR/&gt; 3920: (3.33333%)&gt;];
}
4026--4027[label="1;17pkt 17fpkt"];
4026--7078[label="1;10pkt 10fpkt"];
4027--7078[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.199.40" src_ip="223.116.67.107" src_port="443"/>
    </slice>
    <from sec="1229058578" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
3986[label="128.208.246.49;d;197pkt 197fpkt", shape=diamond, color=yellow];
4049[label="1.235.34.39;s;113pkt 113fpkt", shape=diamond, color=yellow];
7311[label="128.208.246.49;d;188pkt 188fpkt", shape=hexagon, color=black];
8341[label="201.166.50.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10689[label="201.166.50.8;3pkt 3fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.235.34.39:80, 128.208.246.49:*}[57.3604%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53573: (0.396825%)&lt;BR/&gt; 53572: (0.396825%)&lt;BR/&gt; 53571: (0.396825%)&lt;BR/&gt; 53748: (0.297619%)&gt;];
}
3986--4049[label="1;113pkt 113fpkt"];
3986--7311[label="1;188pkt 188fpkt"];
3986--8341[label="1;3pkt 3fpkt"];
3986--10689[label="1;3pkt 3fpkt"];
4049--7311[label="1;113pkt 113fpkt"];
7311--8341[label="1;3pkt 3fpkt"];
7311--10689[label="1;3pkt 3fpkt"];
8341--10689[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.246.49" src_ip="1.235.34.39" src_port="80"/>
    </slice>
    <from sec="1229058545" usec="0"/>
    <to sec="1229058821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
4047[label="128.81.55.180;s;3pkt 3fpkt", shape=diamond, color=yellow];
4051[label="41.207.125.64;d;3pkt 3fpkt", shape=diamond, color=yellow];
7085[label="128.81.55.180;s;3pkt 3fpkt", shape=hexagon, color=black];
7087[label="41.207.125.64;d;3pkt 3fpkt", shape=hexagon, color=black];
9730[label="144.203.115.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.1.138:80, 41.207.125.64:63188}[20%]&lt;BR/&gt;{144.203.115.142:80, 41.207.125.64:64514}[20%]&lt;BR/&gt;{128.81.55.180:53, 41.207.122.54:64791}[20%]&lt;BR/&gt;{128.81.55.180:53, 41.207.125.254:57030}[20%]&lt;BR/&gt;{128.81.55.180:80, 41.207.125.64:51039}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 51039: (15.3846%)&lt;BR/&gt; 53: (15.3846%)&lt;BR/&gt; 64514: (11.5385%)&lt;BR/&gt; 64791: (7.69231%)&gt;];
}
4047--4051[label="0.333333;1pkt 1fpkt"];
4047--7085[label="1;3pkt 3fpkt"];
4047--7087[label="0.333333;1pkt 1fpkt"];
4051--7085[label="0.333333;1pkt 1fpkt"];
4051--7087[label="1;3pkt 3fpkt"];
4051--9730[label="1;1pkt 1fpkt"];
7085--7087[label="0.333333;1pkt 1fpkt"];
7087--9730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.64" dst_port="51039" src_ip="128.81.55.180" src_port="80"/>
      <filter dst_ip="41.207.125.254" dst_port="57030" src_ip="128.81.55.180" src_port="53"/>
      <filter dst_ip="41.207.122.54" dst_port="64791" src_ip="128.81.55.180" src_port="53"/>
      <filter dst_ip="41.207.125.64" dst_port="64514" src_ip="144.203.115.142" src_port="80"/>
      <filter dst_ip="41.207.125.64" dst_port="63188" src_ip="128.81.1.138" src_port="80"/>
    </slice>
    <from sec="1229058592" usec="0"/>
    <to sec="1229058746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
245[label="133.72.144.202;d;4pkt 4fpkt", shape=diamond, color=yellow];
248[label="160.223.79.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
4066[label="192.208.53.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
4807[label="133.72.144.202;d;1pkt 1fpkt", shape=hexagon, color=black];
4808[label="160.223.79.184;s;1pkt 1fpkt", shape=hexagon, color=black];
10093[label="160.223.79.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.208.53.0:80, 133.72.144.202:2179}[25%]&lt;BR/&gt;{160.223.79.184:80, 133.72.144.202:2003}[25%]&lt;BR/&gt;{45.157.45.13:80, 133.72.144.202:2157}[25%]&lt;BR/&gt;{45.157.45.13:80, 133.72.144.202:2161}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2003: (27.7778%)&lt;BR/&gt; 2179: (11.1111%)&lt;BR/&gt; 2161: (5.55556%)&lt;BR/&gt; 2157: (5.55556%)&gt;];
}
245--248[label="1;1pkt 1fpkt"];
245--4066[label="1;1pkt 1fpkt"];
245--4807[label="1;1pkt 1fpkt"];
245--4808[label="1;1pkt 1fpkt"];
245--8131[label="0.25;1pkt 1fpkt"];
245--8180[label="0.25;1pkt 1fpkt"];
245--8219[label="0.25;1pkt 1fpkt"];
245--10093[label="1;1pkt 1fpkt"];
248--4807[label="1;1pkt 1fpkt"];
248--4808[label="1;1pkt 1fpkt"];
248--8131[label="1;1pkt 1fpkt"];
248--8180[label="1;1pkt 1fpkt"];
248--8219[label="1;1pkt 1fpkt"];
248--10093[label="1;1pkt 1fpkt"];
4807--4808[label="1;1pkt 1fpkt"];
4807--8131[label="1;1pkt 1fpkt"];
4807--8180[label="1;1pkt 1fpkt"];
4807--8219[label="1;1pkt 1fpkt"];
4807--10093[label="1;1pkt 1fpkt"];
4808--8131[label="1;1pkt 1fpkt"];
4808--8180[label="1;1pkt 1fpkt"];
4808--8219[label="1;1pkt 1fpkt"];
4808--10093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.144.202" dst_port="2161" src_ip="45.157.45.13" src_port="80"/>
      <filter dst_ip="133.72.144.202" dst_port="2157" src_ip="45.157.45.13" src_port="80"/>
      <filter dst_ip="133.72.144.202" dst_port="2003" src_ip="160.223.79.184" src_port="80"/>
      <filter dst_ip="133.72.144.202" dst_port="2179" src_ip="192.208.53.0" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
3958[label="208.165.28.181;s;4pkt 4fpkt", shape=diamond, color=yellow];
10070[label="208.165.28.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11540[label="208.165.28.181;1pkt 1fpkt", shape=invtriangle, color=brown];
12195[label="208.165.28.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.165.28.181:80, 172.45.83.53:2400}[25%]&lt;BR/&gt;{208.165.28.181:80, 172.45.83.53:2403}[25%]&lt;BR/&gt;{208.165.28.181:80, 172.45.83.53:2405}[25%]&lt;BR/&gt;{208.165.28.181:80, 172.45.83.53:2407}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2407: (28.5714%)&lt;BR/&gt; 2405: (7.14286%)&lt;BR/&gt; 2403: (7.14286%)&lt;BR/&gt; 2400: (7.14286%)&gt;];
}
3958--4949[label="1;4pkt 4fpkt"];
3958--7045[label="1;2pkt 2fpkt"];
3958--10070[label="1;1pkt 1fpkt"];
3958--11540[label="1;1pkt 1fpkt"];
3958--12195[label="1;1pkt 1fpkt"];
10070--11540[label="1;1pkt 1fpkt"];
10070--12195[label="1;1pkt 1fpkt"];
11540--12195[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.83.53" dst_port="2407" src_ip="208.165.28.181" src_port="80"/>
      <filter dst_ip="172.45.83.53" dst_port="2405" src_ip="208.165.28.181" src_port="80"/>
      <filter dst_ip="172.45.83.53" dst_port="2403" src_ip="208.165.28.181" src_port="80"/>
      <filter dst_ip="172.45.83.53" dst_port="2400" src_ip="208.165.28.181" src_port="80"/>
    </slice>
    <from sec="1229058489" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.64.203.76"/>
      <from sec="1229058001" usec="0"/>
      <to sec="1229058809" usec="0"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="206.150.64.122"/>
      <from sec="1229058002" usec="0"/>
      <to sec="1229058827" usec="0"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1027[label="154.79.242.186;d;5311pkt 5311fpkt", shape=diamond, color=yellow];
4188[label="7.140.101.123;s;536pkt 536fpkt", shape=diamond, color=yellow];
7204[label="7.140.101.123;s;536pkt 536fpkt", shape=hexagon, color=black];
7524[label="100.42.144.39;s;585pkt 585fpkt", shape=hexagon, color=black];
8568[label="7.142.153.28;675pkt 675fpkt", shape=pentagon, color=darkviolet];
9556[label="7.140.101.123;574pkt 574fpkt", shape=pentagon, color=darkviolet];
11282[label="7.140.101.123;574pkt 574fpkt", shape=invtriangle, color=brown];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.45.97.153:*, 154.79.242.186:62997}[45.69%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62997: (49.9943%)&lt;BR/&gt; 4644: (0.062564%)&lt;BR/&gt; 4070: (0.062564%)&lt;BR/&gt; 3238: (0.062564%)&lt;BR/&gt; 4268: (0.0568764%)&gt;];
}
1027--1372[label="0.000346741;1pkt 1fpkt"];
1027--1582[label="1;2335pkt 2335fpkt"];
1027--3837[label="1;618pkt 618fpkt"];
1027--4188[label="1;536pkt 536fpkt"];
1027--4190[label="1;585pkt 585fpkt"];
1027--5210[label="0.000346741;1pkt 1fpkt"];
1027--7204[label="1;536pkt 536fpkt"];
1027--7524[label="1;585pkt 585fpkt"];
1027--8126[label="0.150134;280pkt 280fpkt"];
1027--8158[label="0.220917;564pkt 564fpkt"];
1027--8202[label="0.220917;564pkt 564fpkt"];
1027--8235[label="0.22083;564pkt 564fpkt"];
1027--8568[label="0.915556;618pkt 618fpkt"];
1027--9556[label="0.933798;536pkt 536fpkt"];
1027--9811[label="0.000318979;1pkt 1fpkt"];
1027--11282[label="0.933798;536pkt 536fpkt"];
4188--7204[label="1;536pkt 536fpkt"];
4188--8126[label="0.0522388;28pkt 28fpkt"];
4188--8158[label="0.0858209;46pkt 46fpkt"];
4188--8202[label="0.0858209;46pkt 46fpkt"];
4188--8235[label="0.0858209;46pkt 46fpkt"];
4188--9556[label="1;536pkt 536fpkt"];
4188--11282[label="1;536pkt 536fpkt"];
7204--8126[label="0.0522388;28pkt 28fpkt"];
7204--8158[label="0.0858209;46pkt 46fpkt"];
7204--8202[label="0.0858209;46pkt 46fpkt"];
7204--8235[label="0.0858209;46pkt 46fpkt"];
7204--9556[label="1;536pkt 536fpkt"];
7204--11282[label="1;536pkt 536fpkt"];
7524--8126[label="0.0495726;29pkt 29fpkt"];
7524--8158[label="0.0529915;31pkt 31fpkt"];
7524--8202[label="0.0529915;31pkt 31fpkt"];
7524--8235[label="0.0529915;31pkt 31fpkt"];
9556--11282[label="1;574pkt 574fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.242.186" dst_port="62997" src_ip="100.45.97.153"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="174.194.207.70"/>
      <from sec="1229058008" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
660[label="152.153.57.136;s;1252pkt 1252fpkt", shape=diamond, color=yellow];
1839[label="169.18.210.0;d;546pkt 546fpkt", shape=diamond, color=yellow];
2127[label="169.18.146.41;d;367pkt 367fpkt", shape=diamond, color=yellow];
3309[label="169.18.158.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
4285[label="169.18.199.162;d;114pkt 114fpkt", shape=diamond, color=yellow];
4923[label="152.153.57.136;s;628pkt 628fpkt", shape=hexagon, color=black];
6050[label="218.167.161.18;s;23pkt 23fpkt", shape=hexagon, color=black];
6763[label="169.18.210.0;d;546pkt 546fpkt", shape=hexagon, color=black];
7254[label="169.18.146.41;d;367pkt 367fpkt", shape=hexagon, color=black];
8041[label="169.18.146.41;d;367pkt 367fpkt", shape=polygon, color=gold];
9657[label="152.153.57.136;1333pkt 1333fpkt", shape=pentagon, color=darkviolet];
11330[label="152.153.57.136;1333pkt 1333fpkt", shape=invtriangle, color=brown];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.153.57.136:6667, 169.18.210.0:*}[30.6943%]&lt;BR/&gt;{152.153.57.136:6667, 169.18.165.190:*}[30.268%]&lt;BR/&gt;{*:6667, 169.18.146.41:*}[22.3508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (48.9967%)&lt;BR/&gt; 3128: (0.130871%)&lt;BR/&gt; 1080: (0.11633%)&lt;BR/&gt; 80: (0.11633%)&lt;BR/&gt; 8080: (0.0872473%)&gt;];
}
660--1839[label="0.85348;466pkt 466fpkt"];
660--1895[label="0.997807;455pkt 455fpkt"];
660--2127[label="0.435967;160pkt 160fpkt"];
660--3309[label="1;1pkt 1fpkt"];
660--4285[label="1;114pkt 114fpkt"];
660--4923[label="1;628pkt 628fpkt"];
660--6391[label="0.997118;346pkt 346fpkt"];
660--6763[label="0.85348;466pkt 466fpkt"];
660--7254[label="0.435967;160pkt 160fpkt"];
660--8041[label="0.435967;160pkt 160fpkt"];
660--9657[label="1;1252pkt 1252fpkt"];
660--11330[label="1;1252pkt 1252fpkt"];
1839--2424[label="0.0384615;1pkt 1fpkt"];
1839--4923[label="0.467033;255pkt 255fpkt"];
1839--6057[label="0.0384615;1pkt 1fpkt"];
1839--6763[label="1;546pkt 546fpkt"];
1839--8132[label="0.003663;2pkt 2fpkt"];
1839--8181[label="0.003663;2pkt 2fpkt"];
1839--8220[label="0.003663;2pkt 2fpkt"];
1839--9657[label="0.85348;466pkt 466fpkt"];
1839--11330[label="0.85348;466pkt 466fpkt"];
2127--2878[label="0.04;1pkt 1fpkt"];
2127--4923[label="0.0953678;35pkt 35fpkt"];
2127--5850[label="0.830645;206pkt 206fpkt"];
2127--6050[label="0.0434783;1pkt 1fpkt"];
2127--7254[label="1;367pkt 367fpkt"];
2127--8041[label="1;367pkt 367fpkt"];
2127--9657[label="0.435967;160pkt 160fpkt"];
2127--11330[label="0.435967;160pkt 160fpkt"];
3309--4923[label="1;1pkt 1fpkt"];
3309--9657[label="1;1pkt 1fpkt"];
3309--11330[label="1;1pkt 1fpkt"];
4285--4923[label="0.254386;29pkt 29fpkt"];
4285--9657[label="1;114pkt 114fpkt"];
4285--11330[label="1;114pkt 114fpkt"];
4923--6391[label="0.731988;254pkt 254fpkt"];
4923--6763[label="0.467033;255pkt 255fpkt"];
4923--7254[label="0.0953678;35pkt 35fpkt"];
4923--8041[label="0.0953678;35pkt 35fpkt"];
4923--9657[label="1;628pkt 628fpkt"];
4923--11330[label="1;628pkt 628fpkt"];
6050--6389[label="0.1;1pkt 1fpkt"];
6050--7254[label="0.0434783;1pkt 1fpkt"];
6050--8041[label="0.0434783;1pkt 1fpkt"];
6763--8132[label="0.003663;2pkt 2fpkt"];
6763--8181[label="0.003663;2pkt 2fpkt"];
6763--8220[label="0.003663;2pkt 2fpkt"];
6763--9657[label="0.85348;466pkt 466fpkt"];
6763--11330[label="0.85348;466pkt 466fpkt"];
7254--8041[label="1;367pkt 367fpkt"];
7254--9657[label="0.435967;160pkt 160fpkt"];
7254--11330[label="0.435967;160pkt 160fpkt"];
8041--9657[label="0.435967;160pkt 160fpkt"];
8041--11330[label="0.435967;160pkt 160fpkt"];
9657--11330[label="1;1333pkt 1333fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.146.41" src_port="6667"/>
      <filter dst_ip="169.18.210.0" src_ip="152.153.57.136" src_port="6667"/>
      <filter dst_ip="169.18.165.190" src_ip="152.153.57.136" src_port="6667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
4016[label="194.111.35.96;d;4pkt 4fpkt", shape=diamond, color=yellow];
4318[label="214.49.7.111;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.7.111:2485, 194.111.35.96:80}[25%]&lt;BR/&gt;{214.49.7.111:2486, 194.111.35.96:80}[25%]&lt;BR/&gt;{214.49.7.111:2496, 194.111.35.96:80}[25%]&lt;BR/&gt;{214.49.7.111:2497, 194.111.35.96:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2497: (12.5%)&lt;BR/&gt; 2496: (12.5%)&lt;BR/&gt; 2486: (12.5%)&lt;BR/&gt; 2485: (12.5%)&gt;];
}
4016--4318[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.111.35.96" dst_port="80" src_ip="214.49.7.111" src_port="2497"/>
      <filter dst_ip="194.111.35.96" dst_port="80" src_ip="214.49.7.111" src_port="2496"/>
      <filter dst_ip="194.111.35.96" dst_port="80" src_ip="214.49.7.111" src_port="2486"/>
      <filter dst_ip="194.111.35.96" dst_port="80" src_ip="214.49.7.111" src_port="2485"/>
    </slice>
    <from sec="1229058572" usec="0"/>
    <to sec="1229058611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
4360[label="219.170.156.62;d;53pkt 53fpkt", shape=diamond, color=yellow];
4361[label="133.72.75.135;s;53pkt 53fpkt", shape=diamond, color=yellow];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.75.135:*, 219.170.156.62:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1869: (0.943396%)&lt;BR/&gt; 1867: (0.943396%)&lt;BR/&gt; 1865: (0.943396%)&lt;BR/&gt; 1863: (0.943396%)&gt;];
}
4360--4361[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="219.170.156.62" dst_port="80" src_ip="133.72.75.135"/>
    </slice>
    <from sec="1229058646" usec="0"/>
    <to sec="1229058790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="101.215.84.132"/>
      <from sec="1229058670" usec="0"/>
      <to sec="1229058696" usec="0"/>
    </slice>
    <from sec="1229058670" usec="0"/>
    <to sec="1229058696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
4277[label="128.87.86.243;d;6pkt 6fpkt", shape=diamond, color=yellow];
4401[label="52.106.52.76;s;3pkt 3fpkt", shape=diamond, color=yellow];
7278[label="128.87.86.243;d;6pkt 6fpkt", shape=hexagon, color=black];
7347[label="52.106.52.76;s;3pkt 3fpkt", shape=hexagon, color=black];
9088[label="52.106.52.76;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11066[label="52.106.52.76;4pkt 4fpkt", shape=invtriangle, color=brown];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.106.52.76:*, 128.87.86.243:113}[33.3333%]&lt;BR/&gt;{52.106.52.76:21, 128.87.86.243:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (19.2308%)&lt;BR/&gt; 21: (15.3846%)&lt;BR/&gt; 55864: (11.5385%)&lt;BR/&gt; 48187: (11.5385%)&lt;BR/&gt; 26344: (11.5385%)&gt;];
}
4277--4401[label="1;3pkt 3fpkt"];
4277--7278[label="1;6pkt 6fpkt"];
4277--7347[label="1;3pkt 3fpkt"];
4277--9088[label="1;4pkt 4fpkt"];
4277--11066[label="1;4pkt 4fpkt"];
4401--7278[label="1;3pkt 3fpkt"];
4401--7347[label="1;3pkt 3fpkt"];
4401--9088[label="1;3pkt 3fpkt"];
4401--11066[label="1;3pkt 3fpkt"];
7278--7347[label="1;3pkt 3fpkt"];
7278--9088[label="1;4pkt 4fpkt"];
7278--11066[label="1;4pkt 4fpkt"];
7347--9088[label="1;3pkt 3fpkt"];
7347--11066[label="1;3pkt 3fpkt"];
9088--11066[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.86.243" src_ip="52.106.52.76" src_port="21"/>
      <filter dst_ip="128.87.86.243" dst_port="113" src_ip="52.106.52.76"/>
    </slice>
    <from sec="1229058389" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
4315[label="128.208.132.29;d;18pkt 18fpkt", shape=diamond, color=yellow];
4405[label="102.204.48.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
7318[label="128.208.132.29;d;18pkt 18fpkt", shape=hexagon, color=black];
8100[label="128.208.132.29;d;18pkt 18fpkt", shape=polygon, color=gold];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.44.140:80, 128.208.132.29:*}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3513: (3.63636%)&lt;BR/&gt; 3519: (2.72727%)&lt;BR/&gt; 3518: (2.72727%)&lt;BR/&gt; 3517: (2.72727%)&gt;];
}
4315--4405[label="1;1pkt 1fpkt"];
4315--7318[label="1;18pkt 18fpkt"];
4315--8100[label="1;18pkt 18fpkt"];
4405--7318[label="1;1pkt 1fpkt"];
4405--8100[label="1;1pkt 1fpkt"];
7318--8100[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.132.29" src_ip="192.22.44.140" src_port="80"/>
    </slice>
    <from sec="1229058570" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
4303[label="128.64.38.101;d;5pkt 5fpkt", shape=diamond, color=yellow];
4420[label="211.198.61.165;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.198.61.165:80, 128.64.38.101:1918}[20%]&lt;BR/&gt;{211.198.61.165:80, 128.64.38.101:1920}[20%]&lt;BR/&gt;{211.198.61.165:80, 128.64.38.101:1922}[20%]&lt;BR/&gt;{211.198.61.165:80, 128.64.38.101:1924}[20%]&lt;BR/&gt;{211.198.61.165:80, 128.64.38.101:1926}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1926: (10%)&lt;BR/&gt; 1924: (10%)&lt;BR/&gt; 1922: (10%)&lt;BR/&gt; 1920: (10%)&gt;];
}
4303--4420[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.38.101" dst_port="1926" src_ip="211.198.61.165" src_port="80"/>
      <filter dst_ip="128.64.38.101" dst_port="1924" src_ip="211.198.61.165" src_port="80"/>
      <filter dst_ip="128.64.38.101" dst_port="1922" src_ip="211.198.61.165" src_port="80"/>
      <filter dst_ip="128.64.38.101" dst_port="1920" src_ip="211.198.61.165" src_port="80"/>
      <filter dst_ip="128.64.38.101" dst_port="1918" src_ip="211.198.61.165" src_port="80"/>
    </slice>
    <from sec="1229058533" usec="0"/>
    <to sec="1229058814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
4455[label="203.90.53.105;s;4pkt 4fpkt", shape=diamond, color=yellow];
4456[label="174.194.29.186;d;4pkt 4fpkt", shape=diamond, color=yellow];
7362[label="203.90.53.105;s;4pkt 4fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.90.53.105:80, 174.194.29.186:4807}[25%]&lt;BR/&gt;{203.90.53.105:80, 174.194.29.186:4808}[25%]&lt;BR/&gt;{203.90.53.105:80, 174.194.29.186:4809}[25%]&lt;BR/&gt;{203.90.53.105:80, 174.194.29.186:4810}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4810: (12.5%)&lt;BR/&gt; 4809: (12.5%)&lt;BR/&gt; 4808: (12.5%)&lt;BR/&gt; 4807: (12.5%)&gt;];
}
4455--4456[label="1;4pkt 4fpkt"];
4455--7362[label="1;4pkt 4fpkt"];
4456--7362[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.29.186" dst_port="4810" src_ip="203.90.53.105" src_port="80"/>
      <filter dst_ip="174.194.29.186" dst_port="4809" src_ip="203.90.53.105" src_port="80"/>
      <filter dst_ip="174.194.29.186" dst_port="4808" src_ip="203.90.53.105" src_port="80"/>
      <filter dst_ip="174.194.29.186" dst_port="4807" src_ip="203.90.53.105" src_port="80"/>
    </slice>
    <from sec="1229058710" usec="0"/>
    <to sec="1229058750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
4454[label="203.90.53.105;d;4pkt 4fpkt", shape=diamond, color=yellow];
4457[label="174.194.29.186;s;4pkt 4fpkt", shape=diamond, color=yellow];
7361[label="203.90.53.105;d;4pkt 4fpkt", shape=hexagon, color=black];
10109[label="174.194.29.186;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.29.186:4777, 208.234.176.232:80}[20%]&lt;BR/&gt;{174.194.29.186:4807, 203.90.53.105:80}[20%]&lt;BR/&gt;{174.194.29.186:4808, 203.90.53.105:80}[20%]&lt;BR/&gt;{174.194.29.186:4809, 203.90.53.105:80}[20%]&lt;BR/&gt;{174.194.29.186:4810, 203.90.53.105:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4810: (11.7647%)&lt;BR/&gt; 4809: (11.7647%)&lt;BR/&gt; 4808: (11.7647%)&lt;BR/&gt; 4807: (11.7647%)&gt;];
}
4454--4457[label="1;4pkt 4fpkt"];
4454--7361[label="1;4pkt 4fpkt"];
4454--10109[label="1;4pkt 4fpkt"];
4457--7361[label="1;4pkt 4fpkt"];
4457--10109[label="1;4pkt 4fpkt"];
7361--10109[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="203.90.53.105" dst_port="80" src_ip="174.194.29.186" src_port="4810"/>
      <filter dst_ip="203.90.53.105" dst_port="80" src_ip="174.194.29.186" src_port="4809"/>
      <filter dst_ip="203.90.53.105" dst_port="80" src_ip="174.194.29.186" src_port="4808"/>
      <filter dst_ip="203.90.53.105" dst_port="80" src_ip="174.194.29.186" src_port="4807"/>
      <filter dst_ip="208.234.176.232" dst_port="80" src_ip="174.194.29.186" src_port="4777"/>
    </slice>
    <from sec="1229058394" usec="0"/>
    <to sec="1229058750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.61.26.155"/>
      <from sec="1229058716" usec="0"/>
      <to sec="1229058795" usec="0"/>
    </slice>
    <from sec="1229058716" usec="0"/>
    <to sec="1229058795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
223[label="214.56.220.81;d;3568pkt 3568fpkt", shape=diamond, color=yellow];
265[label="128.87.90.180;d;846pkt 846fpkt", shape=diamond, color=yellow];
327[label="128.208.178.254;d;44pkt 44fpkt", shape=diamond, color=yellow];
390[label="52.100.77.63;s;22pkt 22fpkt", shape=diamond, color=yellow];
671[label="133.72.2.67;d;489pkt 489fpkt", shape=diamond, color=yellow];
735[label="52.100.77.8;s;4pkt 4fpkt", shape=diamond, color=yellow];
1021[label="128.87.90.183;d;489pkt 489fpkt", shape=diamond, color=yellow];
1073[label="41.100.134.37;s;46pkt 46fpkt", shape=diamond, color=yellow];
1076[label="45.183.104.204;s;224pkt 224fpkt", shape=diamond, color=yellow];
1082[label="195.169.147.64;s;5pkt 5fpkt", shape=diamond, color=yellow];
1170[label="101.184.78.43;s;141pkt 141fpkt", shape=diamond, color=yellow];
1291[label="45.183.111.215;s;224pkt 224fpkt", shape=diamond, color=yellow];
1327[label="192.70.169.67;s;362pkt 362fpkt", shape=diamond, color=yellow];
1551[label="128.87.90.181;d;565pkt 565fpkt", shape=diamond, color=yellow];
1644[label="116.52.137.47;s;165pkt 165fpkt", shape=diamond, color=yellow];
1999[label="192.7.131.52;s;285pkt 285fpkt", shape=diamond, color=yellow];
2066[label="215.178.36.149;s;319pkt 319fpkt", shape=diamond, color=yellow];
2095[label="45.183.104.206;s;246pkt 246fpkt", shape=diamond, color=yellow];
2147[label="214.49.28.36;d;9pkt 9fpkt", shape=diamond, color=yellow];
2195[label="174.194.126.218;d;84pkt 84fpkt", shape=diamond, color=yellow];
2265[label="101.184.78.49;s;148pkt 148fpkt", shape=diamond, color=yellow];
2309[label="32.55.116.105;s;9pkt 9fpkt", shape=diamond, color=yellow];
2320[label="208.14.146.56;s;2pkt 2fpkt", shape=diamond, color=yellow];
2542[label="44.77.153.158;s;137pkt 137fpkt", shape=diamond, color=yellow];
2646[label="45.183.104.248;s;126pkt 126fpkt", shape=diamond, color=yellow];
2722[label="41.100.134.35;s;42pkt 42fpkt", shape=diamond, color=yellow];
2827[label="101.184.78.40;s;81pkt 81fpkt", shape=diamond, color=yellow];
2834[label="215.40.238.197;d;174pkt 174fpkt", shape=diamond, color=yellow];
3003[label="215.178.36.171;s;230pkt 230fpkt", shape=diamond, color=yellow];
3009[label="192.70.169.74;s;50pkt 50fpkt", shape=diamond, color=yellow];
3257[label="0.169.169.80;s;34pkt 34fpkt", shape=diamond, color=yellow];
3308[label="133.72.62.24;d;84pkt 84fpkt", shape=diamond, color=yellow];
3310[label="215.66.187.37;s;32pkt 32fpkt", shape=diamond, color=yellow];
3321[label="203.72.63.1;s;69pkt 69fpkt", shape=diamond, color=yellow];
3464[label="45.183.104.64;s;130pkt 130fpkt", shape=diamond, color=yellow];
3558[label="41.100.134.14;s;61pkt 61fpkt", shape=diamond, color=yellow];
3589[label="193.254.144.145;s;4pkt 4fpkt", shape=diamond, color=yellow];
3792[label="0.169.169.91;s;19pkt 19fpkt", shape=diamond, color=yellow];
3806[label="45.183.106.9;s;86pkt 86fpkt", shape=diamond, color=yellow];
3822[label="37.252.42.176;s;43pkt 43fpkt", shape=diamond, color=yellow];
3911[label="51.108.196.224;s;20pkt 20fpkt", shape=diamond, color=yellow];
4000[label="208.14.155.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
4200[label="42.216.200.133;s;37pkt 37fpkt", shape=diamond, color=yellow];
4214[label="37.252.107.123;s;35pkt 35fpkt", shape=diamond, color=yellow];
4273[label="0.169.169.90;s;23pkt 23fpkt", shape=diamond, color=yellow];
4276[label="44.77.153.156;s;88pkt 88fpkt", shape=diamond, color=yellow];
4478[label="41.142.25.169;s;100pkt 100fpkt", shape=diamond, color=yellow];
4581[label="174.194.98.217;d;29pkt 29fpkt", shape=diamond, color=yellow];
4624[label="0.169.170.210;s;7pkt 7fpkt", shape=diamond, color=yellow];
4653[label="193.147.37.245;s;49pkt 49fpkt", shape=diamond, color=yellow];
4779[label="214.45.54.4;s;400pkt 400fpkt", shape=diamond, color=yellow];
4790[label="193.195.149.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
4844[label="52.100.77.63;s;22pkt 22fpkt", shape=hexagon, color=black];
5209[label="52.100.77.8;s;4pkt 4fpkt", shape=hexagon, color=black];
5305[label="195.169.147.64;s;5pkt 5fpkt", shape=hexagon, color=black];
5631[label="214.49.28.36;d;7pkt 7fpkt", shape=hexagon, color=black];
5714[label="128.87.90.180;d;796pkt 796fpkt", shape=hexagon, color=black];
5766[label="133.72.2.67;d;253pkt 253fpkt", shape=hexagon, color=black];
5844[label="128.87.90.181;d;78pkt 78fpkt", shape=hexagon, color=black];
6150[label="192.70.169.74;s;46pkt 46fpkt", shape=hexagon, color=black];
6166[label="45.183.104.206;s;246pkt 246fpkt", shape=hexagon, color=black];
6223[label="208.14.146.56;s;2pkt 2fpkt", shape=hexagon, color=black];
6228[label="41.100.134.35;s;42pkt 42fpkt", shape=hexagon, color=black];
6259[label="41.100.134.37;s;46pkt 46fpkt", shape=hexagon, color=black];
6463[label="128.87.90.183;d;406pkt 406fpkt", shape=hexagon, color=black];
6675[label="41.100.134.14;s;61pkt 61fpkt", shape=hexagon, color=black];
6756[label="192.70.169.67;s;269pkt 269fpkt", shape=hexagon, color=black];
6984[label="51.108.196.224;s;20pkt 20fpkt", shape=hexagon, color=black];
7069[label="208.14.155.70;s;1pkt 1fpkt", shape=hexagon, color=black];
7371[label="214.56.220.81;d;3568pkt 3568fpkt", shape=hexagon, color=black];
7429[label="215.66.187.37;s;32pkt 32fpkt", shape=hexagon, color=black];
7477[label="192.7.131.52;s;285pkt 285fpkt", shape=hexagon, color=black];
7493[label="0.169.169.91;s;19pkt 19fpkt", shape=hexagon, color=black];
7517[label="45.183.104.204;s;224pkt 224fpkt", shape=hexagon, color=black];
7534[label="37.252.42.176;s;43pkt 43fpkt", shape=hexagon, color=black];
7605[label="0.169.165.5;s;17pkt 17fpkt", shape=hexagon, color=black];
7628[label="44.77.153.156;s;88pkt 88fpkt", shape=hexagon, color=black];
7763[label="214.45.54.4;s;400pkt 400fpkt", shape=hexagon, color=black];
8257[label="192.88.56.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8343[label="52.100.77.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8351[label="45.183.106.9;93pkt 93fpkt", shape=pentagon, color=darkviolet];
8363[label="192.88.56.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8391[label="34.240.43.13;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8399[label="192.88.53.14;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8559[label="0.169.165.27;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8630[label="53.77.24.35;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8640[label="41.100.134.35;42pkt 42fpkt", shape=pentagon, color=darkviolet];
8681[label="215.66.187.37;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8718[label="44.111.246.41;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8719[label="7.100.4.42;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8749[label="215.64.148.44;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8776[label="116.52.137.47;165pkt 165fpkt", shape=pentagon, color=darkviolet];
8780[label="41.100.134.48;50pkt 50fpkt", shape=pentagon, color=darkviolet];
8787[label="101.184.78.49;148pkt 148fpkt", shape=pentagon, color=darkviolet];
8828[label="192.7.131.52;288pkt 288fpkt", shape=pentagon, color=darkviolet];
8862[label="208.14.146.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8870[label="36.178.161.57;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8926[label="49.119.2.63;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8978[label="192.70.169.67;392pkt 392fpkt", shape=pentagon, color=darkviolet];
8989[label="0.169.169.68;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8996[label="170.220.67.69;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9011[label="45.183.104.70;25pkt 25fpkt", shape=pentagon, color=darkviolet];
9073[label="32.227.96.74;31pkt 31fpkt", shape=pentagon, color=darkviolet];
9249[label="0.169.169.91;20pkt 20fpkt", shape=pentagon, color=darkviolet];
9425[label="40.8.34.108;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9464[label="58.37.220.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9542[label="192.166.196.121;39pkt 39fpkt", shape=pentagon, color=darkviolet];
9553[label="37.252.18.123;26pkt 26fpkt", shape=pentagon, color=darkviolet];
9557[label="37.252.107.123;46pkt 46fpkt", shape=pentagon, color=darkviolet];
9690[label="101.184.79.139;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9740[label="41.84.28.144;43pkt 43fpkt", shape=pentagon, color=darkviolet];
9755[label="193.254.144.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9785[label="102.47.187.147;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9949[label="193.195.149.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9955[label="1.232.72.168;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9973[label="44.111.235.169;31pkt 31fpkt", shape=pentagon, color=darkviolet];
9989[label="215.178.36.171;255pkt 255fpkt", shape=pentagon, color=darkviolet];
10037[label="5.134.164.177;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10053[label="41.142.6.179;59pkt 59fpkt", shape=pentagon, color=darkviolet];
10065[label="0.169.162.180;29pkt 29fpkt", shape=pentagon, color=darkviolet];
10072[label="45.148.51.181;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10218[label="34.33.213.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10234[label="103.120.13.202;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10255[label="45.183.104.204;228pkt 228fpkt", shape=pentagon, color=darkviolet];
10269[label="45.183.104.206;247pkt 247fpkt", shape=pentagon, color=darkviolet];
10304[label="0.169.170.211;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10326[label="196.63.100.213;23pkt 23fpkt", shape=pentagon, color=darkviolet];
10347[label="103.120.13.217;33pkt 33fpkt", shape=pentagon, color=darkviolet];
10396[label="45.73.13.222;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10411[label="53.77.17.224;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10417[label="51.108.196.224;19pkt 19fpkt", shape=pentagon, color=darkviolet];
10428[label="45.183.104.225;39pkt 39fpkt", shape=pentagon, color=darkviolet];
10446[label="215.97.0.228;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10495[label="45.183.104.234;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10549[label="196.26.101.242;28pkt 28fpkt", shape=pentagon, color=darkviolet];
10579[label="0.169.170.246;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10619[label="45.183.104.251;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10691[label="52.100.77.8;3pkt 3fpkt", shape=invtriangle, color=brown];
10705[label="192.88.56.10;4pkt 4fpkt", shape=invtriangle, color=brown];
10728[label="192.88.53.14;6pkt 6fpkt", shape=invtriangle, color=brown];
10838[label="41.100.134.35;41pkt 41fpkt", shape=invtriangle, color=brown];
10858[label="41.100.134.37;93pkt 93fpkt", shape=invtriangle, color=brown];
10880[label="44.111.246.41;14pkt 14fpkt", shape=invtriangle, color=brown];
10896[label="215.64.148.44;78pkt 78fpkt", shape=invtriangle, color=brown];
10914[label="41.100.134.48;49pkt 49fpkt", shape=invtriangle, color=brown];
10920[label="101.184.78.49;147pkt 147fpkt", shape=invtriangle, color=brown];
10926[label="41.100.134.50;44pkt 44fpkt", shape=invtriangle, color=brown];
10942[label="192.7.131.52;287pkt 287fpkt", shape=invtriangle, color=brown];
10956[label="208.14.146.56;2pkt 2fpkt", shape=invtriangle, color=brown];
10988[label="49.119.2.63;26pkt 26fpkt", shape=invtriangle, color=brown];
11016[label="0.169.169.68;25pkt 25fpkt", shape=invtriangle, color=brown];
11026[label="45.183.104.70;25pkt 25fpkt", shape=invtriangle, color=brown];
11059[label="32.227.96.74;31pkt 31fpkt", shape=invtriangle, color=brown];
11139[label="0.169.169.91;20pkt 20fpkt", shape=invtriangle, color=brown];
11272[label="192.166.196.121;39pkt 39fpkt", shape=invtriangle, color=brown];
11480[label="193.195.149.167;1pkt 1fpkt", shape=invtriangle, color=brown];
11483[label="1.232.72.168;4pkt 4fpkt", shape=invtriangle, color=brown];
11532[label="41.142.6.179;59pkt 59fpkt", shape=invtriangle, color=brown];
11542[label="45.148.51.181;5pkt 5fpkt", shape=invtriangle, color=brown];
11661[label="45.183.104.206;247pkt 247fpkt", shape=invtriangle, color=brown];
11702[label="103.120.13.217;33pkt 33fpkt", shape=invtriangle, color=brown];
11725[label="45.73.13.222;7pkt 7fpkt", shape=invtriangle, color=brown];
11755[label="215.97.0.228;9pkt 9fpkt", shape=invtriangle, color=brown];
11778[label="45.183.104.234;22pkt 22fpkt", shape=invtriangle, color=brown];
11805[label="196.26.101.242;28pkt 28fpkt", shape=invtriangle, color=brown];
11868[label="192.88.56.10;3pkt 3fpkt", shape=invhouse, color=bisque];
11947[label="41.100.134.48;49pkt 49fpkt", shape=invhouse, color=bisque];
12028[label="0.169.169.91;20pkt 20fpkt", shape=invhouse, color=bisque];
12192[label="41.142.6.179;59pkt 59fpkt", shape=invhouse, color=bisque];
12286[label="215.97.0.228;9pkt 9fpkt", shape=invhouse, color=bisque];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.56.220.81:*}[37.733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.098%)&lt;BR/&gt; 443: (9.73037%)&lt;BR/&gt; 53: (0.479182%)&lt;BR/&gt; 22: (0.323276%)&lt;BR/&gt; 8454: (0.14215%)&gt;];
}
223--251[label="0.0315789;3pkt 3fpkt"];
223--390[label="1;22pkt 22fpkt"];
223--735[label="1;4pkt 4fpkt"];
223--846[label="0.0283688;8pkt 8fpkt"];
223--1023[label="0.00705882;3pkt 3fpkt"];
223--1073[label="0.869565;40pkt 40fpkt"];
223--1076[label="0.361607;81pkt 81fpkt"];
223--1171[label="1;9pkt 9fpkt"];
223--1222[label="1;4pkt 4fpkt"];
223--1272[label="1;1pkt 1fpkt"];
223--1323[label="0.591549;84pkt 84fpkt"];
223--1327[label="1;362pkt 362fpkt"];
223--1644[label="0.109091;18pkt 18fpkt"];
223--1657[label="0.429448;70pkt 70fpkt"];
223--1706[label="1;8pkt 8fpkt"];
223--1999[label="1;285pkt 285fpkt"];
223--2029[label="0.04;7pkt 7fpkt"];
223--2066[label="0.257053;82pkt 82fpkt"];
223--2095[label="0.418699;103pkt 103fpkt"];
223--2320[label="0.5;1pkt 1fpkt"];
223--2496[label="0.402985;27pkt 27fpkt"];
223--2542[label="1;137pkt 137fpkt"];
223--2646[label="0.952381;120pkt 120fpkt"];
223--2722[label="0.97619;41pkt 41fpkt"];
223--3003[label="0.226087;52pkt 52fpkt"];
223--3009[label="1;50pkt 50fpkt"];
223--3055[label="0.0843373;14pkt 14fpkt"];
223--3310[label="1;32pkt 32fpkt"];
223--3321[label="0.782609;54pkt 54fpkt"];
223--3464[label="0.0692308;9pkt 9fpkt"];
223--3558[label="0.852459;52pkt 52fpkt"];
223--3589[label="1;4pkt 4fpkt"];
223--3806[label="0.895349;77pkt 77fpkt"];
223--3822[label="1;43pkt 43fpkt"];
223--3911[label="1;20pkt 20fpkt"];
223--4200[label="0.837838;31pkt 31fpkt"];
223--4214[label="1;35pkt 35fpkt"];
223--4233[label="0.475248;48pkt 48fpkt"];
223--4239[label="0.04;1pkt 1fpkt"];
223--4276[label="1;88pkt 88fpkt"];
223--4478[label="0.02;2pkt 2fpkt"];
223--4501[label="0.557692;29pkt 29fpkt"];
223--4653[label="1;49pkt 49fpkt"];
223--4844[label="1;22pkt 22fpkt"];
223--5121[label="1;1pkt 1fpkt"];
223--5209[label="1;4pkt 4fpkt"];
223--5345[label="1;4pkt 4fpkt"];
223--5795[label="0.0301887;8pkt 8fpkt"];
223--5852[label="0.0721649;7pkt 7fpkt"];
223--5893[label="0.429448;70pkt 70fpkt"];
223--6145[label="0.257053;82pkt 82fpkt"];
223--6150[label="1;46pkt 46fpkt"];
223--6166[label="0.418699;103pkt 103fpkt"];
223--6190[label="0.0843373;14pkt 14fpkt"];
223--6223[label="0.5;1pkt 1fpkt"];
223--6228[label="0.97619;41pkt 41fpkt"];
223--6259[label="0.869565;40pkt 40fpkt"];
223--6421[label="0.766667;46pkt 46fpkt"];
223--6675[label="0.852459;52pkt 52fpkt"];
223--6739[label="0.0315789;3pkt 3fpkt"];
223--6756[label="1;269pkt 269fpkt"];
223--6929[label="0.0131579;1pkt 1fpkt"];
223--6931[label="1;9pkt 9fpkt"];
223--6984[label="1;20pkt 20fpkt"];
223--7371[label="1;3568pkt 3568fpkt"];
223--7429[label="1;32pkt 32fpkt"];
223--7466[label="0.00705882;3pkt 3fpkt"];
223--7477[label="1;285pkt 285fpkt"];
223--7517[label="0.361607;81pkt 81fpkt"];
223--7534[label="1;43pkt 43fpkt"];
223--7628[label="1;88pkt 88fpkt"];
223--8091[label="0.429448;70pkt 70fpkt"];
223--8131[label="0.0571749;204pkt 204fpkt"];
223--8180[label="0.0571749;204pkt 204fpkt"];
223--8219[label="0.0571749;204pkt 204fpkt"];
223--8257[label="1;2pkt 2fpkt"];
223--8275[label="0.2;1pkt 1fpkt"];
223--8343[label="1;4pkt 4fpkt"];
223--8351[label="0.827957;77pkt 77fpkt"];
223--8363[label="0.25;1pkt 1fpkt"];
223--8391[label="0.285714;4pkt 4fpkt"];
223--8399[label="1;6pkt 6fpkt"];
223--8640[label="0.97619;41pkt 41fpkt"];
223--8678[label="0.93617;88pkt 88fpkt"];
223--8681[label="0.914286;32pkt 32fpkt"];
223--8718[label="0.866667;13pkt 13fpkt"];
223--8749[label="0.294872;23pkt 23fpkt"];
223--8776[label="0.109091;18pkt 18fpkt"];
223--8780[label="0.84;42pkt 42fpkt"];
223--8801[label="0.276596;13pkt 13fpkt"];
223--8828[label="0.989583;285pkt 285fpkt"];
223--8862[label="0.5;1pkt 1fpkt"];
223--8870[label="0.909091;10pkt 10fpkt"];
223--8926[label="0.0384615;1pkt 1fpkt"];
223--8978[label="0.923469;362pkt 362fpkt"];
223--8996[label="0.0526316;1pkt 1fpkt"];
223--9073[label="0.0322581;1pkt 1fpkt"];
223--9096[label="1;7pkt 7fpkt"];
223--9405[label="1;3pkt 3fpkt"];
223--9425[label="1;12pkt 12fpkt"];
223--9542[label="0.923077;36pkt 36fpkt"];
223--9557[label="0.869565;40pkt 40fpkt"];
223--9690[label="0.111111;1pkt 1fpkt"];
223--9740[label="0.860465;37pkt 37fpkt"];
223--9755[label="1;1pkt 1fpkt"];
223--9763[label="1;1pkt 1fpkt"];
223--9779[label="0.0322581;1pkt 1fpkt"];
223--9785[label="1;10pkt 10fpkt"];
223--9810[label="0.0283019;3pkt 3fpkt"];
223--9860[label="0.0181818;1pkt 1fpkt"];
223--9973[label="0.870968;27pkt 27fpkt"];
223--9989[label="0.203922;52pkt 52fpkt"];
223--10053[label="0.0169492;1pkt 1fpkt"];
223--10218[label="1;2pkt 2fpkt"];
223--10255[label="0.355263;81pkt 81fpkt"];
223--10269[label="0.417004;103pkt 103fpkt"];
223--10326[label="0.913043;21pkt 21fpkt"];
223--10396[label="0.571429;4pkt 4fpkt"];
223--10417[label="1;19pkt 19fpkt"];
223--10526[label="0.466019;48pkt 48fpkt"];
223--10549[label="0.0357143;1pkt 1fpkt"];
223--10620[label="0.47541;29pkt 29fpkt"];
223--10659[label="0.2;1pkt 1fpkt"];
223--10691[label="1;3pkt 3fpkt"];
223--10705[label="0.25;1pkt 1fpkt"];
223--10728[label="1;6pkt 6fpkt"];
223--10838[label="0.97561;40pkt 40fpkt"];
223--10858[label="0.946237;88pkt 88fpkt"];
223--10880[label="0.857143;12pkt 12fpkt"];
223--10896[label="0.294872;23pkt 23fpkt"];
223--10914[label="0.857143;42pkt 42fpkt"];
223--10926[label="0.295455;13pkt 13fpkt"];
223--10942[label="0.989547;284pkt 284fpkt"];
223--10956[label="0.5;1pkt 1fpkt"];
223--10988[label="0.0384615;1pkt 1fpkt"];
223--11059[label="0.0322581;1pkt 1fpkt"];
223--11070[label="1;7pkt 7fpkt"];
223--11272[label="0.923077;36pkt 36fpkt"];
223--11380[label="1;1pkt 1fpkt"];
223--11429[label="0.0181818;1pkt 1fpkt"];
223--11532[label="0.0169492;1pkt 1fpkt"];
223--11661[label="0.417004;103pkt 103fpkt"];
223--11725[label="0.571429;4pkt 4fpkt"];
223--11798[label="0.466019;48pkt 48fpkt"];
223--11805[label="0.0357143;1pkt 1fpkt"];
223--11850[label="0.25;1pkt 1fpkt"];
223--11947[label="0.857143;42pkt 42fpkt"];
223--12004[label="1;7pkt 7fpkt"];
223--12192[label="0.0169492;1pkt 1fpkt"];
265--1023[label="0.00941176;4pkt 4fpkt"];
265--1076[label="0.0401786;9pkt 9fpkt"];
265--1082[label="1;5pkt 5fpkt"];
265--1170[label="1;141pkt 141fpkt"];
265--1291[label="0.0133929;3pkt 3fpkt"];
265--1394[label="0.0701754;4pkt 4fpkt"];
265--1768[label="1;59pkt 59fpkt"];
265--1974[label="0.0190736;7pkt 7fpkt"];
265--2066[label="0.0501567;16pkt 16fpkt"];
265--2095[label="0.0609756;15pkt 15fpkt"];
265--2115[label="0.0364964;5pkt 5fpkt"];
265--2265[label="1;148pkt 148fpkt"];
265--2827[label="1;81pkt 81fpkt"];
265--3003[label="0.0608696;14pkt 14fpkt"];
265--3257[label="0.294118;10pkt 10fpkt"];
265--3464[label="0.130769;17pkt 17fpkt"];
265--3567[label="1;70pkt 70fpkt"];
265--3772[label="0.0634921;4pkt 4fpkt"];
265--3792[label="0.315789;6pkt 6fpkt"];
265--4273[label="0.217391;5pkt 5fpkt"];
265--4597[label="0.352941;6pkt 6fpkt"];
265--5305[label="1;5pkt 5fpkt"];
265--5714[label="1;796pkt 796fpkt"];
265--6097[label="0.0104895;3pkt 3fpkt"];
265--6145[label="0.0501567;16pkt 16fpkt"];
265--6166[label="0.0609756;15pkt 15fpkt"];
265--6569[label="0.0336134;4pkt 4fpkt"];
265--6683[label="1;68pkt 68fpkt"];
265--6929[label="0.0526316;4pkt 4fpkt"];
265--7128[label="0.0701754;4pkt 4fpkt"];
265--7466[label="0.00941176;4pkt 4fpkt"];
265--7469[label="0.0634921;4pkt 4fpkt"];
265--7493[label="0.315789;6pkt 6fpkt"];
265--7517[label="0.0401786;9pkt 9fpkt"];
265--7605[label="0.352941;6pkt 6fpkt"];
265--7974[label="1;68pkt 68fpkt"];
265--8131[label="0.108747;92pkt 92fpkt"];
265--8180[label="0.108747;92pkt 92fpkt"];
265--8219[label="0.108747;92pkt 92fpkt"];
265--8787[label="1;148pkt 148fpkt"];
265--8887[label="1;3pkt 3fpkt"];
265--8989[label="0.16;4pkt 4fpkt"];
265--9249[label="0.3;6pkt 6fpkt"];
265--9955[label="0.5;2pkt 2fpkt"];
265--9989[label="0.054902;14pkt 14fpkt"];
265--10065[label="0.0689655;2pkt 2fpkt"];
265--10255[label="0.0394737;9pkt 9fpkt"];
265--10269[label="0.0607287;15pkt 15fpkt"];
265--10304[label="0.5;1pkt 1fpkt"];
265--10579[label="0.166667;1pkt 1fpkt"];
265--10920[label="1;147pkt 147fpkt"];
265--11016[label="0.16;4pkt 4fpkt"];
265--11139[label="0.3;6pkt 6fpkt"];
265--11483[label="0.5;2pkt 2fpkt"];
265--11661[label="0.0607287;15pkt 15fpkt"];
265--12028[label="0.3;6pkt 6fpkt"];
327--1291[label="0.0227273;1pkt 1fpkt"];
327--2095[label="0.0227273;1pkt 1fpkt"];
327--2309[label="1;9pkt 9fpkt"];
327--5142[label="1;10pkt 10fpkt"];
327--6166[label="0.0227273;1pkt 1fpkt"];
327--8131[label="0.0227273;1pkt 1fpkt"];
327--8180[label="0.0227273;1pkt 1fpkt"];
327--8219[label="0.0227273;1pkt 1fpkt"];
327--8336[label="1;24pkt 24fpkt"];
327--10269[label="0.0227273;1pkt 1fpkt"];
327--10347[label="0.0606061;2pkt 2fpkt"];
327--10685[label="1;24pkt 24fpkt"];
327--11661[label="0.0227273;1pkt 1fpkt"];
327--11702[label="0.0606061;2pkt 2fpkt"];
390--4844[label="1;22pkt 22fpkt"];
390--7371[label="1;22pkt 22fpkt"];
671--818[label="0.0184049;9pkt 9fpkt"];
671--1055[label="0.0184049;9pkt 9fpkt"];
671--1076[label="0.241071;54pkt 54fpkt"];
671--1112[label="0.00204499;1pkt 1fpkt"];
671--1291[label="0.334821;75pkt 75fpkt"];
671--1657[label="0.288344;47pkt 47fpkt"];
671--1970[label="0.00817996;4pkt 4fpkt"];
671--2003[label="0.0083682;2pkt 2fpkt"];
671--2095[label="0.268293;66pkt 66fpkt"];
671--2478[label="0.00408998;2pkt 2fpkt"];
671--2578[label="0.0245399;4pkt 4fpkt"];
671--2892[label="0.00613497;3pkt 3fpkt"];
671--3290[label="0.00408998;2pkt 2fpkt"];
671--3464[label="0.123077;16pkt 16fpkt"];
671--3736[label="0.00204499;1pkt 1fpkt"];
671--4166[label="0.00613497;3pkt 3fpkt"];
671--4493[label="0.00204918;1pkt 1fpkt"];
671--4509[label="0.00226757;1pkt 1fpkt"];
671--4857[label="0.0176991;2pkt 2fpkt"];
671--4985[label="0.00817996;4pkt 4fpkt"];
671--5461[label="0.0102249;5pkt 5fpkt"];
671--5766[label="1;253pkt 253fpkt"];
671--5893[label="0.288344;47pkt 47fpkt"];
671--6166[label="0.268293;66pkt 66fpkt"];
671--6408[label="0.00408998;2pkt 2fpkt"];
671--6453[label="0.00408998;2pkt 2fpkt"];
671--6487[label="0.0163599;8pkt 8fpkt"];
671--6820[label="0.00204499;1pkt 1fpkt"];
671--7161[label="0.00817996;4pkt 4fpkt"];
671--7500[label="0.00613497;3pkt 3fpkt"];
671--7517[label="0.241071;54pkt 54fpkt"];
671--7821[label="0.00462963;2pkt 2fpkt"];
671--8035[label="0.0163599;8pkt 8fpkt"];
671--8091[label="0.288344;47pkt 47fpkt"];
671--8131[label="0.0633947;31pkt 31fpkt"];
671--8180[label="0.0633947;31pkt 31fpkt"];
671--8219[label="0.0633947;31pkt 31fpkt"];
671--8697[label="0.0153846;3pkt 3fpkt"];
671--8724[label="0.00857143;3pkt 3fpkt"];
671--8755[label="0.00766284;2pkt 2fpkt"];
671--8974[label="0.00817996;4pkt 4fpkt"];
671--9011[label="0.96;24pkt 24fpkt"];
671--9133[label="0.0833333;1pkt 1fpkt"];
671--9224[label="0.0102249;5pkt 5fpkt"];
671--9464[label="1;1pkt 1fpkt"];
671--9560[label="0.00636943;1pkt 1fpkt"];
671--10255[label="0.236842;54pkt 54fpkt"];
671--10269[label="0.267206;66pkt 66fpkt"];
671--10868[label="0.0154639;3pkt 3fpkt"];
671--11026[label="0.96;24pkt 24fpkt"];
671--11128[label="0.0102249;5pkt 5fpkt"];
671--11283[label="0.00636943;1pkt 1fpkt"];
671--11661[label="0.267206;66pkt 66fpkt"];
671--12025[label="0.0102249;5pkt 5fpkt"];
735--5209[label="1;4pkt 4fpkt"];
735--7371[label="1;4pkt 4fpkt"];
735--8343[label="1;4pkt 4fpkt"];
735--10691[label="1;3pkt 3fpkt"];
1021--1055[label="0.00204499;1pkt 1fpkt"];
1021--1076[label="0.0982143;22pkt 22fpkt"];
1021--1190[label="0.1;2pkt 2fpkt"];
1021--1291[label="0.0357143;8pkt 8fpkt"];
1021--1394[label="0.140351;8pkt 8fpkt"];
1021--1657[label="0.0184049;3pkt 3fpkt"];
1021--1974[label="0.0381471;14pkt 14fpkt"];
1021--2066[label="0.0188088;6pkt 6fpkt"];
1021--2095[label="0.0650407;16pkt 16fpkt"];
1021--2197[label="1;19pkt 19fpkt"];
1021--2242[label="0.470588;8pkt 8fpkt"];
1021--2277[label="0.00212766;1pkt 1fpkt"];
1021--2578[label="0.0920245;15pkt 15fpkt"];
1021--2987[label="0.02;2pkt 2fpkt"];
1021--3003[label="0.0304348;7pkt 7fpkt"];
1021--3142[label="0.777778;14pkt 14fpkt"];
1021--3257[label="0.205882;7pkt 7fpkt"];
1021--3464[label="0.369231;48pkt 48fpkt"];
1021--3772[label="0.190476;12pkt 12fpkt"];
1021--3792[label="0.315789;6pkt 6fpkt"];
1021--3806[label="0.0116279;1pkt 1fpkt"];
1021--3933[label="0.0416667;1pkt 1fpkt"];
1021--3976[label="0.9;36pkt 36fpkt"];
1021--4273[label="0.217391;5pkt 5fpkt"];
1021--4624[label="0.428571;3pkt 3fpkt"];
1021--5893[label="0.0184049;3pkt 3fpkt"];
1021--6097[label="0.048951;14pkt 14fpkt"];
1021--6145[label="0.0188088;6pkt 6fpkt"];
1021--6166[label="0.0650407;16pkt 16fpkt"];
1021--6214[label="0.00212766;1pkt 1fpkt"];
1021--6463[label="1;406pkt 406fpkt"];
1021--6487[label="0.00204499;1pkt 1fpkt"];
1021--6929[label="0.460526;35pkt 35fpkt"];
1021--7128[label="0.140351;8pkt 8fpkt"];
1021--7201[label="0.02;2pkt 2fpkt"];
1021--7305[label="0.9;36pkt 36fpkt"];
1021--7469[label="0.190476;12pkt 12fpkt"];
1021--7493[label="0.315789;6pkt 6fpkt"];
1021--7517[label="0.0982143;22pkt 22fpkt"];
1021--8035[label="0.00204499;1pkt 1fpkt"];
1021--8091[label="0.0184049;3pkt 3fpkt"];
1021--8131[label="0.0777096;38pkt 38fpkt"];
1021--8180[label="0.0777096;38pkt 38fpkt"];
1021--8219[label="0.0777096;38pkt 38fpkt"];
1021--8351[label="0.0107527;1pkt 1fpkt"];
1021--8667[label="1;19pkt 19fpkt"];
1021--8761[label="0.0416667;1pkt 1fpkt"];
1021--8989[label="0.04;1pkt 1fpkt"];
1021--9220[label="0.0952381;2pkt 2fpkt"];
1021--9249[label="0.3;6pkt 6fpkt"];
1021--9434[label="0.75;36pkt 36fpkt"];
1021--9552[label="0.217391;10pkt 10fpkt"];
1021--9989[label="0.027451;7pkt 7fpkt"];
1021--10037[label="1;15pkt 15fpkt"];
1021--10072[label="1;5pkt 5fpkt"];
1021--10255[label="0.0964912;22pkt 22fpkt"];
1021--10269[label="0.0647773;16pkt 16fpkt"];
1021--10411[label="0.714286;10pkt 10fpkt"];
1021--10428[label="0.0769231;3pkt 3fpkt"];
1021--10446[label="0.666667;6pkt 6fpkt"];
1021--10495[label="0.545455;12pkt 12fpkt"];
1021--10619[label="0.5;17pkt 17fpkt"];
1021--11016[label="0.04;1pkt 1fpkt"];
1021--11127[label="0.1;2pkt 2fpkt"];
1021--11139[label="0.3;6pkt 6fpkt"];
1021--11224[label="0.75;36pkt 36fpkt"];
1021--11280[label="0.217391;10pkt 10fpkt"];
1021--11542[label="1;5pkt 5fpkt"];
1021--11661[label="0.0647773;16pkt 16fpkt"];
1021--11755[label="0.666667;6pkt 6fpkt"];
1021--11778[label="0.545455;12pkt 12fpkt"];
1021--12028[label="0.3;6pkt 6fpkt"];
1021--12061[label="0.75;36pkt 36fpkt"];
1021--12286[label="0.666667;6pkt 6fpkt"];
1073--5398[label="0.0652174;3pkt 3fpkt"];
1073--6259[label="1;46pkt 46fpkt"];
1073--7371[label="0.869565;40pkt 40fpkt"];
1073--7810[label="0.0652174;3pkt 3fpkt"];
1073--8678[label="1;46pkt 46fpkt"];
1073--10858[label="0.978261;45pkt 45fpkt"];
1076--1115[label="0.0758929;17pkt 17fpkt"];
1076--1551[label="0.0267857;6pkt 6fpkt"];
1076--2834[label="0.0172414;3pkt 3fpkt"];
1076--2879[label="0.0078125;1pkt 1fpkt"];
1076--4542[label="0.363636;12pkt 12fpkt"];
1076--4890[label="0.00930233;2pkt 2fpkt"];
1076--5714[label="0.0401786;9pkt 9fpkt"];
1076--5766[label="0.133929;30pkt 30fpkt"];
1076--5844[label="0.0512821;4pkt 4fpkt"];
1076--6051[label="0.0078125;1pkt 1fpkt"];
1076--6312[label="0.00446429;1pkt 1fpkt"];
1076--6463[label="0.0982143;22pkt 22fpkt"];
1076--7371[label="0.361607;81pkt 81fpkt"];
1076--7517[label="1;224pkt 224fpkt"];
1076--7778[label="0.00930233;2pkt 2fpkt"];
1076--8131[label="0.0401786;9pkt 9fpkt"];
1076--8180[label="0.0401786;9pkt 9fpkt"];
1076--8219[label="0.0401786;9pkt 9fpkt"];
1076--10255[label="1;224pkt 224fpkt"];
1082--5305[label="1;5pkt 5fpkt"];
1082--5714[label="1;5pkt 5fpkt"];
1082--8131[label="0.4;2pkt 2fpkt"];
1082--8180[label="0.4;2pkt 2fpkt"];
1082--8219[label="0.4;2pkt 2fpkt"];
1170--5714[label="1;141pkt 141fpkt"];
1170--8131[label="0.0496454;7pkt 7fpkt"];
1170--8180[label="0.0496454;7pkt 7fpkt"];
1170--8219[label="0.0496454;7pkt 7fpkt"];
1291--1551[label="0.0803571;18pkt 18fpkt"];
1291--2834[label="0.0172414;3pkt 3fpkt"];
1291--2837[label="0.0538462;7pkt 7fpkt"];
1291--2861[label="0.0322581;1pkt 1fpkt"];
1291--3459[label="0.0114943;1pkt 1fpkt"];
1291--4890[label="0.0372093;8pkt 8fpkt"];
1291--5051[label="0.169643;38pkt 38fpkt"];
1291--5473[label="0.00446429;1pkt 1fpkt"];
1291--5714[label="0.00892857;2pkt 2fpkt"];
1291--5715[label="0.0133929;3pkt 3fpkt"];
1291--5766[label="0.334821;75pkt 75fpkt"];
1291--5844[label="0.0769231;6pkt 6fpkt"];
1291--6031[label="0.037037;1pkt 1fpkt"];
1291--6304[label="0.0538462;7pkt 7fpkt"];
1291--6312[label="0.0669643;15pkt 15fpkt"];
1291--6463[label="0.0357143;8pkt 8fpkt"];
1291--6922[label="0.0123457;1pkt 1fpkt"];
1291--7778[label="0.0372093;8pkt 8fpkt"];
1291--8131[label="0.1875;42pkt 42fpkt"];
1291--8180[label="0.1875;42pkt 42fpkt"];
1291--8219[label="0.1875;42pkt 42fpkt"];
1327--6756[label="1;269pkt 269fpkt"];
1327--7371[label="1;362pkt 362fpkt"];
1327--8131[label="0.0331492;12pkt 12fpkt"];
1327--8180[label="0.0331492;12pkt 12fpkt"];
1327--8219[label="0.0331492;12pkt 12fpkt"];
1327--8978[label="1;362pkt 362fpkt"];
1551--1657[label="0.0429448;7pkt 7fpkt"];
1551--2066[label="0.0125392;4pkt 4fpkt"];
1551--2095[label="0.0284553;7pkt 7fpkt"];
1551--2115[label="0.0291971;4pkt 4fpkt"];
1551--2242[label="0.294118;5pkt 5fpkt"];
1551--2519[label="0.0555556;1pkt 1fpkt"];
1551--3003[label="0.0217391;5pkt 5fpkt"];
1551--3091[label="0.0909091;1pkt 1fpkt"];
1551--3257[label="0.235294;8pkt 8fpkt"];
1551--3464[label="0.0615385;8pkt 8fpkt"];
1551--3772[label="0.126984;8pkt 8fpkt"];
1551--3792[label="0.210526;4pkt 4fpkt"];
1551--4273[label="0.130435;3pkt 3fpkt"];
1551--4779[label="1;400pkt 400fpkt"];
1551--5844[label="1;78pkt 78fpkt"];
1551--5893[label="0.0429448;7pkt 7fpkt"];
1551--6145[label="0.0125392;4pkt 4fpkt"];
1551--6166[label="0.0284553;7pkt 7fpkt"];
1551--6929[label="0.0657895;5pkt 5fpkt"];
1551--7466[label="0.00235294;1pkt 1fpkt"];
1551--7469[label="0.126984;8pkt 8fpkt"];
1551--7493[label="0.210526;4pkt 4fpkt"];
1551--7517[label="0.0267857;6pkt 6fpkt"];
1551--7763[label="1;400pkt 400fpkt"];
1551--8091[label="0.0429448;7pkt 7fpkt"];
1551--8131[label="0.0159292;9pkt 9fpkt"];
1551--8180[label="0.0159292;9pkt 9fpkt"];
1551--8219[label="0.0159292;9pkt 9fpkt"];
1551--8559[label="0.142857;2pkt 2fpkt"];
1551--8701[label="0.111111;2pkt 2fpkt"];
1551--8989[label="0.12;3pkt 3fpkt"];
1551--9133[label="0.166667;2pkt 2fpkt"];
1551--9249[label="0.2;4pkt 4fpkt"];
1551--9283[label="0.4;2pkt 2fpkt"];
1551--9989[label="0.0196078;5pkt 5fpkt"];
1551--10255[label="0.0263158;6pkt 6fpkt"];
1551--10269[label="0.0283401;7pkt 7fpkt"];
1551--10360[label="0.0555556;1pkt 1fpkt"];
1551--10383[label="0.571429;4pkt 4fpkt"];
1551--10871[label="0.111111;2pkt 2fpkt"];
1551--11016[label="0.12;3pkt 3fpkt"];
1551--11139[label="0.2;4pkt 4fpkt"];
1551--11160[label="0.4;2pkt 2fpkt"];
1551--11661[label="0.0283401;7pkt 7fpkt"];
1551--12028[label="0.2;4pkt 4fpkt"];
1644--1983[label="0.109756;9pkt 9fpkt"];
1644--2180[label="0.0693069;7pkt 7fpkt"];
1644--5660[label="0.0625;6pkt 6fpkt"];
1644--5715[label="0.0424242;7pkt 7fpkt"];
1644--6102[label="0.18;9pkt 9fpkt"];
1644--6500[label="0.563636;93pkt 93fpkt"];
1644--7371[label="0.109091;18pkt 18fpkt"];
1644--8131[label="0.115152;19pkt 19fpkt"];
1644--8180[label="0.115152;19pkt 19fpkt"];
1644--8219[label="0.115152;19pkt 19fpkt"];
1644--8776[label="1;165pkt 165fpkt"];
1999--7371[label="1;285pkt 285fpkt"];
1999--7477[label="1;285pkt 285fpkt"];
1999--8131[label="0.00350877;1pkt 1fpkt"];
1999--8180[label="0.00350877;1pkt 1fpkt"];
1999--8219[label="0.00350877;1pkt 1fpkt"];
1999--8828[label="1;285pkt 285fpkt"];
1999--10942[label="0.996491;284pkt 284fpkt"];
2066--2497[label="0.0185185;2pkt 2fpkt"];
2066--3108[label="0.0438596;5pkt 5fpkt"];
2066--3461[label="0.00904977;2pkt 2fpkt"];
2066--4513[label="0.0175439;1pkt 1fpkt"];
2066--4890[label="0.00465116;1pkt 1fpkt"];
2066--5011[label="0.00626959;2pkt 2fpkt"];
2066--5051[label="0.0031348;1pkt 1fpkt"];
2066--5473[label="0.0031348;1pkt 1fpkt"];
2066--5714[label="0.0501567;16pkt 16fpkt"];
2066--5715[label="0.0031348;1pkt 1fpkt"];
2066--5723[label="0.159875;51pkt 51fpkt"];
2066--6145[label="1;319pkt 319fpkt"];
2066--6463[label="0.0188088;6pkt 6fpkt"];
2066--6567[label="0.0103093;2pkt 2fpkt"];
2066--7371[label="0.257053;82pkt 82fpkt"];
2066--7778[label="0.00465116;1pkt 1fpkt"];
2066--8131[label="0.0909091;29pkt 29fpkt"];
2066--8180[label="0.0909091;29pkt 29fpkt"];
2066--8219[label="0.0909091;29pkt 29fpkt"];
2095--2834[label="0.0287356;5pkt 5fpkt"];
2095--2837[label="0.0384615;5pkt 5fpkt"];
2095--3308[label="0.0238095;2pkt 2fpkt"];
2095--3459[label="0.0229885;2pkt 2fpkt"];
2095--5051[label="0.0365854;9pkt 9fpkt"];
2095--5714[label="0.0609756;15pkt 15fpkt"];
2095--5715[label="0.00406504;1pkt 1fpkt"];
2095--5766[label="0.134146;33pkt 33fpkt"];
2095--5844[label="0.0128205;1pkt 1fpkt"];
2095--6166[label="1;246pkt 246fpkt"];
2095--6304[label="0.0384615;5pkt 5fpkt"];
2095--6463[label="0.0650407;16pkt 16fpkt"];
2095--6922[label="0.0246914;2pkt 2fpkt"];
2095--7371[label="0.418699;103pkt 103fpkt"];
2095--8131[label="0.0487805;12pkt 12fpkt"];
2095--8180[label="0.0487805;12pkt 12fpkt"];
2095--8219[label="0.0487805;12pkt 12fpkt"];
2095--10269[label="1;246pkt 246fpkt"];
2095--11661[label="1;246pkt 246fpkt"];
2147--2320[label="0.5;1pkt 1fpkt"];
2147--4000[label="1;1pkt 1fpkt"];
2147--4108[label="0.222222;2pkt 2fpkt"];
2147--5631[label="1;7pkt 7fpkt"];
2147--6223[label="0.5;1pkt 1fpkt"];
2147--7069[label="1;1pkt 1fpkt"];
2147--8862[label="0.5;1pkt 1fpkt"];
2147--10956[label="0.5;1pkt 1fpkt"];
2195--2786[label="1;2pkt 2fpkt"];
2195--3003[label="0.0833333;7pkt 7fpkt"];
2195--3055[label="0.309524;26pkt 26fpkt"];
2195--4824[label="0.0714286;2pkt 2fpkt"];
2195--5447[label="0.0833333;2pkt 2fpkt"];
2195--6190[label="0.309524;26pkt 26fpkt"];
2195--7426[label="0.0595238;5pkt 5fpkt"];
2195--8131[label="0.27381;23pkt 23fpkt"];
2195--8180[label="0.27381;23pkt 23fpkt"];
2195--8219[label="0.27381;23pkt 23fpkt"];
2195--9073[label="0.322581;10pkt 10fpkt"];
2195--9867[label="1;1pkt 1fpkt"];
2195--9989[label="0.0833333;7pkt 7fpkt"];
2195--10234[label="0.285714;4pkt 4fpkt"];
2195--10396[label="0.285714;2pkt 2fpkt"];
2195--10527[label="0.4;2pkt 2fpkt"];
2195--11059[label="0.322581;10pkt 10fpkt"];
2195--11435[label="1;1pkt 1fpkt"];
2195--11725[label="0.285714;2pkt 2fpkt"];
2195--12152[label="1;1pkt 1fpkt"];
2265--5714[label="1;148pkt 148fpkt"];
2265--8787[label="1;148pkt 148fpkt"];
2265--10920[label="1;147pkt 147fpkt"];
2320--5631[label="0.5;1pkt 1fpkt"];
2320--6223[label="1;2pkt 2fpkt"];
2320--7371[label="0.5;1pkt 1fpkt"];
2320--8862[label="1;2pkt 2fpkt"];
2320--10956[label="1;2pkt 2fpkt"];
2542--7371[label="1;137pkt 137fpkt"];
2542--8131[label="0.0437956;6pkt 6fpkt"];
2542--8180[label="0.0437956;6pkt 6fpkt"];
2542--8219[label="0.0437956;6pkt 6fpkt"];
2646--7371[label="0.952381;120pkt 120fpkt"];
2646--8131[label="0.047619;6pkt 6fpkt"];
2646--8180[label="0.047619;6pkt 6fpkt"];
2646--8219[label="0.047619;6pkt 6fpkt"];
2722--6228[label="1;42pkt 42fpkt"];
2722--7371[label="0.97619;41pkt 41fpkt"];
2722--8640[label="1;42pkt 42fpkt"];
2722--10838[label="1;41pkt 41fpkt"];
2827--5714[label="1;81pkt 81fpkt"];
2834--2851[label="0.045977;8pkt 8fpkt"];
2834--3464[label="0.00769231;1pkt 1fpkt"];
2834--4471[label="0.0243902;1pkt 1fpkt"];
2834--4594[label="0.06;3pkt 3fpkt"];
2834--4864[label="0.0114943;2pkt 2fpkt"];
2834--4910[label="0.0136986;1pkt 1fpkt"];
2834--5423[label="0.00574713;1pkt 1fpkt"];
2834--5893[label="0.00613497;1pkt 1fpkt"];
2834--6166[label="0.0287356;5pkt 5fpkt"];
2834--6487[label="0.0287356;5pkt 5fpkt"];
2834--6929[label="0.0131579;1pkt 1fpkt"];
2834--7517[label="0.0172414;3pkt 3fpkt"];
2834--8035[label="0.0287356;5pkt 5fpkt"];
2834--8063[label="0.0136986;1pkt 1fpkt"];
2834--8091[label="0.00613497;1pkt 1fpkt"];
2834--8131[label="0.0747126;13pkt 13fpkt"];
2834--8180[label="0.0747126;13pkt 13fpkt"];
2834--8219[label="0.0747126;13pkt 13fpkt"];
2834--8509[label="0.00574713;1pkt 1fpkt"];
2834--9553[label="0.769231;20pkt 20fpkt"];
2834--10255[label="0.0172414;3pkt 3fpkt"];
2834--10269[label="0.0287356;5pkt 5fpkt"];
2834--10334[label="0.045977;8pkt 8fpkt"];
2834--11661[label="0.0287356;5pkt 5fpkt"];
2834--11695[label="0.045977;8pkt 8fpkt"];
2834--12256[label="0.045977;8pkt 8fpkt"];
3003--3108[label="0.0263158;3pkt 3fpkt"];
3003--3272[label="0.0147059;1pkt 1fpkt"];
3003--4581[label="0.172414;5pkt 5fpkt"];
3003--4616[label="0.25;18pkt 18fpkt"];
3003--4890[label="0.00465116;1pkt 1fpkt"];
3003--5011[label="0.00434783;1pkt 1fpkt"];
3003--5714[label="0.0608696;14pkt 14fpkt"];
3003--5715[label="0.00434783;1pkt 1fpkt"];
3003--5723[label="0.213043;49pkt 49fpkt"];
3003--6463[label="0.0304348;7pkt 7fpkt"];
3003--7121[label="0.0147059;1pkt 1fpkt"];
3003--7371[label="0.226087;52pkt 52fpkt"];
3003--7635[label="0.25;18pkt 18fpkt"];
3003--7778[label="0.00465116;1pkt 1fpkt"];
3003--8131[label="0.0695652;16pkt 16fpkt"];
3003--8180[label="0.0695652;16pkt 16fpkt"];
3003--8219[label="0.0695652;16pkt 16fpkt"];
3003--9989[label="1;230pkt 230fpkt"];
3009--6150[label="1;46pkt 46fpkt"];
3009--7371[label="1;50pkt 50fpkt"];
3009--8131[label="0.08;4pkt 4fpkt"];
3009--8180[label="0.08;4pkt 4fpkt"];
3009--8219[label="0.08;4pkt 4fpkt"];
3257--4915[label="0.037037;1pkt 1fpkt"];
3257--5714[label="0.235294;8pkt 8fpkt"];
3257--5844[label="0.117647;4pkt 4fpkt"];
3257--6463[label="0.176471;6pkt 6fpkt"];
3257--8131[label="0.0588235;2pkt 2fpkt"];
3257--8180[label="0.0588235;2pkt 2fpkt"];
3257--8219[label="0.0588235;2pkt 2fpkt"];
3308--3323[label="0.333333;1pkt 1fpkt"];
3308--6166[label="0.0238095;2pkt 2fpkt"];
3308--7146[label="0.333333;1pkt 1fpkt"];
3308--8630[label="1;17pkt 17fpkt"];
3308--8719[label="0.916667;11pkt 11fpkt"];
3308--10269[label="0.0238095;2pkt 2fpkt"];
3308--11661[label="0.0238095;2pkt 2fpkt"];
3310--7371[label="1;32pkt 32fpkt"];
3310--7429[label="1;32pkt 32fpkt"];
3310--8131[label="0.09375;3pkt 3fpkt"];
3310--8180[label="0.09375;3pkt 3fpkt"];
3310--8219[label="0.09375;3pkt 3fpkt"];
3310--8681[label="1;32pkt 32fpkt"];
3321--5014[label="0.0144928;1pkt 1fpkt"];
3321--5715[label="0.101449;7pkt 7fpkt"];
3321--5750[label="0.0434783;3pkt 3fpkt"];
3321--6421[label="1;60pkt 60fpkt"];
3321--7371[label="0.782609;54pkt 54fpkt"];
3321--8131[label="0.0144928;1pkt 1fpkt"];
3321--8180[label="0.0144928;1pkt 1fpkt"];
3321--8219[label="0.0144928;1pkt 1fpkt"];
3464--4890[label="0.0461538;6pkt 6fpkt"];
3464--5714[label="0.0307692;4pkt 4fpkt"];
3464--6463[label="0.269231;35pkt 35fpkt"];
3464--6929[label="1;76pkt 76fpkt"];
3464--7371[label="0.0692308;9pkt 9fpkt"];
3464--7778[label="0.0461538;6pkt 6fpkt"];
3558--5175[label="0.0655738;4pkt 4fpkt"];
3558--5398[label="0.0819672;5pkt 5fpkt"];
3558--6675[label="1;61pkt 61fpkt"];
3558--7371[label="0.852459;52pkt 52fpkt"];
3558--7810[label="0.0819672;5pkt 5fpkt"];
3589--7371[label="1;4pkt 4fpkt"];
3589--9755[label="1;1pkt 1fpkt"];
3792--5714[label="0.315789;6pkt 6fpkt"];
3792--5844[label="0.210526;4pkt 4fpkt"];
3792--6463[label="0.210526;4pkt 4fpkt"];
3792--7493[label="1;19pkt 19fpkt"];
3792--8131[label="0.105263;2pkt 2fpkt"];
3792--8180[label="0.105263;2pkt 2fpkt"];
3792--8219[label="0.105263;2pkt 2fpkt"];
3792--9249[label="1;19pkt 19fpkt"];
3792--11139[label="1;19pkt 19fpkt"];
3792--12028[label="1;19pkt 19fpkt"];
3806--6463[label="0.0116279;1pkt 1fpkt"];
3806--7371[label="0.895349;77pkt 77fpkt"];
3806--8351[label="0.988372;85pkt 85fpkt"];
3822--7371[label="1;43pkt 43fpkt"];
3822--7534[label="1;43pkt 43fpkt"];
3822--8131[label="0.0930233;4pkt 4fpkt"];
3822--8180[label="0.0930233;4pkt 4fpkt"];
3822--8219[label="0.0930233;4pkt 4fpkt"];
3911--6984[label="1;20pkt 20fpkt"];
3911--7371[label="1;20pkt 20fpkt"];
3911--10417[label="1;19pkt 19fpkt"];
4000--7069[label="1;1pkt 1fpkt"];
4200--7134[label="0.0810811;3pkt 3fpkt"];
4200--7371[label="0.837838;31pkt 31fpkt"];
4200--8131[label="0.135135;5pkt 5fpkt"];
4200--8180[label="0.135135;5pkt 5fpkt"];
4200--8219[label="0.135135;5pkt 5fpkt"];
4214--7371[label="1;35pkt 35fpkt"];
4214--8131[label="0.0857143;3pkt 3fpkt"];
4214--8180[label="0.0857143;3pkt 3fpkt"];
4214--8219[label="0.0857143;3pkt 3fpkt"];
4214--9557[label="1;35pkt 35fpkt"];
4273--5714[label="0.0434783;1pkt 1fpkt"];
4273--6463[label="0.130435;3pkt 3fpkt"];
4276--7371[label="1;88pkt 88fpkt"];
4276--7628[label="1;88pkt 88fpkt"];
4478--5014[label="0.01;1pkt 1fpkt"];
4478--5715[label="0.47;47pkt 47fpkt"];
4478--7371[label="0.02;2pkt 2fpkt"];
4478--8131[label="0.04;4pkt 4fpkt"];
4478--8180[label="0.04;4pkt 4fpkt"];
4478--8219[label="0.04;4pkt 4fpkt"];
4581--4764[label="1;1pkt 1fpkt"];
4581--4790[label="1;1pkt 1fpkt"];
4581--7426[label="0.103448;3pkt 3fpkt"];
4581--8131[label="0.0344828;1pkt 1fpkt"];
4581--8180[label="0.0344828;1pkt 1fpkt"];
4581--8219[label="0.0344828;1pkt 1fpkt"];
4581--9949[label="1;1pkt 1fpkt"];
4581--9989[label="0.172414;5pkt 5fpkt"];
4581--10053[label="0.137931;4pkt 4fpkt"];
4581--10191[label="1;1pkt 1fpkt"];
4581--11480[label="1;1pkt 1fpkt"];
4581--11532[label="0.137931;4pkt 4fpkt"];
4581--11616[label="1;1pkt 1fpkt"];
4581--12192[label="0.137931;4pkt 4fpkt"];
4624--5723[label="0.428571;3pkt 3fpkt"];
4624--6463[label="0.428571;3pkt 3fpkt"];
4653--7371[label="1;49pkt 49fpkt"];
4779--7763[label="1;400pkt 400fpkt"];
4790--9949[label="1;1pkt 1fpkt"];
4790--11480[label="1;1pkt 1fpkt"];
4844--7371[label="1;22pkt 22fpkt"];
5209--7371[label="1;4pkt 4fpkt"];
5209--8343[label="1;4pkt 4fpkt"];
5209--10691[label="1;3pkt 3fpkt"];
5305--5714[label="1;5pkt 5fpkt"];
5305--8131[label="0.4;2pkt 2fpkt"];
5305--8180[label="0.4;2pkt 2fpkt"];
5305--8219[label="0.4;2pkt 2fpkt"];
5631--6223[label="0.5;1pkt 1fpkt"];
5631--8862[label="0.5;1pkt 1fpkt"];
5631--10956[label="0.5;1pkt 1fpkt"];
5714--6097[label="0.0104895;3pkt 3fpkt"];
5714--6145[label="0.0501567;16pkt 16fpkt"];
5714--6166[label="0.0609756;15pkt 15fpkt"];
5714--6569[label="0.0336134;4pkt 4fpkt"];
5714--6683[label="1;68pkt 68fpkt"];
5714--6929[label="0.0526316;4pkt 4fpkt"];
5714--7128[label="0.0701754;4pkt 4fpkt"];
5714--7466[label="0.00941176;4pkt 4fpkt"];
5714--7469[label="0.0634921;4pkt 4fpkt"];
5714--7493[label="0.315789;6pkt 6fpkt"];
5714--7517[label="0.0401786;9pkt 9fpkt"];
5714--7605[label="0.352941;6pkt 6fpkt"];
5714--7974[label="1;68pkt 68fpkt"];
5714--8131[label="0.115578;92pkt 92fpkt"];
5714--8180[label="0.115578;92pkt 92fpkt"];
5714--8219[label="0.115578;92pkt 92fpkt"];
5714--8787[label="1;148pkt 148fpkt"];
5714--8887[label="1;3pkt 3fpkt"];
5714--8989[label="0.12;3pkt 3fpkt"];
5714--9249[label="0.3;6pkt 6fpkt"];
5714--9955[label="0.5;2pkt 2fpkt"];
5714--9989[label="0.054902;14pkt 14fpkt"];
5714--10065[label="0.0689655;2pkt 2fpkt"];
5714--10255[label="0.0394737;9pkt 9fpkt"];
5714--10269[label="0.0607287;15pkt 15fpkt"];
5714--10304[label="0.5;1pkt 1fpkt"];
5714--10579[label="0.166667;1pkt 1fpkt"];
5714--10920[label="1;147pkt 147fpkt"];
5714--11016[label="0.12;3pkt 3fpkt"];
5714--11139[label="0.3;6pkt 6fpkt"];
5714--11483[label="0.5;2pkt 2fpkt"];
5714--11661[label="0.0607287;15pkt 15fpkt"];
5714--12028[label="0.3;6pkt 6fpkt"];
5766--5893[label="0.0306748;5pkt 5fpkt"];
5766--6166[label="0.134146;33pkt 33fpkt"];
5766--6408[label="0.00790514;2pkt 2fpkt"];
5766--6453[label="0.00790514;2pkt 2fpkt"];
5766--6487[label="0.0158103;4pkt 4fpkt"];
5766--7161[label="0.00790514;2pkt 2fpkt"];
5766--7500[label="0.0118577;3pkt 3fpkt"];
5766--7517[label="0.133929;30pkt 30fpkt"];
5766--7821[label="0.00790514;2pkt 2fpkt"];
5766--8035[label="0.0158103;4pkt 4fpkt"];
5766--8091[label="0.0306748;5pkt 5fpkt"];
5766--8131[label="0.12253;31pkt 31fpkt"];
5766--8180[label="0.12253;31pkt 31fpkt"];
5766--8219[label="0.12253;31pkt 31fpkt"];
5766--8697[label="0.0102564;2pkt 2fpkt"];
5766--8724[label="0.00395257;1pkt 1fpkt"];
5766--8755[label="0.00395257;1pkt 1fpkt"];
5766--8974[label="0.0118577;3pkt 3fpkt"];
5766--9011[label="0.96;24pkt 24fpkt"];
5766--9133[label="0.0833333;1pkt 1fpkt"];
5766--9224[label="0.00395257;1pkt 1fpkt"];
5766--9464[label="1;1pkt 1fpkt"];
5766--9560[label="0.00636943;1pkt 1fpkt"];
5766--10255[label="0.131579;30pkt 30fpkt"];
5766--10269[label="0.133603;33pkt 33fpkt"];
5766--10868[label="0.0103093;2pkt 2fpkt"];
5766--11026[label="0.96;24pkt 24fpkt"];
5766--11128[label="0.00395257;1pkt 1fpkt"];
5766--11283[label="0.00636943;1pkt 1fpkt"];
5766--11661[label="0.133603;33pkt 33fpkt"];
5766--12025[label="0.00395257;1pkt 1fpkt"];
5844--5893[label="0.0897436;7pkt 7fpkt"];
5844--6166[label="0.0128205;1pkt 1fpkt"];
5844--7469[label="0.126984;8pkt 8fpkt"];
5844--7493[label="0.210526;4pkt 4fpkt"];
5844--7517[label="0.0512821;4pkt 4fpkt"];
5844--8091[label="0.0897436;7pkt 7fpkt"];
5844--8131[label="0.115385;9pkt 9fpkt"];
5844--8180[label="0.115385;9pkt 9fpkt"];
5844--8219[label="0.115385;9pkt 9fpkt"];
5844--8701[label="0.111111;2pkt 2fpkt"];
5844--8989[label="0.12;3pkt 3fpkt"];
5844--9249[label="0.2;4pkt 4fpkt"];
5844--10255[label="0.0512821;4pkt 4fpkt"];
5844--10269[label="0.0128205;1pkt 1fpkt"];
5844--10360[label="0.0555556;1pkt 1fpkt"];
5844--10383[label="0.571429;4pkt 4fpkt"];
5844--10871[label="0.111111;2pkt 2fpkt"];
5844--11016[label="0.12;3pkt 3fpkt"];
5844--11139[label="0.2;4pkt 4fpkt"];
5844--11661[label="0.0128205;1pkt 1fpkt"];
5844--12028[label="0.2;4pkt 4fpkt"];
6150--7371[label="1;46pkt 46fpkt"];
6150--8131[label="0.0869565;4pkt 4fpkt"];
6150--8180[label="0.0869565;4pkt 4fpkt"];
6150--8219[label="0.0869565;4pkt 4fpkt"];
6166--6304[label="0.0384615;5pkt 5fpkt"];
6166--6463[label="0.0650407;16pkt 16fpkt"];
6166--6922[label="0.0246914;2pkt 2fpkt"];
6166--7371[label="0.418699;103pkt 103fpkt"];
6166--8131[label="0.0487805;12pkt 12fpkt"];
6166--8180[label="0.0487805;12pkt 12fpkt"];
6166--8219[label="0.0487805;12pkt 12fpkt"];
6166--10269[label="1;246pkt 246fpkt"];
6166--11661[label="1;246pkt 246fpkt"];
6223--7371[label="0.5;1pkt 1fpkt"];
6223--8862[label="1;2pkt 2fpkt"];
6223--10956[label="1;2pkt 2fpkt"];
6228--7371[label="0.97619;41pkt 41fpkt"];
6228--8640[label="1;42pkt 42fpkt"];
6228--10838[label="1;41pkt 41fpkt"];
6259--7371[label="0.869565;40pkt 40fpkt"];
6259--7810[label="0.0652174;3pkt 3fpkt"];
6259--8678[label="1;46pkt 46fpkt"];
6259--10858[label="0.978261;45pkt 45fpkt"];
6463--6487[label="0.00246305;1pkt 1fpkt"];
6463--6929[label="0.460526;35pkt 35fpkt"];
6463--7128[label="0.140351;8pkt 8fpkt"];
6463--7201[label="0.01;1pkt 1fpkt"];
6463--7305[label="0.6;24pkt 24fpkt"];
6463--7469[label="0.190476;12pkt 12fpkt"];
6463--7493[label="0.210526;4pkt 4fpkt"];
6463--7517[label="0.0982143;22pkt 22fpkt"];
6463--8035[label="0.00246305;1pkt 1fpkt"];
6463--8091[label="0.0184049;3pkt 3fpkt"];
6463--8131[label="0.0935961;38pkt 38fpkt"];
6463--8180[label="0.0935961;38pkt 38fpkt"];
6463--8219[label="0.0935961;38pkt 38fpkt"];
6463--8351[label="0.0107527;1pkt 1fpkt"];
6463--8667[label="1;19pkt 19fpkt"];
6463--9220[label="0.0952381;2pkt 2fpkt"];
6463--9249[label="0.2;4pkt 4fpkt"];
6463--9434[label="0.5;24pkt 24fpkt"];
6463--9552[label="0.217391;10pkt 10fpkt"];
6463--9989[label="0.027451;7pkt 7fpkt"];
6463--10037[label="0.733333;11pkt 11fpkt"];
6463--10072[label="1;5pkt 5fpkt"];
6463--10255[label="0.0964912;22pkt 22fpkt"];
6463--10269[label="0.0647773;16pkt 16fpkt"];
6463--10411[label="0.714286;10pkt 10fpkt"];
6463--10428[label="0.025641;1pkt 1fpkt"];
6463--10495[label="0.545455;12pkt 12fpkt"];
6463--10619[label="0.470588;16pkt 16fpkt"];
6463--11127[label="0.1;2pkt 2fpkt"];
6463--11139[label="0.2;4pkt 4fpkt"];
6463--11224[label="0.5;24pkt 24fpkt"];
6463--11280[label="0.217391;10pkt 10fpkt"];
6463--11542[label="1;5pkt 5fpkt"];
6463--11661[label="0.0647773;16pkt 16fpkt"];
6463--11778[label="0.545455;12pkt 12fpkt"];
6463--12028[label="0.2;4pkt 4fpkt"];
6463--12061[label="0.5;24pkt 24fpkt"];
6675--7371[label="0.852459;52pkt 52fpkt"];
6675--7810[label="0.0819672;5pkt 5fpkt"];
6756--7371[label="1;269pkt 269fpkt"];
6756--8131[label="0.0446097;12pkt 12fpkt"];
6756--8180[label="0.0446097;12pkt 12fpkt"];
6756--8219[label="0.0446097;12pkt 12fpkt"];
6756--8978[label="1;269pkt 269fpkt"];
6984--7371[label="1;20pkt 20fpkt"];
6984--10417[label="1;19pkt 19fpkt"];
7371--7429[label="1;32pkt 32fpkt"];
7371--7466[label="0.00705882;3pkt 3fpkt"];
7371--7477[label="1;285pkt 285fpkt"];
7371--7517[label="0.361607;81pkt 81fpkt"];
7371--7534[label="1;43pkt 43fpkt"];
7371--7628[label="1;88pkt 88fpkt"];
7371--8091[label="0.429448;70pkt 70fpkt"];
7371--8131[label="0.0571749;204pkt 204fpkt"];
7371--8180[label="0.0571749;204pkt 204fpkt"];
7371--8219[label="0.0571749;204pkt 204fpkt"];
7371--8257[label="1;2pkt 2fpkt"];
7371--8275[label="0.2;1pkt 1fpkt"];
7371--8343[label="1;4pkt 4fpkt"];
7371--8351[label="0.827957;77pkt 77fpkt"];
7371--8363[label="0.25;1pkt 1fpkt"];
7371--8391[label="0.285714;4pkt 4fpkt"];
7371--8399[label="1;6pkt 6fpkt"];
7371--8640[label="0.97619;41pkt 41fpkt"];
7371--8678[label="0.93617;88pkt 88fpkt"];
7371--8681[label="0.914286;32pkt 32fpkt"];
7371--8718[label="0.866667;13pkt 13fpkt"];
7371--8749[label="0.294872;23pkt 23fpkt"];
7371--8776[label="0.109091;18pkt 18fpkt"];
7371--8780[label="0.84;42pkt 42fpkt"];
7371--8801[label="0.276596;13pkt 13fpkt"];
7371--8828[label="0.989583;285pkt 285fpkt"];
7371--8862[label="0.5;1pkt 1fpkt"];
7371--8870[label="0.909091;10pkt 10fpkt"];
7371--8926[label="0.0384615;1pkt 1fpkt"];
7371--8978[label="0.923469;362pkt 362fpkt"];
7371--8996[label="0.0526316;1pkt 1fpkt"];
7371--9073[label="0.0322581;1pkt 1fpkt"];
7371--9096[label="1;7pkt 7fpkt"];
7371--9405[label="1;3pkt 3fpkt"];
7371--9425[label="1;12pkt 12fpkt"];
7371--9542[label="0.923077;36pkt 36fpkt"];
7371--9557[label="0.869565;40pkt 40fpkt"];
7371--9690[label="0.111111;1pkt 1fpkt"];
7371--9740[label="0.860465;37pkt 37fpkt"];
7371--9755[label="1;1pkt 1fpkt"];
7371--9763[label="1;1pkt 1fpkt"];
7371--9779[label="0.0322581;1pkt 1fpkt"];
7371--9785[label="1;10pkt 10fpkt"];
7371--9810[label="0.0283019;3pkt 3fpkt"];
7371--9860[label="0.0181818;1pkt 1fpkt"];
7371--9973[label="0.870968;27pkt 27fpkt"];
7371--9989[label="0.203922;52pkt 52fpkt"];
7371--10053[label="0.0169492;1pkt 1fpkt"];
7371--10218[label="1;2pkt 2fpkt"];
7371--10255[label="0.355263;81pkt 81fpkt"];
7371--10269[label="0.417004;103pkt 103fpkt"];
7371--10326[label="0.913043;21pkt 21fpkt"];
7371--10396[label="0.571429;4pkt 4fpkt"];
7371--10417[label="1;19pkt 19fpkt"];
7371--10526[label="0.466019;48pkt 48fpkt"];
7371--10549[label="0.0357143;1pkt 1fpkt"];
7371--10620[label="0.47541;29pkt 29fpkt"];
7371--10659[label="0.2;1pkt 1fpkt"];
7371--10691[label="1;3pkt 3fpkt"];
7371--10705[label="0.25;1pkt 1fpkt"];
7371--10728[label="1;6pkt 6fpkt"];
7371--10838[label="0.97561;40pkt 40fpkt"];
7371--10858[label="0.946237;88pkt 88fpkt"];
7371--10880[label="0.857143;12pkt 12fpkt"];
7371--10896[label="0.294872;23pkt 23fpkt"];
7371--10914[label="0.857143;42pkt 42fpkt"];
7371--10926[label="0.295455;13pkt 13fpkt"];
7371--10942[label="0.989547;284pkt 284fpkt"];
7371--10956[label="0.5;1pkt 1fpkt"];
7371--10988[label="0.0384615;1pkt 1fpkt"];
7371--11059[label="0.0322581;1pkt 1fpkt"];
7371--11070[label="1;7pkt 7fpkt"];
7371--11272[label="0.923077;36pkt 36fpkt"];
7371--11380[label="1;1pkt 1fpkt"];
7371--11429[label="0.0181818;1pkt 1fpkt"];
7371--11532[label="0.0169492;1pkt 1fpkt"];
7371--11661[label="0.417004;103pkt 103fpkt"];
7371--11725[label="0.571429;4pkt 4fpkt"];
7371--11798[label="0.466019;48pkt 48fpkt"];
7371--11805[label="0.0357143;1pkt 1fpkt"];
7371--11850[label="0.25;1pkt 1fpkt"];
7371--11947[label="0.857143;42pkt 42fpkt"];
7371--12004[label="1;7pkt 7fpkt"];
7371--12192[label="0.0169492;1pkt 1fpkt"];
7429--8131[label="0.09375;3pkt 3fpkt"];
7429--8180[label="0.09375;3pkt 3fpkt"];
7429--8219[label="0.09375;3pkt 3fpkt"];
7429--8681[label="1;32pkt 32fpkt"];
7477--8131[label="0.00350877;1pkt 1fpkt"];
7477--8180[label="0.00350877;1pkt 1fpkt"];
7477--8219[label="0.00350877;1pkt 1fpkt"];
7477--8828[label="1;285pkt 285fpkt"];
7477--10942[label="0.996491;284pkt 284fpkt"];
7493--8131[label="0.105263;2pkt 2fpkt"];
7493--8180[label="0.105263;2pkt 2fpkt"];
7493--8219[label="0.105263;2pkt 2fpkt"];
7493--9249[label="1;19pkt 19fpkt"];
7493--11139[label="1;19pkt 19fpkt"];
7493--12028[label="1;19pkt 19fpkt"];
7517--7778[label="0.00930233;2pkt 2fpkt"];
7517--8131[label="0.0401786;9pkt 9fpkt"];
7517--8180[label="0.0401786;9pkt 9fpkt"];
7517--8219[label="0.0401786;9pkt 9fpkt"];
7517--10255[label="1;224pkt 224fpkt"];
7534--8131[label="0.0930233;4pkt 4fpkt"];
7534--8180[label="0.0930233;4pkt 4fpkt"];
7534--8219[label="0.0930233;4pkt 4fpkt"];
7605--8131[label="0.235294;4pkt 4fpkt"];
7605--8180[label="0.235294;4pkt 4fpkt"];
7605--8219[label="0.235294;4pkt 4fpkt"];
8343--10691[label="1;3pkt 3fpkt"];
8363--10705[label="1;4pkt 4fpkt"];
8363--11868[label="1;3pkt 3fpkt"];
8399--10728[label="1;6pkt 6fpkt"];
8640--10838[label="1;41pkt 41fpkt"];
8718--10880[label="1;14pkt 14fpkt"];
8749--10896[label="1;78pkt 78fpkt"];
8780--10914[label="1;49pkt 49fpkt"];
8780--11947[label="1;49pkt 49fpkt"];
8787--10920[label="1;147pkt 147fpkt"];
8828--10942[label="1;287pkt 287fpkt"];
8862--10956[label="1;2pkt 2fpkt"];
8926--10988[label="1;26pkt 26fpkt"];
8989--11016[label="1;25pkt 25fpkt"];
9011--11026[label="1;25pkt 25fpkt"];
9073--11059[label="1;31pkt 31fpkt"];
9249--11139[label="1;20pkt 20fpkt"];
9249--12028[label="1;20pkt 20fpkt"];
9542--11272[label="1;39pkt 39fpkt"];
9949--11480[label="1;1pkt 1fpkt"];
9955--11483[label="1;4pkt 4fpkt"];
10053--11532[label="1;59pkt 59fpkt"];
10053--12192[label="1;59pkt 59fpkt"];
10072--11542[label="1;5pkt 5fpkt"];
10269--11661[label="1;247pkt 247fpkt"];
10347--11702[label="1;33pkt 33fpkt"];
10396--11725[label="1;7pkt 7fpkt"];
10446--11755[label="1;9pkt 9fpkt"];
10446--12286[label="1;9pkt 9fpkt"];
10495--11778[label="1;22pkt 22fpkt"];
10549--11805[label="1;28pkt 28fpkt"];
10705--11868[label="1;3pkt 3fpkt"];
10914--11947[label="1;49pkt 49fpkt"];
11139--12028[label="1;20pkt 20fpkt"];
11532--12192[label="1;59pkt 59fpkt"];
11755--12286[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.81" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
4129[label="214.49.21.186;d;9pkt 9fpkt", shape=diamond, color=yellow];
4498[label="101.238.193.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 214.49.21.186:10769}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10769: (35%)&lt;BR/&gt; 17788: (20%)&lt;BR/&gt; 29000: (10%)&lt;BR/&gt; 1078: (10%)&lt;BR/&gt; 11302: (5%)&gt;];
}
4129--4498[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.21.186" dst_port="10769" src_port="17788"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
4508[label="128.64.214.218;d;95pkt 95fpkt", shape=diamond, color=yellow];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.214.218:22651}[96.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22651: (48.4211%)&lt;BR/&gt; 80: (1.05263%)&lt;BR/&gt; 64837: (0.526316%)&lt;BR/&gt; 64712: (0.526316%)&lt;BR/&gt; 64182: (0.526316%)&gt;];
}
4508--4857[label="0.0105263;1pkt 1fpkt"];
4508--8131[label="0.0105263;1pkt 1fpkt"];
4508--8165[label="0.0105263;1pkt 1fpkt"];
4508--8180[label="0.0105263;1pkt 1fpkt"];
4508--8208[label="0.0105263;1pkt 1fpkt"];
4508--8219[label="0.0105263;1pkt 1fpkt"];
4508--8241[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.214.218" dst_port="22651"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
9[label="128.64.72.11s;1pkt 1fpkt", shape=rectangle, color=red];
1713[label="128.64.242.237;s;28pkt 28fpkt", shape=diamond, color=yellow];
1734[label="193.234.89.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
2184[label="42.216.161.7;d;18pkt 18fpkt", shape=diamond, color=yellow];
2790[label="128.64.220.133;s;43pkt 43fpkt", shape=diamond, color=yellow];
3463[label="133.72.237.195;s;247pkt 247fpkt", shape=diamond, color=yellow];
4390[label="101.213.113.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
5358[label="128.64.242.237;s;25pkt 25fpkt", shape=hexagon, color=black];
5614[label="193.234.88.13;d;13pkt 13fpkt", shape=hexagon, color=black];
6601[label="193.234.89.191;d;2pkt 2fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.237.195:14060, *:*}[64.8968%]&lt;BR/&gt;{*:*, *:80}[29.7935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14060: (28.9474%)&lt;BR/&gt; 80: (18.6842%)&lt;BR/&gt; 443: (0.657895%)&lt;BR/&gt; 1803: (0.526316%)&lt;BR/&gt; 1795: (0.526316%)&gt;];
}
9--1859[label="1;1pkt 1fpkt"];
9--1996[label="1;1pkt 1fpkt"];
1713--1734[label="1;2pkt 2fpkt"];
1713--2537[label="0.0714286;2pkt 2fpkt"];
1713--3382[label="0.0714286;2pkt 2fpkt"];
1713--4204[label="0.037037;1pkt 1fpkt"];
1713--5358[label="1;25pkt 25fpkt"];
1713--5614[label="0.923077;12pkt 12fpkt"];
1713--6490[label="0.0714286;2pkt 2fpkt"];
1713--6601[label="1;2pkt 2fpkt"];
1713--7512[label="0.0714286;2pkt 2fpkt"];
1713--7542[label="0.037037;1pkt 1fpkt"];
1713--7950[label="0.0714286;2pkt 2fpkt"];
1713--8081[label="0.0714286;2pkt 2fpkt"];
1713--8134[label="0.142857;4pkt 4fpkt"];
1734--5358[label="1;2pkt 2fpkt"];
1734--6601[label="1;2pkt 2fpkt"];
1734--8134[label="0.5;1pkt 1fpkt"];
2184--5324[label="0.285714;2pkt 2fpkt"];
2184--8134[label="0.111111;2pkt 2fpkt"];
2790--2886[label="0.047619;2pkt 2fpkt"];
2790--3468[label="0.0465116;2pkt 2fpkt"];
2790--3788[label="0.0465116;2pkt 2fpkt"];
2790--7250[label="0.0465116;2pkt 2fpkt"];
2790--9636[label="1;43pkt 43fpkt"];
3463--6462[label="0.028169;2pkt 2fpkt"];
3463--6814[label="0.00404858;1pkt 1fpkt"];
3463--7581[label="1;247pkt 247fpkt"];
3463--8134[label="0.00404858;1pkt 1fpkt"];
3463--10173[label="1;247pkt 247fpkt"];
3463--11606[label="1;247pkt 247fpkt"];
4390--7706[label="1;1pkt 1fpkt"];
5358--5614[label="0.923077;12pkt 12fpkt"];
5358--6490[label="0.08;2pkt 2fpkt"];
5358--6601[label="1;2pkt 2fpkt"];
5358--7542[label="0.04;1pkt 1fpkt"];
5358--7950[label="0.08;2pkt 2fpkt"];
5358--8134[label="0.16;4pkt 4fpkt"];
5614--8119[label="0.0769231;1pkt 1fpkt"];
6601--8134[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter src_ip="133.72.237.195" src_port="14060"/>
    </slice>
    <from sec="1229058027" usec="0"/>
    <to sec="1229058816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
4534[label="215.131.24.26;s;98pkt 98fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.131.24.26:0, *:0}[96.9388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9388%)&lt;BR/&gt; 46235: (0.510204%)&lt;BR/&gt; 12128: (0.510204%)&lt;BR/&gt; 3503: (0.510204%)&lt;BR/&gt; 445: (0.510204%)&gt;];
}
4534--4751[label="0.0102041;1pkt 1fpkt"];
4534--5428[label="0.0102041;1pkt 1fpkt"];
4534--5772[label="0.0102041;1pkt 1fpkt"];
4534--5790[label="0.0117647;1pkt 1fpkt"];
4534--5996[label="0.0104167;1pkt 1fpkt"];
4534--7750[label="0.0102041;1pkt 1fpkt"];
4534--8108[label="0.0102041;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.131.24.26"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1080[label="133.72.155.217;s;256pkt 256fpkt", shape=diamond, color=yellow];
1627[label="218.250.34.160;d;3pkt 3fpkt", shape=diamond, color=yellow];
3618[label="34.240.84.186;d;2pkt 2fpkt", shape=diamond, color=yellow];
5061[label="133.72.155.217;s;207pkt 207fpkt", shape=hexagon, color=black];
10354[label="133.72.155.217;261pkt 261fpkt", shape=pentagon, color=darkviolet];
11707[label="133.72.155.217;261pkt 261fpkt", shape=invtriangle, color=brown];
12260[label="133.72.155.217;261pkt 261fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.155.217:*, *:53}[75.9542%]&lt;BR/&gt;{133.72.155.217:80, *:*}[23.6641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.2894%)&lt;BR/&gt; 80: (11.7106%)&lt;BR/&gt; 53155: (0.39968%)&lt;BR/&gt; 28426: (0.39968%)&lt;BR/&gt; 1288: (0.39968%)&gt;];
}
1080--1627[label="0.666667;2pkt 2fpkt"];
1080--1634[label="0.0714286;4pkt 4fpkt"];
1080--3019[label="0.0740741;2pkt 2fpkt"];
1080--3052[label="0.0909091;3pkt 3fpkt"];
1080--3508[label="0.00735294;1pkt 1fpkt"];
1080--3618[label="1;2pkt 2fpkt"];
1080--4549[label="0.0820312;21pkt 21fpkt"];
1080--4550[label="0.0820312;21pkt 21fpkt"];
1080--4551[label="0.0820312;21pkt 21fpkt"];
1080--4552[label="0.0820312;21pkt 21fpkt"];
1080--4626[label="0.0454545;2pkt 2fpkt"];
1080--5061[label="1;207pkt 207fpkt"];
1080--6975[label="0.00813008;1pkt 1fpkt"];
1080--7536[label="0.0820312;21pkt 21fpkt"];
1080--7578[label="0.0714286;4pkt 4fpkt"];
1080--7642[label="0.0454545;2pkt 2fpkt"];
1080--8131[label="0.015625;4pkt 4fpkt"];
1080--8180[label="0.015625;4pkt 4fpkt"];
1080--8219[label="0.015625;4pkt 4fpkt"];
1080--10354[label="1;256pkt 256fpkt"];
1080--11707[label="1;256pkt 256fpkt"];
1080--12260[label="1;256pkt 256fpkt"];
1627--5061[label="0.666667;2pkt 2fpkt"];
1627--7168[label="0.333333;1pkt 1fpkt"];
1627--8074[label="0.333333;1pkt 1fpkt"];
1627--10354[label="0.666667;2pkt 2fpkt"];
1627--11707[label="0.666667;2pkt 2fpkt"];
1627--12260[label="0.666667;2pkt 2fpkt"];
3618--5061[label="1;2pkt 2fpkt"];
3618--10354[label="1;2pkt 2fpkt"];
3618--11707[label="1;2pkt 2fpkt"];
3618--12260[label="1;2pkt 2fpkt"];
5061--6975[label="0.00813008;1pkt 1fpkt"];
5061--7536[label="0.0676329;14pkt 14fpkt"];
5061--7578[label="0.0357143;2pkt 2fpkt"];
5061--8131[label="0.0193237;4pkt 4fpkt"];
5061--8180[label="0.0193237;4pkt 4fpkt"];
5061--8219[label="0.0193237;4pkt 4fpkt"];
5061--10354[label="1;207pkt 207fpkt"];
5061--11707[label="1;207pkt 207fpkt"];
5061--12260[label="1;207pkt 207fpkt"];
10354--11707[label="1;261pkt 261fpkt"];
10354--12260[label="1;261pkt 261fpkt"];
11707--12260[label="1;261pkt 261fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.155.217" src_port="80"/>
      <filter dst_port="53" src_ip="133.72.155.217"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
123[label="133.72.148.109d;1pkt 1fpkt", shape=rectangle, color=red];
1840[label="133.72.148.109;d;311pkt 311fpkt", shape=diamond, color=yellow];
2337[label="100.136.209.84;s;229pkt 229fpkt", shape=diamond, color=yellow];
6346[label="133.72.148.109;d;311pkt 311fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.136.209.84:80, 133.72.148.109:*}[73.6334%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4131%)&lt;BR/&gt; 46204: (0.586854%)&lt;BR/&gt; 1849: (0.293427%)&lt;BR/&gt; 2055: (0.176056%)&lt;BR/&gt; 1999: (0.176056%)&gt;];
}
123--1840[label="1;1pkt 1fpkt"];
123--4623[label="1;1pkt 1fpkt"];
123--6346[label="1;1pkt 1fpkt"];
1840--2003[label="0.0041841;1pkt 1fpkt"];
1840--2337[label="1;229pkt 229fpkt"];
1840--2923[label="0.0392157;4pkt 4fpkt"];
1840--3577[label="0.0769231;2pkt 2fpkt"];
1840--3780[label="0.0425532;2pkt 2fpkt"];
1840--4623[label="0.222222;8pkt 8fpkt"];
1840--6346[label="1;311pkt 311fpkt"];
1840--6441[label="0.0224719;2pkt 2fpkt"];
1840--6852[label="0.0425532;2pkt 2fpkt"];
1840--7637[label="0.0769231;2pkt 2fpkt"];
1840--7943[label="0.0224719;2pkt 2fpkt"];
1840--7987[label="0.0540541;2pkt 2fpkt"];
1840--10007[label="0.2;6pkt 6fpkt"];
2337--6346[label="1;229pkt 229fpkt"];
6346--6441[label="0.0224719;2pkt 2fpkt"];
6346--6852[label="0.0425532;2pkt 2fpkt"];
6346--7637[label="0.0769231;2pkt 2fpkt"];
6346--7943[label="0.0224719;2pkt 2fpkt"];
6346--7987[label="0.0540541;2pkt 2fpkt"];
6346--10007[label="0.2;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.148.109" src_ip="100.136.209.84" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.72.3.34"/>
      <from sec="1229058558" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="1229058558" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
4654[label="133.72.150.88;d;70pkt 70fpkt", shape=diamond, color=yellow];
4665[label="130.164.126.190;s;70pkt 70fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.164.126.190:80, 133.72.150.88:*}[70%]&lt;BR/&gt;{130.164.126.190:443, 133.72.150.88:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 443: (15%)&lt;BR/&gt; 1774: (0.714286%)&lt;BR/&gt; 1772: (0.714286%)&lt;BR/&gt; 1770: (0.714286%)&gt;];
}
4654--4665[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.150.88" src_ip="130.164.126.190" src_port="80"/>
      <filter dst_ip="133.72.150.88" src_ip="130.164.126.190" src_port="443"/>
    </slice>
    <from sec="1229058578" usec="0"/>
    <to sec="1229058813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
4678[label="1.198.34.114;d;16pkt 16fpkt", shape=diamond, color=yellow];
4679[label="128.81.165.105;s;16pkt 16fpkt", shape=diamond, color=yellow];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.165.105:443, 1.198.34.114:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1089: (3.125%)&lt;BR/&gt; 1088: (3.125%)&lt;BR/&gt; 1087: (3.125%)&lt;BR/&gt; 1086: (3.125%)&gt;];
}
4678--4679[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="1.198.34.114" src_ip="128.81.165.105" src_port="443"/>
    </slice>
    <from sec="1229058661" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
4394[label="201.190.65.18;d;20pkt 20fpkt", shape=diamond, color=yellow];
4683[label="174.194.146.42;s;22pkt 22fpkt", shape=diamond, color=yellow];
7708[label="174.194.146.42;s;22pkt 22fpkt", shape=hexagon, color=black];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.146.42:*, 201.190.65.18:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54596: (2.34375%)&lt;BR/&gt; 54595: (2.34375%)&lt;BR/&gt; 54594: (2.34375%)&lt;BR/&gt; 54593: (2.34375%)&gt;];
}
4394--4683[label="1;20pkt 20fpkt"];
4394--7708[label="1;20pkt 20fpkt"];
4394--8725[label="1;20pkt 20fpkt"];
4394--10884[label="1;20pkt 20fpkt"];
4683--7708[label="1;22pkt 22fpkt"];
4683--8725[label="1;22pkt 22fpkt"];
4683--10884[label="1;22pkt 22fpkt"];
7708--8725[label="1;22pkt 22fpkt"];
7708--10884[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="201.190.65.18" dst_port="80" src_ip="174.194.146.42"/>
    </slice>
    <from sec="1229058668" usec="0"/>
    <to sec="1229058800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
4286[label="169.18.155.113;d;5pkt 5fpkt", shape=diamond, color=yellow];
4689[label="194.230.139.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
7718[label="194.230.139.160;s;1pkt 1fpkt", shape=hexagon, color=black];
9885[label="194.230.139.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11446[label="194.230.139.160;1pkt 1fpkt", shape=invtriangle, color=brown];
12157[label="194.230.139.160;1pkt 1fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.57.5.15:7021, 169.18.155.113:25}[20%]&lt;BR/&gt;{215.176.5.25:1247, 169.18.155.113:25}[20%]&lt;BR/&gt;{212.152.32.97:4268, 169.18.155.113:25}[20%]&lt;BR/&gt;{205.72.205.112:47159, 169.18.155.113:25}[20%]&lt;BR/&gt;{194.230.139.160:6217, 169.18.155.113:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 6217: (30%)&lt;BR/&gt; 47159: (5%)&lt;BR/&gt; 7021: (5%)&lt;BR/&gt; 4268: (5%)&gt;];
}
4286--4689[label="1;1pkt 1fpkt"];
4286--7718[label="1;1pkt 1fpkt"];
4286--9885[label="1;1pkt 1fpkt"];
4286--11446[label="1;1pkt 1fpkt"];
4286--12157[label="1;1pkt 1fpkt"];
4689--7718[label="1;1pkt 1fpkt"];
4689--9885[label="1;1pkt 1fpkt"];
4689--11446[label="1;1pkt 1fpkt"];
4689--12157[label="1;1pkt 1fpkt"];
7718--9885[label="1;1pkt 1fpkt"];
7718--11446[label="1;1pkt 1fpkt"];
7718--12157[label="1;1pkt 1fpkt"];
9885--11446[label="1;1pkt 1fpkt"];
9885--12157[label="1;1pkt 1fpkt"];
11446--12157[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.155.113" dst_port="25" src_ip="194.230.139.160" src_port="6217"/>
      <filter dst_ip="169.18.155.113" dst_port="25" src_ip="205.72.205.112" src_port="47159"/>
      <filter dst_ip="169.18.155.113" dst_port="25" src_ip="212.152.32.97" src_port="4268"/>
      <filter dst_ip="169.18.155.113" dst_port="25" src_ip="215.176.5.25" src_port="1247"/>
      <filter dst_ip="169.18.155.113" dst_port="25" src_ip="183.57.5.15" src_port="7021"/>
    </slice>
    <from sec="1229058442" usec="0"/>
    <to sec="1229058703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
584[label="214.56.220.165;s;4284pkt 4284fpkt", shape=diamond, color=yellow];
1258[label="49.53.15.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1365[label="215.239.80.189;d;5pkt 5fpkt", shape=diamond, color=yellow];
1796[label="48.220.89.85;d;7pkt 7fpkt", shape=diamond, color=yellow];
4299[label="180.71.128.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
4693[label="6.96.50.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
4717[label="96.83.121.226;d;2pkt 2fpkt", shape=diamond, color=yellow];
4718[label="45.231.226.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
5115[label="49.53.15.1;d;1pkt 1fpkt", shape=hexagon, color=black];
6353[label="215.239.80.189;d;5pkt 5fpkt", shape=hexagon, color=black];
7651[label="180.71.128.161;d;1pkt 1fpkt", shape=hexagon, color=black];
9925[label="214.56.220.165;4593pkt 4593fpkt", shape=pentagon, color=darkviolet];
11469[label="214.56.220.165;4593pkt 4593fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.220.165:*, *:*}[99.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (14.9822%)&lt;BR/&gt; 6881: (1.40041%)&lt;BR/&gt; 51413: (1.10033%)&lt;BR/&gt; 45682: (0.233402%)&lt;BR/&gt; 6882: (0.17783%)&gt;];
}
584--1258[label="1;1pkt 1fpkt"];
584--1365[label="1;5pkt 5fpkt"];
584--1511[label="0.0192308;1pkt 1fpkt"];
584--1796[label="0.428571;3pkt 3fpkt"];
584--4299[label="1;1pkt 1fpkt"];
584--4693[label="1;1pkt 1fpkt"];
584--4717[label="1;2pkt 2fpkt"];
584--4718[label="1;2pkt 2fpkt"];
584--5115[label="1;1pkt 1fpkt"];
584--6353[label="1;5pkt 5fpkt"];
584--6836[label="0.0208333;1pkt 1fpkt"];
584--7651[label="1;1pkt 1fpkt"];
584--8119[label="0.000466853;2pkt 2fpkt"];
584--8165[label="0.000233427;1pkt 1fpkt"];
584--8208[label="0.000233427;1pkt 1fpkt"];
584--8241[label="0.000233427;1pkt 1fpkt"];
584--9925[label="1;4284pkt 4284fpkt"];
584--11469[label="1;4284pkt 4284fpkt"];
1258--5115[label="1;1pkt 1fpkt"];
1258--9925[label="1;1pkt 1fpkt"];
1258--11469[label="1;1pkt 1fpkt"];
1365--6353[label="1;5pkt 5fpkt"];
1365--9925[label="1;5pkt 5fpkt"];
1365--11469[label="1;5pkt 5fpkt"];
1796--5330[label="0.2;1pkt 1fpkt"];
1796--5383[label="1;1pkt 1fpkt"];
1796--9925[label="0.428571;3pkt 3fpkt"];
1796--11469[label="0.428571;3pkt 3fpkt"];
4299--7651[label="1;1pkt 1fpkt"];
4299--9925[label="1;1pkt 1fpkt"];
4299--11469[label="1;1pkt 1fpkt"];
4693--9925[label="1;1pkt 1fpkt"];
4693--11469[label="1;1pkt 1fpkt"];
4717--9925[label="1;2pkt 2fpkt"];
4717--11469[label="1;2pkt 2fpkt"];
4718--9925[label="1;2pkt 2fpkt"];
4718--11469[label="1;2pkt 2fpkt"];
5115--9925[label="1;1pkt 1fpkt"];
5115--11469[label="1;1pkt 1fpkt"];
6353--9925[label="1;5pkt 5fpkt"];
6353--11469[label="1;5pkt 5fpkt"];
7651--9925[label="1;1pkt 1fpkt"];
7651--11469[label="1;1pkt 1fpkt"];
9925--11469[label="1;4593pkt 4593fpkt"];
</description>
    <slice>
      <filter src_ip="214.56.220.165"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
4704[label="128.64.244.137;d;5pkt 5fpkt", shape=diamond, color=yellow];
4713[label="135.74.173.225;s;3pkt 3fpkt", shape=diamond, color=yellow];
7737[label="135.74.173.225;s;3pkt 3fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.0.18:80, 128.64.244.137:2235}[20%]&lt;BR/&gt;{214.241.0.18:80, 128.64.244.137:2236}[20%]&lt;BR/&gt;{135.74.173.225:80, 128.64.244.137:2246}[20%]&lt;BR/&gt;{135.74.173.225:80, 128.64.244.137:2248}[20%]&lt;BR/&gt;{135.74.173.225:80, 128.64.244.137:2252}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2252: (13.6364%)&lt;BR/&gt; 2248: (13.6364%)&lt;BR/&gt; 2246: (13.6364%)&lt;BR/&gt; 2236: (4.54545%)&gt;];
}
4704--4713[label="1;3pkt 3fpkt"];
4704--7737[label="1;3pkt 3fpkt"];
4713--7737[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.244.137" dst_port="2252" src_ip="135.74.173.225" src_port="80"/>
      <filter dst_ip="128.64.244.137" dst_port="2248" src_ip="135.74.173.225" src_port="80"/>
      <filter dst_ip="128.64.244.137" dst_port="2246" src_ip="135.74.173.225" src_port="80"/>
      <filter dst_ip="128.64.244.137" dst_port="2236" src_ip="214.241.0.18" src_port="80"/>
      <filter dst_ip="128.64.244.137" dst_port="2235" src_ip="214.241.0.18" src_port="80"/>
    </slice>
    <from sec="1229058731" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
381[label="222.231.4.147;s;106pkt 106fpkt", shape=diamond, color=yellow];
1210[label="133.72.158.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
1622[label="208.89.247.137;s;17pkt 17fpkt", shape=diamond, color=yellow];
2272[label="133.72.177.17;d;2pkt 2fpkt", shape=diamond, color=yellow];
2322[label="133.72.177.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
3065[label="133.72.158.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
3166[label="133.72.181.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
3772[label="214.241.0.144;s;63pkt 63fpkt", shape=diamond, color=yellow];
4333[label="214.49.190.148;d;93pkt 93fpkt", shape=diamond, color=yellow];
4425[label="133.72.154.204;d;3pkt 3fpkt", shape=diamond, color=yellow];
4715[label="133.72.158.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
4721[label="133.72.154.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
5942[label="133.72.177.17;d;2pkt 2fpkt", shape=hexagon, color=black];
5991[label="222.231.4.147;s;80pkt 80fpkt", shape=hexagon, color=black];
6196[label="133.72.158.19;d;1pkt 1fpkt", shape=hexagon, color=black];
6665[label="133.72.181.145;d;2pkt 2fpkt", shape=hexagon, color=black];
7480[label="133.72.2.72;d;186pkt 186fpkt", shape=hexagon, color=black];
7739[label="133.72.158.64;d;1pkt 1fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 133.72.2.72:*}[27.8146%]&lt;BR/&gt;{222.231.4.147:80, *:*}[23.3996%]&lt;BR/&gt;{*:80, 214.49.190.148:*}[20.5298%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.1416%)&lt;BR/&gt; 53: (11.3274%)&lt;BR/&gt; 2232: (0.353982%)&lt;BR/&gt; 2231: (0.353982%)&lt;BR/&gt; 1642: (0.353982%)&gt;];
}
381--571[label="0.00952381;1pkt 1fpkt"];
381--727[label="0.02;1pkt 1fpkt"];
381--1046[label="0.0188679;2pkt 2fpkt"];
381--1210[label="1;2pkt 2fpkt"];
381--1219[label="1;2pkt 2fpkt"];
381--1220[label="1;2pkt 2fpkt"];
381--1223[label="1;1pkt 1fpkt"];
381--1652[label="0.181818;2pkt 2fpkt"];
381--1862[label="0.0188679;2pkt 2fpkt"];
381--2272[label="1;2pkt 2fpkt"];
381--2322[label="1;2pkt 2fpkt"];
381--3040[label="0.0169492;1pkt 1fpkt"];
381--3065[label="1;1pkt 1fpkt"];
381--3166[label="1;2pkt 2fpkt"];
381--3571[label="0.5;1pkt 1fpkt"];
381--3782[label="0.0188679;2pkt 2fpkt"];
381--4087[label="0.0208333;2pkt 2fpkt"];
381--4425[label="1;3pkt 3fpkt"];
381--4715[label="1;1pkt 1fpkt"];
381--4721[label="1;1pkt 1fpkt"];
381--4797[label="0.0283019;3pkt 3fpkt"];
381--4950[label="0.0294118;1pkt 1fpkt"];
381--5051[label="0.0188679;2pkt 2fpkt"];
381--5344[label="1;2pkt 2fpkt"];
381--5747[label="0.00961538;1pkt 1fpkt"];
381--5942[label="1;2pkt 2fpkt"];
381--5991[label="1;80pkt 80fpkt"];
381--6196[label="1;1pkt 1fpkt"];
381--6665[label="1;2pkt 2fpkt"];
381--6934[label="0.0169492;1pkt 1fpkt"];
381--7480[label="0.0188679;2pkt 2fpkt"];
381--7593[label="0.181818;2pkt 2fpkt"];
381--7739[label="1;1pkt 1fpkt"];
381--8131[label="0.169811;18pkt 18fpkt"];
381--8180[label="0.169811;18pkt 18fpkt"];
381--8219[label="0.169811;18pkt 18fpkt"];
1210--5991[label="1;2pkt 2fpkt"];
1210--8131[label="0.5;1pkt 1fpkt"];
1210--8180[label="0.5;1pkt 1fpkt"];
1210--8219[label="0.5;1pkt 1fpkt"];
1622--3782[label="0.0588235;1pkt 1fpkt"];
1622--4333[label="0.470588;8pkt 8fpkt"];
1622--7480[label="0.0588235;1pkt 1fpkt"];
2272--5942[label="1;2pkt 2fpkt"];
2272--5991[label="1;2pkt 2fpkt"];
2322--5991[label="1;2pkt 2fpkt"];
3065--5991[label="1;1pkt 1fpkt"];
3065--6196[label="1;1pkt 1fpkt"];
3166--5991[label="1;2pkt 2fpkt"];
3166--6665[label="1;2pkt 2fpkt"];
3772--3782[label="0.015873;1pkt 1fpkt"];
3772--4797[label="0.015873;1pkt 1fpkt"];
3772--5714[label="0.0634921;4pkt 4fpkt"];
3772--5723[label="0.015873;1pkt 1fpkt"];
3772--5844[label="0.126984;8pkt 8fpkt"];
3772--6463[label="0.190476;12pkt 12fpkt"];
3772--7469[label="1;63pkt 63fpkt"];
3772--7480[label="0.015873;1pkt 1fpkt"];
3772--8131[label="0.0793651;5pkt 5fpkt"];
3772--8180[label="0.0793651;5pkt 5fpkt"];
3772--8219[label="0.0793651;5pkt 5fpkt"];
4333--6128[label="0.139785;13pkt 13fpkt"];
4333--8770[label="0.139785;13pkt 13fpkt"];
4333--10906[label="0.139785;13pkt 13fpkt"];
4715--7739[label="1;1pkt 1fpkt"];
5942--5991[label="1;2pkt 2fpkt"];
5991--6196[label="1;1pkt 1fpkt"];
5991--6665[label="1;2pkt 2fpkt"];
5991--6934[label="0.0169492;1pkt 1fpkt"];
5991--7480[label="0.025;2pkt 2fpkt"];
5991--7593[label="0.181818;2pkt 2fpkt"];
5991--8131[label="0.225;18pkt 18fpkt"];
5991--8180[label="0.225;18pkt 18fpkt"];
5991--8219[label="0.225;18pkt 18fpkt"];
7480--7627[label="0.232558;10pkt 10fpkt"];
7480--7821[label="0.0376344;7pkt 7fpkt"];
7480--8624[label="0.00574713;1pkt 1fpkt"];
7480--8639[label="0.0107527;2pkt 2fpkt"];
7480--8755[label="0.0107527;2pkt 2fpkt"];
7480--8974[label="0.0268817;5pkt 5fpkt"];
7480--9021[label="0.0103093;1pkt 1fpkt"];
7480--9224[label="0.0537634;10pkt 10fpkt"];
7480--9560[label="0.0127389;2pkt 2fpkt"];
7480--10832[label="0.00578035;1pkt 1fpkt"];
7480--11031[label="0.0103093;1pkt 1fpkt"];
7480--11128[label="0.0537634;10pkt 10fpkt"];
7480--11283[label="0.0127389;2pkt 2fpkt"];
7480--11989[label="0.0103093;1pkt 1fpkt"];
7480--12025[label="0.0537634;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="222.231.4.147" src_port="80"/>
      <filter dst_ip="133.72.2.72" src_port="53"/>
      <filter dst_ip="214.49.190.148" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
4722[label="41.207.125.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
4723[label="144.203.48.23;s;2pkt 2fpkt", shape=diamond, color=yellow];
8511[label="144.203.48.23;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10776[label="144.203.48.23;3pkt 3fpkt", shape=invtriangle, color=brown];
11897[label="144.203.48.23;3pkt 3fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.48.23:80, 41.207.125.74:52170}[33.3333%]&lt;BR/&gt;{144.203.48.23:80, 41.207.125.74:52873}[33.3333%]&lt;BR/&gt;{144.203.48.23:80, 41.207.125.74:56785}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56785: (19.2308%)&lt;BR/&gt; 52873: (19.2308%)&lt;BR/&gt; 52170: (11.5385%)&gt;];
}
4722--4723[label="1;2pkt 2fpkt"];
4722--8511[label="1;2pkt 2fpkt"];
4722--10776[label="1;2pkt 2fpkt"];
4722--11897[label="1;2pkt 2fpkt"];
4723--8511[label="1;2pkt 2fpkt"];
4723--10776[label="1;2pkt 2fpkt"];
4723--11897[label="1;2pkt 2fpkt"];
8511--10776[label="1;3pkt 3fpkt"];
8511--11897[label="1;3pkt 3fpkt"];
10776--11897[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.74" dst_port="56785" src_ip="144.203.48.23" src_port="80"/>
      <filter dst_ip="41.207.125.74" dst_port="52873" src_ip="144.203.48.23" src_port="80"/>
      <filter dst_ip="41.207.125.74" dst_port="52170" src_ip="144.203.48.23" src_port="80"/>
    </slice>
    <from sec="1229058209" usec="0"/>
    <to sec="1229058820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="206.96.90.83"/>
      <from sec="1229058752" usec="0"/>
      <to sec="1229058828" usec="0"/>
    </slice>
    <from sec="1229058752" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.25.176.206"/>
      <from sec="1229058771" usec="0"/>
      <to sec="1229058817" usec="0"/>
    </slice>
    <from sec="1229058771" usec="0"/>
    <to sec="1229058817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560857,1.87091,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
4686[label="154.79.169.245;s;5pkt 5fpkt", shape=diamond, color=yellow];
4777[label="204.42.111.150;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.79.169.245:80, 97.67.33.105:17824}[20%]&lt;BR/&gt;{154.79.169.245:80, 41.207.116.126:47138}[20%]&lt;BR/&gt;{154.79.169.245:80, 204.42.111.150:1932}[20%]&lt;BR/&gt;{154.79.169.245:80, 204.42.111.150:1933}[20%]&lt;BR/&gt;{154.79.169.245:80, 204.42.111.150:1934}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1934: (12.5%)&lt;BR/&gt; 1933: (12.5%)&lt;BR/&gt; 1932: (12.5%)&lt;BR/&gt; 47138: (6.25%)&gt;];
}
4686--4777[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.42.111.150" dst_port="1934" src_ip="154.79.169.245" src_port="80"/>
      <filter dst_ip="204.42.111.150" dst_port="1933" src_ip="154.79.169.245" src_port="80"/>
      <filter dst_ip="204.42.111.150" dst_port="1932" src_ip="154.79.169.245" src_port="80"/>
      <filter dst_ip="41.207.116.126" dst_port="47138" src_ip="154.79.169.245" src_port="80"/>
      <filter dst_ip="97.67.33.105" dst_port="17824" src_ip="154.79.169.245" src_port="80"/>
    </slice>
    <from sec="1229058674" usec="0"/>
    <to sec="1229058818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
4681[label="0.169.163.19;s;14pkt 14fpkt", shape=diamond, color=yellow];
4786[label="133.72.75.21;d;3pkt 3fpkt", shape=diamond, color=yellow];
7704[label="0.169.163.19;s;14pkt 14fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.163.19:80, 133.72.88.54:*}[28.5714%]&lt;BR/&gt;{0.169.163.19:80, 128.64.38.95:*}[28.5714%]&lt;BR/&gt;{0.169.163.19:80, 133.72.75.21:*}[21.4286%]&lt;BR/&gt;{0.169.163.19:80, 128.64.83.66:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2276: (4.83871%)&lt;BR/&gt; 2247: (4.83871%)&lt;BR/&gt; 2244: (4.83871%)&lt;BR/&gt; 53819: (3.22581%)&gt;];
}
4681--4786[label="1;3pkt 3fpkt"];
4681--7704[label="1;14pkt 14fpkt"];
4681--8469[label="1;14pkt 14fpkt"];
4681--10761[label="1;14pkt 14fpkt"];
4786--7704[label="1;3pkt 3fpkt"];
4786--8469[label="1;3pkt 3fpkt"];
4786--10761[label="1;3pkt 3fpkt"];
7704--8469[label="1;14pkt 14fpkt"];
7704--10761[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.38.95" src_ip="0.169.163.19" src_port="80"/>
      <filter dst_ip="133.72.88.54" src_ip="0.169.163.19" src_port="80"/>
      <filter dst_ip="128.64.83.66" src_ip="0.169.163.19" src_port="80"/>
      <filter dst_ip="133.72.75.21" src_ip="0.169.163.19" src_port="80"/>
    </slice>
    <from sec="1229058665" usec="0"/>
    <to sec="1229058814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,501,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
217[label="215.80.160.205;s;16pkt 16fpkt", shape=diamond, color=yellow];
218[label="215.40.237.176;d;904pkt 904fpkt", shape=diamond, color=yellow];
316[label="214.132.153.73;s;24pkt 24fpkt", shape=diamond, color=yellow];
379[label="194.134.174.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
465[label="57.120.215.246;s;47pkt 47fpkt", shape=diamond, color=yellow];
511[label="5.97.210.104;s;76pkt 76fpkt", shape=diamond, color=yellow];
1438[label="0.141.4.43;s;165pkt 165fpkt", shape=diamond, color=yellow];
1508[label="6.168.24.194;s;154pkt 154fpkt", shape=diamond, color=yellow];
2737[label="97.66.68.68;s;30pkt 30fpkt", shape=diamond, color=yellow];
3353[label="128.64.83.113;d;195pkt 195fpkt", shape=diamond, color=yellow];
3406[label="128.64.246.59;d;191pkt 191fpkt", shape=diamond, color=yellow];
3490[label="214.57.117.7;s;4pkt 4fpkt", shape=diamond, color=yellow];
4186[label="169.18.179.185;d;62pkt 62fpkt", shape=diamond, color=yellow];
4593[label="116.52.224.233;s;49pkt 49fpkt", shape=diamond, color=yellow];
4799[label="215.80.160.205;s;8pkt 8fpkt", shape=hexagon, color=black];
4800[label="215.40.237.176;d;904pkt 904fpkt", shape=hexagon, color=black];
4825[label="214.132.153.73;s;24pkt 24fpkt", shape=hexagon, color=black];
4840[label="194.134.174.242;s;1pkt 1fpkt", shape=hexagon, color=black];
4875[label="5.97.210.104;s;53pkt 53fpkt", shape=hexagon, color=black];
6439[label="6.168.24.194;s;103pkt 103fpkt", shape=hexagon, color=black];
6960[label="214.57.117.7;s;4pkt 4fpkt", shape=hexagon, color=black];
7043[label="97.66.68.68;s;30pkt 30fpkt", shape=hexagon, color=black];
7205[label="128.64.246.59;d;191pkt 191fpkt", shape=hexagon, color=black];
7280[label="0.141.4.43;s;112pkt 112fpkt", shape=hexagon, color=black];
7604[label="116.52.224.233;s;49pkt 49fpkt", shape=hexagon, color=black];
7776[label="214.132.153.73;s;24pkt 24fpkt", shape=polygon, color=gold];
8092[label="116.52.224.233;s;49pkt 49fpkt", shape=polygon, color=gold];
8628[label="200.147.6.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8984[label="97.66.68.68;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9064[label="214.132.153.73;55pkt 55fpkt", shape=pentagon, color=darkviolet];
9392[label="5.97.210.104;76pkt 76fpkt", shape=pentagon, color=darkviolet];
9841[label="201.203.169.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10551[label="194.134.174.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10581[label="57.120.215.246;47pkt 47fpkt", shape=pentagon, color=darkviolet];
11054[label="214.132.153.73;55pkt 55fpkt", shape=invtriangle, color=brown];
11211[label="5.97.210.104;76pkt 76fpkt", shape=invtriangle, color=brown];
11420[label="201.203.169.154;2pkt 2fpkt", shape=invtriangle, color=brown];
11807[label="194.134.174.242;1pkt 1fpkt", shape=invtriangle, color=brown];
11819[label="57.120.215.246;47pkt 47fpkt", shape=invtriangle, color=brown];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.141.4.43:*, 215.40.237.176:21}[20.4708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.6579%)&lt;BR/&gt; 4000: (4.64756%)&lt;BR/&gt; 80: (3.70514%)&lt;BR/&gt; 14927: (2.59489%)&lt;BR/&gt; 0: (0.284018%)&gt;];
}
217--218[label="1;16pkt 16fpkt"];
217--4799[label="1;8pkt 8fpkt"];
217--4800[label="1;16pkt 16fpkt"];
218--289[label="0.5;1pkt 1fpkt"];
218--316[label="0.958333;23pkt 23fpkt"];
218--336[label="0.666667;2pkt 2fpkt"];
218--379[label="1;1pkt 1fpkt"];
218--439[label="0.00110619;1pkt 1fpkt"];
218--465[label="1;47pkt 47fpkt"];
218--489[label="0.857143;6pkt 6fpkt"];
218--511[label="1;76pkt 76fpkt"];
218--732[label="0.740741;20pkt 20fpkt"];
218--927[label="0.5;2pkt 2fpkt"];
218--1165[label="0.324324;12pkt 12fpkt"];
218--1438[label="1;165pkt 165fpkt"];
218--1508[label="1;154pkt 154fpkt"];
218--2737[label="1;30pkt 30fpkt"];
218--3473[label="0.037037;2pkt 2fpkt"];
218--3490[label="0.5;2pkt 2fpkt"];
218--3819[label="0.0588235;3pkt 3fpkt"];
218--3834[label="0.742857;26pkt 26fpkt"];
218--4593[label="0.122449;6pkt 6fpkt"];
218--4752[label="0.00553097;5pkt 5fpkt"];
218--4799[label="1;8pkt 8fpkt"];
218--4800[label="1;904pkt 904fpkt"];
218--4825[label="0.958333;23pkt 23fpkt"];
218--4840[label="1;1pkt 1fpkt"];
218--4875[label="1;53pkt 53fpkt"];
218--5017[label="0.5;2pkt 2fpkt"];
218--5326[label="0.5;4pkt 4fpkt"];
218--5423[label="0.00110619;1pkt 1fpkt"];
218--6439[label="1;103pkt 103fpkt"];
218--6741[label="0.5;1pkt 1fpkt"];
218--6893[label="0.0512821;2pkt 2fpkt"];
218--6960[label="0.5;2pkt 2fpkt"];
218--7043[label="1;30pkt 30fpkt"];
218--7109[label="0.666667;2pkt 2fpkt"];
218--7218[label="0.742857;26pkt 26fpkt"];
218--7280[label="1;112pkt 112fpkt"];
218--7604[label="0.122449;6pkt 6fpkt"];
218--7751[label="0.00553097;5pkt 5fpkt"];
218--7776[label="0.958333;23pkt 23fpkt"];
218--8092[label="0.122449;6pkt 6fpkt"];
218--8109[label="0.00553097;5pkt 5fpkt"];
218--8119[label="0.00331858;3pkt 3fpkt"];
218--8160[label="0.00110619;1pkt 1fpkt"];
218--8161[label="0.00221239;2pkt 2fpkt"];
218--8162[label="0.00110619;1pkt 1fpkt"];
218--8165[label="0.00221239;2pkt 2fpkt"];
218--8203[label="0.00110619;1pkt 1fpkt"];
218--8204[label="0.00221239;2pkt 2fpkt"];
218--8205[label="0.00110619;1pkt 1fpkt"];
218--8208[label="0.00221239;2pkt 2fpkt"];
218--8236[label="0.00110619;1pkt 1fpkt"];
218--8237[label="0.00221239;2pkt 2fpkt"];
218--8238[label="0.00110619;1pkt 1fpkt"];
218--8241[label="0.00221239;2pkt 2fpkt"];
218--8509[label="0.00110619;1pkt 1fpkt"];
218--8628[label="1;5pkt 5fpkt"];
218--8984[label="1;36pkt 36fpkt"];
218--9064[label="0.690909;38pkt 38fpkt"];
218--9392[label="1;76pkt 76fpkt"];
218--9841[label="1;2pkt 2fpkt"];
218--10259[label="0.836879;118pkt 118fpkt"];
218--10456[label="0.666667;2pkt 2fpkt"];
218--10551[label="1;1pkt 1fpkt"];
218--10581[label="1;47pkt 47fpkt"];
218--11054[label="0.690909;38pkt 38fpkt"];
218--11211[label="1;76pkt 76fpkt"];
218--11420[label="1;2pkt 2fpkt"];
218--11654[label="0.836879;118pkt 118fpkt"];
218--11717[label="0.00553097;5pkt 5fpkt"];
218--11760[label="0.666667;2pkt 2fpkt"];
218--11807[label="1;1pkt 1fpkt"];
218--11819[label="1;47pkt 47fpkt"];
218--12267[label="0.00553097;5pkt 5fpkt"];
316--3353[label="0.0416667;1pkt 1fpkt"];
316--4800[label="0.958333;23pkt 23fpkt"];
316--4825[label="1;24pkt 24fpkt"];
316--7776[label="1;24pkt 24fpkt"];
316--9064[label="1;24pkt 24fpkt"];
316--11054[label="1;24pkt 24fpkt"];
379--4800[label="1;1pkt 1fpkt"];
379--4840[label="1;1pkt 1fpkt"];
379--10551[label="1;1pkt 1fpkt"];
379--11807[label="1;1pkt 1fpkt"];
465--4800[label="1;47pkt 47fpkt"];
465--10581[label="1;47pkt 47fpkt"];
465--11819[label="1;47pkt 47fpkt"];
511--4800[label="1;76pkt 76fpkt"];
511--4875[label="1;53pkt 53fpkt"];
511--9392[label="1;76pkt 76fpkt"];
511--11211[label="1;76pkt 76fpkt"];
1438--4800[label="1;165pkt 165fpkt"];
1438--7280[label="1;112pkt 112fpkt"];
1508--4800[label="1;154pkt 154fpkt"];
1508--6439[label="1;103pkt 103fpkt"];
2737--4800[label="1;30pkt 30fpkt"];
2737--7043[label="1;30pkt 30fpkt"];
2737--8984[label="1;30pkt 30fpkt"];
3353--4825[label="0.0416667;1pkt 1fpkt"];
3353--7776[label="0.0416667;1pkt 1fpkt"];
3353--9064[label="0.0181818;1pkt 1fpkt"];
3353--11054[label="0.0181818;1pkt 1fpkt"];
3406--7205[label="1;191pkt 191fpkt"];
3406--8131[label="0.0104712;2pkt 2fpkt"];
3406--8180[label="0.0104712;2pkt 2fpkt"];
3406--8219[label="0.0104712;2pkt 2fpkt"];
3406--9064[label="0.0181818;1pkt 1fpkt"];
3406--10337[label="0.25;1pkt 1fpkt"];
3406--11054[label="0.0181818;1pkt 1fpkt"];
3490--4800[label="0.5;2pkt 2fpkt"];
3490--6960[label="1;4pkt 4fpkt"];
4186--4570[label="0.0714286;3pkt 3fpkt"];
4186--4593[label="0.204082;10pkt 10fpkt"];
4186--7604[label="0.204082;10pkt 10fpkt"];
4186--8092[label="0.204082;10pkt 10fpkt"];
4186--8119[label="0.112903;7pkt 7fpkt"];
4186--8134[label="0.177419;11pkt 11fpkt"];
4186--8165[label="0.0322581;2pkt 2fpkt"];
4186--8208[label="0.0322581;2pkt 2fpkt"];
4186--8241[label="0.0322581;2pkt 2fpkt"];
4186--10454[label="0.16129;10pkt 10fpkt"];
4186--10479[label="0.173077;9pkt 9fpkt"];
4593--4800[label="0.122449;6pkt 6fpkt"];
4593--7384[label="0.0408163;2pkt 2fpkt"];
4593--7604[label="1;49pkt 49fpkt"];
4593--8092[label="1;49pkt 49fpkt"];
4593--8134[label="0.0612245;3pkt 3fpkt"];
4593--8165[label="0.0204082;1pkt 1fpkt"];
4593--8208[label="0.0204082;1pkt 1fpkt"];
4593--8241[label="0.0204082;1pkt 1fpkt"];
4799--4800[label="1;8pkt 8fpkt"];
4800--4825[label="0.958333;23pkt 23fpkt"];
4800--4840[label="1;1pkt 1fpkt"];
4800--4875[label="1;53pkt 53fpkt"];
4800--5017[label="0.5;2pkt 2fpkt"];
4800--5326[label="0.5;4pkt 4fpkt"];
4800--5423[label="0.00110619;1pkt 1fpkt"];
4800--6439[label="1;103pkt 103fpkt"];
4800--6741[label="0.5;1pkt 1fpkt"];
4800--6893[label="0.0512821;2pkt 2fpkt"];
4800--6960[label="0.5;2pkt 2fpkt"];
4800--7043[label="1;30pkt 30fpkt"];
4800--7109[label="0.666667;2pkt 2fpkt"];
4800--7218[label="0.742857;26pkt 26fpkt"];
4800--7280[label="1;112pkt 112fpkt"];
4800--7604[label="0.122449;6pkt 6fpkt"];
4800--7751[label="0.00553097;5pkt 5fpkt"];
4800--7776[label="0.958333;23pkt 23fpkt"];
4800--8092[label="0.122449;6pkt 6fpkt"];
4800--8109[label="0.00553097;5pkt 5fpkt"];
4800--8119[label="0.00331858;3pkt 3fpkt"];
4800--8160[label="0.00110619;1pkt 1fpkt"];
4800--8161[label="0.00221239;2pkt 2fpkt"];
4800--8162[label="0.00110619;1pkt 1fpkt"];
4800--8165[label="0.00221239;2pkt 2fpkt"];
4800--8203[label="0.00110619;1pkt 1fpkt"];
4800--8204[label="0.00221239;2pkt 2fpkt"];
4800--8205[label="0.00110619;1pkt 1fpkt"];
4800--8208[label="0.00221239;2pkt 2fpkt"];
4800--8236[label="0.00110619;1pkt 1fpkt"];
4800--8237[label="0.00221239;2pkt 2fpkt"];
4800--8238[label="0.00110619;1pkt 1fpkt"];
4800--8241[label="0.00221239;2pkt 2fpkt"];
4800--8509[label="0.00110619;1pkt 1fpkt"];
4800--8628[label="1;5pkt 5fpkt"];
4800--8984[label="1;36pkt 36fpkt"];
4800--9064[label="0.690909;38pkt 38fpkt"];
4800--9392[label="1;76pkt 76fpkt"];
4800--9841[label="1;2pkt 2fpkt"];
4800--10259[label="0.836879;118pkt 118fpkt"];
4800--10456[label="0.666667;2pkt 2fpkt"];
4800--10551[label="1;1pkt 1fpkt"];
4800--10581[label="1;47pkt 47fpkt"];
4800--11054[label="0.690909;38pkt 38fpkt"];
4800--11211[label="1;76pkt 76fpkt"];
4800--11420[label="1;2pkt 2fpkt"];
4800--11654[label="0.836879;118pkt 118fpkt"];
4800--11717[label="0.00553097;5pkt 5fpkt"];
4800--11760[label="0.666667;2pkt 2fpkt"];
4800--11807[label="1;1pkt 1fpkt"];
4800--11819[label="1;47pkt 47fpkt"];
4800--12267[label="0.00553097;5pkt 5fpkt"];
4825--7776[label="1;24pkt 24fpkt"];
4825--9064[label="1;24pkt 24fpkt"];
4825--11054[label="1;24pkt 24fpkt"];
4840--10551[label="1;1pkt 1fpkt"];
4840--11807[label="1;1pkt 1fpkt"];
4875--9392[label="1;53pkt 53fpkt"];
4875--11211[label="1;53pkt 53fpkt"];
7043--8984[label="1;30pkt 30fpkt"];
7205--8131[label="0.0104712;2pkt 2fpkt"];
7205--8180[label="0.0104712;2pkt 2fpkt"];
7205--8219[label="0.0104712;2pkt 2fpkt"];
7205--9064[label="0.0181818;1pkt 1fpkt"];
7205--10337[label="0.25;1pkt 1fpkt"];
7205--11054[label="0.0181818;1pkt 1fpkt"];
7604--8092[label="1;49pkt 49fpkt"];
7604--8134[label="0.0612245;3pkt 3fpkt"];
7604--8165[label="0.0204082;1pkt 1fpkt"];
7604--8208[label="0.0204082;1pkt 1fpkt"];
7604--8241[label="0.0204082;1pkt 1fpkt"];
7776--9064[label="1;24pkt 24fpkt"];
7776--11054[label="1;24pkt 24fpkt"];
8092--8134[label="0.0612245;3pkt 3fpkt"];
8092--8165[label="0.0204082;1pkt 1fpkt"];
8092--8208[label="0.0204082;1pkt 1fpkt"];
8092--8241[label="0.0204082;1pkt 1fpkt"];
9064--11054[label="1;55pkt 55fpkt"];
9392--11211[label="1;76pkt 76fpkt"];
9841--11420[label="1;2pkt 2fpkt"];
10551--11807[label="1;1pkt 1fpkt"];
10581--11819[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.237.176" dst_port="21" src_ip="0.141.4.43"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
235[label="215.40.244.24;d;3413pkt 3413fpkt", shape=diamond, color=yellow];
4804[label="215.40.244.24;d;484pkt 484fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.40.244.24:6881}[99.1503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 0: (0.564537%)&lt;BR/&gt; 16001: (0.487555%)&lt;BR/&gt; 1501: (0.153965%)&lt;BR/&gt; 4662: (0.102643%)&gt;];
}
235--439[label="0.000292997;1pkt 1fpkt"];
235--463[label="0.000585995;2pkt 2fpkt"];
235--1914[label="0.000617665;1pkt 1fpkt"];
235--4752[label="0.00146499;5pkt 5fpkt"];
235--4804[label="1;484pkt 484fpkt"];
235--4864[label="0.000585995;2pkt 2fpkt"];
235--5423[label="0.000292997;1pkt 1fpkt"];
235--7139[label="0.000617665;1pkt 1fpkt"];
235--7751[label="0.00146499;5pkt 5fpkt"];
235--8109[label="0.00146499;5pkt 5fpkt"];
235--8160[label="0.000903342;1pkt 1fpkt"];
235--8161[label="0.000665779;2pkt 2fpkt"];
235--8162[label="0.000903342;1pkt 1fpkt"];
235--8203[label="0.000903342;1pkt 1fpkt"];
235--8204[label="0.000665779;2pkt 2fpkt"];
235--8205[label="0.000903342;1pkt 1fpkt"];
235--8236[label="0.000903342;1pkt 1fpkt"];
235--8237[label="0.000665779;2pkt 2fpkt"];
235--8238[label="0.000903342;1pkt 1fpkt"];
235--8509[label="0.000292997;1pkt 1fpkt"];
235--11717[label="0.00146499;5pkt 5fpkt"];
235--12267[label="0.00146499;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.244.24" dst_port="6881"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
268[label="174.194.19.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
269[label="215.160.185.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
4812[label="174.194.19.167;s;2pkt 2fpkt", shape=hexagon, color=black];
4813[label="215.160.185.140;d;1pkt 1fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.19.167:49682, 215.160.185.140:3724}[50%]&lt;BR/&gt;{174.194.19.167:49170, 192.22.70.148:5222}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49682: (33.3333%)&lt;BR/&gt; 3724: (33.3333%)&lt;BR/&gt; 49170: (16.6667%)&lt;BR/&gt; 5222: (16.6667%)&gt;];
}
268--269[label="1;1pkt 1fpkt"];
268--2487[label="0.5;1pkt 1fpkt"];
268--4812[label="1;2pkt 2fpkt"];
268--4813[label="1;1pkt 1fpkt"];
268--7461[label="0.5;1pkt 1fpkt"];
269--4812[label="1;1pkt 1fpkt"];
269--4813[label="1;1pkt 1fpkt"];
4812--4813[label="1;1pkt 1fpkt"];
4812--7461[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.22.70.148" dst_port="5222" src_ip="174.194.19.167" src_port="49170"/>
      <filter dst_ip="215.160.185.140" dst_port="3724" src_ip="174.194.19.167" src_port="49682"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
385[label="103.75.13.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
386[label="128.64.82.85;s;4pkt 4fpkt", shape=diamond, color=yellow];
4841[label="103.75.13.169;d;1pkt 1fpkt", shape=hexagon, color=black];
9186[label="128.64.82.85;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.82.85:0, 41.169.218.77:0}[25%]&lt;BR/&gt;{128.64.82.85:4987, 103.75.13.169:1935}[25%]&lt;BR/&gt;{128.64.82.85:1947, 203.148.156.111:80}[25%]&lt;BR/&gt;{128.64.82.85:1966, 203.148.156.111:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4987: (20%)&lt;BR/&gt; 1935: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 1966: (10%)&gt;];
}
385--386[label="1;1pkt 1fpkt"];
385--4841[label="1;1pkt 1fpkt"];
385--9186[label="1;1pkt 1fpkt"];
386--4841[label="1;1pkt 1fpkt"];
386--8134[label="0.25;1pkt 1fpkt"];
386--9186[label="1;4pkt 4fpkt"];
4841--9186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.148.156.111" dst_port="80" src_ip="128.64.82.85" src_port="1966"/>
      <filter dst_ip="203.148.156.111" dst_port="80" src_ip="128.64.82.85" src_port="1947"/>
      <filter dst_ip="103.75.13.169" dst_port="1935" src_ip="128.64.82.85" src_port="4987"/>
      <filter dst_ip="41.169.218.77" src_ip="128.64.82.85"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
414[label="49.20.181.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
4851[label="49.20.181.119;d;1pkt 1fpkt", shape=hexagon, color=black];
7871[label="215.40.233.143;s;111pkt 111fpkt", shape=polygon, color=gold];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.233.143:51440, *:53}[95.4955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51440: (46.9027%)&lt;BR/&gt; 53: (46.9027%)&lt;BR/&gt; 0: (5.30973%)&lt;BR/&gt; 4795: (0.442478%)&lt;BR/&gt; 135: (0.442478%)&gt;];
}
414--1303[label="1;1pkt 1fpkt"];
414--4851[label="1;1pkt 1fpkt"];
414--5994[label="1;1pkt 1fpkt"];
414--7871[label="1;1pkt 1fpkt"];
4851--5994[label="1;1pkt 1fpkt"];
4851--7871[label="1;1pkt 1fpkt"];
7871--8056[label="0.00900901;1pkt 1fpkt"];
7871--8153[label="0.216216;24pkt 24fpkt"];
7871--8164[label="0.153153;17pkt 17fpkt"];
7871--8196[label="0.216216;24pkt 24fpkt"];
7871--8207[label="0.153153;17pkt 17fpkt"];
7871--8229[label="0.216216;24pkt 24fpkt"];
7871--8240[label="0.153153;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.40.233.143" src_port="51440"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
433[label="214.49.21.73;d;1230pkt 1230fpkt", shape=diamond, color=yellow];
1307[label="215.160.185.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
4856[label="214.49.21.73;d;1230pkt 1230fpkt", shape=hexagon, color=black];
6749[label="215.160.185.223;s;1pkt 1fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.49.21.73:9338}[99.9187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9338: (49.9188%)&lt;BR/&gt; 6881: (0.284322%)&lt;BR/&gt; 60001: (0.121852%)&lt;BR/&gt; 50000: (0.121852%)&lt;BR/&gt; 52288: (0.0812348%)&gt;];
}
433--1307[label="1;1pkt 1fpkt"];
433--4856[label="1;1230pkt 1230fpkt"];
433--6749[label="1;1pkt 1fpkt"];
1307--4856[label="1;1pkt 1fpkt"];
1307--6749[label="1;1pkt 1fpkt"];
4856--6749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.21.73" dst_port="9338"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
459[label="194.3.73.195;d;2pkt 2fpkt", shape=diamond, color=yellow];
460[label="133.72.10.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
4208[label="133.72.10.213;s;118pkt 118fpkt", shape=diamond, color=yellow];
4862[label="194.3.73.195;d;2pkt 2fpkt", shape=hexagon, color=black];
4863[label="133.72.10.193;s;1pkt 1fpkt", shape=hexagon, color=black];
10153[label="133.72.10.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10322[label="133.72.10.213;122pkt 122fpkt", shape=pentagon, color=darkviolet];
11593[label="133.72.10.193;1pkt 1fpkt", shape=invtriangle, color=brown];
11689[label="133.72.10.213;122pkt 122fpkt", shape=invtriangle, color=brown];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.10.213:33476, *:53}[54.4715%]&lt;BR/&gt;{133.72.10.213:*, 97.135.82.25:*}[22.7642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.8649%)&lt;BR/&gt; 33476: (27.027%)&lt;BR/&gt; 25: (10.5405%)&lt;BR/&gt; 113: (7.7027%)&lt;BR/&gt; 60739: (0.810811%)&gt;];
}
459--460[label="1;1pkt 1fpkt"];
459--4208[label="0.5;1pkt 1fpkt"];
459--4862[label="1;2pkt 2fpkt"];
459--4863[label="1;1pkt 1fpkt"];
459--10153[label="1;1pkt 1fpkt"];
459--10322[label="0.5;1pkt 1fpkt"];
459--11593[label="1;1pkt 1fpkt"];
459--11689[label="0.5;1pkt 1fpkt"];
460--4862[label="1;1pkt 1fpkt"];
460--4863[label="1;1pkt 1fpkt"];
460--10153[label="1;1pkt 1fpkt"];
460--11593[label="1;1pkt 1fpkt"];
4208--4862[label="0.5;1pkt 1fpkt"];
4208--6284[label="0.00847458;1pkt 1fpkt"];
4208--6405[label="0.00847458;1pkt 1fpkt"];
4208--6501[label="0.00847458;1pkt 1fpkt"];
4208--7129[label="0.00847458;1pkt 1fpkt"];
4208--7443[label="0.00847458;1pkt 1fpkt"];
4208--7454[label="0.00847458;1pkt 1fpkt"];
4208--8056[label="0.00847458;1pkt 1fpkt"];
4208--8153[label="0.0338983;4pkt 4fpkt"];
4208--8164[label="0.059322;7pkt 7fpkt"];
4208--8196[label="0.0338983;4pkt 4fpkt"];
4208--8207[label="0.059322;7pkt 7fpkt"];
4208--8229[label="0.0338983;4pkt 4fpkt"];
4208--8240[label="0.059322;7pkt 7fpkt"];
4208--10322[label="1;118pkt 118fpkt"];
4208--11689[label="1;118pkt 118fpkt"];
4862--4863[label="1;1pkt 1fpkt"];
4862--10153[label="1;1pkt 1fpkt"];
4862--10322[label="0.5;1pkt 1fpkt"];
4862--11593[label="1;1pkt 1fpkt"];
4862--11689[label="0.5;1pkt 1fpkt"];
4863--10153[label="1;1pkt 1fpkt"];
4863--11593[label="1;1pkt 1fpkt"];
10153--11593[label="1;1pkt 1fpkt"];
10322--11689[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="97.135.82.25" src_ip="133.72.10.213"/>
      <filter dst_port="53" src_ip="133.72.10.213" src_port="33476"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
482[label="42.200.125.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
4867[label="42.200.125.103;d;1pkt 1fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.39:1137, 42.200.125.103:1003}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1137: (50%)&lt;BR/&gt; 1003: (50%)&gt;];
}
482--483[label="1;1pkt 1fpkt"];
482--4867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.200.125.103" dst_port="1003" src_ip="133.72.2.39" src_port="1137"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
485[label="174.194.231.174;s;2pkt 2fpkt", shape=diamond, color=yellow];
486[label="102.193.176.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
4869[label="102.193.176.246;d;1pkt 1fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.231.174:53273, 197.30.229.23:80}[50%]&lt;BR/&gt;{174.194.231.174:42824, 102.193.176.246:8020}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42824: (37.5%)&lt;BR/&gt; 8020: (37.5%)&lt;BR/&gt; 53273: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
485--486[label="1;1pkt 1fpkt"];
485--502[label="0.5;1pkt 1fpkt"];
485--4869[label="1;1pkt 1fpkt"];
486--4869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="102.193.176.246" dst_port="8020" src_ip="174.194.231.174" src_port="42824"/>
      <filter dst_ip="197.30.229.23" dst_port="80" src_ip="174.194.231.174" src_port="53273"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1777[label="21.105.182.68;s;14pkt 14fpkt", shape=diamond, color=yellow];
2821[label="1.149.122.141;s;5pkt 5fpkt", shape=diamond, color=yellow];
4878[label="174.194.172.237;d;395pkt 395fpkt", shape=hexagon, color=black];
8990[label="21.105.182.68;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9179[label="37.194.104.84;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9421[label="96.9.182.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.172.237:80}[98.4848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4292%)&lt;BR/&gt; 49950: (0.342466%)&lt;BR/&gt; 49949: (0.342466%)&lt;BR/&gt; 49945: (0.342466%)&lt;BR/&gt; 49944: (0.342466%)&gt;];
}
1777--4878[label="1;14pkt 14fpkt"];
1777--8134[label="0.428571;6pkt 6fpkt"];
1777--8990[label="1;13pkt 13fpkt"];
2821--4878[label="0.8;4pkt 4fpkt"];
4878--5234[label="0.00253165;1pkt 1fpkt"];
4878--5970[label="0.6;3pkt 3fpkt"];
4878--6117[label="0.181818;2pkt 2fpkt"];
4878--6697[label="0.294118;5pkt 5fpkt"];
4878--8119[label="0.144304;57pkt 57fpkt"];
4878--8134[label="0.159494;63pkt 63fpkt"];
4878--8165[label="0.00253165;1pkt 1fpkt"];
4878--8208[label="0.00253165;1pkt 1fpkt"];
4878--8241[label="0.00253165;1pkt 1fpkt"];
4878--8543[label="1;6pkt 6fpkt"];
4878--8544[label="1;6pkt 6fpkt"];
4878--8990[label="1;13pkt 13fpkt"];
4878--9179[label="1;5pkt 5fpkt"];
4878--9421[label="1;6pkt 6fpkt"];
4878--10016[label="0.555556;5pkt 5fpkt"];
4878--10560[label="0.277778;5pkt 5fpkt"];
4878--10791[label="1;6pkt 6fpkt"];
4878--10792[label="1;6pkt 6fpkt"];
4878--11902[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.172.237" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1847[label="215.239.80.189;s;5pkt 5fpkt", shape=diamond, color=yellow];
4901[label="214.56.220.165;d;352pkt 352fpkt", shape=hexagon, color=black];
7780[label="214.56.220.165;d;352pkt 352fpkt", shape=polygon, color=gold];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.56.220.165:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (9.94358%)&lt;BR/&gt; 137: (7.19323%)&lt;BR/&gt; 51413: (1.12835%)&lt;BR/&gt; 0: (1.12835%)&lt;BR/&gt; 50177: (0.634697%)&gt;];
}
1847--4901[label="0.4;2pkt 2fpkt"];
1847--7780[label="0.4;2pkt 2fpkt"];
4901--7780[label="1;352pkt 352fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.165"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
588[label="41.207.125.167;d;658pkt 658fpkt", shape=diamond, color=yellow];
589[label="133.72.159.80;s;697pkt 697fpkt", shape=diamond, color=yellow];
4903[label="41.207.125.167;d;658pkt 658fpkt", shape=hexagon, color=black];
5751[label="133.72.159.80;s;463pkt 463fpkt", shape=hexagon, color=black];
9139[label="133.72.159.80;766pkt 766fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.159.80:80, 41.207.125.167:*}[94.3864%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65508: (0.0771129%)&lt;BR/&gt; 65377: (0.0771129%)&lt;BR/&gt; 65213: (0.0771129%)&lt;BR/&gt; 64820: (0.0771129%)&gt;];
}
588--589[label="1;658pkt 658fpkt"];
588--4903[label="1;658pkt 658fpkt"];
588--5751[label="0.958963;444pkt 444fpkt"];
588--8131[label="0.0531915;35pkt 35fpkt"];
588--8180[label="0.0531915;35pkt 35fpkt"];
588--8219[label="0.0531915;35pkt 35fpkt"];
588--9139[label="1;658pkt 658fpkt"];
589--3508[label="0.00735294;1pkt 1fpkt"];
589--4903[label="1;658pkt 658fpkt"];
589--5751[label="1;463pkt 463fpkt"];
589--6975[label="0.00813008;1pkt 1fpkt"];
589--8131[label="0.0530846;37pkt 37fpkt"];
589--8180[label="0.0530846;37pkt 37fpkt"];
589--8219[label="0.0530846;37pkt 37fpkt"];
589--9139[label="1;697pkt 697fpkt"];
4903--5751[label="0.958963;444pkt 444fpkt"];
4903--8131[label="0.0531915;35pkt 35fpkt"];
4903--8180[label="0.0531915;35pkt 35fpkt"];
4903--8219[label="0.0531915;35pkt 35fpkt"];
4903--9139[label="1;658pkt 658fpkt"];
5751--6975[label="0.00813008;1pkt 1fpkt"];
5751--8131[label="0.0799136;37pkt 37fpkt"];
5751--8180[label="0.0799136;37pkt 37fpkt"];
5751--8219[label="0.0799136;37pkt 37fpkt"];
5751--9139[label="1;463pkt 463fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.167" src_ip="133.72.159.80" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
602[label="133.72.133.44;s;1098pkt 1098fpkt", shape=diamond, color=yellow];
1880[label="48.149.48.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1897[label="33.180.224.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
2005[label="133.72.97.38;s;69pkt 69fpkt", shape=diamond, color=yellow];
2405[label="48.95.164.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
2847[label="36.21.26.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
2907[label="44.7.55.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
2933[label="45.167.205.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
3022[label="33.128.45.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
3362[label="213.228.105.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
3429[label="214.234.160.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
3541[label="194.3.9.134;d;65pkt 65fpkt", shape=diamond, color=yellow];
3637[label="197.79.48.40;d;111pkt 111fpkt", shape=diamond, color=yellow];
3700[label="133.72.116.113;s;629pkt 629fpkt", shape=diamond, color=yellow];
4908[label="133.72.133.44;s;791pkt 791fpkt", shape=hexagon, color=black];
5502[label="48.149.48.60;d;1pkt 1fpkt", shape=hexagon, color=black];
6080[label="44.7.55.161;d;1pkt 1fpkt", shape=hexagon, color=black];
6161[label="33.128.45.187;d;1pkt 1fpkt", shape=hexagon, color=black];
6207[label="214.57.219.154;d;80pkt 80fpkt", shape=hexagon, color=black];
6334[label="36.21.26.55;d;1pkt 1fpkt", shape=hexagon, color=black];
6472[label="213.228.105.102;d;1pkt 1fpkt", shape=hexagon, color=black];
6541[label="214.234.160.249;d;1pkt 1fpkt", shape=hexagon, color=black];
6661[label="194.3.9.134;d;55pkt 55fpkt", shape=hexagon, color=black];
6842[label="34.227.42.127;d;20pkt 20fpkt", shape=hexagon, color=black];
7131[label="48.95.164.54;d;1pkt 1fpkt", shape=hexagon, color=black];
7399[label="192.168.11.1;d;235pkt 235fpkt", shape=hexagon, color=black];
7879[label="48.149.48.60;d;1pkt 1fpkt", shape=polygon, color=gold];
8001[label="194.3.9.134;d;55pkt 55fpkt", shape=polygon, color=gold];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.133.44:*, *:8612}[27.9112%]&lt;BR/&gt;{133.72.116.113:*, *:8612}[26.9597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8612: (26.5581%)&lt;BR/&gt; 80: (8.04651%)&lt;BR/&gt; 443: (5.28682%)&lt;BR/&gt; 53: (3.96899%)&lt;BR/&gt; 22: (1.68992%)&gt;];
}
602--1013[label="0.00117925;1pkt 1fpkt"];
602--1287[label="0.0416667;2pkt 2fpkt"];
602--1317[label="0.000971817;1pkt 1fpkt"];
602--1449[label="0.0360206;21pkt 21fpkt"];
602--1535[label="0.00341297;1pkt 1fpkt"];
602--1835[label="1;1pkt 1fpkt"];
602--1880[label="1;1pkt 1fpkt"];
602--1897[label="1;1pkt 1fpkt"];
602--2031[label="0.00662252;2pkt 2fpkt"];
602--2405[label="1;1pkt 1fpkt"];
602--2536[label="0.0258621;3pkt 3fpkt"];
602--2567[label="0.0629371;9pkt 9fpkt"];
602--2642[label="0.254335;44pkt 44fpkt"];
602--2847[label="1;1pkt 1fpkt"];
602--2886[label="0.047619;2pkt 2fpkt"];
602--2907[label="1;1pkt 1fpkt"];
602--2933[label="1;1pkt 1fpkt"];
602--2970[label="0.00636943;1pkt 1fpkt"];
602--3013[label="0.0227273;1pkt 1fpkt"];
602--3022[label="1;1pkt 1fpkt"];
602--3072[label="0.2875;23pkt 23fpkt"];
602--3362[label="1;1pkt 1fpkt"];
602--3414[label="0.0486111;7pkt 7fpkt"];
602--3429[label="1;1pkt 1fpkt"];
602--3468[label="0.0121951;1pkt 1fpkt"];
602--3541[label="0.276923;18pkt 18fpkt"];
602--3761[label="0.04;1pkt 1fpkt"];
602--3788[label="0.0412371;4pkt 4fpkt"];
602--4098[label="0.119149;28pkt 28fpkt"];
602--4546[label="0.0348837;3pkt 3fpkt"];
602--4547[label="0.0434783;1pkt 1fpkt"];
602--4575[label="0.140351;8pkt 8fpkt"];
602--4908[label="1;791pkt 791fpkt"];
602--5253[label="0.0360206;21pkt 21fpkt"];
602--5284[label="0.00132979;1pkt 1fpkt"];
602--5391[label="0.0357143;1pkt 1fpkt"];
602--5428[label="0.000971817;1pkt 1fpkt"];
602--5502[label="1;1pkt 1fpkt"];
602--5853[label="0.00892857;1pkt 1fpkt"];
602--6080[label="1;1pkt 1fpkt"];
602--6126[label="0.00636943;1pkt 1fpkt"];
602--6161[label="1;1pkt 1fpkt"];
602--6207[label="0.2875;23pkt 23fpkt"];
602--6334[label="1;1pkt 1fpkt"];
602--6472[label="1;1pkt 1fpkt"];
602--6541[label="1;1pkt 1fpkt"];
602--6661[label="0.327273;18pkt 18fpkt"];
602--6842[label="0.05;1pkt 1fpkt"];
602--6884[label="0.012987;1pkt 1fpkt"];
602--7131[label="1;1pkt 1fpkt"];
602--7217[label="0.0227273;1pkt 1fpkt"];
602--7250[label="0.0123457;1pkt 1fpkt"];
602--7378[label="0.00105485;1pkt 1fpkt"];
602--7391[label="1;1pkt 1fpkt"];
602--7399[label="0.119149;28pkt 28fpkt"];
602--7527[label="0.0348837;3pkt 3fpkt"];
602--7530[label="0.0434783;1pkt 1fpkt"];
602--7801[label="0.00173913;1pkt 1fpkt"];
602--7879[label="1;1pkt 1fpkt"];
602--8001[label="0.327273;18pkt 18fpkt"];
602--8064[label="1;1pkt 1fpkt"];
602--8119[label="0.00364299;4pkt 4fpkt"];
602--8134[label="0.00546448;6pkt 6fpkt"];
602--8153[label="0.00637523;7pkt 7fpkt"];
602--8164[label="0.00364299;4pkt 4fpkt"];
602--8165[label="0.00273224;3pkt 3fpkt"];
602--8196[label="0.00637523;7pkt 7fpkt"];
602--8207[label="0.00364299;4pkt 4fpkt"];
602--8208[label="0.00273224;3pkt 3fpkt"];
602--8229[label="0.00637523;7pkt 7fpkt"];
602--8240[label="0.00364299;4pkt 4fpkt"];
602--8241[label="0.00273224;3pkt 3fpkt"];
1880--4908[label="1;1pkt 1fpkt"];
1880--5502[label="1;1pkt 1fpkt"];
1880--7879[label="1;1pkt 1fpkt"];
1897--4908[label="1;1pkt 1fpkt"];
2005--3018[label="0.0144928;1pkt 1fpkt"];
2005--3637[label="0.0144928;1pkt 1fpkt"];
2005--3774[label="0.0289855;2pkt 2fpkt"];
2005--4098[label="0.0144928;1pkt 1fpkt"];
2005--5047[label="0.101449;7pkt 7fpkt"];
2005--6543[label="0.0144928;1pkt 1fpkt"];
2005--6854[label="1;69pkt 69fpkt"];
2005--7399[label="0.0144928;1pkt 1fpkt"];
2005--8119[label="0.173913;12pkt 12fpkt"];
2005--8134[label="0.0724638;5pkt 5fpkt"];
2405--4908[label="1;1pkt 1fpkt"];
2405--7131[label="1;1pkt 1fpkt"];
2847--4908[label="1;1pkt 1fpkt"];
2847--6334[label="1;1pkt 1fpkt"];
2907--4908[label="1;1pkt 1fpkt"];
2907--6080[label="1;1pkt 1fpkt"];
2933--4908[label="1;1pkt 1fpkt"];
3022--4908[label="1;1pkt 1fpkt"];
3022--6161[label="1;1pkt 1fpkt"];
3362--4908[label="1;1pkt 1fpkt"];
3362--6472[label="1;1pkt 1fpkt"];
3429--4908[label="1;1pkt 1fpkt"];
3429--6541[label="1;1pkt 1fpkt"];
3541--3575[label="0.723077;47pkt 47fpkt"];
3541--4908[label="0.276923;18pkt 18fpkt"];
3541--6661[label="1;55pkt 55fpkt"];
3541--8001[label="1;55pkt 55fpkt"];
3637--4223[label="0.00909091;1pkt 1fpkt"];
3637--5609[label="0.00900901;1pkt 1fpkt"];
3637--6512[label="0.015625;1pkt 1fpkt"];
3637--6854[label="0.0144928;1pkt 1fpkt"];
3637--7233[label="0.00952381;1pkt 1fpkt"];
3637--7395[label="0.00900901;1pkt 1fpkt"];
3637--8954[label="0.00900901;1pkt 1fpkt"];
3637--9539[label="0.00900901;1pkt 1fpkt"];
3637--10427[label="0.0133333;1pkt 1fpkt"];
3637--11002[label="0.00900901;1pkt 1fpkt"];
3637--11744[label="0.0133333;1pkt 1fpkt"];
3637--12281[label="0.0133333;1pkt 1fpkt"];
3700--3805[label="0.00746269;1pkt 1fpkt"];
3700--4098[label="0.119149;28pkt 28fpkt"];
3700--7185[label="0.00534759;1pkt 1fpkt"];
3700--7191[label="0.0078125;1pkt 1fpkt"];
3700--7378[label="0.00158983;1pkt 1fpkt"];
3700--7399[label="0.119149;28pkt 28fpkt"];
3700--8165[label="0.00158983;1pkt 1fpkt"];
3700--8208[label="0.00158983;1pkt 1fpkt"];
3700--8241[label="0.00158983;1pkt 1fpkt"];
4908--5253[label="0.0360206;21pkt 21fpkt"];
4908--5284[label="0.00132979;1pkt 1fpkt"];
4908--5391[label="0.0357143;1pkt 1fpkt"];
4908--5428[label="0.00126422;1pkt 1fpkt"];
4908--5502[label="1;1pkt 1fpkt"];
4908--5853[label="0.00892857;1pkt 1fpkt"];
4908--6080[label="1;1pkt 1fpkt"];
4908--6126[label="0.00636943;1pkt 1fpkt"];
4908--6161[label="1;1pkt 1fpkt"];
4908--6207[label="0.2875;23pkt 23fpkt"];
4908--6334[label="1;1pkt 1fpkt"];
4908--6472[label="1;1pkt 1fpkt"];
4908--6541[label="1;1pkt 1fpkt"];
4908--6661[label="0.327273;18pkt 18fpkt"];
4908--6842[label="0.05;1pkt 1fpkt"];
4908--6884[label="0.012987;1pkt 1fpkt"];
4908--7131[label="1;1pkt 1fpkt"];
4908--7217[label="0.0227273;1pkt 1fpkt"];
4908--7250[label="0.0123457;1pkt 1fpkt"];
4908--7391[label="1;1pkt 1fpkt"];
4908--7399[label="0.0808511;19pkt 19fpkt"];
4908--7527[label="0.0348837;3pkt 3fpkt"];
4908--7801[label="0.00173913;1pkt 1fpkt"];
4908--7879[label="1;1pkt 1fpkt"];
4908--8001[label="0.327273;18pkt 18fpkt"];
4908--8064[label="1;1pkt 1fpkt"];
4908--8119[label="0.00505689;4pkt 4fpkt"];
4908--8134[label="0.00758534;6pkt 6fpkt"];
5502--7879[label="1;1pkt 1fpkt"];
6207--6476[label="0.327869;20pkt 20fpkt"];
6207--7988[label="0.327869;20pkt 20fpkt"];
6207--8134[label="0.3;24pkt 24fpkt"];
6207--9393[label="0.6;24pkt 24fpkt"];
6661--8001[label="1;55pkt 55fpkt"];
6842--7829[label="0.05;1pkt 1fpkt"];
6842--8119[label="0.1;2pkt 2fpkt"];
6842--8134[label="0.05;1pkt 1fpkt"];
6842--9033[label="0.05;1pkt 1fpkt"];
6842--9146[label="0.2;4pkt 4fpkt"];
6842--9547[label="0.1;2pkt 2fpkt"];
6842--11037[label="0.05;1pkt 1fpkt"];
6842--11089[label="0.2;4pkt 4fpkt"];
6842--11276[label="0.1;2pkt 2fpkt"];
6842--12014[label="0.2;4pkt 4fpkt"];
7399--8119[label="0.0340426;8pkt 8fpkt"];
7399--8134[label="0.0382979;9pkt 9fpkt"];
7399--8165[label="0.0170213;4pkt 4fpkt"];
7399--8208[label="0.0170213;4pkt 4fpkt"];
7399--8241[label="0.0170213;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="8612" src_ip="133.72.133.44"/>
      <filter dst_port="8612" src_ip="133.72.116.113"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
645[label="7.142.10.236;d;4pkt 4fpkt", shape=diamond, color=yellow];
648[label="214.49.186.45;s;6pkt 6fpkt", shape=diamond, color=yellow];
4917[label="7.142.10.236;d;3pkt 3fpkt", shape=hexagon, color=black];
5460[label="214.49.186.45;s;4pkt 4fpkt", shape=hexagon, color=black];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.186.45:8007, 7.142.10.236:*}[50%]&lt;BR/&gt;{214.49.186.45:80, 41.207.126.78:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8007: (29.4118%)&lt;BR/&gt; 60107: (11.7647%)&lt;BR/&gt; 43974: (11.7647%)&lt;BR/&gt; 3406: (11.7647%)&lt;BR/&gt; 3386: (11.7647%)&gt;];
}
645--648[label="1;4pkt 4fpkt"];
645--4917[label="1;3pkt 3fpkt"];
645--5460[label="0.75;3pkt 3fpkt"];
648--4917[label="1;3pkt 3fpkt"];
648--5460[label="1;4pkt 4fpkt"];
4917--5460[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="7.142.10.236" src_ip="214.49.186.45" src_port="8007"/>
      <filter dst_ip="41.207.126.78" src_ip="214.49.186.45" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
656[label="174.194.194.209;d;16pkt 16fpkt", shape=diamond, color=yellow];
659[label="215.160.185.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
6762[label="215.160.185.222;s;1pkt 1fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.194.209:24894}[31.25%]&lt;BR/&gt;{192.22.41.0:80, 174.194.194.209:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24894: (13.8889%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 49325: (8.33333%)&lt;BR/&gt; 3724: (8.33333%)&lt;BR/&gt; 64130: (2.77778%)&gt;];
}
656--659[label="1;1pkt 1fpkt"];
656--3127[label="0.0625;1pkt 1fpkt"];
656--4921[label="1;15pkt 15fpkt"];
656--6762[label="1;1pkt 1fpkt"];
656--8131[label="0.1875;3pkt 3fpkt"];
656--8180[label="0.1875;3pkt 3fpkt"];
656--8219[label="0.1875;3pkt 3fpkt"];
656--8244[label="0.25;4pkt 4fpkt"];
659--4921[label="1;1pkt 1fpkt"];
659--6762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.194.209" dst_port="24894"/>
      <filter dst_ip="174.194.194.209" src_ip="192.22.41.0" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
684[label="193.208.141.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
685[label="133.72.145.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
4930[label="193.208.141.103;d;1pkt 1fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.145.111:1050, 193.208.141.103:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
684--685[label="1;1pkt 1fpkt"];
684--4930[label="1;1pkt 1fpkt"];
684--8119[label="1;1pkt 1fpkt"];
685--4930[label="1;1pkt 1fpkt"];
685--8119[label="1;1pkt 1fpkt"];
4930--8119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.208.141.103" dst_port="80" src_ip="133.72.145.111" src_port="1050"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
703[label="42.133.140.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
704[label="128.64.214.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
4938[label="42.133.140.81;d;1pkt 1fpkt", shape=hexagon, color=black];
4939[label="128.64.214.144;s;1pkt 1fpkt", shape=hexagon, color=black];
7782[label="42.133.140.81;d;1pkt 1fpkt", shape=polygon, color=gold];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.214.144:53063, 42.133.140.81:6900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53063: (50%)&lt;BR/&gt; 6900: (50%)&gt;];
}
703--704[label="1;1pkt 1fpkt"];
703--4938[label="1;1pkt 1fpkt"];
703--4939[label="1;1pkt 1fpkt"];
703--7782[label="1;1pkt 1fpkt"];
704--4938[label="1;1pkt 1fpkt"];
704--4939[label="1;1pkt 1fpkt"];
704--7782[label="1;1pkt 1fpkt"];
4938--4939[label="1;1pkt 1fpkt"];
4938--7782[label="1;1pkt 1fpkt"];
4939--7782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.133.140.81" dst_port="6900" src_ip="128.64.214.144" src_port="53063"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
451[label="174.194.172.233;d;181pkt 181fpkt", shape=diamond, color=yellow];
712[label="116.55.4.215;s;42pkt 42fpkt", shape=diamond, color=yellow];
1314[label="214.88.151.249;s;3pkt 3fpkt", shape=diamond, color=yellow];
2212[label="116.55.4.231;s;69pkt 69fpkt", shape=diamond, color=yellow];
4768[label="116.55.4.225;s;8pkt 8fpkt", shape=diamond, color=yellow];
4942[label="116.55.4.215;s;18pkt 18fpkt", shape=hexagon, color=black];
6208[label="116.55.4.231;s;69pkt 69fpkt", shape=hexagon, color=black];
6751[label="174.194.172.233;d;157pkt 157fpkt", shape=hexagon, color=black];
6752[label="214.88.151.249;s;3pkt 3fpkt", shape=hexagon, color=black];
10333[label="116.55.4.215;42pkt 42fpkt", shape=pentagon, color=darkviolet];
10608[label="214.88.151.249;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11694[label="116.55.4.215;42pkt 42fpkt", shape=invtriangle, color=brown];
12255[label="116.55.4.215;42pkt 42fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.55.4.215:*, 174.194.172.233:*}[23.2044%]&lt;BR/&gt;{116.55.7.53:*, 174.194.172.233:21}[22.0994%]&lt;BR/&gt;{116.55.4.231:*, 174.194.172.233:21}[22.0994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.9823%)&lt;BR/&gt; 64156: (0.515464%)&lt;BR/&gt; 60623: (0.515464%)&lt;BR/&gt; 57592: (0.515464%)&lt;BR/&gt; 53561: (0.515464%)&gt;];
}
451--712[label="1;42pkt 42fpkt"];
451--1314[label="1;3pkt 3fpkt"];
451--2212[label="1;69pkt 69fpkt"];
451--4768[label="1;8pkt 8fpkt"];
451--4845[label="0.0526316;1pkt 1fpkt"];
451--4942[label="1;18pkt 18fpkt"];
451--6208[label="1;69pkt 69fpkt"];
451--6751[label="1;157pkt 157fpkt"];
451--6752[label="1;3pkt 3fpkt"];
451--10333[label="1;42pkt 42fpkt"];
451--10608[label="1;3pkt 3fpkt"];
451--11694[label="1;42pkt 42fpkt"];
451--12255[label="1;42pkt 42fpkt"];
712--4942[label="1;18pkt 18fpkt"];
712--6751[label="1;42pkt 42fpkt"];
712--10333[label="1;42pkt 42fpkt"];
712--11694[label="1;42pkt 42fpkt"];
712--12255[label="1;42pkt 42fpkt"];
1314--6751[label="1;3pkt 3fpkt"];
1314--6752[label="1;3pkt 3fpkt"];
1314--10608[label="1;3pkt 3fpkt"];
2212--6208[label="1;69pkt 69fpkt"];
2212--6751[label="1;69pkt 69fpkt"];
4942--6751[label="1;18pkt 18fpkt"];
4942--10333[label="1;18pkt 18fpkt"];
4942--11694[label="1;18pkt 18fpkt"];
4942--12255[label="1;18pkt 18fpkt"];
6208--6751[label="1;69pkt 69fpkt"];
6751--6752[label="1;3pkt 3fpkt"];
6751--10333[label="1;42pkt 42fpkt"];
6751--10608[label="1;3pkt 3fpkt"];
6751--11694[label="1;42pkt 42fpkt"];
6751--12255[label="1;42pkt 42fpkt"];
6752--10608[label="1;3pkt 3fpkt"];
10333--11694[label="1;42pkt 42fpkt"];
10333--12255[label="1;42pkt 42fpkt"];
11694--12255[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.172.233" src_ip="116.55.4.215"/>
      <filter dst_ip="174.194.172.233" dst_port="21" src_ip="116.55.4.231"/>
      <filter dst_ip="174.194.172.233" dst_port="21" src_ip="116.55.7.53"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
740[label="128.64.245.119;s;13pkt 13fpkt", shape=diamond, color=yellow];
751[label="206.22.20.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
3233[label="201.203.80.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
4954[label="128.64.245.119;s;13pkt 13fpkt", shape=hexagon, color=black];
4959[label="206.22.20.237;d;1pkt 1fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.245.119:*, 101.233.182.73:80}[61.5385%]&lt;BR/&gt;{128.64.245.119:8080, *:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.4828%)&lt;BR/&gt; 8080: (18.9655%)&lt;BR/&gt; 57808: (6.89655%)&lt;BR/&gt; 25500: (5.17241%)&lt;BR/&gt; 59599: (3.44828%)&gt;];
}
740--751[label="1;1pkt 1fpkt"];
740--3233[label="1;1pkt 1fpkt"];
740--4193[label="0.0769231;1pkt 1fpkt"];
740--4954[label="1;13pkt 13fpkt"];
740--4959[label="1;1pkt 1fpkt"];
740--7533[label="0.0769231;1pkt 1fpkt"];
740--8119[label="0.153846;2pkt 2fpkt"];
740--8134[label="0.153846;2pkt 2fpkt"];
740--8165[label="0.0769231;1pkt 1fpkt"];
740--8208[label="0.0769231;1pkt 1fpkt"];
740--8241[label="0.0769231;1pkt 1fpkt"];
751--4954[label="1;1pkt 1fpkt"];
751--4959[label="1;1pkt 1fpkt"];
3233--4954[label="1;1pkt 1fpkt"];
4954--4959[label="1;1pkt 1fpkt"];
4954--7533[label="0.0769231;1pkt 1fpkt"];
4954--8119[label="0.153846;2pkt 2fpkt"];
4954--8134[label="0.153846;2pkt 2fpkt"];
4954--8165[label="0.0769231;1pkt 1fpkt"];
4954--8208[label="0.0769231;1pkt 1fpkt"];
4954--8241[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.245.119" src_port="8080"/>
      <filter dst_ip="101.233.182.73" dst_port="80" src_ip="128.64.245.119"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
782[label="96.82.199.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
783[label="133.72.137.78;s;4pkt 4fpkt", shape=diamond, color=yellow];
3695[label="91.114.87.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
4973[label="96.82.199.182;d;1pkt 1fpkt", shape=hexagon, color=black];
6778[label="133.72.137.78;s;4pkt 4fpkt", shape=hexagon, color=black];
7662[label="91.114.87.92;d;1pkt 1fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.137.78:1034, 34.249.55.84:6669}[25%]&lt;BR/&gt;{133.72.137.78:17772, 91.114.87.92:4999}[25%]&lt;BR/&gt;{133.72.137.78:17772, 96.82.199.182:33598}[25%]&lt;BR/&gt;{133.72.137.78:1119, 136.210.14.233:1025}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17772: (33.3333%)&lt;BR/&gt; 33598: (16.6667%)&lt;BR/&gt; 4999: (16.6667%)&lt;BR/&gt; 6669: (8.33333%)&lt;BR/&gt; 1119: (8.33333%)&gt;];
}
782--783[label="1;1pkt 1fpkt"];
782--4973[label="1;1pkt 1fpkt"];
782--6778[label="1;1pkt 1fpkt"];
783--3695[label="1;1pkt 1fpkt"];
783--4510[label="0.5;1pkt 1fpkt"];
783--4973[label="1;1pkt 1fpkt"];
783--6778[label="1;4pkt 4fpkt"];
783--7662[label="1;1pkt 1fpkt"];
3695--6778[label="1;1pkt 1fpkt"];
3695--7662[label="1;1pkt 1fpkt"];
4973--6778[label="1;1pkt 1fpkt"];
6778--7662[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.210.14.233" dst_port="1025" src_ip="133.72.137.78" src_port="1119"/>
      <filter dst_ip="96.82.199.182" dst_port="33598" src_ip="133.72.137.78" src_port="17772"/>
      <filter dst_ip="91.114.87.92" dst_port="4999" src_ip="133.72.137.78" src_port="17772"/>
      <filter dst_ip="34.249.55.84" dst_port="6669" src_ip="133.72.137.78" src_port="1034"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
800[label="36.164.113.84;d;18pkt 18fpkt", shape=diamond, color=yellow];
4976[label="36.164.113.84;d;18pkt 18fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.57.186:*, 36.164.113.84:21}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (19.4444%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 64032: (2.77778%)&lt;BR/&gt; 63770: (2.77778%)&gt;];
}
800--801[label="1;18pkt 18fpkt"];
800--4976[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="36.164.113.84" dst_port="21" src_ip="133.72.57.186"/>
    </slice>
    <from sec="1229058219" usec="0"/>
    <to sec="1229058545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
666[label="211.140.116.92;s;13pkt 13fpkt", shape=diamond, color=yellow];
3619[label="174.194.105.41;d;4pkt 4fpkt", shape=diamond, color=yellow];
4924[label="211.140.116.92;s;10pkt 10fpkt", shape=hexagon, color=black];
7647[label="174.194.105.41;d;4pkt 4fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.140.116.92:80, 214.49.0.231:*}[50%]&lt;BR/&gt;{*:*, 174.194.105.41:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5484%)&lt;BR/&gt; 2284: (6.45161%)&lt;BR/&gt; 31863: (3.22581%)&lt;BR/&gt; 21519: (3.22581%)&lt;BR/&gt; 7242: (3.22581%)&gt;];
}
666--814[label="0.333333;1pkt 1fpkt"];
666--956[label="0.153846;2pkt 2fpkt"];
666--989[label="0.615385;8pkt 8fpkt"];
666--3619[label="0.25;1pkt 1fpkt"];
666--4822[label="0.0769231;1pkt 1fpkt"];
666--4924[label="1;10pkt 10fpkt"];
666--4983[label="0.333333;1pkt 1fpkt"];
666--5824[label="0.153846;2pkt 2fpkt"];
666--7447[label="0.615385;8pkt 8fpkt"];
666--7647[label="0.25;1pkt 1fpkt"];
3619--4924[label="0.25;1pkt 1fpkt"];
3619--7647[label="1;4pkt 4fpkt"];
4924--4983[label="0.333333;1pkt 1fpkt"];
4924--7447[label="0.8;8pkt 8fpkt"];
4924--7647[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.105.41"/>
      <filter dst_ip="214.49.0.231" src_ip="211.140.116.92" src_port="80"/>
    </slice>
    <from sec="1229058471" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
10309[label="128.64.43.212;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11682[label="128.64.43.212;21pkt 21fpkt", shape=invtriangle, color=brown];
12248[label="128.64.43.212;21pkt 21fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.43.212:*, 128.197.37.133:80}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4546: (2.38095%)&lt;BR/&gt; 4545: (2.38095%)&lt;BR/&gt; 4542: (2.38095%)&lt;BR/&gt; 4541: (2.38095%)&gt;];
}
10309--11682[label="1;21pkt 21fpkt"];
10309--12248[label="1;21pkt 21fpkt"];
11682--12248[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="128.197.37.133" dst_port="80" src_ip="128.64.43.212"/>
    </slice>
    <from sec="1229058311" usec="0"/>
    <to sec="1229058830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
838[label="214.49.2.247;s;4010pkt 4010fpkt", shape=diamond, color=yellow];
913[label="1.53.97.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1006[label="4.48.210.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2149[label="6.0.80.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
2183[label="1.144.73.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
5013[label="1.53.97.146;d;1pkt 1fpkt", shape=hexagon, color=black];
5043[label="4.48.210.18;d;1pkt 1fpkt", shape=hexagon, color=black];
6040[label="214.49.2.247;s;3639pkt 3639fpkt", shape=hexagon, color=black];
6963[label="1.144.73.144;d;1pkt 1fpkt", shape=hexagon, color=black];
10583[label="214.49.2.247;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11820[label="214.49.2.247;5pkt 5fpkt", shape=invtriangle, color=brown];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.2.247:7596, *:*}[95.1396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7596: (47.4693%)&lt;BR/&gt; 6881: (0.723976%)&lt;BR/&gt; 16001: (0.33916%)&lt;BR/&gt; 80: (0.286981%)&lt;BR/&gt; 62822: (0.110879%)&gt;];
}
838--913[label="1;1pkt 1fpkt"];
838--1006[label="1;1pkt 1fpkt"];
838--1511[label="0.0192308;1pkt 1fpkt"];
838--2067[label="0.333333;1pkt 1fpkt"];
838--2149[label="1;1pkt 1fpkt"];
838--2183[label="1;1pkt 1fpkt"];
838--5013[label="1;1pkt 1fpkt"];
838--5043[label="1;1pkt 1fpkt"];
838--6040[label="1;3639pkt 3639fpkt"];
838--6836[label="0.0208333;1pkt 1fpkt"];
838--6963[label="1;1pkt 1fpkt"];
838--8119[label="0.000997506;4pkt 4fpkt"];
838--8134[label="0.000997506;4pkt 4fpkt"];
838--10583[label="0.6;3pkt 3fpkt"];
838--11820[label="0.6;3pkt 3fpkt"];
913--5013[label="1;1pkt 1fpkt"];
913--6040[label="1;1pkt 1fpkt"];
1006--5043[label="1;1pkt 1fpkt"];
1006--6040[label="1;1pkt 1fpkt"];
1006--10583[label="1;1pkt 1fpkt"];
1006--11820[label="1;1pkt 1fpkt"];
2149--6040[label="1;1pkt 1fpkt"];
2149--10583[label="1;1pkt 1fpkt"];
2149--11820[label="1;1pkt 1fpkt"];
2183--6040[label="1;1pkt 1fpkt"];
2183--6963[label="1;1pkt 1fpkt"];
2183--10583[label="1;1pkt 1fpkt"];
2183--11820[label="1;1pkt 1fpkt"];
5013--6040[label="1;1pkt 1fpkt"];
5043--6040[label="1;1pkt 1fpkt"];
5043--10583[label="1;1pkt 1fpkt"];
5043--11820[label="1;1pkt 1fpkt"];
6040--6836[label="0.0208333;1pkt 1fpkt"];
6040--6963[label="1;1pkt 1fpkt"];
6040--8119[label="0.0010992;4pkt 4fpkt"];
6040--8134[label="0.0010992;4pkt 4fpkt"];
6040--10583[label="0.6;3pkt 3fpkt"];
6040--11820[label="0.6;3pkt 3fpkt"];
6963--10583[label="1;1pkt 1fpkt"];
6963--11820[label="1;1pkt 1fpkt"];
10583--11820[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="214.49.2.247" src_port="7596"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
936[label="169.18.131.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
937[label="102.4.202.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
5020[label="169.18.131.69;d;1pkt 1fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.4.202.181:20, 169.18.131.69:3825}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3825: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
936--937[label="1;1pkt 1fpkt"];
936--5020[label="1;1pkt 1fpkt"];
937--5020[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.69" dst_port="3825" src_ip="102.4.202.181" src_port="20"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
950[label="194.70.76.2;s;54pkt 54fpkt", shape=diamond, color=yellow];
5025[label="194.70.76.2;s;54pkt 54fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.70.76.2:443, 174.194.18.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4074: (0.925926%)&lt;BR/&gt; 3757: (0.925926%)&lt;BR/&gt; 3756: (0.925926%)&lt;BR/&gt; 3755: (0.925926%)&gt;];
}
950--5025[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.43" src_ip="194.70.76.2" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
961[label="128.224.27.133;d;603pkt 603fpkt", shape=diamond, color=yellow];
5028[label="128.224.27.133;d;603pkt 603fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.206.185.248:*, 128.224.27.133:16552}[53.7313%]&lt;BR/&gt;{5.98.12.100:*, 128.224.27.133:55087}[27.529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16552: (26.8657%)&lt;BR/&gt; 55087: (13.7645%)&lt;BR/&gt; 23603: (6.46766%)&lt;BR/&gt; 28484: (2.81924%)&lt;BR/&gt; 4756: (0.165837%)&gt;];
}
961--5028[label="1;603pkt 603fpkt"];
</description>
    <slice>
      <filter dst_ip="128.224.27.133" dst_port="16552" src_ip="100.206.185.248"/>
      <filter dst_ip="128.224.27.133" dst_port="55087" src_ip="5.98.12.100"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1000[label="128.64.203.76;d;4pkt 4fpkt", shape=diamond, color=yellow];
1001[label="97.170.232.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
5042[label="128.64.203.76;d;4pkt 4fpkt", shape=hexagon, color=black];
10519[label="97.170.232.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.69.180.16:49624, 128.64.203.76:995}[20%]&lt;BR/&gt;{0.69.180.16:49630, 128.64.203.76:995}[20%]&lt;BR/&gt;{97.170.232.237:1310, 128.64.203.78:465}[20%]&lt;BR/&gt;{97.170.232.237:1294, 128.64.203.76:995}[20%]&lt;BR/&gt;{97.170.232.237:1304, 128.64.203.76:995}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (45.8333%)&lt;BR/&gt; 1294: (16.6667%)&lt;BR/&gt; 1304: (12.5%)&lt;BR/&gt; 49630: (8.33333%)&lt;BR/&gt; 49624: (8.33333%)&gt;];
}
1000--1001[label="1;1pkt 1fpkt"];
1000--5042[label="1;4pkt 4fpkt"];
1000--10519[label="0.666667;2pkt 2fpkt"];
1001--5042[label="1;1pkt 1fpkt"];
1001--10519[label="1;1pkt 1fpkt"];
5042--10519[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.203.76" dst_port="995" src_ip="97.170.232.237" src_port="1304"/>
      <filter dst_ip="128.64.203.76" dst_port="995" src_ip="97.170.232.237" src_port="1294"/>
      <filter dst_ip="128.64.203.78" dst_port="465" src_ip="97.170.232.237" src_port="1310"/>
      <filter dst_ip="128.64.203.76" dst_port="995" src_ip="0.69.180.16" src_port="49630"/>
      <filter dst_ip="128.64.203.76" dst_port="995" src_ip="0.69.180.16" src_port="49624"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1101[label="174.194.231.36;s;9pkt 9fpkt", shape=diamond, color=yellow];
1211[label="41.207.116.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
5068[label="174.194.231.36;s;6pkt 6fpkt", shape=hexagon, color=black];
5097[label="41.207.116.251;d;1pkt 1fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.231.36:80, *:*}[55.5556%]&lt;BR/&gt;{174.194.231.36:*, *:80}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52222: (11.7647%)&lt;BR/&gt; 62937: (5.88235%)&lt;BR/&gt; 60192: (5.88235%)&lt;BR/&gt; 53773: (5.88235%)&gt;];
}
1101--1211[label="1;1pkt 1fpkt"];
1101--2940[label="0.111111;1pkt 1fpkt"];
1101--2958[label="0.111111;1pkt 1fpkt"];
1101--5068[label="1;6pkt 6fpkt"];
1101--5097[label="1;1pkt 1fpkt"];
1101--6482[label="0.111111;1pkt 1fpkt"];
1101--8119[label="0.444444;4pkt 4fpkt"];
1101--8131[label="0.111111;1pkt 1fpkt"];
1101--8180[label="0.111111;1pkt 1fpkt"];
1101--8219[label="0.111111;1pkt 1fpkt"];
1211--5068[label="1;1pkt 1fpkt"];
1211--5097[label="1;1pkt 1fpkt"];
5068--5097[label="1;1pkt 1fpkt"];
5068--6482[label="0.166667;1pkt 1fpkt"];
5068--8119[label="0.666667;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.231.36" src_port="80"/>
      <filter dst_port="80" src_ip="174.194.231.36"/>
    </slice>
    <from sec="1229058009" usec="0"/>
    <to sec="1229058213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1154[label="41.207.107.144;d;23pkt 23fpkt", shape=diamond, color=yellow];
5081[label="41.207.107.144;d;23pkt 23fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.34.49:80, 41.207.107.144:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46670: (2.17391%)&lt;BR/&gt; 46666: (2.17391%)&lt;BR/&gt; 46663: (2.17391%)&lt;BR/&gt; 46662: (2.17391%)&gt;];
}
1154--5081[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.107.144" src_ip="133.72.34.49" src_port="80"/>
    </slice>
    <from sec="1229058022" usec="0"/>
    <to sec="1229058071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1158[label="41.207.116.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1159[label="128.81.184.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
5083[label="128.81.184.34;s;1pkt 1fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.184.34:80, 41.207.116.240:36384}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1158--1159[label="1;1pkt 1fpkt"];
1158--5083[label="1;1pkt 1fpkt"];
1159--5083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.240" dst_port="36384" src_ip="128.81.184.34" src_port="80"/>
    </slice>
    <from sec="1229058023" usec="0"/>
    <to sec="1229058038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1266[label="101.206.210.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
5117[label="101.206.210.9;d;2pkt 2fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.224.2:8080, 101.206.210.9:1527}[50%]&lt;BR/&gt;{215.40.224.2:8080, 101.206.210.9:1575}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1575: (25%)&lt;BR/&gt; 1527: (25%)&gt;];
}
1266--5117[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="101.206.210.9" dst_port="1575" src_ip="215.40.224.2" src_port="8080"/>
      <filter dst_ip="101.206.210.9" dst_port="1527" src_ip="215.40.224.2" src_port="8080"/>
    </slice>
    <from sec="1229058364" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
27[label="133.72.2.38s;1pkt 1fpkt", shape=rectangle, color=red];
75[label="214.49.22.206s;2pkt 2fpkt", shape=rectangle, color=red];
231[label="133.72.2.38;s;707pkt 707fpkt", shape=diamond, color=yellow];
479[label="4.203.126.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
506[label="97.49.204.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
570[label="4.153.144.89;d;14pkt 14fpkt", shape=diamond, color=yellow];
627[label="4.58.52.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
651[label="204.114.248.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
774[label="96.81.179.42;d;2pkt 2fpkt", shape=diamond, color=yellow];
785[label="36.128.123.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
972[label="206.137.168.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
1016[label="205.180.42.126;d;24pkt 24fpkt", shape=diamond, color=yellow];
1030[label="7.42.151.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1052[label="100.6.77.3;d;2pkt 2fpkt", shape=diamond, color=yellow];
1149[label="7.143.26.70;d;3pkt 3fpkt", shape=diamond, color=yellow];
1166[label="1.7.79.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
1257[label="214.246.251.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
1479[label="100.38.175.72;d;3pkt 3fpkt", shape=diamond, color=yellow];
1602[label="0.148.215.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
1674[label="100.178.234.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
1690[label="6.202.97.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1995[label="37.138.66.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
2054[label="5.151.33.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2167[label="6.169.42.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
2191[label="101.6.66.172;d;6pkt 6fpkt", shape=diamond, color=yellow];
2193[label="205.75.233.85;d;3pkt 3fpkt", shape=diamond, color=yellow];
2211[label="0.209.64.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
2352[label="6.67.152.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
2624[label="101.6.123.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
2766[label="91.216.150.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
3141[label="96.5.101.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
3563[label="6.16.212.85;d;3pkt 3fpkt", shape=diamond, color=yellow];
3687[label="96.150.26.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
4872[label="97.49.204.139;d;1pkt 1fpkt", shape=hexagon, color=black];
4898[label="4.153.144.89;d;14pkt 14fpkt", shape=hexagon, color=black];
4963[label="214.49.22.206;s;4pkt 4fpkt", shape=hexagon, color=black];
4969[label="96.81.179.42;d;1pkt 1fpkt", shape=hexagon, color=black];
5034[label="206.137.168.172;d;1pkt 1fpkt", shape=hexagon, color=black];
5114[label="214.246.251.39;d;1pkt 1fpkt", shape=hexagon, color=black];
5128[label="133.72.2.38;s;323pkt 323fpkt", shape=hexagon, color=black];
5198[label="204.114.248.66;d;1pkt 1fpkt", shape=hexagon, color=black];
5293[label="100.6.77.3;d;2pkt 2fpkt", shape=hexagon, color=black];
5666[label="101.6.66.172;d;6pkt 6fpkt", shape=hexagon, color=black];
5782[label="36.128.123.77;d;1pkt 1fpkt", shape=hexagon, color=black];
5880[label="7.143.26.70;d;2pkt 2fpkt", shape=hexagon, color=black];
5903[label="6.202.97.40;d;1pkt 1fpkt", shape=hexagon, color=black];
6338[label="4.58.52.43;d;1pkt 1fpkt", shape=hexagon, color=black];
6470[label="37.138.66.239;d;1pkt 1fpkt", shape=hexagon, color=black];
6523[label="5.151.33.18;d;1pkt 1fpkt", shape=hexagon, color=black];
6565[label="1.7.79.160;d;1pkt 1fpkt", shape=hexagon, color=black];
6605[label="6.169.42.53;d;1pkt 1fpkt", shape=hexagon, color=black];
6947[label="101.6.123.111;d;1pkt 1fpkt", shape=hexagon, color=black];
7147[label="100.38.175.72;d;3pkt 3fpkt", shape=hexagon, color=black];
7310[label="96.150.26.17;d;1pkt 1fpkt", shape=hexagon, color=black];
7565[label="33.161.24.40;d;61pkt 61fpkt", shape=hexagon, color=black];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:*, *:80}[29.9606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.6018%)&lt;BR/&gt; 3128: (1.10384%)&lt;BR/&gt; 1061: (0.940311%)&lt;BR/&gt; 1378: (0.899428%)&lt;BR/&gt; 1047: (0.858545%)&gt;];
}
27--231[label="1;1pkt 1fpkt"];
27--2193[label="1;1pkt 1fpkt"];
27--5128[label="1;1pkt 1fpkt"];
75--231[label="0.5;1pkt 1fpkt"];
75--682[label="0.5;1pkt 1fpkt"];
75--761[label="0.5;1pkt 1fpkt"];
75--1016[label="0.5;1pkt 1fpkt"];
75--4963[label="0.5;1pkt 1fpkt"];
75--5128[label="0.5;1pkt 1fpkt"];
75--8119[label="0.5;1pkt 1fpkt"];
75--8134[label="0.5;1pkt 1fpkt"];
231--266[label="0.00511945;3pkt 3fpkt"];
231--387[label="0.0231214;4pkt 4fpkt"];
231--466[label="0.00141443;1pkt 1fpkt"];
231--479[label="1;1pkt 1fpkt"];
231--491[label="0.00707214;5pkt 5fpkt"];
231--506[label="1;1pkt 1fpkt"];
231--570[label="1;14pkt 14fpkt"];
231--627[label="1;1pkt 1fpkt"];
231--651[label="1;1pkt 1fpkt"];
231--774[label="0.5;1pkt 1fpkt"];
231--785[label="0.5;1pkt 1fpkt"];
231--878[label="0.00534759;1pkt 1fpkt"];
231--924[label="0.00848656;6pkt 6fpkt"];
231--972[label="1;1pkt 1fpkt"];
231--1016[label="1;24pkt 24fpkt"];
231--1030[label="1;1pkt 1fpkt"];
231--1052[label="1;2pkt 2fpkt"];
231--1149[label="0.666667;2pkt 2fpkt"];
231--1166[label="1;1pkt 1fpkt"];
231--1257[label="1;1pkt 1fpkt"];
231--1479[label="0.666667;2pkt 2fpkt"];
231--1602[label="1;1pkt 1fpkt"];
231--1674[label="1;2pkt 2fpkt"];
231--1690[label="1;1pkt 1fpkt"];
231--1694[label="1;1pkt 1fpkt"];
231--1995[label="1;1pkt 1fpkt"];
231--2025[label="0.0235294;2pkt 2fpkt"];
231--2054[label="1;1pkt 1fpkt"];
231--2167[label="1;1pkt 1fpkt"];
231--2191[label="0.833333;5pkt 5fpkt"];
231--2193[label="1;3pkt 3fpkt"];
231--2211[label="1;2pkt 2fpkt"];
231--2279[label="1;1pkt 1fpkt"];
231--2281[label="1;1pkt 1fpkt"];
231--2352[label="1;1pkt 1fpkt"];
231--2487[label="0.047619;2pkt 2fpkt"];
231--2503[label="0.0227273;2pkt 2fpkt"];
231--2624[label="1;1pkt 1fpkt"];
231--2697[label="1;9pkt 9fpkt"];
231--2766[label="1;1pkt 1fpkt"];
231--2946[label="0.0177515;3pkt 3fpkt"];
231--2965[label="0.0125;1pkt 1fpkt"];
231--2977[label="0.0135135;2pkt 2fpkt"];
231--2986[label="0.0108696;1pkt 1fpkt"];
231--3141[label="1;1pkt 1fpkt"];
231--3276[label="0.0264901;4pkt 4fpkt"];
231--3563[label="1;3pkt 3fpkt"];
231--3651[label="1;1pkt 1fpkt"];
231--3687[label="1;1pkt 1fpkt"];
231--3790[label="0.0106383;1pkt 1fpkt"];
231--3891[label="0.047619;1pkt 1fpkt"];
231--4546[label="0.0116279;1pkt 1fpkt"];
231--4563[label="0.262295;16pkt 16fpkt"];
231--4872[label="1;1pkt 1fpkt"];
231--4898[label="1;14pkt 14fpkt"];
231--4969[label="1;1pkt 1fpkt"];
231--5000[label="0.00534759;1pkt 1fpkt"];
231--5034[label="1;1pkt 1fpkt"];
231--5114[label="1;1pkt 1fpkt"];
231--5128[label="1;323pkt 323fpkt"];
231--5198[label="1;1pkt 1fpkt"];
231--5293[label="1;2pkt 2fpkt"];
231--5414[label="0.0231214;4pkt 4fpkt"];
231--5635[label="1;1pkt 1fpkt"];
231--5666[label="0.833333;5pkt 5fpkt"];
231--5690[label="1;1pkt 1fpkt"];
231--5782[label="1;1pkt 1fpkt"];
231--5880[label="1;2pkt 2fpkt"];
231--5903[label="1;1pkt 1fpkt"];
231--5948[label="1;9pkt 9fpkt"];
231--5982[label="0.00511945;3pkt 3fpkt"];
231--6111[label="0.0177515;3pkt 3fpkt"];
231--6338[label="1;1pkt 1fpkt"];
231--6470[label="1;1pkt 1fpkt"];
231--6475[label="0.030303;2pkt 2fpkt"];
231--6486[label="0.0151515;1pkt 1fpkt"];
231--6523[label="1;1pkt 1fpkt"];
231--6565[label="1;1pkt 1fpkt"];
231--6605[label="1;1pkt 1fpkt"];
231--6624[label="1;1pkt 1fpkt"];
231--6719[label="1;1pkt 1fpkt"];
231--6771[label="0.0277778;4pkt 4fpkt"];
231--6814[label="0.00848656;6pkt 6fpkt"];
231--6947[label="1;1pkt 1fpkt"];
231--7147[label="0.666667;2pkt 2fpkt"];
231--7256[label="0.0526316;1pkt 1fpkt"];
231--7310[label="1;1pkt 1fpkt"];
231--7378[label="0.00707214;5pkt 5fpkt"];
231--7461[label="0.047619;2pkt 2fpkt"];
231--7527[label="0.0116279;1pkt 1fpkt"];
231--7565[label="0.262295;16pkt 16fpkt"];
231--7838[label="1;1pkt 1fpkt"];
231--8119[label="0.0480905;34pkt 34fpkt"];
231--8134[label="0.0594059;42pkt 42fpkt"];
231--8154[label="0.00157233;1pkt 1fpkt"];
231--8165[label="0.00141443;1pkt 1fpkt"];
231--8167[label="0.00201207;1pkt 1fpkt"];
231--8198[label="0.00157233;1pkt 1fpkt"];
231--8208[label="0.00141443;1pkt 1fpkt"];
231--8231[label="0.00157233;1pkt 1fpkt"];
231--8241[label="0.00141443;1pkt 1fpkt"];
479--5128[label="1;1pkt 1fpkt"];
506--4872[label="1;1pkt 1fpkt"];
506--5128[label="1;1pkt 1fpkt"];
570--4898[label="1;14pkt 14fpkt"];
570--5128[label="1;14pkt 14fpkt"];
570--8119[label="0.5;7pkt 7fpkt"];
627--5128[label="1;1pkt 1fpkt"];
627--6338[label="1;1pkt 1fpkt"];
651--5128[label="1;1pkt 1fpkt"];
651--5198[label="1;1pkt 1fpkt"];
774--4969[label="1;1pkt 1fpkt"];
774--5128[label="0.5;1pkt 1fpkt"];
785--5128[label="0.5;1pkt 1fpkt"];
785--5782[label="1;1pkt 1fpkt"];
972--5034[label="1;1pkt 1fpkt"];
972--5128[label="1;1pkt 1fpkt"];
1016--5128[label="0.958333;23pkt 23fpkt"];
1016--8119[label="0.291667;7pkt 7fpkt"];
1016--8134[label="0.25;6pkt 6fpkt"];
1030--5128[label="1;1pkt 1fpkt"];
1052--5128[label="0.5;1pkt 1fpkt"];
1052--5293[label="1;2pkt 2fpkt"];
1149--5128[label="0.666667;2pkt 2fpkt"];
1149--5880[label="1;2pkt 2fpkt"];
1166--5128[label="1;1pkt 1fpkt"];
1166--6565[label="1;1pkt 1fpkt"];
1257--5114[label="1;1pkt 1fpkt"];
1257--5128[label="1;1pkt 1fpkt"];
1479--5128[label="0.666667;2pkt 2fpkt"];
1479--7147[label="1;3pkt 3fpkt"];
1602--5128[label="1;1pkt 1fpkt"];
1674--5128[label="1;2pkt 2fpkt"];
1690--5128[label="1;1pkt 1fpkt"];
1690--5903[label="1;1pkt 1fpkt"];
1995--5128[label="1;1pkt 1fpkt"];
1995--6470[label="1;1pkt 1fpkt"];
2054--5128[label="1;1pkt 1fpkt"];
2054--6523[label="1;1pkt 1fpkt"];
2167--5128[label="1;1pkt 1fpkt"];
2167--6605[label="1;1pkt 1fpkt"];
2191--5128[label="0.333333;2pkt 2fpkt"];
2191--5666[label="1;6pkt 6fpkt"];
2193--5128[label="1;3pkt 3fpkt"];
2211--5128[label="1;2pkt 2fpkt"];
2624--5128[label="1;1pkt 1fpkt"];
2624--6947[label="1;1pkt 1fpkt"];
3687--7310[label="1;1pkt 1fpkt"];
4872--5128[label="1;1pkt 1fpkt"];
4898--5128[label="1;14pkt 14fpkt"];
4898--8119[label="0.5;7pkt 7fpkt"];
4963--8119[label="0.25;1pkt 1fpkt"];
4969--5128[label="1;1pkt 1fpkt"];
5034--5128[label="1;1pkt 1fpkt"];
5114--5128[label="1;1pkt 1fpkt"];
5128--5198[label="1;1pkt 1fpkt"];
5128--5293[label="0.5;1pkt 1fpkt"];
5128--5635[label="1;1pkt 1fpkt"];
5128--5666[label="0.333333;2pkt 2fpkt"];
5128--5782[label="1;1pkt 1fpkt"];
5128--5880[label="1;2pkt 2fpkt"];
5128--5903[label="1;1pkt 1fpkt"];
5128--5982[label="0.00309598;1pkt 1fpkt"];
5128--6338[label="1;1pkt 1fpkt"];
5128--6470[label="1;1pkt 1fpkt"];
5128--6475[label="0.030303;2pkt 2fpkt"];
5128--6523[label="1;1pkt 1fpkt"];
5128--6565[label="1;1pkt 1fpkt"];
5128--6605[label="1;1pkt 1fpkt"];
5128--6771[label="0.0138889;2pkt 2fpkt"];
5128--6814[label="0.00309598;1pkt 1fpkt"];
5128--6947[label="1;1pkt 1fpkt"];
5128--7147[label="0.666667;2pkt 2fpkt"];
5128--7256[label="0.0526316;1pkt 1fpkt"];
5128--7378[label="0.00928793;3pkt 3fpkt"];
5128--7461[label="0.047619;2pkt 2fpkt"];
5128--7565[label="0.114754;7pkt 7fpkt"];
5128--7838[label="1;1pkt 1fpkt"];
5128--8119[label="0.105263;34pkt 34fpkt"];
5128--8134[label="0.130031;42pkt 42fpkt"];
5128--8167[label="0.00309598;1pkt 1fpkt"];
7565--8119[label="0.0983607;6pkt 6fpkt"];
7565--8134[label="0.0819672;5pkt 5fpkt"];
7565--8165[label="0.0327869;2pkt 2fpkt"];
7565--8208[label="0.0327869;2pkt 2fpkt"];
7565--8241[label="0.0327869;2pkt 2fpkt"];
7565--10394[label="0.393443;24pkt 24fpkt"];
7565--12272[label="0.393443;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.2.38"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
240[label="174.194.13.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
241[label="210.243.63.191;d;30pkt 30fpkt", shape=diamond, color=yellow];
1183[label="174.194.92.102;s;30pkt 30fpkt", shape=diamond, color=yellow];
5130[label="174.194.13.227;s;1pkt 1fpkt", shape=hexagon, color=black];
5393[label="210.243.63.191;d;30pkt 30fpkt", shape=hexagon, color=black];
5890[label="174.194.92.102;s;30pkt 30fpkt", shape=hexagon, color=black];
9360[label="174.194.92.102;30pkt 30fpkt", shape=pentagon, color=darkviolet];
10441[label="174.194.13.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11196[label="174.194.92.102;30pkt 30fpkt", shape=invtriangle, color=brown];
11751[label="174.194.13.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.92.102:*, 210.243.63.191:80}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62033: (1.63043%)&lt;BR/&gt; 49207: (1.63043%)&lt;BR/&gt; 49206: (1.63043%)&lt;BR/&gt; 49205: (1.63043%)&gt;];
}
240--241[label="1;1pkt 1fpkt"];
240--5130[label="1;1pkt 1fpkt"];
240--5393[label="1;1pkt 1fpkt"];
240--8119[label="1;1pkt 1fpkt"];
240--10441[label="1;1pkt 1fpkt"];
240--11751[label="1;1pkt 1fpkt"];
241--1183[label="0.966667;29pkt 29fpkt"];
241--5130[label="1;1pkt 1fpkt"];
241--5393[label="1;30pkt 30fpkt"];
241--5890[label="0.966667;29pkt 29fpkt"];
241--8119[label="0.0666667;2pkt 2fpkt"];
241--8134[label="0.633333;19pkt 19fpkt"];
241--9360[label="0.966667;29pkt 29fpkt"];
241--10441[label="1;1pkt 1fpkt"];
241--11196[label="0.966667;29pkt 29fpkt"];
241--11751[label="1;1pkt 1fpkt"];
1183--2200[label="0.5;1pkt 1fpkt"];
1183--5393[label="0.966667;29pkt 29fpkt"];
1183--5890[label="1;30pkt 30fpkt"];
1183--6964[label="0.5;1pkt 1fpkt"];
1183--8119[label="0.0333333;1pkt 1fpkt"];
1183--8134[label="0.666667;20pkt 20fpkt"];
1183--9360[label="1;30pkt 30fpkt"];
1183--11196[label="1;30pkt 30fpkt"];
5130--5393[label="1;1pkt 1fpkt"];
5130--8119[label="1;1pkt 1fpkt"];
5130--10441[label="1;1pkt 1fpkt"];
5130--11751[label="1;1pkt 1fpkt"];
5393--5890[label="0.966667;29pkt 29fpkt"];
5393--8119[label="0.0666667;2pkt 2fpkt"];
5393--8134[label="0.633333;19pkt 19fpkt"];
5393--9360[label="0.966667;29pkt 29fpkt"];
5393--10441[label="1;1pkt 1fpkt"];
5393--11196[label="0.966667;29pkt 29fpkt"];
5393--11751[label="1;1pkt 1fpkt"];
5890--6964[label="0.5;1pkt 1fpkt"];
5890--8119[label="0.0333333;1pkt 1fpkt"];
5890--8134[label="0.666667;20pkt 20fpkt"];
5890--9360[label="1;30pkt 30fpkt"];
5890--11196[label="1;30pkt 30fpkt"];
9360--11196[label="1;30pkt 30fpkt"];
10441--11751[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.243.63.191" dst_port="80" src_ip="174.194.92.102"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
272[label="1.149.126.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
273[label="214.49.6.252;d;403pkt 403fpkt", shape=diamond, color=yellow];
4528[label="40.141.77.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
5136[label="1.149.126.102;s;1pkt 1fpkt", shape=hexagon, color=black];
7791[label="1.149.126.102;s;1pkt 1fpkt", shape=polygon, color=gold];
9363[label="1.149.126.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11199[label="1.149.126.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.49.6.252:20265}[96.5261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20265: (47.555%)&lt;BR/&gt; 0: (2.44499%)&lt;BR/&gt; 6346: (0.855746%)&lt;BR/&gt; 20023: (0.733496%)&lt;BR/&gt; 3194: (0.733496%)&gt;];
}
272--273[label="1;1pkt 1fpkt"];
272--5136[label="1;1pkt 1fpkt"];
272--7791[label="1;1pkt 1fpkt"];
272--9363[label="1;1pkt 1fpkt"];
272--11199[label="1;1pkt 1fpkt"];
273--4528[label="1;1pkt 1fpkt"];
273--5136[label="1;1pkt 1fpkt"];
273--7791[label="1;1pkt 1fpkt"];
273--9363[label="1;1pkt 1fpkt"];
273--11199[label="1;1pkt 1fpkt"];
5136--7791[label="1;1pkt 1fpkt"];
5136--9363[label="1;1pkt 1fpkt"];
5136--11199[label="1;1pkt 1fpkt"];
7791--9363[label="1;1pkt 1fpkt"];
7791--11199[label="1;1pkt 1fpkt"];
9363--11199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.6.252" dst_port="20265"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
326[label="34.198.233.7;s;10pkt 10fpkt", shape=diamond, color=yellow];
5142[label="34.198.233.7;s;10pkt 10fpkt", shape=hexagon, color=black];
8336[label="34.198.233.7;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10685[label="34.198.233.7;24pkt 24fpkt", shape=invtriangle, color=brown];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.198.233.7:80, 128.208.178.254:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2365: (2.94118%)&lt;BR/&gt; 2364: (2.94118%)&lt;BR/&gt; 2363: (2.94118%)&lt;BR/&gt; 2362: (2.94118%)&gt;];
}
326--327[label="1;10pkt 10fpkt"];
326--5142[label="1;10pkt 10fpkt"];
326--8336[label="1;10pkt 10fpkt"];
326--10685[label="1;10pkt 10fpkt"];
5142--8336[label="1;10pkt 10fpkt"];
5142--10685[label="1;10pkt 10fpkt"];
8336--10685[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.178.254" src_ip="34.198.233.7" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602726,1.87805,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058198" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
353[label="133.72.132.143;s;522pkt 522fpkt", shape=diamond, color=yellow];
1058[label="1.151.10.126;d;37pkt 37fpkt", shape=diamond, color=yellow];
1085[label="194.3.77.186;d;4pkt 4fpkt", shape=diamond, color=yellow];
1191[label="206.141.224.155;d;13pkt 13fpkt", shape=diamond, color=yellow];
1232[label="6.161.98.44;d;6pkt 6fpkt", shape=diamond, color=yellow];
1711[label="194.35.81.215;d;14pkt 14fpkt", shape=diamond, color=yellow];
2227[label="101.80.16.69;d;9pkt 9fpkt", shape=diamond, color=yellow];
4012[label="37.105.249.249;d;43pkt 43fpkt", shape=diamond, color=yellow];
4032[label="206.219.22.157;d;37pkt 37fpkt", shape=diamond, color=yellow];
4714[label="7.230.182.192;d;10pkt 10fpkt", shape=diamond, color=yellow];
4793[label="5.211.18.162;d;3pkt 3fpkt", shape=diamond, color=yellow];
5104[label="6.161.98.44;d;6pkt 6fpkt", shape=hexagon, color=black];
5153[label="133.72.132.143;s;522pkt 522fpkt", shape=hexagon, color=black];
5357[label="194.35.81.215;d;8pkt 8fpkt", shape=hexagon, color=black];
5926[label="101.80.16.69;d;9pkt 9fpkt", shape=hexagon, color=black];
7081[label="206.219.22.157;d;37pkt 37fpkt", shape=hexagon, color=black];
7738[label="7.230.182.192;d;10pkt 10fpkt", shape=hexagon, color=black];
10155[label="133.72.132.193;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11594[label="133.72.132.193;8pkt 8fpkt", shape=invtriangle, color=brown];
12214[label="133.72.132.193;8pkt 8fpkt", shape=invhouse, color=bisque];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.132.143:80, *:*}[96.1326%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9239%)&lt;BR/&gt; 1195: (0.190259%)&lt;BR/&gt; 65139: (0.152207%)&lt;BR/&gt; 65138: (0.152207%)&lt;BR/&gt; 65137: (0.152207%)&gt;];
}
353--1058[label="0.675676;25pkt 25fpkt"];
353--1085[label="1;4pkt 4fpkt"];
353--1191[label="1;13pkt 13fpkt"];
353--1232[label="1;6pkt 6fpkt"];
353--1605[label="0.0606061;10pkt 10fpkt"];
353--1634[label="0.0357143;2pkt 2fpkt"];
353--1711[label="1;14pkt 14fpkt"];
353--1979[label="0.0392157;2pkt 2fpkt"];
353--2168[label="0.380952;8pkt 8fpkt"];
353--2182[label="0.204188;39pkt 39fpkt"];
353--2227[label="0.555556;5pkt 5fpkt"];
353--2448[label="0.194175;20pkt 20fpkt"];
353--2941[label="0.04;1pkt 1fpkt"];
353--3019[label="0.037037;1pkt 1fpkt"];
353--3036[label="0.111111;4pkt 4fpkt"];
353--3048[label="0.0434783;2pkt 2fpkt"];
353--3097[label="0.533333;8pkt 8fpkt"];
353--3443[label="0.0243902;1pkt 1fpkt"];
353--3508[label="0.00735294;1pkt 1fpkt"];
353--3984[label="0.0909091;8pkt 8fpkt"];
353--4012[label="1;43pkt 43fpkt"];
353--4032[label="1;37pkt 37fpkt"];
353--4231[label="0.0666667;4pkt 4fpkt"];
353--4339[label="0.25;1pkt 1fpkt"];
353--4714[label="1;10pkt 10fpkt"];
353--4793[label="1;3pkt 3fpkt"];
353--5053[label="0.714286;20pkt 20fpkt"];
353--5104[label="1;6pkt 6fpkt"];
353--5153[label="1;522pkt 522fpkt"];
353--5357[label="1;8pkt 8fpkt"];
353--5821[label="0.194175;20pkt 20fpkt"];
353--5926[label="0.555556;5pkt 5fpkt"];
353--6185[label="0.0322581;1pkt 1fpkt"];
353--6608[label="0.208333;25pkt 25fpkt"];
353--6628[label="0.6;6pkt 6fpkt"];
353--6846[label="0.0434783;2pkt 2fpkt"];
353--6975[label="0.00813008;1pkt 1fpkt"];
353--7081[label="1;37pkt 37fpkt"];
353--7234[label="0.0294118;1pkt 1fpkt"];
353--7578[label="0.0357143;2pkt 2fpkt"];
353--7738[label="1;10pkt 10fpkt"];
353--7903[label="0.0344828;1pkt 1fpkt"];
353--8131[label="0.0785441;41pkt 41fpkt"];
353--8180[label="0.0785441;41pkt 41fpkt"];
353--8219[label="0.0785441;41pkt 41fpkt"];
1058--1059[label="0.027027;1pkt 1fpkt"];
1058--5053[label="1;28pkt 28fpkt"];
1058--5153[label="0.675676;25pkt 25fpkt"];
1058--5572[label="0.027027;1pkt 1fpkt"];
1058--8131[label="0.162162;6pkt 6fpkt"];
1058--8180[label="0.162162;6pkt 6fpkt"];
1058--8219[label="0.162162;6pkt 6fpkt"];
1058--10155[label="0.375;3pkt 3fpkt"];
1058--11594[label="0.375;3pkt 3fpkt"];
1058--12214[label="0.375;3pkt 3fpkt"];
1085--5153[label="1;4pkt 4fpkt"];
1191--5153[label="1;13pkt 13fpkt"];
1232--5104[label="1;6pkt 6fpkt"];
1232--5153[label="1;6pkt 6fpkt"];
1711--5153[label="1;14pkt 14fpkt"];
1711--5357[label="1;8pkt 8fpkt"];
1711--8131[label="0.142857;2pkt 2fpkt"];
1711--8180[label="0.142857;2pkt 2fpkt"];
1711--8219[label="0.142857;2pkt 2fpkt"];
2227--5153[label="0.555556;5pkt 5fpkt"];
2227--5926[label="1;9pkt 9fpkt"];
4012--5153[label="1;43pkt 43fpkt"];
4032--5153[label="1;37pkt 37fpkt"];
4032--7081[label="1;37pkt 37fpkt"];
4714--5153[label="1;10pkt 10fpkt"];
4714--7738[label="1;10pkt 10fpkt"];
4793--5153[label="1;3pkt 3fpkt"];
5104--5153[label="1;6pkt 6fpkt"];
5153--5357[label="1;8pkt 8fpkt"];
5153--5821[label="0.194175;20pkt 20fpkt"];
5153--5926[label="0.555556;5pkt 5fpkt"];
5153--6185[label="0.0322581;1pkt 1fpkt"];
5153--6608[label="0.208333;25pkt 25fpkt"];
5153--6628[label="0.6;6pkt 6fpkt"];
5153--6846[label="0.0434783;2pkt 2fpkt"];
5153--6975[label="0.00813008;1pkt 1fpkt"];
5153--7081[label="1;37pkt 37fpkt"];
5153--7234[label="0.0294118;1pkt 1fpkt"];
5153--7578[label="0.0357143;2pkt 2fpkt"];
5153--7738[label="1;10pkt 10fpkt"];
5153--7903[label="0.0344828;1pkt 1fpkt"];
5153--8131[label="0.0785441;41pkt 41fpkt"];
5153--8180[label="0.0785441;41pkt 41fpkt"];
5153--8219[label="0.0785441;41pkt 41fpkt"];
5357--8131[label="0.25;2pkt 2fpkt"];
5357--8180[label="0.25;2pkt 2fpkt"];
5357--8219[label="0.25;2pkt 2fpkt"];
10155--11594[label="1;8pkt 8fpkt"];
10155--12214[label="1;8pkt 8fpkt"];
11594--12214[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.132.143" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
437[label="192.153.108.205;d;1445pkt 1445fpkt", shape=diamond, color=yellow];
1309[label="172.45.248.176;s;724pkt 724fpkt", shape=diamond, color=yellow];
1360[label="172.45.248.187;s;723pkt 723fpkt", shape=diamond, color=yellow];
5164[label="192.153.108.205;d;1445pkt 1445fpkt", shape=hexagon, color=black];
5200[label="172.45.248.187;s;723pkt 723fpkt", shape=hexagon, color=black];
5422[label="172.45.248.176;s;566pkt 566fpkt", shape=hexagon, color=black];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.45.248.187:1433, 192.153.108.205:*}[49.9654%]&lt;BR/&gt;{172.45.248.176:1433, 192.153.108.205:*}[49.8963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.9733%)&lt;BR/&gt; 46549: (0.0710985%)&lt;BR/&gt; 46312: (0.0710985%)&lt;BR/&gt; 44249: (0.0710985%)&lt;BR/&gt; 34816: (0.0710985%)&gt;];
}
437--1309[label="0.997238;722pkt 722fpkt"];
437--1360[label="1;723pkt 723fpkt"];
437--5164[label="1;1445pkt 1445fpkt"];
437--5200[label="1;723pkt 723fpkt"];
437--5422[label="0.998233;565pkt 565fpkt"];
1309--5164[label="0.997238;722pkt 722fpkt"];
1309--5422[label="1;566pkt 566fpkt"];
1360--5164[label="1;723pkt 723fpkt"];
1360--5200[label="1;723pkt 723fpkt"];
5164--5200[label="1;723pkt 723fpkt"];
5164--5422[label="0.998233;565pkt 565fpkt"];
</description>
    <slice>
      <filter dst_ip="192.153.108.205" src_ip="172.45.248.176" src_port="1433"/>
      <filter dst_ip="192.153.108.205" src_ip="172.45.248.187" src_port="1433"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
698[label="128.224.21.4;s;344pkt 344fpkt", shape=diamond, color=yellow];
5202[label="128.224.21.4;s;344pkt 344fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.224.21.4:0, *:0}[98.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.8372%)&lt;BR/&gt; 51276: (0.581395%)&lt;BR/&gt; 53: (0.581395%)&gt;];
}
698--987[label="0.0108696;1pkt 1fpkt"];
698--3265[label="0.00290698;1pkt 1fpkt"];
698--3285[label="0.00290698;1pkt 1fpkt"];
698--3288[label="0.00290698;1pkt 1fpkt"];
698--3319[label="0.00290698;1pkt 1fpkt"];
698--3699[label="0.00318471;1pkt 1fpkt"];
698--3704[label="0.00310559;1pkt 1fpkt"];
698--3712[label="0.00322581;1pkt 1fpkt"];
698--4481[label="0.00371747;1pkt 1fpkt"];
698--4484[label="0.00369004;1pkt 1fpkt"];
698--5202[label="1;344pkt 344fpkt"];
698--6284[label="0.00290698;1pkt 1fpkt"];
698--6786[label="0.00290698;1pkt 1fpkt"];
698--6823[label="0.00333333;1pkt 1fpkt"];
698--7124[label="0.00310559;1pkt 1fpkt"];
698--7130[label="0.00353357;1pkt 1fpkt"];
698--8056[label="0.00290698;1pkt 1fpkt"];
698--8065[label="0.00310559;1pkt 1fpkt"];
698--8153[label="0.00290698;1pkt 1fpkt"];
698--8164[label="0.00872093;3pkt 3fpkt"];
698--8196[label="0.00290698;1pkt 1fpkt"];
698--8207[label="0.00872093;3pkt 3fpkt"];
698--8229[label="0.00290698;1pkt 1fpkt"];
698--8240[label="0.00872093;3pkt 3fpkt"];
5202--6284[label="0.00290698;1pkt 1fpkt"];
5202--6786[label="0.00290698;1pkt 1fpkt"];
5202--6823[label="0.00333333;1pkt 1fpkt"];
5202--7124[label="0.00310559;1pkt 1fpkt"];
5202--7130[label="0.00353357;1pkt 1fpkt"];
5202--8056[label="0.00290698;1pkt 1fpkt"];
5202--8065[label="0.00310559;1pkt 1fpkt"];
5202--8153[label="0.00290698;1pkt 1fpkt"];
5202--8164[label="0.00872093;3pkt 3fpkt"];
5202--8196[label="0.00290698;1pkt 1fpkt"];
5202--8207[label="0.00872093;3pkt 3fpkt"];
5202--8229[label="0.00290698;1pkt 1fpkt"];
5202--8240[label="0.00872093;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="128.224.21.4"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1378[label="174.194.13.41;s;16pkt 16fpkt", shape=diamond, color=yellow];
1379[label="203.49.127.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
5216[label="174.194.13.41;s;16pkt 16fpkt", shape=hexagon, color=black];
5483[label="203.49.127.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.13.41:18797, *:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18797: (35.2941%)&lt;BR/&gt; 80: (8.82353%)&lt;BR/&gt; 49407: (5.88235%)&lt;BR/&gt; 554: (5.88235%)&lt;BR/&gt; 63175: (2.94118%)&gt;];
}
1378--1379[label="1;1pkt 1fpkt"];
1378--5216[label="1;16pkt 16fpkt"];
1378--5483[label="1;1pkt 1fpkt"];
1379--5216[label="1;1pkt 1fpkt"];
1379--5483[label="1;1pkt 1fpkt"];
5216--5483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.13.41" src_port="18797"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,010,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
727[label="133.72.202.230;d;50pkt 50fpkt", shape=diamond, color=yellow];
1260[label="101.170.146.49;s;16pkt 16fpkt", shape=diamond, color=yellow];
1384[label="1.132.169.73;s;1654pkt 1654fpkt", shape=diamond, color=yellow];
4950[label="133.72.202.230;d;34pkt 34fpkt", shape=hexagon, color=black];
5218[label="1.132.169.73;s;550pkt 550fpkt", shape=hexagon, color=black];
7276[label="0.169.164.50;s;21pkt 21fpkt", shape=hexagon, color=black];
8046[label="0.169.164.50;s;21pkt 21fpkt", shape=polygon, color=gold];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.132.169.73:80, *:*}[96.3869%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2114%)&lt;BR/&gt; 443: (0.788576%)&lt;BR/&gt; 55409: (0.106564%)&lt;BR/&gt; 58901: (0.0852515%)&lt;BR/&gt; 57951: (0.0852515%)&gt;];
}
727--818[label="0.18;9pkt 9fpkt"];
727--1023[label="0.02;1pkt 1fpkt"];
727--1260[label="1;16pkt 16fpkt"];
727--1384[label="0.02;1pkt 1fpkt"];
727--2003[label="0.02;1pkt 1fpkt"];
727--2006[label="0.02;1pkt 1fpkt"];
727--2562[label="0.02;1pkt 1fpkt"];
727--3924[label="0.205128;8pkt 8fpkt"];
727--4950[label="1;34pkt 34fpkt"];
727--5218[label="0.02;1pkt 1fpkt"];
727--5461[label="0.14;7pkt 7fpkt"];
727--5991[label="0.02;1pkt 1fpkt"];
727--6149[label="0.02;1pkt 1fpkt"];
727--7179[label="0.02;1pkt 1fpkt"];
727--7276[label="0.380952;8pkt 8fpkt"];
727--7466[label="0.02;1pkt 1fpkt"];
727--8031[label="0.02;1pkt 1fpkt"];
727--8046[label="0.380952;8pkt 8fpkt"];
727--8131[label="0.02;1pkt 1fpkt"];
727--8180[label="0.02;1pkt 1fpkt"];
727--8219[label="0.02;1pkt 1fpkt"];
727--9224[label="0.14;7pkt 7fpkt"];
727--11128[label="0.14;7pkt 7fpkt"];
727--12025[label="0.14;7pkt 7fpkt"];
1260--4950[label="1;16pkt 16fpkt"];
1384--3930[label="0.0666667;1pkt 1fpkt"];
1384--4950[label="0.0294118;1pkt 1fpkt"];
1384--5218[label="1;550pkt 550fpkt"];
1384--5747[label="0.00961538;1pkt 1fpkt"];
1384--7629[label="0.0666667;1pkt 1fpkt"];
1384--8131[label="0.157799;261pkt 261fpkt"];
1384--8180[label="0.157799;261pkt 261fpkt"];
1384--8219[label="0.157799;261pkt 261fpkt"];
4950--5218[label="0.0294118;1pkt 1fpkt"];
4950--5461[label="0.0882353;3pkt 3fpkt"];
4950--5991[label="0.0294118;1pkt 1fpkt"];
4950--6149[label="0.0294118;1pkt 1fpkt"];
4950--7179[label="0.0294118;1pkt 1fpkt"];
4950--7276[label="0.380952;8pkt 8fpkt"];
4950--7466[label="0.0294118;1pkt 1fpkt"];
4950--8031[label="0.0294118;1pkt 1fpkt"];
4950--8046[label="0.380952;8pkt 8fpkt"];
4950--8131[label="0.0294118;1pkt 1fpkt"];
4950--8180[label="0.0294118;1pkt 1fpkt"];
4950--8219[label="0.0294118;1pkt 1fpkt"];
4950--9224[label="0.0882353;3pkt 3fpkt"];
4950--11128[label="0.0882353;3pkt 3fpkt"];
4950--12025[label="0.0882353;3pkt 3fpkt"];
5218--8131[label="0.474545;261pkt 261fpkt"];
5218--8180[label="0.474545;261pkt 261fpkt"];
5218--8219[label="0.474545;261pkt 261fpkt"];
7276--7419[label="0.0952381;2pkt 2fpkt"];
7276--7593[label="0.363636;4pkt 4fpkt"];
7276--8046[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="1.132.169.73" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
791[label="174.194.105.156;d;12pkt 12fpkt", shape=diamond, color=yellow];
794[label="222.232.90.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
5221[label="174.194.105.156;d;5pkt 5fpkt", shape=hexagon, color=black];
6032[label="222.232.90.98;s;1pkt 1fpkt", shape=hexagon, color=black];
9309[label="222.232.90.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11174[label="222.232.90.98;1pkt 1fpkt", shape=invtriangle, color=brown];
12043[label="222.232.90.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.141.75.7:80, 174.194.105.156:*}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.5455%)&lt;BR/&gt; 1935: (20.4545%)&lt;BR/&gt; 56921: (15.9091%)&lt;BR/&gt; 57036: (4.54545%)&lt;BR/&gt; 57029: (4.54545%)&gt;];
}
791--794[label="1;1pkt 1fpkt"];
791--5221[label="1;5pkt 5fpkt"];
791--6032[label="1;1pkt 1fpkt"];
791--9309[label="1;1pkt 1fpkt"];
791--11174[label="1;1pkt 1fpkt"];
791--12043[label="1;1pkt 1fpkt"];
794--5221[label="1;1pkt 1fpkt"];
794--6032[label="1;1pkt 1fpkt"];
794--9309[label="1;1pkt 1fpkt"];
794--11174[label="1;1pkt 1fpkt"];
794--12043[label="1;1pkt 1fpkt"];
5221--6032[label="1;1pkt 1fpkt"];
5221--9309[label="1;1pkt 1fpkt"];
5221--11174[label="1;1pkt 1fpkt"];
5221--12043[label="1;1pkt 1fpkt"];
6032--9309[label="1;1pkt 1fpkt"];
6032--11174[label="1;1pkt 1fpkt"];
6032--12043[label="1;1pkt 1fpkt"];
9309--11174[label="1;1pkt 1fpkt"];
9309--12043[label="1;1pkt 1fpkt"];
11174--12043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.105.156" src_ip="194.141.75.7" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
505[label="192.22.1.83;d;124pkt 124fpkt", shape=diamond, color=yellow];
3208[label="128.64.5.185;s;2pkt 2fpkt", shape=diamond, color=yellow];
3345[label="128.64.243.98;s;59pkt 59fpkt", shape=diamond, color=yellow];
4165[label="128.64.4.100;s;62pkt 62fpkt", shape=diamond, color=yellow];
5180[label="192.22.1.83;d;124pkt 124fpkt", shape=hexagon, color=black];
8609[label="133.72.208.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8832[label="133.72.217.52;64pkt 64fpkt", shape=pentagon, color=darkviolet];
10356[label="128.64.245.217;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10828[label="133.72.208.32;4pkt 4fpkt", shape=invtriangle, color=brown];
10945[label="133.72.217.52;64pkt 64fpkt", shape=invtriangle, color=brown];
11918[label="133.72.208.32;5pkt 5fpkt", shape=invhouse, color=bisque];
11959[label="133.72.217.52;64pkt 64fpkt", shape=invhouse, color=bisque];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.22.1.83:995}[32.4759%]&lt;BR/&gt;{133.72.217.52:*, *:*}[20.5788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (19.6581%)&lt;BR/&gt; 43795: (8.71795%)&lt;BR/&gt; 80: (5.81197%)&lt;BR/&gt; 993: (4.18803%)&lt;BR/&gt; 61969: (3.84615%)&gt;];
}
505--750[label="0.0241935;3pkt 3fpkt"];
505--808[label="0.016129;2pkt 2fpkt"];
505--819[label="0.0322581;4pkt 4fpkt"];
505--1328[label="0.0408163;4pkt 4fpkt"];
505--1607[label="0.00854701;1pkt 1fpkt"];
505--2049[label="0.0322581;4pkt 4fpkt"];
505--2101[label="0.225806;28pkt 28fpkt"];
505--3208[label="0.5;1pkt 1fpkt"];
505--3329[label="0.00917431;1pkt 1fpkt"];
505--3345[label="0.0847458;5pkt 5fpkt"];
505--4165[label="0.016129;1pkt 1fpkt"];
505--5180[label="1;124pkt 124fpkt"];
505--5225[label="0.016129;2pkt 2fpkt"];
505--5582[label="0.0322581;4pkt 4fpkt"];
505--6006[label="0.0408163;4pkt 4fpkt"];
505--6457[label="0.0847458;5pkt 5fpkt"];
505--7566[label="0.225806;28pkt 28fpkt"];
505--7797[label="0.016129;2pkt 2fpkt"];
505--7955[label="0.038835;4pkt 4fpkt"];
505--8457[label="0.225806;28pkt 28fpkt"];
505--8609[label="0.2;1pkt 1fpkt"];
505--8832[label="0.015625;1pkt 1fpkt"];
505--10083[label="0.0769231;2pkt 2fpkt"];
505--10121[label="0.0714286;2pkt 2fpkt"];
505--10225[label="0.0625;1pkt 1fpkt"];
505--10356[label="0.5;4pkt 4fpkt"];
505--10828[label="0.25;1pkt 1fpkt"];
505--10945[label="0.015625;1pkt 1fpkt"];
505--11133[label="0.0444444;2pkt 2fpkt"];
505--11549[label="0.0769231;2pkt 2fpkt"];
505--11918[label="0.2;1pkt 1fpkt"];
505--11959[label="0.015625;1pkt 1fpkt"];
3208--3859[label="0.5;1pkt 1fpkt"];
3208--5180[label="0.5;1pkt 1fpkt"];
3208--6921[label="0.5;1pkt 1fpkt"];
3208--7994[label="0.5;1pkt 1fpkt"];
3345--4926[label="0.152542;9pkt 9fpkt"];
3345--5032[label="0.0169492;1pkt 1fpkt"];
3345--5180[label="0.0847458;5pkt 5fpkt"];
3345--5569[label="0.237288;14pkt 14fpkt"];
3345--6457[label="1;59pkt 59fpkt"];
4165--4933[label="0.112903;7pkt 7fpkt"];
4165--5180[label="0.016129;1pkt 1fpkt"];
4165--5982[label="0.112903;7pkt 7fpkt"];
4165--7512[label="0.016129;1pkt 1fpkt"];
4165--8081[label="0.016129;1pkt 1fpkt"];
5180--5225[label="0.016129;2pkt 2fpkt"];
5180--5582[label="0.0322581;4pkt 4fpkt"];
5180--6006[label="0.0408163;4pkt 4fpkt"];
5180--6457[label="0.0847458;5pkt 5fpkt"];
5180--7566[label="0.225806;28pkt 28fpkt"];
5180--7797[label="0.016129;2pkt 2fpkt"];
5180--7955[label="0.038835;4pkt 4fpkt"];
5180--8457[label="0.225806;28pkt 28fpkt"];
5180--8609[label="0.2;1pkt 1fpkt"];
5180--8832[label="0.015625;1pkt 1fpkt"];
5180--10083[label="0.0769231;2pkt 2fpkt"];
5180--10121[label="0.0714286;2pkt 2fpkt"];
5180--10225[label="0.0625;1pkt 1fpkt"];
5180--10356[label="0.5;4pkt 4fpkt"];
5180--10828[label="0.25;1pkt 1fpkt"];
5180--10945[label="0.015625;1pkt 1fpkt"];
5180--11133[label="0.0444444;2pkt 2fpkt"];
5180--11549[label="0.0769231;2pkt 2fpkt"];
5180--11918[label="0.2;1pkt 1fpkt"];
5180--11959[label="0.015625;1pkt 1fpkt"];
8609--10828[label="1;4pkt 4fpkt"];
8609--11918[label="1;5pkt 5fpkt"];
8832--10945[label="1;64pkt 64fpkt"];
8832--11959[label="1;64pkt 64fpkt"];
10828--11918[label="1;4pkt 4fpkt"];
10945--11959[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.217.52"/>
      <filter dst_ip="192.22.1.83" dst_port="995"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
842[label="128.64.203.161;s;119pkt 119fpkt", shape=diamond, color=yellow];
1420[label="4.48.139.250;d;4pkt 4fpkt", shape=diamond, color=yellow];
5239[label="4.48.139.250;d;4pkt 4fpkt", shape=hexagon, color=black];
5793[label="128.64.203.161;s;112pkt 112fpkt", shape=hexagon, color=black];
7798[label="4.48.139.250;d;4pkt 4fpkt", shape=polygon, color=gold];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.203.161:80, 34.240.132.152:*}[33.6134%]&lt;BR/&gt;{128.64.203.161:80, 41.207.116.212:*}[30.2521%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0617%)&lt;BR/&gt; 52735: (1.02881%)&lt;BR/&gt; 24378: (1.02881%)&lt;BR/&gt; 9116: (1.02881%)&lt;BR/&gt; 7590: (1.02881%)&gt;];
}
842--1420[label="1;4pkt 4fpkt"];
842--2448[label="0.0194175;2pkt 2fpkt"];
842--3508[label="0.00840336;1pkt 1fpkt"];
842--4183[label="0.5;36pkt 36fpkt"];
842--5239[label="1;4pkt 4fpkt"];
842--5793[label="1;112pkt 112fpkt"];
842--5821[label="0.0194175;2pkt 2fpkt"];
842--6975[label="0.00840336;1pkt 1fpkt"];
842--7798[label="1;4pkt 4fpkt"];
842--8131[label="0.0672269;8pkt 8fpkt"];
842--8180[label="0.0672269;8pkt 8fpkt"];
842--8219[label="0.0672269;8pkt 8fpkt"];
1420--5239[label="1;4pkt 4fpkt"];
1420--5793[label="1;4pkt 4fpkt"];
1420--7798[label="1;4pkt 4fpkt"];
5239--5793[label="1;4pkt 4fpkt"];
5239--7798[label="1;4pkt 4fpkt"];
5793--5821[label="0.0194175;2pkt 2fpkt"];
5793--6975[label="0.00892857;1pkt 1fpkt"];
5793--7798[label="1;4pkt 4fpkt"];
5793--8131[label="0.0714286;8pkt 8fpkt"];
5793--8180[label="0.0714286;8pkt 8fpkt"];
5793--8219[label="0.0714286;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="34.240.132.152" src_ip="128.64.203.161" src_port="80"/>
      <filter dst_ip="41.207.116.212" src_ip="128.64.203.161" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
944[label="5.235.60.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
5259[label="5.235.60.202;s;1pkt 1fpkt", shape=hexagon, color=black];
7858[label="5.235.60.202;s;1pkt 1fpkt", shape=polygon, color=gold];
10237[label="5.235.60.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11641[label="5.235.60.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.235.60.202:24539, 169.18.162.244:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24539: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
944--5259[label="1;1pkt 1fpkt"];
944--5536[label="1;1pkt 1fpkt"];
944--7858[label="1;1pkt 1fpkt"];
944--10237[label="1;1pkt 1fpkt"];
944--11641[label="1;1pkt 1fpkt"];
5259--5536[label="1;1pkt 1fpkt"];
5259--7858[label="1;1pkt 1fpkt"];
5259--10237[label="1;1pkt 1fpkt"];
5259--11641[label="1;1pkt 1fpkt"];
7858--10237[label="1;1pkt 1fpkt"];
7858--11641[label="1;1pkt 1fpkt"];
10237--11641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.162.244" dst_port="20" src_ip="5.235.60.202" src_port="24539"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
1471[label="133.72.75.103;d;114pkt 114fpkt", shape=diamond, color=yellow];
1472[label="0.169.168.8;s;102pkt 102fpkt", shape=diamond, color=yellow];
5261[label="133.72.75.103;d;114pkt 114fpkt", shape=hexagon, color=black];
5262[label="0.169.168.8;s;38pkt 38fpkt", shape=hexagon, color=black];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.168.8:443, 133.72.75.103:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4724: (0.543478%)&lt;BR/&gt; 4722: (0.543478%)&lt;BR/&gt; 4720: (0.543478%)&lt;BR/&gt; 4718: (0.543478%)&gt;];
}
1471--1472[label="1;102pkt 102fpkt"];
1471--5261[label="1;114pkt 114fpkt"];
1471--5262[label="1;38pkt 38fpkt"];
1472--5261[label="1;102pkt 102fpkt"];
1472--5262[label="1;38pkt 38fpkt"];
5261--5262[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.75.103" src_ip="0.169.168.8" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1477[label="209.118.242.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
1478[label="133.72.141.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
5265[label="133.72.141.191;s;1pkt 1fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.212.97:8204, 209.118.242.209:8195}[50%]&lt;BR/&gt;{133.72.141.191:8199, 209.118.242.209:8195}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8195: (50%)&lt;BR/&gt; 8199: (37.5%)&lt;BR/&gt; 8204: (12.5%)&gt;];
}
1477--1478[label="1;1pkt 1fpkt"];
1477--5265[label="1;1pkt 1fpkt"];
1478--5265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.118.242.209" dst_port="8195" src_ip="133.72.141.191" src_port="8199"/>
      <filter dst_ip="209.118.242.209" dst_port="8195" src_ip="128.64.212.97" src_port="8204"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1504[label="214.56.200.239;s;8pkt 8fpkt", shape=diamond, color=yellow];
2046[label="4.92.43.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
4202[label="201.192.197.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
5275[label="214.56.200.239;s;8pkt 8fpkt", shape=hexagon, color=black];
7799[label="214.56.200.239;s;8pkt 8fpkt", shape=polygon, color=gold];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.200.239:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1504--2046[label="1;1pkt 1fpkt"];
1504--4202[label="1;1pkt 1fpkt"];
1504--5275[label="1;8pkt 8fpkt"];
1504--7799[label="1;8pkt 8fpkt"];
2046--5275[label="1;1pkt 1fpkt"];
2046--7799[label="1;1pkt 1fpkt"];
4202--5275[label="1;1pkt 1fpkt"];
4202--7799[label="1;1pkt 1fpkt"];
5275--7799[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="214.56.200.239"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1574[label="41.207.126.180;d;6pkt 6fpkt", shape=diamond, color=yellow];
1575[label="144.203.74.184;s;6pkt 6fpkt", shape=diamond, color=yellow];
5300[label="41.207.126.180;d;6pkt 6fpkt", shape=hexagon, color=black];
5301[label="144.203.74.184;s;6pkt 6fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.74.184:80, 41.207.126.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45556: (8.33333%)&lt;BR/&gt; 44920: (8.33333%)&lt;BR/&gt; 44773: (8.33333%)&lt;BR/&gt; 43809: (8.33333%)&gt;];
}
1574--1575[label="1;6pkt 6fpkt"];
1574--5300[label="1;6pkt 6fpkt"];
1574--5301[label="1;6pkt 6fpkt"];
1575--5300[label="1;6pkt 6fpkt"];
1575--5301[label="1;6pkt 6fpkt"];
5300--5301[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.180" src_ip="144.203.74.184" src_port="80"/>
    </slice>
    <from sec="1229058567" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1583[label="41.207.126.192;d;28pkt 28fpkt", shape=diamond, color=yellow];
1584[label="144.203.88.100;s;24pkt 24fpkt", shape=diamond, color=yellow];
5303[label="41.207.126.192;d;28pkt 28fpkt", shape=hexagon, color=black];
5304[label="144.203.88.100;s;24pkt 24fpkt", shape=hexagon, color=black];
7892[label="144.203.88.100;s;16pkt 16fpkt", shape=polygon, color=gold];
9339[label="144.203.88.100;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.88.100:80, 41.207.126.192:*}[74.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64549: (2.06897%)&lt;BR/&gt; 61121: (2.06897%)&lt;BR/&gt; 59928: (2.06897%)&lt;BR/&gt; 59892: (2.06897%)&gt;];
}
1583--1584[label="0.916667;22pkt 22fpkt"];
1583--5303[label="1;28pkt 28fpkt"];
1583--5304[label="0.916667;22pkt 22fpkt"];
1583--7892[label="0.9375;15pkt 15fpkt"];
1583--8131[label="0.0714286;2pkt 2fpkt"];
1583--8180[label="0.0714286;2pkt 2fpkt"];
1583--8219[label="0.0714286;2pkt 2fpkt"];
1583--9339[label="0.88;22pkt 22fpkt"];
1584--5303[label="0.916667;22pkt 22fpkt"];
1584--5304[label="1;24pkt 24fpkt"];
1584--7892[label="1;16pkt 16fpkt"];
1584--8131[label="0.0833333;2pkt 2fpkt"];
1584--8180[label="0.0833333;2pkt 2fpkt"];
1584--8219[label="0.0833333;2pkt 2fpkt"];
1584--9339[label="1;24pkt 24fpkt"];
5303--5304[label="0.916667;22pkt 22fpkt"];
5303--7892[label="0.9375;15pkt 15fpkt"];
5303--8131[label="0.0714286;2pkt 2fpkt"];
5303--8180[label="0.0714286;2pkt 2fpkt"];
5303--8219[label="0.0714286;2pkt 2fpkt"];
5303--9339[label="0.88;22pkt 22fpkt"];
5304--7892[label="1;16pkt 16fpkt"];
5304--8131[label="0.0833333;2pkt 2fpkt"];
5304--8180[label="0.0833333;2pkt 2fpkt"];
5304--8219[label="0.0833333;2pkt 2fpkt"];
5304--9339[label="1;24pkt 24fpkt"];
7892--8131[label="0.125;2pkt 2fpkt"];
7892--8180[label="0.125;2pkt 2fpkt"];
7892--8219[label="0.125;2pkt 2fpkt"];
7892--9339[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.192" src_ip="144.203.88.100" src_port="80"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
167[label="128.64.135.116s;3pkt 3fpkt", shape=rectangle, color=red];
1108[label="197.220.67.141;d;7pkt 7fpkt", shape=diamond, color=yellow];
1109[label="128.64.135.116;s;7pkt 7fpkt", shape=diamond, color=yellow];
5310[label="128.64.135.116;s;7pkt 7fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.135.116:*, 197.220.67.141:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2104: (8.33333%)&lt;BR/&gt; 2100: (8.33333%)&lt;BR/&gt; 2112: (6.25%)&lt;BR/&gt; 2110: (6.25%)&gt;];
}
167--471[label="0.333333;1pkt 1fpkt"];
167--1108[label="0.666667;2pkt 2fpkt"];
167--1109[label="0.666667;2pkt 2fpkt"];
167--1189[label="1;1pkt 1fpkt"];
167--5310[label="0.666667;2pkt 2fpkt"];
167--6313[label="0.333333;1pkt 1fpkt"];
167--8119[label="0.333333;1pkt 1fpkt"];
167--8131[label="0.333333;1pkt 1fpkt"];
167--8180[label="0.333333;1pkt 1fpkt"];
167--8219[label="0.333333;1pkt 1fpkt"];
1108--1109[label="1;7pkt 7fpkt"];
1108--5310[label="1;7pkt 7fpkt"];
1108--8119[label="0.428571;3pkt 3fpkt"];
1109--5310[label="1;7pkt 7fpkt"];
1109--8119[label="0.428571;3pkt 3fpkt"];
5310--8119[label="0.428571;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.220.67.141" dst_port="80" src_ip="128.64.135.116"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901222,1.8158,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1611[label="172.45.137.124;s;45pkt 45fpkt", shape=diamond, color=yellow];
2161[label="128.197.162.250;d;9pkt 9fpkt", shape=diamond, color=yellow];
2357[label="6.164.180.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
3210[label="6.160.236.105;d;13pkt 13fpkt", shape=diamond, color=yellow];
3684[label="1.54.189.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
5316[label="172.45.137.124;s;26pkt 26fpkt", shape=hexagon, color=black];
5909[label="128.197.162.250;d;15pkt 15fpkt", shape=hexagon, color=black];
6269[label="6.160.236.105;d;13pkt 13fpkt", shape=hexagon, color=black];
12086[label="172.45.137.124;49pkt 49fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.45.137.124:80, 128.197.162.250:*}[58.8235%]&lt;BR/&gt;{172.45.137.124:80, 6.160.236.105:*}[25.4902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4253%)&lt;BR/&gt; 53566: (1.43678%)&lt;BR/&gt; 53564: (1.43678%)&lt;BR/&gt; 53558: (1.43678%)&lt;BR/&gt; 53556: (1.43678%)&gt;];
}
1611--2161[label="1;9pkt 9fpkt"];
1611--2357[label="1;2pkt 2fpkt"];
1611--3210[label="1;13pkt 13fpkt"];
1611--3684[label="1;2pkt 2fpkt"];
1611--5316[label="1;26pkt 26fpkt"];
1611--5909[label="1;15pkt 15fpkt"];
1611--6269[label="1;13pkt 13fpkt"];
1611--8131[label="0.288889;13pkt 13fpkt"];
1611--8180[label="0.288889;13pkt 13fpkt"];
1611--8219[label="0.288889;13pkt 13fpkt"];
1611--12086[label="0.955556;43pkt 43fpkt"];
2161--12086[label="1;9pkt 9fpkt"];
2357--5316[label="1;2pkt 2fpkt"];
2357--12086[label="1;2pkt 2fpkt"];
3210--5316[label="0.538462;7pkt 7fpkt"];
3210--6269[label="1;13pkt 13fpkt"];
3210--12086[label="1;13pkt 13fpkt"];
3684--12086[label="1;2pkt 2fpkt"];
5316--5909[label="1;15pkt 15fpkt"];
5316--6269[label="0.538462;7pkt 7fpkt"];
5316--8131[label="0.5;13pkt 13fpkt"];
5316--8180[label="0.5;13pkt 13fpkt"];
5316--8219[label="0.5;13pkt 13fpkt"];
5316--12086[label="0.923077;24pkt 24fpkt"];
5909--8131[label="0.866667;13pkt 13fpkt"];
5909--8180[label="0.866667;13pkt 13fpkt"];
5909--8219[label="0.866667;13pkt 13fpkt"];
5909--12086[label="1;15pkt 15fpkt"];
6269--12086[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="128.197.162.250" src_ip="172.45.137.124" src_port="80"/>
      <filter dst_ip="6.160.236.105" src_ip="172.45.137.124" src_port="80"/>
    </slice>
    <from sec="1229058014" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,502,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
156[label="5.179.74.211s;110pkt 110fpkt", shape=rectangle, color=red];
1175[label="5.179.74.211;s;110pkt 110fpkt", shape=diamond, color=yellow];
5329[label="5.179.74.211;s;110pkt 110fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.179.74.211:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 25211: (0.454545%)&lt;BR/&gt; 25210: (0.454545%)&lt;BR/&gt; 25209: (0.454545%)&lt;BR/&gt; 25208: (0.454545%)&gt;];
}
156--1175[label="1;110pkt 110fpkt"];
156--3039[label="0.00909091;1pkt 1fpkt"];
156--4476[label="0.0116279;1pkt 1fpkt"];
156--5329[label="1;110pkt 110fpkt"];
1175--3039[label="0.00909091;1pkt 1fpkt"];
1175--4476[label="0.0116279;1pkt 1fpkt"];
1175--5329[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="5.179.74.211"/>
    </slice>
    <from sec="1229058031" usec="0"/>
    <to sec="1229058043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
1192[label="206.141.224.155;s;13pkt 13fpkt", shape=diamond, color=yellow];
4832[label="133.72.132.143;d;37pkt 37fpkt", shape=hexagon, color=black];
5333[label="206.141.224.155;s;13pkt 13fpkt", shape=hexagon, color=black];
9853[label="206.141.224.155;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.141.224.155:*, 133.72.132.143:80}[35.1351%]&lt;BR/&gt;{7.77.198.239:*, 133.72.132.143:80}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61307: (2.63158%)&lt;BR/&gt; 61306: (2.63158%)&lt;BR/&gt; 61305: (2.63158%)&lt;BR/&gt; 61304: (2.63158%)&gt;];
}
1192--4832[label="1;13pkt 13fpkt"];
1192--5333[label="1;13pkt 13fpkt"];
1192--8119[label="0.153846;2pkt 2fpkt"];
1192--9853[label="1;13pkt 13fpkt"];
4832--5333[label="1;13pkt 13fpkt"];
4832--7579[label="0.027027;1pkt 1fpkt"];
4832--8119[label="0.432432;16pkt 16fpkt"];
4832--8134[label="0.135135;5pkt 5fpkt"];
4832--8165[label="0.027027;1pkt 1fpkt"];
4832--8208[label="0.027027;1pkt 1fpkt"];
4832--8241[label="0.027027;1pkt 1fpkt"];
4832--9853[label="1;13pkt 13fpkt"];
5333--8119[label="0.153846;2pkt 2fpkt"];
5333--9853[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.132.143" dst_port="80" src_ip="206.141.224.155"/>
      <filter dst_ip="133.72.132.143" dst_port="80" src_ip="7.77.198.239"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
1194[label="128.88.65.61;s;4pkt 4fpkt", shape=diamond, color=yellow];
5334[label="128.88.65.61;s;4pkt 4fpkt", shape=hexagon, color=black];
8909[label="128.88.65.61;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.88.65.61:33935, 128.150.65.195:69}[25%]&lt;BR/&gt;{128.88.65.61:135, 128.150.65.195:3424}[25%]&lt;BR/&gt;{128.88.65.61:135, 128.150.65.195:3473}[25%]&lt;BR/&gt;{128.88.65.61:135, 128.150.65.195:3477}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (37.5%)&lt;BR/&gt; 33935: (12.5%)&lt;BR/&gt; 3477: (12.5%)&lt;BR/&gt; 3473: (12.5%)&lt;BR/&gt; 3424: (12.5%)&gt;];
}
1194--5334[label="1;4pkt 4fpkt"];
1194--8909[label="1;4pkt 4fpkt"];
5334--8909[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.150.65.195" dst_port="3477" src_ip="128.88.65.61" src_port="135"/>
      <filter dst_ip="128.150.65.195" dst_port="3473" src_ip="128.88.65.61" src_port="135"/>
      <filter dst_ip="128.150.65.195" dst_port="3424" src_ip="128.88.65.61" src_port="135"/>
      <filter dst_ip="128.150.65.195" dst_port="69" src_ip="128.88.65.61" src_port="33935"/>
    </slice>
    <from sec="1229058041" usec="0"/>
    <to sec="1229058048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1198[label="133.72.177.25;d;98pkt 98fpkt", shape=diamond, color=yellow];
1200[label="206.168.25.70;s;14pkt 14fpkt", shape=diamond, color=yellow];
5335[label="206.168.25.70;s;14pkt 14fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.177.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3623: (1.19048%)&lt;BR/&gt; 3619: (1.19048%)&lt;BR/&gt; 3615: (1.19048%)&lt;BR/&gt; 3613: (1.19048%)&gt;];
}
1198--1200[label="1;14pkt 14fpkt"];
1198--5335[label="1;14pkt 14fpkt"];
1200--5335[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.177.25" src_port="80"/>
    </slice>
    <from sec="1229058042" usec="0"/>
    <to sec="1229058457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1281[label="174.194.119.7;d;4pkt 4fpkt", shape=diamond, color=yellow];
5353[label="101.161.130.175;s;2pkt 2fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.84.30.38:80, 174.194.119.7:58515}[25%]&lt;BR/&gt;{42.108.30.192:80, 174.194.119.7:58522}[25%]&lt;BR/&gt;{101.161.130.175:80, 174.194.119.7:58517}[25%]&lt;BR/&gt;{101.161.130.175:80, 174.194.119.7:58521}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58521: (16.6667%)&lt;BR/&gt; 58517: (16.6667%)&lt;BR/&gt; 58522: (8.33333%)&lt;BR/&gt; 58515: (8.33333%)&gt;];
}
1281--5353[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.119.7" dst_port="58521" src_ip="101.161.130.175" src_port="80"/>
      <filter dst_ip="174.194.119.7" dst_port="58517" src_ip="101.161.130.175" src_port="80"/>
      <filter dst_ip="174.194.119.7" dst_port="58522" src_ip="42.108.30.192" src_port="80"/>
      <filter dst_ip="174.194.119.7" dst_port="58515" src_ip="101.84.30.38" src_port="80"/>
    </slice>
    <from sec="1229058093" usec="0"/>
    <to sec="1229058109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
1795[label="204.10.120.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
5382[label="204.10.120.5;d;4pkt 4fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.152:8080, 204.10.120.5:1043}[25%]&lt;BR/&gt;{174.194.172.152:8080, 204.10.120.5:1044}[25%]&lt;BR/&gt;{174.194.172.152:8080, 204.10.120.5:1045}[25%]&lt;BR/&gt;{174.194.172.152:8080, 204.10.120.5:1046}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1046: (12.5%)&lt;BR/&gt; 1045: (12.5%)&lt;BR/&gt; 1044: (12.5%)&lt;BR/&gt; 1043: (12.5%)&gt;];
}
1795--5382[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="204.10.120.5" dst_port="1046" src_ip="174.194.172.152" src_port="8080"/>
      <filter dst_ip="204.10.120.5" dst_port="1045" src_ip="174.194.172.152" src_port="8080"/>
      <filter dst_ip="204.10.120.5" dst_port="1044" src_ip="174.194.172.152" src_port="8080"/>
      <filter dst_ip="204.10.120.5" dst_port="1043" src_ip="174.194.172.152" src_port="8080"/>
    </slice>
    <from sec="1229058182" usec="0"/>
    <to sec="1229058251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1801[label="193.195.146.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
5387[label="193.195.146.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.195.146.199:80, 214.49.29.37:52126}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52126: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1801--5387[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.29.37" dst_port="52126" src_ip="193.195.146.199" src_port="80"/>
    </slice>
    <from sec="1229058188" usec="0"/>
    <to sec="1229058272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1357[label="205.71.8.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
5466[label="205.71.8.150;s;1pkt 1fpkt", shape=hexagon, color=black];
7817[label="205.71.8.150;s;1pkt 1fpkt", shape=polygon, color=gold];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.71.8.150:4667, 128.64.35.93:2762}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4667: (50%)&lt;BR/&gt; 2762: (50%)&gt;];
}
1357--5466[label="1;1pkt 1fpkt"];
1357--6289[label="1;1pkt 1fpkt"];
1357--7817[label="1;1pkt 1fpkt"];
5466--6289[label="1;1pkt 1fpkt"];
5466--7817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.35.93" dst_port="2762" src_ip="205.71.8.150" src_port="4667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1359[label="172.45.248.187;d;645pkt 645fpkt", shape=diamond, color=yellow];
5467[label="172.45.248.187;d;256pkt 256fpkt", shape=hexagon, color=black];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.153.108.205:*, 172.45.248.187:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 49904: (0.110988%)&lt;BR/&gt; 49563: (0.110988%)&lt;BR/&gt; 49265: (0.110988%)&lt;BR/&gt; 48635: (0.110988%)&gt;];
}
1359--5467[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.248.187" dst_port="1433" src_ip="192.153.108.205"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1846[label="101.193.77.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
5474[label="101.193.77.54;d;1pkt 1fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.39:1148, 101.193.77.54:7777}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7777: (50%)&lt;BR/&gt; 1148: (50%)&gt;];
}
1846--5474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.193.77.54" dst_port="7777" src_ip="133.72.2.39" src_port="1148"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1852[label="133.72.22.204;s;465pkt 465fpkt", shape=diamond, color=yellow];
5481[label="133.72.22.204;s;465pkt 465fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.22.204:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1852--5481[label="1;465pkt 465fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.22.204"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
1867[label="214.66.186.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
5492[label="214.66.186.147;s;1pkt 1fpkt", shape=hexagon, color=black];
7820[label="214.66.186.147;s;1pkt 1fpkt", shape=polygon, color=gold];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.66.186.147:22999, 169.18.131.118:50431}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50431: (50%)&lt;BR/&gt; 22999: (50%)&gt;];
}
1867--5492[label="1;1pkt 1fpkt"];
1867--7820[label="1;1pkt 1fpkt"];
5492--7820[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="50431" src_ip="214.66.186.147" src_port="22999"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1459[label="51.41.141.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
1460[label="128.64.226.30;s;23pkt 23fpkt", shape=diamond, color=yellow];
5531[label="51.41.141.69;d;1pkt 1fpkt", shape=hexagon, color=black];
7428[label="128.64.226.30;s;23pkt 23fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.226.30:62743, *:*}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62743: (45.8333%)&lt;BR/&gt; 62182: (4.16667%)&lt;BR/&gt; 8040: (4.16667%)&lt;BR/&gt; 64972: (2.08333%)&lt;BR/&gt; 61887: (2.08333%)&gt;];
}
1459--1460[label="1;1pkt 1fpkt"];
1459--5531[label="1;1pkt 1fpkt"];
1459--7428[label="1;1pkt 1fpkt"];
1460--5531[label="1;1pkt 1fpkt"];
1460--7428[label="1;23pkt 23fpkt"];
5531--7428[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.226.30" src_port="62743"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
970[label="192.7.153.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="133.72.158.139;s;111pkt 111fpkt", shape=diamond, color=yellow];
1790[label="192.7.153.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
3220[label="192.7.154.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
4344[label="44.77.49.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
5541[label="133.72.158.139;s;96pkt 96fpkt", shape=hexagon, color=black];
5673[label="192.7.153.109;d;1pkt 1fpkt", shape=hexagon, color=black];
6687[label="192.7.154.6;d;1pkt 1fpkt", shape=hexagon, color=black];
7866[label="192.7.153.109;d;1pkt 1fpkt", shape=polygon, color=gold];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.139:*, 44.77.8.77:80}[29.7297%]&lt;BR/&gt;{133.72.158.139:*, 37.137.54.212:80}[24.3243%]&lt;BR/&gt;{133.72.158.139:*, 44.77.8.84:80}[20.7207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.028%)&lt;BR/&gt; 1935: (3.97196%)&lt;BR/&gt; 2184: (1.16822%)&lt;BR/&gt; 2476: (0.934579%)&lt;BR/&gt; 2601: (0.700935%)&gt;];
}
970--971[label="1;1pkt 1fpkt"];
970--5541[label="1;1pkt 1fpkt"];
971--1790[label="1;1pkt 1fpkt"];
971--3220[label="1;1pkt 1fpkt"];
971--4344[label="1;1pkt 1fpkt"];
971--4566[label="0.350649;27pkt 27fpkt"];
971--5541[label="1;96pkt 96fpkt"];
971--5673[label="1;1pkt 1fpkt"];
971--6687[label="1;1pkt 1fpkt"];
971--7866[label="1;1pkt 1fpkt"];
971--8119[label="0.045045;5pkt 5fpkt"];
971--8134[label="0.108108;12pkt 12fpkt"];
971--8165[label="0.018018;2pkt 2fpkt"];
971--8208[label="0.018018;2pkt 2fpkt"];
971--8241[label="0.018018;2pkt 2fpkt"];
1790--5541[label="1;1pkt 1fpkt"];
1790--5673[label="1;1pkt 1fpkt"];
1790--7866[label="1;1pkt 1fpkt"];
3220--5541[label="1;1pkt 1fpkt"];
3220--6687[label="1;1pkt 1fpkt"];
4344--5541[label="1;1pkt 1fpkt"];
5541--5673[label="1;1pkt 1fpkt"];
5541--6687[label="1;1pkt 1fpkt"];
5541--7866[label="1;1pkt 1fpkt"];
5541--8119[label="0.0520833;5pkt 5fpkt"];
5541--8134[label="0.125;12pkt 12fpkt"];
5673--7866[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.77.8.77" dst_port="80" src_ip="133.72.158.139"/>
      <filter dst_ip="37.137.54.212" dst_port="80" src_ip="133.72.158.139"/>
      <filter dst_ip="44.77.8.84" dst_port="80" src_ip="133.72.158.139"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
4174[label="128.64.117.67;d;58pkt 58fpkt", shape=diamond, color=yellow];
5549[label="205.212.38.15;s;500pkt 500fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.212.38.15:80, *:*}[89.7666%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61766: (0.179211%)&lt;BR/&gt; 57446: (0.179211%)&lt;BR/&gt; 36616: (0.179211%)&lt;BR/&gt; 33891: (0.179211%)&gt;];
}
4174--4175[label="1;49pkt 49fpkt"];
4174--5549[label="0.0172414;1pkt 1fpkt"];
4174--6224[label="0.0172414;1pkt 1fpkt"];
4174--6225[label="0.0172414;1pkt 1fpkt"];
4174--8119[label="0.0517241;3pkt 3fpkt"];
4174--8134[label="0.0517241;3pkt 3fpkt"];
4174--8165[label="0.0172414;1pkt 1fpkt"];
4174--8208[label="0.0172414;1pkt 1fpkt"];
4174--8241[label="0.0172414;1pkt 1fpkt"];
5549--8131[label="0.208;104pkt 104fpkt"];
5549--8180[label="0.208;104pkt 104fpkt"];
5549--8219[label="0.208;104pkt 104fpkt"];
</description>
    <slice>
      <filter src_ip="205.212.38.15" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1002[label="41.207.125.104;d;7pkt 7fpkt", shape=diamond, color=yellow];
1003[label="128.81.1.14;s;7pkt 7fpkt", shape=diamond, color=yellow];
5551[label="128.81.1.14;s;7pkt 7fpkt", shape=hexagon, color=black];
6445[label="41.207.125.104;d;6pkt 6fpkt", shape=hexagon, color=black];
7887[label="128.81.1.14;s;5pkt 5fpkt", shape=polygon, color=gold];
8397[label="128.81.1.14;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10726[label="128.81.1.14;7pkt 7fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.1.14:80, 41.207.125.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59648: (7.77778%)&lt;BR/&gt; 50738: (7.77778%)&lt;BR/&gt; 41758: (7.77778%)&lt;BR/&gt; 41257: (7.77778%)&gt;];
}
1002--1003[label="1;7pkt 7fpkt"];
1002--5551[label="1;7pkt 7fpkt"];
1002--6445[label="1;6pkt 6fpkt"];
1002--7887[label="1;5pkt 5fpkt"];
1002--8131[label="0.142857;1pkt 1fpkt"];
1002--8180[label="0.142857;1pkt 1fpkt"];
1002--8219[label="0.142857;1pkt 1fpkt"];
1002--8397[label="1;6pkt 6fpkt"];
1002--10726[label="1;7pkt 7fpkt"];
1003--5551[label="1;7pkt 7fpkt"];
1003--6445[label="1;6pkt 6fpkt"];
1003--7887[label="1;5pkt 5fpkt"];
1003--8131[label="0.142857;1pkt 1fpkt"];
1003--8180[label="0.142857;1pkt 1fpkt"];
1003--8219[label="0.142857;1pkt 1fpkt"];
1003--8397[label="1;6pkt 6fpkt"];
1003--10726[label="1;7pkt 7fpkt"];
5551--6445[label="1;6pkt 6fpkt"];
5551--7887[label="1;5pkt 5fpkt"];
5551--8131[label="0.142857;1pkt 1fpkt"];
5551--8180[label="0.142857;1pkt 1fpkt"];
5551--8219[label="0.142857;1pkt 1fpkt"];
5551--8397[label="1;6pkt 6fpkt"];
5551--10726[label="1;7pkt 7fpkt"];
6445--7887[label="1;5pkt 5fpkt"];
6445--8131[label="0.166667;1pkt 1fpkt"];
6445--8180[label="0.166667;1pkt 1fpkt"];
6445--8219[label="0.166667;1pkt 1fpkt"];
6445--8397[label="0.833333;5pkt 5fpkt"];
6445--10726[label="1;6pkt 6fpkt"];
7887--8131[label="0.2;1pkt 1fpkt"];
7887--8180[label="0.2;1pkt 1fpkt"];
7887--8219[label="0.2;1pkt 1fpkt"];
7887--8397[label="0.8;4pkt 4fpkt"];
7887--10726[label="1;5pkt 5fpkt"];
8397--10726[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.104" src_ip="128.81.1.14" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1416[label="174.194.19.73;s;13pkt 13fpkt", shape=diamond, color=yellow];
1417[label="37.115.65.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
2307[label="44.55.216.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
4245[label="46.198.65.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
5000[label="65.61.201.254;d;187pkt 187fpkt", shape=hexagon, color=black];
5237[label="174.194.19.73;s;13pkt 13fpkt", shape=hexagon, color=black];
5238[label="37.115.65.5;d;1pkt 1fpkt", shape=hexagon, color=black];
5953[label="44.55.216.48;d;1pkt 1fpkt", shape=hexagon, color=black];
7257[label="46.198.65.209;d;1pkt 1fpkt", shape=hexagon, color=black];
7823[label="174.194.19.73;s;9pkt 9fpkt", shape=polygon, color=gold];
9056[label="174.194.19.73;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11049[label="174.194.19.73;13pkt 13fpkt", shape=invtriangle, color=brown];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 65.61.201.254:8102}[51.0101%]&lt;BR/&gt;{*:*, 65.61.201.254:80}[41.9192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.4567%)&lt;BR/&gt; 8102: (20.8661%)&lt;BR/&gt; 53241: (8.26772%)&lt;BR/&gt; 2000: (1.37795%)&lt;BR/&gt; 1957: (1.37795%)&gt;];
}
1416--1417[label="1;1pkt 1fpkt"];
1416--1528[label="0.0769231;1pkt 1fpkt"];
1416--2307[label="1;1pkt 1fpkt"];
1416--4245[label="1;1pkt 1fpkt"];
1416--5000[label="0.153846;2pkt 2fpkt"];
1416--5237[label="1;13pkt 13fpkt"];
1416--5238[label="1;1pkt 1fpkt"];
1416--5559[label="0.0769231;1pkt 1fpkt"];
1416--5953[label="1;1pkt 1fpkt"];
1416--7257[label="1;1pkt 1fpkt"];
1416--7823[label="1;9pkt 9fpkt"];
1416--8165[label="0.0769231;1pkt 1fpkt"];
1416--8208[label="0.0769231;1pkt 1fpkt"];
1416--8241[label="0.0769231;1pkt 1fpkt"];
1416--9056[label="1;13pkt 13fpkt"];
1416--11049[label="1;13pkt 13fpkt"];
1417--5237[label="1;1pkt 1fpkt"];
1417--5238[label="1;1pkt 1fpkt"];
1417--7823[label="1;1pkt 1fpkt"];
1417--9056[label="1;1pkt 1fpkt"];
1417--11049[label="1;1pkt 1fpkt"];
2307--5237[label="1;1pkt 1fpkt"];
2307--5953[label="1;1pkt 1fpkt"];
2307--7823[label="1;1pkt 1fpkt"];
2307--9056[label="1;1pkt 1fpkt"];
2307--11049[label="1;1pkt 1fpkt"];
4245--5237[label="1;1pkt 1fpkt"];
4245--7257[label="1;1pkt 1fpkt"];
4245--7823[label="1;1pkt 1fpkt"];
4245--9056[label="1;1pkt 1fpkt"];
4245--11049[label="1;1pkt 1fpkt"];
5000--5045[label="0.00534759;1pkt 1fpkt"];
5000--5128[label="0.00534759;1pkt 1fpkt"];
5000--5138[label="0.2;1pkt 1fpkt"];
5000--5237[label="0.153846;2pkt 2fpkt"];
5000--5245[label="0.00534759;1pkt 1fpkt"];
5000--5854[label="0.016;2pkt 2fpkt"];
5000--6067[label="0.00534759;1pkt 1fpkt"];
5000--6308[label="0.0241935;3pkt 3fpkt"];
5000--6316[label="0.0320856;6pkt 6fpkt"];
5000--6513[label="0.00534759;1pkt 1fpkt"];
5000--6883[label="0.0769231;1pkt 1fpkt"];
5000--6906[label="0.0243902;2pkt 2fpkt"];
5000--7165[label="0.0106952;2pkt 2fpkt"];
5000--7195[label="0.0212766;1pkt 1fpkt"];
5000--7393[label="0.00534759;1pkt 1fpkt"];
5000--7484[label="0.0178571;3pkt 3fpkt"];
5000--7544[label="0.015873;2pkt 2fpkt"];
5000--7823[label="0.111111;1pkt 1fpkt"];
5000--7993[label="0.0243902;2pkt 2fpkt"];
5000--8024[label="0.00534759;1pkt 1fpkt"];
5000--8119[label="0.026738;5pkt 5fpkt"];
5000--8134[label="0.0160428;3pkt 3fpkt"];
5000--8165[label="0.026738;5pkt 5fpkt"];
5000--8208[label="0.026738;5pkt 5fpkt"];
5000--8241[label="0.026738;5pkt 5fpkt"];
5000--8295[label="0.075;3pkt 3fpkt"];
5000--8412[label="0.00534759;1pkt 1fpkt"];
5000--8442[label="0.142857;1pkt 1fpkt"];
5000--9056[label="0.153846;2pkt 2fpkt"];
5000--9058[label="0.0188679;1pkt 1fpkt"];
5000--9211[label="0.015748;2pkt 2fpkt"];
5000--9445[label="0.047619;1pkt 1fpkt"];
5000--9695[label="0.057971;4pkt 4fpkt"];
5000--9741[label="0.00534759;1pkt 1fpkt"];
5000--9897[label="0.0425532;2pkt 2fpkt"];
5000--10463[label="0.0227273;2pkt 2fpkt"];
5000--10494[label="0.0205479;3pkt 3fpkt"];
5000--10736[label="0.00534759;1pkt 1fpkt"];
5000--10752[label="0.166667;1pkt 1fpkt"];
5000--11049[label="0.153846;2pkt 2fpkt"];
5000--11050[label="0.0188679;1pkt 1fpkt"];
5000--11120[label="0.015748;2pkt 2fpkt"];
5000--11228[label="0.047619;1pkt 1fpkt"];
5000--11777[label="0.0205479;3pkt 3fpkt"];
5000--12294[label="0.0205479;3pkt 3fpkt"];
5237--5238[label="1;1pkt 1fpkt"];
5237--5559[label="0.0769231;1pkt 1fpkt"];
5237--5953[label="1;1pkt 1fpkt"];
5237--7257[label="1;1pkt 1fpkt"];
5237--7823[label="1;9pkt 9fpkt"];
5237--8165[label="0.0769231;1pkt 1fpkt"];
5237--8208[label="0.0769231;1pkt 1fpkt"];
5237--8241[label="0.0769231;1pkt 1fpkt"];
5237--9056[label="1;13pkt 13fpkt"];
5237--11049[label="1;13pkt 13fpkt"];
5238--7823[label="1;1pkt 1fpkt"];
5238--9056[label="1;1pkt 1fpkt"];
5238--11049[label="1;1pkt 1fpkt"];
5953--7823[label="1;1pkt 1fpkt"];
5953--9056[label="1;1pkt 1fpkt"];
5953--11049[label="1;1pkt 1fpkt"];
7257--7823[label="1;1pkt 1fpkt"];
7257--9056[label="1;1pkt 1fpkt"];
7257--11049[label="1;1pkt 1fpkt"];
7823--9056[label="1;9pkt 9fpkt"];
7823--11049[label="1;9pkt 9fpkt"];
9056--11049[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="65.61.201.254" dst_port="8102"/>
      <filter dst_ip="65.61.201.254" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
1526[label="174.194.32.28;s;35pkt 35fpkt", shape=diamond, color=yellow];
1731[label="200.3.220.162;d;4pkt 4fpkt", shape=diamond, color=yellow];
6100[label="174.194.32.28;s;35pkt 35fpkt", shape=hexagon, color=black];
7946[label="174.194.32.28;s;28pkt 28fpkt", shape=polygon, color=gold];
8561[label="174.194.32.28;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.32.28:80, 41.207.126.99:*}[34.1463%]&lt;BR/&gt;{174.194.32.28:80, 202.25.65.241:*}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6454%)&lt;BR/&gt; 36869: (1.77305%)&lt;BR/&gt; 36813: (1.77305%)&lt;BR/&gt; 36753: (1.77305%)&lt;BR/&gt; 63844: (1.41844%)&gt;];
}
1526--1731[label="0.75;3pkt 3fpkt"];
1526--6100[label="1;35pkt 35fpkt"];
1526--7946[label="1;28pkt 28fpkt"];
1526--8131[label="0.0857143;3pkt 3fpkt"];
1526--8180[label="0.0857143;3pkt 3fpkt"];
1526--8219[label="0.0857143;3pkt 3fpkt"];
1526--8561[label="0.971429;34pkt 34fpkt"];
1731--4885[label="0.25;1pkt 1fpkt"];
1731--6100[label="0.75;3pkt 3fpkt"];
1731--7946[label="0.75;3pkt 3fpkt"];
1731--8131[label="0.5;2pkt 2fpkt"];
1731--8180[label="0.5;2pkt 2fpkt"];
1731--8219[label="0.5;2pkt 2fpkt"];
1731--8561[label="0.75;3pkt 3fpkt"];
6100--7946[label="1;28pkt 28fpkt"];
6100--8131[label="0.0857143;3pkt 3fpkt"];
6100--8180[label="0.0857143;3pkt 3fpkt"];
6100--8219[label="0.0857143;3pkt 3fpkt"];
6100--8561[label="0.971429;34pkt 34fpkt"];
7946--8131[label="0.107143;3pkt 3fpkt"];
7946--8180[label="0.107143;3pkt 3fpkt"];
7946--8219[label="0.107143;3pkt 3fpkt"];
7946--8561[label="0.964286;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.99" src_ip="174.194.32.28" src_port="80"/>
      <filter dst_ip="202.25.65.241" src_ip="174.194.32.28" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1059[label="133.72.132.136;s;157pkt 157fpkt", shape=diamond, color=yellow];
1100[label="37.231.132.35;d;13pkt 13fpkt", shape=diamond, color=yellow];
3404[label="133.72.145.218;s;98pkt 98fpkt", shape=diamond, color=yellow];
3675[label="195.208.38.17;d;166pkt 166fpkt", shape=diamond, color=yellow];
3938[label="133.72.134.65;s;166pkt 166fpkt", shape=diamond, color=yellow];
5053[label="1.151.10.126;d;28pkt 28fpkt", shape=hexagon, color=black];
5309[label="37.231.132.35;d;10pkt 10fpkt", shape=hexagon, color=black];
5572[label="133.72.132.136;s;128pkt 128fpkt", shape=hexagon, color=black];
6728[label="195.208.38.17;d;38pkt 38fpkt", shape=hexagon, color=black];
6828[label="34.227.54.4;d;50pkt 50fpkt", shape=hexagon, color=black];
7019[label="133.72.134.65;s;165pkt 165fpkt", shape=hexagon, color=black];
7556[label="214.49.190.40;s;54pkt 54fpkt", shape=hexagon, color=black];
10364[label="133.72.145.218;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.134.65:*, 195.208.38.17:*}[28.75%]&lt;BR/&gt;{133.72.132.136:80, *:*}[28.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.6418%)&lt;BR/&gt; 443: (14.6859%)&lt;BR/&gt; 2048: (7.7674%)&lt;BR/&gt; 0: (4.32937%)&lt;BR/&gt; 25: (1.18846%)&gt;];
}
1059--1100[label="0.307692;4pkt 4fpkt"];
1059--2110[label="0.0125;1pkt 1fpkt"];
1059--2168[label="0.047619;1pkt 1fpkt"];
1059--2182[label="0.210191;33pkt 33fpkt"];
1059--2448[label="0.0582524;6pkt 6fpkt"];
1059--3508[label="0.00735294;1pkt 1fpkt"];
1059--3675[label="0.00636943;1pkt 1fpkt"];
1059--3833[label="0.0869565;4pkt 4fpkt"];
1059--5053[label="0.0357143;1pkt 1fpkt"];
1059--5309[label="1;10pkt 10fpkt"];
1059--5572[label="1;128pkt 128fpkt"];
1059--5821[label="0.0582524;6pkt 6fpkt"];
1059--6180[label="0.0140845;1pkt 1fpkt"];
1059--6608[label="0.225;27pkt 27fpkt"];
1059--6728[label="0.0263158;1pkt 1fpkt"];
1059--6900[label="0.0909091;3pkt 3fpkt"];
1059--6975[label="0.00813008;1pkt 1fpkt"];
1059--8131[label="0.127389;20pkt 20fpkt"];
1059--8180[label="0.127389;20pkt 20fpkt"];
1059--8219[label="0.127389;20pkt 20fpkt"];
1100--3176[label="0.153846;2pkt 2fpkt"];
1100--3404[label="0.538462;7pkt 7fpkt"];
1100--5572[label="0.307692;4pkt 4fpkt"];
1100--7522[label="0.538462;7pkt 7fpkt"];
1100--10364[label="0.538462;7pkt 7fpkt"];
3404--3508[label="0.0102041;1pkt 1fpkt"];
3404--5821[label="0.0204082;2pkt 2fpkt"];
3404--6466[label="0.0581395;5pkt 5fpkt"];
3404--6501[label="0.0204082;2pkt 2fpkt"];
3404--6828[label="0.04;2pkt 2fpkt"];
3404--6975[label="0.0102041;1pkt 1fpkt"];
3404--7522[label="1;98pkt 98fpkt"];
3404--7567[label="0.0116279;1pkt 1fpkt"];
3404--8131[label="0.0408163;4pkt 4fpkt"];
3404--8180[label="0.0408163;4pkt 4fpkt"];
3404--8219[label="0.0408163;4pkt 4fpkt"];
3404--10364[label="1;98pkt 98fpkt"];
3675--3938[label="0.96988;161pkt 161fpkt"];
3675--5572[label="0.0078125;1pkt 1fpkt"];
3675--6728[label="1;38pkt 38fpkt"];
3675--7019[label="0.975758;161pkt 161fpkt"];
3938--6728[label="0.868421;33pkt 33fpkt"];
3938--7019[label="1;165pkt 165fpkt"];
5053--5153[label="0.714286;20pkt 20fpkt"];
5053--5572[label="0.0357143;1pkt 1fpkt"];
5053--10155[label="0.375;3pkt 3fpkt"];
5053--11594[label="0.375;3pkt 3fpkt"];
5053--12214[label="0.375;3pkt 3fpkt"];
5309--5572[label="1;10pkt 10fpkt"];
5309--8131[label="0.4;4pkt 4fpkt"];
5309--8180[label="0.4;4pkt 4fpkt"];
5309--8219[label="0.4;4pkt 4fpkt"];
5572--5821[label="0.0194175;2pkt 2fpkt"];
5572--6180[label="0.0140845;1pkt 1fpkt"];
5572--6608[label="0.225;27pkt 27fpkt"];
5572--6728[label="0.0263158;1pkt 1fpkt"];
5572--6900[label="0.0909091;3pkt 3fpkt"];
5572--6975[label="0.00813008;1pkt 1fpkt"];
5572--8131[label="0.15625;20pkt 20fpkt"];
5572--8180[label="0.15625;20pkt 20fpkt"];
5572--8219[label="0.15625;20pkt 20fpkt"];
6728--7019[label="0.868421;33pkt 33fpkt"];
6828--7522[label="0.04;2pkt 2fpkt"];
6828--7556[label="0.06;3pkt 3fpkt"];
6828--7893[label="0.0232558;1pkt 1fpkt"];
6828--8131[label="0.1;5pkt 5fpkt"];
6828--8180[label="0.1;5pkt 5fpkt"];
6828--8219[label="0.1;5pkt 5fpkt"];
6828--9197[label="0.113636;5pkt 5fpkt"];
6828--9378[label="0.25;1pkt 1fpkt"];
6828--9591[label="0.02;1pkt 1fpkt"];
6828--9962[label="0.333333;1pkt 1fpkt"];
6828--10364[label="0.04;2pkt 2fpkt"];
6828--11297[label="0.02;1pkt 1fpkt"];
6828--12093[label="0.02;1pkt 1fpkt"];
7556--8131[label="0.12963;7pkt 7fpkt"];
7556--8180[label="0.12963;7pkt 7fpkt"];
7556--8219[label="0.12963;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="195.208.38.17" src_ip="133.72.134.65"/>
      <filter src_ip="133.72.132.136" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1596[label="174.194.231.10;d;30pkt 30fpkt", shape=diamond, color=yellow];
2076[label="215.9.69.32;s;30pkt 30fpkt", shape=diamond, color=yellow];
5589[label="174.194.231.10;d;9pkt 9fpkt", shape=hexagon, color=black];
7550[label="215.9.69.32;s;30pkt 30fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.69.32:*, 174.194.231.10:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59458: (2.0202%)&lt;BR/&gt; 59390: (2.0202%)&lt;BR/&gt; 59311: (2.0202%)&lt;BR/&gt; 59212: (2.0202%)&gt;];
}
1596--2076[label="1;30pkt 30fpkt"];
1596--5589[label="1;9pkt 9fpkt"];
1596--7550[label="1;30pkt 30fpkt"];
1596--8119[label="0.0666667;2pkt 2fpkt"];
1596--8134[label="0.0666667;2pkt 2fpkt"];
1596--8165[label="0.0333333;1pkt 1fpkt"];
1596--8208[label="0.0333333;1pkt 1fpkt"];
1596--8241[label="0.0333333;1pkt 1fpkt"];
2076--5589[label="1;9pkt 9fpkt"];
2076--7550[label="1;30pkt 30fpkt"];
2076--8119[label="0.0666667;2pkt 2fpkt"];
2076--8134[label="0.0666667;2pkt 2fpkt"];
2076--8165[label="0.0333333;1pkt 1fpkt"];
2076--8208[label="0.0333333;1pkt 1fpkt"];
2076--8241[label="0.0333333;1pkt 1fpkt"];
5589--7550[label="1;9pkt 9fpkt"];
5589--8119[label="0.222222;2pkt 2fpkt"];
5589--8134[label="0.222222;2pkt 2fpkt"];
7550--8119[label="0.0666667;2pkt 2fpkt"];
7550--8134[label="0.0666667;2pkt 2fpkt"];
7550--8165[label="0.0333333;1pkt 1fpkt"];
7550--8208[label="0.0333333;1pkt 1fpkt"];
7550--8241[label="0.0333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.231.10" dst_port="80" src_ip="215.9.69.32"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1177[label="214.50.173.177;d;7pkt 7fpkt", shape=diamond, color=yellow];
5608[label="214.50.173.177;d;7pkt 7fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.163.213:*, 214.50.173.177:80}[71.4286%]&lt;BR/&gt;{133.72.158.179:*, 214.50.173.177:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4917: (7.14286%)&lt;BR/&gt; 4915: (7.14286%)&lt;BR/&gt; 4911: (7.14286%)&lt;BR/&gt; 4909: (7.14286%)&gt;];
}
1177--5608[label="1;7pkt 7fpkt"];
1177--8119[label="0.285714;2pkt 2fpkt"];
5608--8119[label="0.285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.50.173.177" dst_port="80" src_ip="133.72.163.213"/>
      <filter dst_ip="214.50.173.177" dst_port="80" src_ip="133.72.158.179"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1524[label="128.64.215.111;s;43pkt 43fpkt", shape=diamond, color=yellow];
3615[label="218.250.34.181;d;2pkt 2fpkt", shape=diamond, color=yellow];
6705[label="218.250.34.181;d;2pkt 2fpkt", shape=hexagon, color=black];
7168[label="128.64.215.111;s;43pkt 43fpkt", shape=hexagon, color=black];
8074[label="128.64.215.111;s;43pkt 43fpkt", shape=polygon, color=gold];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.215.111:80, *:*}[76.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9774%)&lt;BR/&gt; 53: (6.76692%)&lt;BR/&gt; 123: (2.25564%)&lt;BR/&gt; 3467: (1.8797%)&lt;BR/&gt; 3408: (1.8797%)&gt;];
}
1524--1627[label="0.333333;1pkt 1fpkt"];
1524--1646[label="0.0465116;2pkt 2fpkt"];
1524--2940[label="0.0465116;2pkt 2fpkt"];
1524--3615[label="1;2pkt 2fpkt"];
1524--5616[label="0.0465116;2pkt 2fpkt"];
1524--6705[label="1;2pkt 2fpkt"];
1524--7168[label="1;43pkt 43fpkt"];
1524--8074[label="1;43pkt 43fpkt"];
1524--8119[label="0.0465116;2pkt 2fpkt"];
1524--8131[label="0.0930233;4pkt 4fpkt"];
1524--8180[label="0.0930233;4pkt 4fpkt"];
1524--8219[label="0.0930233;4pkt 4fpkt"];
3615--6705[label="1;2pkt 2fpkt"];
3615--7168[label="1;2pkt 2fpkt"];
3615--8074[label="1;2pkt 2fpkt"];
6705--7168[label="1;2pkt 2fpkt"];
6705--8074[label="1;2pkt 2fpkt"];
7168--8074[label="1;43pkt 43fpkt"];
7168--8119[label="0.0465116;2pkt 2fpkt"];
7168--8131[label="0.0930233;4pkt 4fpkt"];
7168--8180[label="0.0930233;4pkt 4fpkt"];
7168--8219[label="0.0930233;4pkt 4fpkt"];
8074--8119[label="0.0465116;2pkt 2fpkt"];
8074--8131[label="0.0930233;4pkt 4fpkt"];
8074--8180[label="0.0930233;4pkt 4fpkt"];
8074--8219[label="0.0930233;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.215.111" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1197[label="219.10.0.29;d;13pkt 13fpkt", shape=diamond, color=yellow];
5618[label="219.10.0.29;d;13pkt 13fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.135.49:*, 219.10.0.29:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63136: (3.84615%)&lt;BR/&gt; 63132: (3.84615%)&lt;BR/&gt; 63128: (3.84615%)&lt;BR/&gt; 63121: (3.84615%)&gt;];
}
1197--5618[label="1;13pkt 13fpkt"];
1197--8119[label="0.692308;9pkt 9fpkt"];
5618--8119[label="0.692308;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.10.0.29" dst_port="80" src_ip="133.72.135.49"/>
    </slice>
    <from sec="1229058042" usec="0"/>
    <to sec="1229058117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
2036[label="128.81.98.95;s;98pkt 98fpkt", shape=diamond, color=yellow];
2142[label="103.88.73.215;d;30pkt 30fpkt", shape=diamond, color=yellow];
5628[label="103.88.73.215;d;30pkt 30fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.98.95:*, 195.218.37.195:25}[32.6531%]&lt;BR/&gt;{128.81.98.95:*, 103.88.73.215:25}[30.6122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.6203%)&lt;BR/&gt; 53: (5.37975%)&lt;BR/&gt; 1086: (3.16456%)&lt;BR/&gt; 13062: (0.949367%)&lt;BR/&gt; 13024: (0.949367%)&gt;];
}
2036--2142[label="1;30pkt 30fpkt"];
2036--5628[label="1;30pkt 30fpkt"];
2036--8152[label="0.0510204;5pkt 5fpkt"];
2036--8153[label="0.0102041;1pkt 1fpkt"];
2036--8164[label="0.0102041;1pkt 1fpkt"];
2036--8195[label="0.0510204;5pkt 5fpkt"];
2036--8196[label="0.0102041;1pkt 1fpkt"];
2036--8207[label="0.0102041;1pkt 1fpkt"];
2036--8228[label="0.0510204;5pkt 5fpkt"];
2036--8229[label="0.0102041;1pkt 1fpkt"];
2036--8240[label="0.0102041;1pkt 1fpkt"];
2142--5628[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="195.218.37.195" dst_port="25" src_ip="128.81.98.95"/>
      <filter dst_ip="103.88.73.215" dst_port="25" src_ip="128.81.98.95"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
2151[label="214.95.100.41;d;14pkt 14fpkt", shape=diamond, color=yellow];
2152[label="133.72.131.217;s;21pkt 21fpkt", shape=diamond, color=yellow];
5632[label="133.72.131.217;s;21pkt 21fpkt", shape=hexagon, color=black];
5905[label="214.95.100.41;d;14pkt 14fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.131.217:*, 214.95.100.41:443}[52.381%]&lt;BR/&gt;{133.72.131.217:*, 219.10.219.33:443}[23.8095%]&lt;BR/&gt;{133.72.131.217:*, *:80}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (38.5714%)&lt;BR/&gt; 80: (11.4286%)&lt;BR/&gt; 1922: (2.85714%)&lt;BR/&gt; 1916: (2.85714%)&lt;BR/&gt; 1914: (2.85714%)&gt;];
}
2151--2152[label="1;14pkt 14fpkt"];
2151--5632[label="1;14pkt 14fpkt"];
2151--5905[label="1;14pkt 14fpkt"];
2152--5632[label="1;21pkt 21fpkt"];
2152--5905[label="1;14pkt 14fpkt"];
5632--5905[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.131.217"/>
      <filter dst_ip="214.95.100.41" dst_port="443" src_ip="133.72.131.217"/>
      <filter dst_ip="219.10.219.33" dst_port="443" src_ip="133.72.131.217"/>
    </slice>
    <from sec="1229058085" usec="0"/>
    <to sec="1229058254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1694[label="34.56.7.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
5635[label="34.56.7.8;d;1pkt 1fpkt", shape=hexagon, color=black];
7838[label="34.56.7.8;d;1pkt 1fpkt", shape=polygon, color=gold];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:1408, 34.56.7.8:20438}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20438: (50%)&lt;BR/&gt; 1408: (50%)&gt;];
}
1694--5128[label="1;1pkt 1fpkt"];
1694--5635[label="1;1pkt 1fpkt"];
1694--7838[label="1;1pkt 1fpkt"];
5635--7838[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.56.7.8" dst_port="20438" src_ip="133.72.2.38" src_port="1408"/>
    </slice>
    <from sec="1229058088" usec="0"/>
    <to sec="1229058527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1698[label="6.2.36.1;s;2pkt 2fpkt", shape=diamond, color=yellow];
5639[label="6.2.36.1;s;2pkt 2fpkt", shape=hexagon, color=black];
8254[label="6.2.36.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.2.36.1:58167, 215.40.224.9:8080}[50%]&lt;BR/&gt;{6.2.36.1:59459, 215.40.224.9:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 59459: (25%)&lt;BR/&gt; 58167: (25%)&gt;];
}
1698--4833[label="1;2pkt 2fpkt"];
1698--5639[label="1;2pkt 2fpkt"];
1698--8254[label="1;2pkt 2fpkt"];
5639--8254[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.9" dst_port="8080" src_ip="6.2.36.1" src_port="59459"/>
      <filter dst_ip="215.40.224.9" dst_port="8080" src_ip="6.2.36.1" src_port="58167"/>
    </slice>
    <from sec="1229058094" usec="0"/>
    <to sec="1229058120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
2157[label="37.141.64.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
5640[label="37.141.64.241;d;1pkt 1fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.206.11:3148, 37.141.64.241:51076}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51076: (50%)&lt;BR/&gt; 3148: (50%)&gt;];
}
2157--5640[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.141.64.241" dst_port="51076" src_ip="133.72.206.11" src_port="3148"/>
    </slice>
    <from sec="1229058095" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1754[label="32.59.245.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
5657[label="32.59.245.96;d;1pkt 1fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.152:54773, 32.59.245.96:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54773: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1754--5657[label="1;1pkt 1fpkt"];
1754--8134[label="1;1pkt 1fpkt"];
5657--8134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.59.245.96" dst_port="80" src_ip="174.194.172.152" src_port="54773"/>
    </slice>
    <from sec="1229058133" usec="0"/>
    <to sec="1229058145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1773[label="101.85.101.233;d;167pkt 167fpkt", shape=diamond, color=yellow];
5665[label="101.85.101.233;d;167pkt 167fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.105.6:*, 101.85.101.233:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3710: (0.299401%)&lt;BR/&gt; 3709: (0.299401%)&lt;BR/&gt; 3707: (0.299401%)&lt;BR/&gt; 3706: (0.299401%)&gt;];
}
1773--2719[label="1;167pkt 167fpkt"];
1773--5665[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_ip="101.85.101.233" dst_port="80" src_ip="174.194.105.6"/>
    </slice>
    <from sec="1229058635" usec="0"/>
    <to sec="1229058672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1784[label="42.57.196.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
5668[label="42.57.196.161;d;1pkt 1fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.245.148:4807, 42.57.196.161:64504}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64504: (50%)&lt;BR/&gt; 4807: (50%)&gt;];
}
1784--5668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.57.196.161" dst_port="64504" src_ip="128.64.245.148" src_port="4807"/>
    </slice>
    <from sec="1229058159" usec="0"/>
    <to sec="1229058215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1426[label="128.64.245.148;s;99pkt 99fpkt", shape=diamond, color=yellow];
2205[label="204.25.65.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
5671[label="204.25.65.175;d;1pkt 1fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.245.148:13145, *:*}[40.404%]&lt;BR/&gt;{128.64.245.148:*, 42.133.151.60:80}[25.2525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13145: (19.802%)&lt;BR/&gt; 80: (14.8515%)&lt;BR/&gt; 29919: (7.92079%)&lt;BR/&gt; 8000: (5.44554%)&lt;BR/&gt; 4807: (4.45545%)&gt;];
}
1426--1784[label="1;1pkt 1fpkt"];
1426--2205[label="1;1pkt 1fpkt"];
1426--5668[label="1;1pkt 1fpkt"];
1426--5671[label="1;1pkt 1fpkt"];
1426--8119[label="0.040404;4pkt 4fpkt"];
1426--8134[label="0.010101;1pkt 1fpkt"];
2205--5671[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.245.148" src_port="13145"/>
      <filter dst_ip="42.133.151.60" dst_port="80" src_ip="128.64.245.148"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2270[label="102.81.6.226;d;3pkt 3fpkt", shape=diamond, color=yellow];
5688[label="102.81.6.226;d;2pkt 2fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.90:1140, 102.81.6.226:80}[33.3333%]&lt;BR/&gt;{133.72.158.90:1144, 102.81.6.226:80}[33.3333%]&lt;BR/&gt;{133.72.158.90:1226, 102.81.6.226:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1144: (20%)&lt;BR/&gt; 1140: (20%)&lt;BR/&gt; 1226: (10%)&gt;];
}
2270--5458[label="1;3pkt 3fpkt"];
2270--5688[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="102.81.6.226" dst_port="80" src_ip="133.72.158.90" src_port="1226"/>
      <filter dst_ip="102.81.6.226" dst_port="80" src_ip="133.72.158.90" src_port="1144"/>
      <filter dst_ip="102.81.6.226" dst_port="80" src_ip="133.72.158.90" src_port="1140"/>
    </slice>
    <from sec="1229058217" usec="0"/>
    <to sec="1229058517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
2281[label="96.2.16.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
5690[label="96.2.16.187;d;1pkt 1fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:1122, 96.2.16.187:1717}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1717: (50%)&lt;BR/&gt; 1122: (50%)&gt;];
}
2281--5690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.2.16.187" dst_port="1717" src_ip="133.72.2.38" src_port="1122"/>
    </slice>
    <from sec="1229058221" usec="0"/>
    <to sec="1229058253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
2299[label="174.194.19.9;d;7pkt 7fpkt", shape=diamond, color=yellow];
2359[label="42.236.32.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
5693[label="174.194.19.9;d;7pkt 7fpkt", shape=hexagon, color=black];
5711[label="42.236.32.44;s;1pkt 1fpkt", shape=hexagon, color=black];
8746[label="42.236.32.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.236.246.133:80, 174.194.19.9:*}[42.8571%]&lt;BR/&gt;{192.22.41.32:80, 174.194.19.9:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 1153: (14.7059%)&lt;BR/&gt; 58736: (5.88235%)&lt;BR/&gt; 11113: (5.88235%)&lt;BR/&gt; 1154: (5.88235%)&gt;];
}
2299--2359[label="1;1pkt 1fpkt"];
2299--5693[label="1;7pkt 7fpkt"];
2299--5711[label="1;1pkt 1fpkt"];
2299--5795[label="0.428571;3pkt 3fpkt"];
2299--7426[label="0.285714;2pkt 2fpkt"];
2299--8746[label="1;1pkt 1fpkt"];
2359--5693[label="1;1pkt 1fpkt"];
2359--5711[label="1;1pkt 1fpkt"];
2359--8746[label="1;1pkt 1fpkt"];
5693--5711[label="1;1pkt 1fpkt"];
5693--5795[label="0.428571;3pkt 3fpkt"];
5693--7426[label="0.285714;2pkt 2fpkt"];
5693--8746[label="1;1pkt 1fpkt"];
5711--8746[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.9" src_ip="193.236.246.133" src_port="80"/>
      <filter dst_ip="174.194.19.9" src_ip="192.22.41.32" src_port="80"/>
    </slice>
    <from sec="1229058229" usec="0"/>
    <to sec="1229058360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
2304[label="6.0.68.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
5696[label="6.0.68.76;d;1pkt 1fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.152:8080, 6.0.68.76:52909}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52909: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
2304--5696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.0.68.76" dst_port="52909" src_ip="174.194.172.152" src_port="8080"/>
    </slice>
    <from sec="1229058232" usec="0"/>
    <to sec="1229058239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
2318[label="45.142.236.210;s;5pkt 5fpkt", shape=diamond, color=yellow];
2326[label="133.72.177.104;d;17pkt 17fpkt", shape=diamond, color=yellow];
5698[label="45.142.236.210;s;2pkt 2fpkt", shape=hexagon, color=black];
5702[label="133.72.177.104;d;17pkt 17fpkt", shape=hexagon, color=black];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.177.104:*}[80.9524%]&lt;BR/&gt;{45.142.236.210:80, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4364: (4.87805%)&lt;BR/&gt; 4813: (2.43902%)&lt;BR/&gt; 4785: (2.43902%)&lt;BR/&gt; 4781: (2.43902%)&gt;];
}
2318--2326[label="0.2;1pkt 1fpkt"];
2318--5698[label="1;2pkt 2fpkt"];
2318--5702[label="0.2;1pkt 1fpkt"];
2326--4326[label="0.5;3pkt 3fpkt"];
2326--5698[label="0.5;1pkt 1fpkt"];
2326--5702[label="1;17pkt 17fpkt"];
2326--8864[label="0.0588235;1pkt 1fpkt"];
2326--10958[label="0.0588235;1pkt 1fpkt"];
5698--5702[label="0.5;1pkt 1fpkt"];
5702--8864[label="0.0588235;1pkt 1fpkt"];
5702--10958[label="0.0588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="45.142.236.210" src_port="80"/>
      <filter dst_ip="133.72.177.104" src_port="80"/>
    </slice>
    <from sec="1229058240" usec="0"/>
    <to sec="1229058795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
2350[label="101.84.16.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
5710[label="101.84.16.220;s;1pkt 1fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.84.16.220:80, 214.49.185.51:62522}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62522: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2350--5710[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.51" dst_port="62522" src_ip="101.84.16.220" src_port="80"/>
    </slice>
    <from sec="1229058270" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
373[label="193.238.191.210;s;1747pkt 1747fpkt", shape=diamond, color=yellow];
2013[label="169.18.144.16;d;165pkt 165fpkt", shape=diamond, color=yellow];
2065[label="169.18.185.43;d;362pkt 362fpkt", shape=diamond, color=yellow];
3698[label="169.18.199.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
4506[label="169.18.146.224;d;169pkt 169fpkt", shape=diamond, color=yellow];
5567[label="169.18.144.16;d;117pkt 117fpkt", shape=hexagon, color=black];
5725[label="193.238.191.210;s;1592pkt 1592fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.238.191.210:80, *:*}[91.8389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9653%)&lt;BR/&gt; 6667: (1.68553%)&lt;BR/&gt; 0: (0.313027%)&lt;BR/&gt; 4920: (0.120395%)&lt;BR/&gt; 8080: (0.0963159%)&gt;];
}
373--2013[label="1;165pkt 165fpkt"];
373--2065[label="1;362pkt 362fpkt"];
373--2595[label="1;188pkt 188fpkt"];
373--2927[label="0.00955414;3pkt 3fpkt"];
373--3698[label="1;1pkt 1fpkt"];
373--4506[label="0.171598;29pkt 29fpkt"];
373--5567[label="1;117pkt 117fpkt"];
373--5725[label="1;1592pkt 1592fpkt"];
373--6452[label="0.0124481;3pkt 3fpkt"];
373--8131[label="0.102461;179pkt 179fpkt"];
373--8180[label="0.102461;179pkt 179fpkt"];
373--8219[label="0.102461;179pkt 179fpkt"];
2013--5567[label="1;117pkt 117fpkt"];
2013--5725[label="1;165pkt 165fpkt"];
2013--8131[label="0.224242;37pkt 37fpkt"];
2013--8180[label="0.224242;37pkt 37fpkt"];
2013--8219[label="0.224242;37pkt 37fpkt"];
2065--5725[label="0.892265;323pkt 323fpkt"];
2065--8131[label="0.0662983;24pkt 24fpkt"];
2065--8180[label="0.0662983;24pkt 24fpkt"];
2065--8219[label="0.0662983;24pkt 24fpkt"];
3698--5725[label="1;1pkt 1fpkt"];
4506--5725[label="0.153846;26pkt 26fpkt"];
4506--7440[label="0.828402;140pkt 140fpkt"];
4506--8131[label="0.0118343;2pkt 2fpkt"];
4506--8180[label="0.0118343;2pkt 2fpkt"];
4506--8219[label="0.0118343;2pkt 2fpkt"];
5567--5725[label="1;117pkt 117fpkt"];
5567--8131[label="0.316239;37pkt 37fpkt"];
5567--8180[label="0.316239;37pkt 37fpkt"];
5567--8219[label="0.316239;37pkt 37fpkt"];
5725--6452[label="0.0124481;3pkt 3fpkt"];
5725--8131[label="0.112437;179pkt 179fpkt"];
5725--8180[label="0.112437;179pkt 179fpkt"];
5725--8219[label="0.112437;179pkt 179fpkt"];
</description>
    <slice>
      <filter src_ip="193.238.191.210" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,053,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
473[label="44.215.39.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
475[label="133.72.165.92;s;763pkt 763fpkt", shape=diamond, color=yellow];
577[label="196.163.55.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
692[label="20.90.155.156;d;6pkt 6fpkt", shape=diamond, color=yellow];
706[label="46.196.72.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
1363[label="21.5.179.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="41.200.79.223;d;2pkt 2fpkt", shape=diamond, color=yellow];
1407[label="204.10.51.21;d;2pkt 2fpkt", shape=diamond, color=yellow];
1412[label="215.181.67.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
1889[label="40.240.30.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
2399[label="200.167.34.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2619[label="37.220.26.22;d;4pkt 4fpkt", shape=diamond, color=yellow];
5173[label="133.72.165.92;s;289pkt 289fpkt", shape=hexagon, color=black];
5203[label="21.5.179.154;d;1pkt 1fpkt", shape=hexagon, color=black];
5448[label="196.163.55.24;d;2pkt 2fpkt", shape=hexagon, color=black];
5468[label="20.90.155.156;d;6pkt 6fpkt", shape=hexagon, color=black];
5472[label="46.196.72.31;d;1pkt 1fpkt", shape=hexagon, color=black];
5485[label="41.200.79.223;d;1pkt 1fpkt", shape=hexagon, color=black];
5500[label="215.181.67.229;d;1pkt 1fpkt", shape=hexagon, color=black];
5735[label="44.215.39.233;d;1pkt 1fpkt", shape=hexagon, color=black];
5798[label="40.240.30.208;d;1pkt 1fpkt", shape=hexagon, color=black];
6030[label="200.167.34.255;d;1pkt 1fpkt", shape=hexagon, color=black];
6782[label="204.10.51.21;d;2pkt 2fpkt", shape=hexagon, color=black];
7855[label="215.181.67.229;d;1pkt 1fpkt", shape=polygon, color=gold];
9263[label="133.72.165.92;818pkt 818fpkt", shape=pentagon, color=darkviolet];
11147[label="133.72.165.92;818pkt 818fpkt", shape=invtriangle, color=brown];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.165.92:*, *:80}[27.9951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.9872%)&lt;BR/&gt; 28805: (7.91499%)&lt;BR/&gt; 0: (4.94687%)&lt;BR/&gt; 44305: (1.02602%)&lt;BR/&gt; 64925: (0.659582%)&gt;];
}
473--475[label="1;1pkt 1fpkt"];
473--5173[label="1;1pkt 1fpkt"];
473--5735[label="1;1pkt 1fpkt"];
473--9263[label="1;1pkt 1fpkt"];
473--11147[label="1;1pkt 1fpkt"];
475--577[label="0.5;1pkt 1fpkt"];
475--692[label="1;6pkt 6fpkt"];
475--706[label="0.5;1pkt 1fpkt"];
475--1363[label="1;1pkt 1fpkt"];
475--1388[label="0.5;1pkt 1fpkt"];
475--1407[label="0.5;1pkt 1fpkt"];
475--1412[label="1;1pkt 1fpkt"];
475--1889[label="1;1pkt 1fpkt"];
475--2399[label="1;1pkt 1fpkt"];
475--2619[label="1;4pkt 4fpkt"];
475--5173[label="1;289pkt 289fpkt"];
475--5203[label="1;1pkt 1fpkt"];
475--5448[label="0.5;1pkt 1fpkt"];
475--5468[label="1;6pkt 6fpkt"];
475--5472[label="1;1pkt 1fpkt"];
475--5485[label="1;1pkt 1fpkt"];
475--5500[label="1;1pkt 1fpkt"];
475--5735[label="1;1pkt 1fpkt"];
475--5798[label="1;1pkt 1fpkt"];
475--6030[label="1;1pkt 1fpkt"];
475--6782[label="0.5;1pkt 1fpkt"];
475--7855[label="1;1pkt 1fpkt"];
475--8119[label="0.061599;47pkt 47fpkt"];
475--8134[label="0.0144168;11pkt 11fpkt"];
475--9263[label="1;763pkt 763fpkt"];
475--11147[label="1;763pkt 763fpkt"];
577--5173[label="0.5;1pkt 1fpkt"];
577--5448[label="1;2pkt 2fpkt"];
577--9263[label="1;2pkt 2fpkt"];
577--11147[label="1;2pkt 2fpkt"];
692--5173[label="0.166667;1pkt 1fpkt"];
692--5468[label="1;6pkt 6fpkt"];
692--9263[label="1;6pkt 6fpkt"];
692--11147[label="1;6pkt 6fpkt"];
706--5173[label="0.5;1pkt 1fpkt"];
706--5472[label="1;1pkt 1fpkt"];
706--9263[label="1;2pkt 2fpkt"];
706--11147[label="1;2pkt 2fpkt"];
1363--5173[label="1;1pkt 1fpkt"];
1363--5203[label="1;1pkt 1fpkt"];
1363--9263[label="1;1pkt 1fpkt"];
1363--11147[label="1;1pkt 1fpkt"];
1388--5173[label="0.5;1pkt 1fpkt"];
1388--5485[label="1;1pkt 1fpkt"];
1388--9263[label="1;2pkt 2fpkt"];
1388--11147[label="1;2pkt 2fpkt"];
1407--5173[label="0.5;1pkt 1fpkt"];
1407--6782[label="1;2pkt 2fpkt"];
1407--9263[label="1;2pkt 2fpkt"];
1407--11147[label="1;2pkt 2fpkt"];
1412--5173[label="1;1pkt 1fpkt"];
1412--5500[label="1;1pkt 1fpkt"];
1412--7855[label="1;1pkt 1fpkt"];
1412--9263[label="1;1pkt 1fpkt"];
1412--11147[label="1;1pkt 1fpkt"];
1889--5173[label="1;1pkt 1fpkt"];
1889--5798[label="1;1pkt 1fpkt"];
1889--9263[label="1;1pkt 1fpkt"];
1889--11147[label="1;1pkt 1fpkt"];
2399--5173[label="1;1pkt 1fpkt"];
2399--6030[label="1;1pkt 1fpkt"];
2399--9263[label="1;1pkt 1fpkt"];
2399--11147[label="1;1pkt 1fpkt"];
2619--5173[label="1;4pkt 4fpkt"];
2619--9263[label="1;4pkt 4fpkt"];
2619--11147[label="1;4pkt 4fpkt"];
5173--5203[label="1;1pkt 1fpkt"];
5173--5448[label="0.5;1pkt 1fpkt"];
5173--5468[label="0.166667;1pkt 1fpkt"];
5173--5472[label="1;1pkt 1fpkt"];
5173--5485[label="1;1pkt 1fpkt"];
5173--5500[label="1;1pkt 1fpkt"];
5173--5735[label="1;1pkt 1fpkt"];
5173--5798[label="1;1pkt 1fpkt"];
5173--6030[label="1;1pkt 1fpkt"];
5173--6782[label="0.5;1pkt 1fpkt"];
5173--7855[label="1;1pkt 1fpkt"];
5173--8119[label="0.16263;47pkt 47fpkt"];
5173--8134[label="0.0380623;11pkt 11fpkt"];
5173--9263[label="1;289pkt 289fpkt"];
5173--11147[label="1;289pkt 289fpkt"];
5203--9263[label="1;1pkt 1fpkt"];
5203--11147[label="1;1pkt 1fpkt"];
5448--9263[label="1;2pkt 2fpkt"];
5448--11147[label="1;2pkt 2fpkt"];
5468--9263[label="1;6pkt 6fpkt"];
5468--11147[label="1;6pkt 6fpkt"];
5472--9263[label="1;1pkt 1fpkt"];
5472--11147[label="1;1pkt 1fpkt"];
5485--9263[label="1;1pkt 1fpkt"];
5485--11147[label="1;1pkt 1fpkt"];
5500--7855[label="1;1pkt 1fpkt"];
5500--9263[label="1;1pkt 1fpkt"];
5500--11147[label="1;1pkt 1fpkt"];
5735--9263[label="1;1pkt 1fpkt"];
5735--11147[label="1;1pkt 1fpkt"];
5798--9263[label="1;1pkt 1fpkt"];
5798--11147[label="1;1pkt 1fpkt"];
6030--9263[label="1;1pkt 1fpkt"];
6030--11147[label="1;1pkt 1fpkt"];
6782--9263[label="1;2pkt 2fpkt"];
6782--11147[label="1;2pkt 2fpkt"];
7855--9263[label="1;1pkt 1fpkt"];
7855--11147[label="1;1pkt 1fpkt"];
9263--11147[label="1;818pkt 818fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.165.92"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
136[label="133.73.68.115s;1pkt 1fpkt", shape=rectangle, color=red];
503[label="193.219.82.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
504[label="128.64.132.121;s;3pkt 3fpkt", shape=diamond, color=yellow];
5736[label="193.219.82.134;d;1pkt 1fpkt", shape=hexagon, color=black];
6757[label="128.64.132.121;s;3pkt 3fpkt", shape=hexagon, color=black];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.132.121:1983, 193.219.74.128:80}[33.3333%]&lt;BR/&gt;{128.64.132.121:1971, 193.219.82.134:554}[33.3333%]&lt;BR/&gt;{128.64.132.121:1977, 103.66.212.168:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1971: (27.7778%)&lt;BR/&gt; 554: (27.7778%)&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 1983: (11.1111%)&lt;BR/&gt; 1977: (11.1111%)&gt;];
}
136--503[label="1;1pkt 1fpkt"];
136--504[label="1;1pkt 1fpkt"];
136--5736[label="1;1pkt 1fpkt"];
136--6757[label="1;1pkt 1fpkt"];
503--504[label="1;1pkt 1fpkt"];
503--5736[label="1;1pkt 1fpkt"];
503--6757[label="1;1pkt 1fpkt"];
504--4193[label="0.333333;1pkt 1fpkt"];
504--5736[label="1;1pkt 1fpkt"];
504--6757[label="1;3pkt 3fpkt"];
504--7533[label="0.333333;1pkt 1fpkt"];
504--8119[label="0.333333;1pkt 1fpkt"];
5736--6757[label="1;1pkt 1fpkt"];
6757--7533[label="0.333333;1pkt 1fpkt"];
6757--8119[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="103.66.212.168" dst_port="80" src_ip="128.64.132.121" src_port="1977"/>
      <filter dst_ip="193.219.82.134" dst_port="554" src_ip="128.64.132.121" src_port="1971"/>
      <filter dst_ip="193.219.74.128" dst_port="80" src_ip="128.64.132.121" src_port="1983"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
802[label="133.72.168.132;s;261pkt 261fpkt", shape=diamond, color=yellow];
1757[label="69.152.174.95;d;22pkt 22fpkt", shape=diamond, color=yellow];
2218[label="6.27.16.104;d;6pkt 6fpkt", shape=diamond, color=yellow];
2739[label="38.176.12.2;d;6pkt 6fpkt", shape=diamond, color=yellow];
2776[label="56.242.108.208;d;8pkt 8fpkt", shape=diamond, color=yellow];
3107[label="213.202.168.119;d;6pkt 6fpkt", shape=diamond, color=yellow];
3168[label="7.3.182.137;d;4pkt 4fpkt", shape=diamond, color=yellow];
4341[label="212.105.53.156;d;6pkt 6fpkt", shape=diamond, color=yellow];
4346[label="213.218.4.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
4378[label="37.227.6.146;d;6pkt 6fpkt", shape=diamond, color=yellow];
4708[label="212.65.169.10;d;10pkt 10fpkt", shape=diamond, color=yellow];
4746[label="183.117.173.108;d;4pkt 4fpkt", shape=diamond, color=yellow];
4762[label="21.12.132.252;d;15pkt 15fpkt", shape=diamond, color=yellow];
5366[label="69.152.174.95;d;22pkt 22fpkt", shape=hexagon, color=black];
5785[label="133.72.168.132;s;193pkt 193fpkt", shape=hexagon, color=black];
6666[label="7.3.182.137;d;4pkt 4fpkt", shape=hexagon, color=black];
7686[label="212.105.53.156;d;6pkt 6fpkt", shape=hexagon, color=black];
7734[label="212.65.169.10;d;10pkt 10fpkt", shape=hexagon, color=black];
9624[label="133.72.168.132;406pkt 406fpkt", shape=pentagon, color=darkviolet];
11315[label="133.72.168.132;406pkt 406fpkt", shape=invtriangle, color=brown];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.168.132:80, *:*}[99.7537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 0: (0.285103%)&lt;BR/&gt; 53837: (0.249465%)&lt;BR/&gt; 23953: (0.213828%)&lt;BR/&gt; 23944: (0.213828%)&gt;];
}
802--1476[label="0.0588235;3pkt 3fpkt"];
802--1757[label="1;22pkt 22fpkt"];
802--2182[label="0.0052356;1pkt 1fpkt"];
802--2218[label="1;6pkt 6fpkt"];
802--2739[label="1;6pkt 6fpkt"];
802--2776[label="1;8pkt 8fpkt"];
802--2941[label="0.08;2pkt 2fpkt"];
802--2958[label="0.0163934;1pkt 1fpkt"];
802--3048[label="0.0434783;2pkt 2fpkt"];
802--3052[label="0.121212;4pkt 4fpkt"];
802--3107[label="1;6pkt 6fpkt"];
802--3134[label="0.75;3pkt 3fpkt"];
802--3168[label="1;4pkt 4fpkt"];
802--3508[label="0.00735294;1pkt 1fpkt"];
802--3802[label="0.05;1pkt 1fpkt"];
802--4626[label="0.0454545;2pkt 2fpkt"];
802--5366[label="1;22pkt 22fpkt"];
802--5785[label="1;193pkt 193fpkt"];
802--6185[label="0.0645161;2pkt 2fpkt"];
802--6482[label="0.0163934;1pkt 1fpkt"];
802--6608[label="0.00833333;1pkt 1fpkt"];
802--6666[label="1;4pkt 4fpkt"];
802--6877[label="0.0714286;1pkt 1fpkt"];
802--6975[label="0.00813008;1pkt 1fpkt"];
802--7642[label="0.0454545;2pkt 2fpkt"];
802--7903[label="0.0689655;2pkt 2fpkt"];
802--8131[label="0.206897;54pkt 54fpkt"];
802--8180[label="0.206897;54pkt 54fpkt"];
802--8219[label="0.206897;54pkt 54fpkt"];
802--9624[label="1;261pkt 261fpkt"];
802--11315[label="1;261pkt 261fpkt"];
1757--5366[label="1;22pkt 22fpkt"];
1757--5785[label="1;22pkt 22fpkt"];
1757--8131[label="1;22pkt 22fpkt"];
1757--8180[label="1;22pkt 22fpkt"];
1757--8219[label="1;22pkt 22fpkt"];
1757--9624[label="1;22pkt 22fpkt"];
1757--11315[label="1;22pkt 22fpkt"];
2218--5785[label="1;6pkt 6fpkt"];
2218--9624[label="1;6pkt 6fpkt"];
2218--11315[label="1;6pkt 6fpkt"];
2739--5785[label="1;6pkt 6fpkt"];
2739--9624[label="1;6pkt 6fpkt"];
2739--11315[label="1;6pkt 6fpkt"];
2776--5785[label="1;8pkt 8fpkt"];
2776--9624[label="1;8pkt 8fpkt"];
2776--11315[label="1;8pkt 8fpkt"];
3107--5785[label="1;6pkt 6fpkt"];
3107--9624[label="1;6pkt 6fpkt"];
3107--11315[label="1;6pkt 6fpkt"];
3168--5785[label="0.5;2pkt 2fpkt"];
3168--6666[label="1;4pkt 4fpkt"];
3168--9624[label="1;4pkt 4fpkt"];
3168--11315[label="1;4pkt 4fpkt"];
4341--7686[label="1;6pkt 6fpkt"];
4341--9624[label="1;6pkt 6fpkt"];
4341--11315[label="1;6pkt 6fpkt"];
4346--9624[label="1;2pkt 2fpkt"];
4346--11315[label="1;2pkt 2fpkt"];
4378--9624[label="1;6pkt 6fpkt"];
4378--11315[label="1;6pkt 6fpkt"];
4708--7734[label="1;10pkt 10fpkt"];
4708--9624[label="1;10pkt 10fpkt"];
4708--11315[label="1;10pkt 10fpkt"];
4746--9624[label="1;4pkt 4fpkt"];
4746--11315[label="1;4pkt 4fpkt"];
4762--9624[label="1;15pkt 15fpkt"];
4762--11315[label="1;15pkt 15fpkt"];
5366--5785[label="1;22pkt 22fpkt"];
5366--8131[label="1;22pkt 22fpkt"];
5366--8180[label="1;22pkt 22fpkt"];
5366--8219[label="1;22pkt 22fpkt"];
5366--9624[label="1;22pkt 22fpkt"];
5366--11315[label="1;22pkt 22fpkt"];
5785--6185[label="0.0645161;2pkt 2fpkt"];
5785--6666[label="0.5;2pkt 2fpkt"];
5785--7903[label="0.0689655;2pkt 2fpkt"];
5785--8131[label="0.279793;54pkt 54fpkt"];
5785--8180[label="0.279793;54pkt 54fpkt"];
5785--8219[label="0.279793;54pkt 54fpkt"];
5785--9624[label="1;193pkt 193fpkt"];
5785--11315[label="1;193pkt 193fpkt"];
6666--9624[label="1;4pkt 4fpkt"];
6666--11315[label="1;4pkt 4fpkt"];
7686--9624[label="1;6pkt 6fpkt"];
7686--11315[label="1;6pkt 6fpkt"];
7734--9624[label="1;10pkt 10fpkt"];
7734--11315[label="1;10pkt 10fpkt"];
9624--11315[label="1;406pkt 406fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.168.132" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1930[label="91.3.167.174;d;2pkt 2fpkt", shape=diamond, color=yellow];
1931[label="128.208.196.7;s;9pkt 9fpkt", shape=diamond, color=yellow];
5812[label="91.3.167.174;d;2pkt 2fpkt", shape=hexagon, color=black];
5813[label="128.208.196.7;s;9pkt 9fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.196.7:443, 52.208.14.237:*}[77.7778%]&lt;BR/&gt;{128.208.196.7:*, 91.3.167.174:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.8182%)&lt;BR/&gt; 42380: (18.1818%)&lt;BR/&gt; 500: (18.1818%)&lt;BR/&gt; 60209: (4.54545%)&lt;BR/&gt; 60208: (4.54545%)&gt;];
}
1930--1931[label="1;2pkt 2fpkt"];
1930--5812[label="1;2pkt 2fpkt"];
1930--5813[label="1;2pkt 2fpkt"];
1931--5812[label="1;2pkt 2fpkt"];
1931--5813[label="1;9pkt 9fpkt"];
5812--5813[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.3.167.174" src_ip="128.208.196.7"/>
      <filter dst_ip="52.208.14.237" src_ip="128.208.196.7" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1633[label="172.45.95.10;d;9pkt 9fpkt", shape=diamond, color=yellow];
1782[label="215.173.16.188;s;6pkt 6fpkt", shape=diamond, color=yellow];
5378[label="215.173.16.188;s;6pkt 6fpkt", shape=hexagon, color=black];
10122[label="215.173.16.188;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11575[label="215.173.16.188;6pkt 6fpkt", shape=invtriangle, color=brown];
12208[label="215.173.16.188;6pkt 6fpkt", shape=invhouse, color=bisque];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.173.16.188:443, 172.45.95.10:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.4359%)&lt;BR/&gt; 1072: (7.69231%)&lt;BR/&gt; 1071: (7.69231%)&lt;BR/&gt; 1070: (7.69231%)&lt;BR/&gt; 1069: (7.69231%)&gt;];
}
1633--1782[label="1;6pkt 6fpkt"];
1633--1949[label="0.111111;1pkt 1fpkt"];
1633--5378[label="1;6pkt 6fpkt"];
1633--5820[label="0.111111;1pkt 1fpkt"];
1633--8124[label="0.111111;1pkt 1fpkt"];
1633--8131[label="0.111111;1pkt 1fpkt"];
1633--8180[label="0.111111;1pkt 1fpkt"];
1633--8219[label="0.111111;1pkt 1fpkt"];
1633--10122[label="1;6pkt 6fpkt"];
1633--11575[label="1;6pkt 6fpkt"];
1633--12208[label="1;6pkt 6fpkt"];
1782--5378[label="1;6pkt 6fpkt"];
1782--10122[label="1;6pkt 6fpkt"];
1782--11575[label="1;6pkt 6fpkt"];
1782--12208[label="1;6pkt 6fpkt"];
5378--10122[label="1;6pkt 6fpkt"];
5378--11575[label="1;6pkt 6fpkt"];
5378--12208[label="1;6pkt 6fpkt"];
10122--11575[label="1;6pkt 6fpkt"];
10122--12208[label="1;6pkt 6fpkt"];
11575--12208[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.95.10" src_ip="215.173.16.188" src_port="443"/>
    </slice>
    <from sec="1229058024" usec="0"/>
    <to sec="1229058198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
32[label="5.1.67.54s;2pkt 2fpkt", shape=rectangle, color=red];
956[label="172.45.41.26;d;24pkt 24fpkt", shape=diamond, color=yellow];
3596[label="5.1.67.84;s;10pkt 10fpkt", shape=diamond, color=yellow];
5140[label="5.1.67.54;s;8pkt 8fpkt", shape=hexagon, color=black];
7286[label="5.1.67.84;s;10pkt 10fpkt", shape=hexagon, color=black];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.1.67.84:80, 172.45.41.26:*}[37.037%]&lt;BR/&gt;{5.1.67.54:80, *:*}[29.6296%]&lt;BR/&gt;{5.1.67.69:80, 172.45.41.26:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1247: (2.77778%)&lt;BR/&gt; 1246: (2.77778%)&lt;BR/&gt; 1245: (2.77778%)&lt;BR/&gt; 1244: (2.77778%)&gt;];
}
32--311[label="1;2pkt 2fpkt"];
32--956[label="1;2pkt 2fpkt"];
32--5140[label="1;2pkt 2fpkt"];
32--5824[label="1;2pkt 2fpkt"];
32--8131[label="0.5;1pkt 1fpkt"];
32--8180[label="0.5;1pkt 1fpkt"];
32--8219[label="0.5;1pkt 1fpkt"];
956--2171[label="0.875;7pkt 7fpkt"];
956--3596[label="1;10pkt 10fpkt"];
956--5140[label="0.625;5pkt 5fpkt"];
956--5654[label="0.875;7pkt 7fpkt"];
956--5824[label="1;24pkt 24fpkt"];
956--7286[label="1;10pkt 10fpkt"];
956--7967[label="0.875;7pkt 7fpkt"];
956--8131[label="0.166667;4pkt 4fpkt"];
956--8180[label="0.166667;4pkt 4fpkt"];
956--8219[label="0.166667;4pkt 4fpkt"];
956--8994[label="0.875;7pkt 7fpkt"];
3596--5824[label="1;10pkt 10fpkt"];
3596--7286[label="1;10pkt 10fpkt"];
5140--5824[label="0.625;5pkt 5fpkt"];
5140--8131[label="0.375;3pkt 3fpkt"];
5140--8180[label="0.375;3pkt 3fpkt"];
5140--8219[label="0.375;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="5.1.67.54" src_port="80"/>
      <filter dst_ip="172.45.41.26" src_ip="5.1.67.84" src_port="80"/>
      <filter dst_ip="172.45.41.26" src_ip="5.1.67.69" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
2451[label="176.36.2.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
5825[label="176.36.2.138;s;1pkt 1fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.36.2.138:18768, 169.18.131.118:55668}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55668: (50%)&lt;BR/&gt; 18768: (50%)&gt;];
}
2451--5825[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="55668" src_ip="176.36.2.138" src_port="18768"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
2553[label="133.72.10.233;d;20pkt 20fpkt", shape=diamond, color=yellow];
2795[label="214.7.37.197;s;20pkt 20fpkt", shape=diamond, color=yellow];
5862[label="133.72.10.233;d;20pkt 20fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.37.197:80, 133.72.10.233:*}[53.8462%]&lt;BR/&gt;{214.7.37.197:80, 133.72.172.98:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 2852: (3.33333%)&lt;BR/&gt; 2409: (3.33333%)&lt;BR/&gt; 1059: (3.33333%)&lt;BR/&gt; 57465: (2.5%)&gt;];
}
2553--2795[label="0.7;14pkt 14fpkt"];
2553--5862[label="1;20pkt 20fpkt"];
2795--5862[label="0.7;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.10.233" src_ip="214.7.37.197" src_port="80"/>
      <filter dst_ip="133.72.172.98" src_ip="214.7.37.197" src_port="80"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
2569[label="174.194.231.10;s;21pkt 21fpkt", shape=diamond, color=yellow];
2579[label="41.207.125.72;d;43pkt 43fpkt", shape=diamond, color=yellow];
5873[label="41.207.125.72;d;18pkt 18fpkt", shape=hexagon, color=black];
7549[label="174.194.231.10;s;21pkt 21fpkt", shape=hexagon, color=black];
8369[label="174.194.231.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
10710[label="174.194.231.10;22pkt 22fpkt", shape=invtriangle, color=brown];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.231.10:80, 41.207.125.72:*}[50%]&lt;BR/&gt;{144.203.80.247:80, 41.207.125.72:*}[27.2727%]&lt;BR/&gt;{128.208.196.175:80, 41.207.125.72:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65371: (2.05479%)&lt;BR/&gt; 63606: (2.05479%)&lt;BR/&gt; 61543: (2.05479%)&lt;BR/&gt; 59064: (2.05479%)&gt;];
}
2569--2579[label="1;21pkt 21fpkt"];
2569--5873[label="0.611111;11pkt 11fpkt"];
2569--7549[label="1;21pkt 21fpkt"];
2569--8131[label="0.047619;1pkt 1fpkt"];
2569--8180[label="0.047619;1pkt 1fpkt"];
2569--8219[label="0.047619;1pkt 1fpkt"];
2569--8369[label="0.952381;20pkt 20fpkt"];
2569--10710[label="1;21pkt 21fpkt"];
2579--5873[label="1;18pkt 18fpkt"];
2579--7132[label="0.232558;10pkt 10fpkt"];
2579--7549[label="1;21pkt 21fpkt"];
2579--8131[label="0.0232558;1pkt 1fpkt"];
2579--8180[label="0.0232558;1pkt 1fpkt"];
2579--8219[label="0.0232558;1pkt 1fpkt"];
2579--8369[label="0.952381;20pkt 20fpkt"];
2579--10710[label="0.954545;21pkt 21fpkt"];
5873--7549[label="0.611111;11pkt 11fpkt"];
5873--8131[label="0.0555556;1pkt 1fpkt"];
5873--8180[label="0.0555556;1pkt 1fpkt"];
5873--8219[label="0.0555556;1pkt 1fpkt"];
5873--8369[label="0.555556;10pkt 10fpkt"];
5873--10710[label="0.611111;11pkt 11fpkt"];
7549--8131[label="0.047619;1pkt 1fpkt"];
7549--8180[label="0.047619;1pkt 1fpkt"];
7549--8219[label="0.047619;1pkt 1fpkt"];
7549--8369[label="0.952381;20pkt 20fpkt"];
7549--10710[label="1;21pkt 21fpkt"];
8369--10710[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.72" src_ip="174.194.231.10" src_port="80"/>
      <filter dst_ip="41.207.125.72" src_ip="144.203.80.247" src_port="80"/>
      <filter dst_ip="41.207.125.72" src_ip="128.208.196.175" src_port="80"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
523[label="174.194.172.237;s;1314pkt 1314fpkt", shape=diamond, color=yellow];
529[label="201.99.35.124;d;11pkt 11fpkt", shape=diamond, color=yellow];
1014[label="7.146.31.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
1548[label="216.184.21.224;d;17pkt 17fpkt", shape=diamond, color=yellow];
1776[label="21.105.182.68;d;14pkt 14fpkt", shape=diamond, color=yellow];
2192[label="7.143.109.110;d;6pkt 6fpkt", shape=diamond, color=yellow];
2223[label="214.57.2.83;d;12pkt 12fpkt", shape=diamond, color=yellow];
2298[label="200.168.49.43;d;8pkt 8fpkt", shape=diamond, color=yellow];
2321[label="205.138.18.112;d;12pkt 12fpkt", shape=diamond, color=yellow];
2820[label="1.149.122.141;d;5pkt 5fpkt", shape=diamond, color=yellow];
3249[label="7.142.186.170;d;17pkt 17fpkt", shape=diamond, color=yellow];
4040[label="200.168.107.237;d;10pkt 10fpkt", shape=diamond, color=yellow];
4043[label="101.189.42.164;d;3pkt 3fpkt", shape=diamond, color=yellow];
4375[label="100.172.212.11;d;21pkt 21fpkt", shape=diamond, color=yellow];
4467[label="1.144.139.194;d;5pkt 5fpkt", shape=diamond, color=yellow];
4879[label="174.194.172.237;s;379pkt 379fpkt", shape=hexagon, color=black];
4882[label="201.99.35.124;d;10pkt 10fpkt", shape=hexagon, color=black];
5375[label="21.105.182.68;d;14pkt 14fpkt", shape=hexagon, color=black];
5667[label="7.143.109.110;d;6pkt 6fpkt", shape=hexagon, color=black];
5700[label="205.138.18.112;d;12pkt 12fpkt", shape=hexagon, color=black];
5923[label="214.57.2.83;d;12pkt 12fpkt", shape=hexagon, color=black];
5977[label="1.149.122.141;d;4pkt 4fpkt", shape=hexagon, color=black];
6116[label="216.184.21.224;d;10pkt 10fpkt", shape=hexagon, color=black];
6218[label="200.168.49.43;d;8pkt 8fpkt", shape=hexagon, color=black];
6696[label="7.142.186.170;d;17pkt 17fpkt", shape=hexagon, color=black];
7321[label="101.189.42.164;d;3pkt 3fpkt", shape=hexagon, color=black];
10517[label="174.194.172.237;1449pkt 1449fpkt", shape=pentagon, color=darkviolet];
11794[label="174.194.172.237;1449pkt 1449fpkt", shape=invtriangle, color=brown];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.237:80, *:*}[98.3662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6377%)&lt;BR/&gt; 3127: (0.124224%)&lt;BR/&gt; 1051: (0.124224%)&lt;BR/&gt; 2260: (0.0931677%)&lt;BR/&gt; 1837: (0.0931677%)&gt;];
}
523--529[label="0.0909091;1pkt 1fpkt"];
523--1014[label="1;2pkt 2fpkt"];
523--1476[label="0.235294;12pkt 12fpkt"];
523--1548[label="0.941176;16pkt 16fpkt"];
523--1555[label="0.533333;8pkt 8fpkt"];
523--1638[label="0.0645161;2pkt 2fpkt"];
523--1712[label="0.75;6pkt 6fpkt"];
523--1776[label="1;14pkt 14fpkt"];
523--2192[label="1;6pkt 6fpkt"];
523--2223[label="0.916667;11pkt 11fpkt"];
523--2298[label="0.75;6pkt 6fpkt"];
523--2321[label="1;12pkt 12fpkt"];
523--2820[label="0.8;4pkt 4fpkt"];
523--3061[label="0.136364;6pkt 6fpkt"];
523--3249[label="0.882353;15pkt 15fpkt"];
523--3288[label="0.00246305;1pkt 1fpkt"];
523--3970[label="0.00854701;1pkt 1fpkt"];
523--4040[label="1;10pkt 10fpkt"];
523--4043[label="0.666667;2pkt 2fpkt"];
523--4369[label="0.75;3pkt 3fpkt"];
523--4375[label="0.952381;20pkt 20fpkt"];
523--4467[label="0.8;4pkt 4fpkt"];
523--4879[label="1;379pkt 379fpkt"];
523--4882[label="0.2;2pkt 2fpkt"];
523--5294[label="0.5;7pkt 7fpkt"];
523--5375[label="1;14pkt 14fpkt"];
523--5667[label="1;6pkt 6fpkt"];
523--5700[label="1;12pkt 12fpkt"];
523--5889[label="0.0909091;2pkt 2fpkt"];
523--5923[label="0.916667;11pkt 11fpkt"];
523--5977[label="0.75;3pkt 3fpkt"];
523--6116[label="0.9;9pkt 9fpkt"];
523--6218[label="0.75;6pkt 6fpkt"];
523--6696[label="0.882353;15pkt 15fpkt"];
523--6786[label="0.00246305;1pkt 1fpkt"];
523--6959[label="0.0789474;3pkt 3fpkt"];
523--7302[label="0.00854701;1pkt 1fpkt"];
523--7321[label="0.666667;2pkt 2fpkt"];
523--7700[label="0.75;3pkt 3fpkt"];
523--7997[label="0.0789474;3pkt 3fpkt"];
523--8131[label="0.064688;85pkt 85fpkt"];
523--8180[label="0.064688;85pkt 85fpkt"];
523--8219[label="0.064688;85pkt 85fpkt"];
523--10517[label="1;1314pkt 1314fpkt"];
523--11794[label="1;1314pkt 1314fpkt"];
529--4801[label="0.909091;10pkt 10fpkt"];
529--4882[label="0.9;9pkt 9fpkt"];
529--7774[label="0.363636;4pkt 4fpkt"];
529--10517[label="0.0909091;1pkt 1fpkt"];
529--11794[label="0.0909091;1pkt 1fpkt"];
1014--4879[label="1;2pkt 2fpkt"];
1014--10517[label="1;2pkt 2fpkt"];
1014--11794[label="1;2pkt 2fpkt"];
1548--4879[label="0.176471;3pkt 3fpkt"];
1548--6116[label="1;10pkt 10fpkt"];
1548--7113[label="0.0588235;1pkt 1fpkt"];
1548--8010[label="0.0588235;1pkt 1fpkt"];
1548--8131[label="0.0588235;1pkt 1fpkt"];
1548--8180[label="0.0588235;1pkt 1fpkt"];
1548--8219[label="0.0588235;1pkt 1fpkt"];
1548--10517[label="0.941176;16pkt 16fpkt"];
1548--11794[label="0.941176;16pkt 16fpkt"];
1776--4879[label="0.428571;6pkt 6fpkt"];
1776--5375[label="1;14pkt 14fpkt"];
1776--8131[label="0.428571;6pkt 6fpkt"];
1776--8180[label="0.428571;6pkt 6fpkt"];
1776--8219[label="0.428571;6pkt 6fpkt"];
1776--10517[label="1;14pkt 14fpkt"];
1776--11794[label="1;14pkt 14fpkt"];
2192--4879[label="1;6pkt 6fpkt"];
2192--5667[label="1;6pkt 6fpkt"];
2192--8131[label="1;6pkt 6fpkt"];
2192--8180[label="1;6pkt 6fpkt"];
2192--8219[label="1;6pkt 6fpkt"];
2192--10517[label="1;6pkt 6fpkt"];
2192--11794[label="1;6pkt 6fpkt"];
2223--4879[label="0.333333;4pkt 4fpkt"];
2223--5923[label="1;12pkt 12fpkt"];
2223--10517[label="0.916667;11pkt 11fpkt"];
2223--11794[label="0.916667;11pkt 11fpkt"];
2298--2360[label="0.125;1pkt 1fpkt"];
2298--5716[label="0.125;1pkt 1fpkt"];
2298--6218[label="1;8pkt 8fpkt"];
2298--10517[label="0.75;6pkt 6fpkt"];
2298--11794[label="0.75;6pkt 6fpkt"];
2321--5700[label="1;12pkt 12fpkt"];
2321--10517[label="1;12pkt 12fpkt"];
2321--11794[label="1;12pkt 12fpkt"];
2820--5977[label="1;4pkt 4fpkt"];
2820--10517[label="0.8;4pkt 4fpkt"];
2820--11794[label="0.8;4pkt 4fpkt"];
3249--6696[label="1;17pkt 17fpkt"];
3249--10517[label="0.882353;15pkt 15fpkt"];
3249--11794[label="0.882353;15pkt 15fpkt"];
4040--10517[label="1;10pkt 10fpkt"];
4040--11794[label="1;10pkt 10fpkt"];
4043--7321[label="1;3pkt 3fpkt"];
4043--10517[label="0.666667;2pkt 2fpkt"];
4043--11794[label="0.666667;2pkt 2fpkt"];
4375--10517[label="0.952381;20pkt 20fpkt"];
4375--11794[label="0.952381;20pkt 20fpkt"];
4467--10517[label="0.8;4pkt 4fpkt"];
4467--11794[label="0.8;4pkt 4fpkt"];
4879--4882[label="0.1;1pkt 1fpkt"];
4879--5294[label="0.5;7pkt 7fpkt"];
4879--5375[label="0.428571;6pkt 6fpkt"];
4879--5667[label="1;6pkt 6fpkt"];
4879--5923[label="0.333333;4pkt 4fpkt"];
4879--6116[label="0.3;3pkt 3fpkt"];
4879--8131[label="0.224274;85pkt 85fpkt"];
4879--8180[label="0.224274;85pkt 85fpkt"];
4879--8219[label="0.224274;85pkt 85fpkt"];
4879--10517[label="1;379pkt 379fpkt"];
4879--11794[label="1;379pkt 379fpkt"];
4882--7774[label="0.4;4pkt 4fpkt"];
4882--10517[label="0.2;2pkt 2fpkt"];
4882--11794[label="0.2;2pkt 2fpkt"];
5375--8131[label="0.428571;6pkt 6fpkt"];
5375--8180[label="0.428571;6pkt 6fpkt"];
5375--8219[label="0.428571;6pkt 6fpkt"];
5375--10517[label="1;14pkt 14fpkt"];
5375--11794[label="1;14pkt 14fpkt"];
5667--8131[label="1;6pkt 6fpkt"];
5667--8180[label="1;6pkt 6fpkt"];
5667--8219[label="1;6pkt 6fpkt"];
5667--10517[label="1;6pkt 6fpkt"];
5667--11794[label="1;6pkt 6fpkt"];
5700--10517[label="1;12pkt 12fpkt"];
5700--11794[label="1;12pkt 12fpkt"];
5923--10517[label="0.916667;11pkt 11fpkt"];
5923--11794[label="0.916667;11pkt 11fpkt"];
5977--10517[label="0.75;3pkt 3fpkt"];
5977--11794[label="0.75;3pkt 3fpkt"];
6116--7113[label="0.1;1pkt 1fpkt"];
6116--8010[label="0.1;1pkt 1fpkt"];
6116--8131[label="0.1;1pkt 1fpkt"];
6116--8180[label="0.1;1pkt 1fpkt"];
6116--8219[label="0.1;1pkt 1fpkt"];
6116--10517[label="0.9;9pkt 9fpkt"];
6116--11794[label="0.9;9pkt 9fpkt"];
6218--10517[label="0.75;6pkt 6fpkt"];
6218--11794[label="0.75;6pkt 6fpkt"];
6696--10517[label="0.882353;15pkt 15fpkt"];
6696--11794[label="0.882353;15pkt 15fpkt"];
7321--10517[label="0.666667;2pkt 2fpkt"];
7321--11794[label="0.666667;2pkt 2fpkt"];
10517--11794[label="1;1449pkt 1449fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.172.237" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
6[label="133.72.166.6s;2pkt 2fpkt", shape=rectangle, color=red];
1172[label="192.70.139.197;d;70pkt 70fpkt", shape=diamond, color=yellow];
1173[label="133.72.166.6;s;99pkt 99fpkt", shape=diamond, color=yellow];
2132[label="192.70.59.132;d;14pkt 14fpkt", shape=diamond, color=yellow];
5085[label="133.72.166.6;s;64pkt 64fpkt", shape=hexagon, color=black];
5888[label="192.70.139.197;d;70pkt 70fpkt", shape=hexagon, color=black];
5897[label="192.70.59.132;d;13pkt 13fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.166.6:*, 192.70.139.197:80}[71.7172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3494: (0.60241%)&lt;BR/&gt; 3430: (0.60241%)&lt;BR/&gt; 3424: (0.60241%)&lt;BR/&gt; 3423: (0.60241%)&gt;];
}
6--178[label="0.5;1pkt 1fpkt"];
6--195[label="0.5;1pkt 1fpkt"];
6--1173[label="1;2pkt 2fpkt"];
6--2132[label="1;2pkt 2fpkt"];
6--5897[label="0.5;1pkt 1fpkt"];
1172--1173[label="1;70pkt 70fpkt"];
1172--5085[label="0.734375;47pkt 47fpkt"];
1172--5888[label="1;70pkt 70fpkt"];
1172--8119[label="0.0714286;5pkt 5fpkt"];
1173--2132[label="1;14pkt 14fpkt"];
1173--5085[label="1;64pkt 64fpkt"];
1173--5888[label="1;70pkt 70fpkt"];
1173--5897[label="1;13pkt 13fpkt"];
1173--6468[label="0.010101;1pkt 1fpkt"];
1173--7378[label="0.121212;12pkt 12fpkt"];
1173--8119[label="0.0909091;9pkt 9fpkt"];
1173--8134[label="0.040404;4pkt 4fpkt"];
2132--5085[label="0.571429;8pkt 8fpkt"];
2132--5897[label="1;13pkt 13fpkt"];
2132--8134[label="0.142857;2pkt 2fpkt"];
5085--5888[label="0.734375;47pkt 47fpkt"];
5085--5897[label="0.615385;8pkt 8fpkt"];
5085--6468[label="0.015625;1pkt 1fpkt"];
5085--7378[label="0.109375;7pkt 7fpkt"];
5085--8119[label="0.140625;9pkt 9fpkt"];
5085--8134[label="0.0625;4pkt 4fpkt"];
5888--8119[label="0.0714286;5pkt 5fpkt"];
5897--8134[label="0.153846;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.70.139.197" dst_port="80" src_ip="133.72.166.6"/>
    </slice>
    <from sec="1229058030" usec="0"/>
    <to sec="1229058769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
2140[label="192.22.44.2;s;11pkt 11fpkt", shape=diamond, color=yellow];
2288[label="128.208.70.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
5691[label="128.208.70.102;d;1pkt 1fpkt", shape=hexagon, color=black];
5899[label="192.22.44.2;s;11pkt 11fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.44.2:80, 128.208.236.23:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 4706: (8.33333%)&lt;BR/&gt; 443: (8.33333%)&lt;BR/&gt; 59825: (4.16667%)&lt;BR/&gt; 34454: (4.16667%)&gt;];
}
2140--2288[label="1;1pkt 1fpkt"];
2140--5691[label="1;1pkt 1fpkt"];
2140--5899[label="1;11pkt 11fpkt"];
2140--8131[label="0.181818;2pkt 2fpkt"];
2140--8180[label="0.181818;2pkt 2fpkt"];
2140--8219[label="0.181818;2pkt 2fpkt"];
2288--5691[label="1;1pkt 1fpkt"];
2288--5899[label="1;1pkt 1fpkt"];
5691--5899[label="1;1pkt 1fpkt"];
5899--8131[label="0.181818;2pkt 2fpkt"];
5899--8180[label="0.181818;2pkt 2fpkt"];
5899--8219[label="0.181818;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.236.23" src_ip="192.22.44.2" src_port="80"/>
    </slice>
    <from sec="1229058065" usec="0"/>
    <to sec="1229058825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1679[label="203.90.52.99;d;23pkt 23fpkt", shape=diamond, color=yellow];
1680[label="133.72.177.35;s;23pkt 23fpkt", shape=diamond, color=yellow];
5902[label="203.90.52.99;d;23pkt 23fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.177.35:*, 203.90.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1759: (2.17391%)&lt;BR/&gt; 1758: (2.17391%)&lt;BR/&gt; 1755: (2.17391%)&lt;BR/&gt; 1753: (2.17391%)&gt;];
}
1679--1680[label="1;23pkt 23fpkt"];
1679--5902[label="1;23pkt 23fpkt"];
1679--8134[label="0.26087;6pkt 6fpkt"];
1680--5902[label="1;23pkt 23fpkt"];
1680--8134[label="0.26087;6pkt 6fpkt"];
5902--8134[label="0.26087;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="203.90.52.99" dst_port="80" src_ip="133.72.177.35"/>
    </slice>
    <from sec="1229058075" usec="0"/>
    <to sec="1229058249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1716[label="211.18.199.83;d;2pkt 2fpkt", shape=diamond, color=yellow];
5908[label="211.18.199.83;d;2pkt 2fpkt", shape=hexagon, color=black];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.18.177:51092, 211.18.199.83:1935}[50%]&lt;BR/&gt;{174.194.18.177:51096, 211.18.199.83:1935}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 51096: (25%)&lt;BR/&gt; 51092: (25%)&gt;];
}
1716--5908[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.18.199.83" dst_port="1935" src_ip="174.194.18.177" src_port="51096"/>
      <filter dst_ip="211.18.199.83" dst_port="1935" src_ip="174.194.18.177" src_port="51092"/>
    </slice>
    <from sec="1229058111" usec="0"/>
    <to sec="1229058201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
2248[label="40.8.7.206;d;6pkt 6fpkt", shape=diamond, color=yellow];
5934[label="40.8.7.206;d;6pkt 6fpkt", shape=hexagon, color=black];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.168.216:*, 40.8.7.206:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44078: (8.33333%)&lt;BR/&gt; 44071: (8.33333%)&lt;BR/&gt; 43330: (8.33333%)&lt;BR/&gt; 43329: (8.33333%)&gt;];
}
2248--5934[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="40.8.7.206" dst_port="80" src_ip="133.72.168.216"/>
    </slice>
    <from sec="1229058201" usec="0"/>
    <to sec="1229058283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
441[label="128.64.203.73;s;224pkt 224fpkt", shape=diamond, color=yellow];
1678[label="192.22.72.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
2271[label="32.131.77.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
2685[label="6.142.198.70;d;6pkt 6fpkt", shape=diamond, color=yellow];
4660[label="206.67.16.39;d;31pkt 31fpkt", shape=diamond, color=yellow];
5939[label="6.142.198.70;d;6pkt 6fpkt", shape=hexagon, color=black];
6000[label="128.64.203.73;s;224pkt 224fpkt", shape=hexagon, color=black];
9066[label="128.64.203.73;236pkt 236fpkt", shape=pentagon, color=darkviolet];
11056[label="128.64.203.73;236pkt 236fpkt", shape=invtriangle, color=brown];
11994[label="128.64.203.73;236pkt 236fpkt", shape=invhouse, color=bisque];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.203.73:995, *:*}[35.865%]&lt;BR/&gt;{128.64.203.73:443, *:*}[28.27%]&lt;BR/&gt;{128.64.203.73:993, *:*}[27.8481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (17.3732%)&lt;BR/&gt; 443: (14.8379%)&lt;BR/&gt; 993: (13.4663%)&lt;BR/&gt; 110: (2.16126%)&lt;BR/&gt; 143: (1.87032%)&gt;];
}
441--1678[label="1;2pkt 2fpkt"];
441--2271[label="0.5;1pkt 1fpkt"];
441--2685[label="1;6pkt 6fpkt"];
441--2738[label="0.0181818;1pkt 1fpkt"];
441--4660[label="1;31pkt 31fpkt"];
441--5939[label="1;6pkt 6fpkt"];
441--6000[label="1;224pkt 224fpkt"];
441--9066[label="1;224pkt 224fpkt"];
441--11056[label="1;224pkt 224fpkt"];
441--11994[label="1;224pkt 224fpkt"];
1678--6000[label="1;2pkt 2fpkt"];
1678--9066[label="1;2pkt 2fpkt"];
1678--11056[label="1;2pkt 2fpkt"];
1678--11994[label="1;2pkt 2fpkt"];
2271--5440[label="0.5;1pkt 1fpkt"];
2271--6000[label="0.5;1pkt 1fpkt"];
2271--9066[label="0.5;1pkt 1fpkt"];
2271--11056[label="0.5;1pkt 1fpkt"];
2271--11994[label="0.5;1pkt 1fpkt"];
2685--5939[label="1;6pkt 6fpkt"];
2685--6000[label="1;6pkt 6fpkt"];
2685--9066[label="1;6pkt 6fpkt"];
2685--11056[label="1;6pkt 6fpkt"];
2685--11994[label="1;6pkt 6fpkt"];
4660--6000[label="1;31pkt 31fpkt"];
4660--9066[label="1;31pkt 31fpkt"];
4660--11056[label="1;31pkt 31fpkt"];
4660--11994[label="1;31pkt 31fpkt"];
5939--6000[label="1;6pkt 6fpkt"];
5939--9066[label="1;6pkt 6fpkt"];
5939--11056[label="1;6pkt 6fpkt"];
5939--11994[label="1;6pkt 6fpkt"];
6000--9066[label="1;224pkt 224fpkt"];
6000--11056[label="1;224pkt 224fpkt"];
6000--11994[label="1;224pkt 224fpkt"];
9066--11056[label="1;236pkt 236fpkt"];
9066--11994[label="1;236pkt 236fpkt"];
11056--11994[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.203.73" src_port="995"/>
      <filter src_ip="128.64.203.73" src_port="443"/>
      <filter src_ip="128.64.203.73" src_port="993"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
2690[label="194.3.9.139;d;23pkt 23fpkt", shape=diamond, color=yellow];
5941[label="194.3.9.139;d;22pkt 22fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.32.128:*, 194.3.9.139:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1251: (2.22222%)&lt;BR/&gt; 1249: (2.22222%)&lt;BR/&gt; 1247: (2.22222%)&lt;BR/&gt; 1245: (2.22222%)&gt;];
}
2690--5941[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="194.3.9.139" dst_port="443" src_ip="133.72.32.128"/>
    </slice>
    <from sec="1229058216" usec="0"/>
    <to sec="1229058545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
2697[label="195.253.75.88;d;9pkt 9fpkt", shape=diamond, color=yellow];
5948[label="195.253.75.88;d;9pkt 9fpkt", shape=hexagon, color=black];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:*, 195.253.75.88:9575}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9575: (50%)&lt;BR/&gt; 1519: (5.55556%)&lt;BR/&gt; 1480: (5.55556%)&lt;BR/&gt; 1384: (5.55556%)&lt;BR/&gt; 1380: (5.55556%)&gt;];
}
2697--5948[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="195.253.75.88" dst_port="9575" src_ip="133.72.2.38"/>
    </slice>
    <from sec="1229058225" usec="0"/>
    <to sec="1229058455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
2316[label="49.43.240.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
5954[label="49.43.240.236;s;1pkt 1fpkt", shape=hexagon, color=black];
10510[label="49.43.240.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.43.240.236:59032, 215.40.224.3:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59032: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
2316--4873[label="1;1pkt 1fpkt"];
2316--5954[label="1;1pkt 1fpkt"];
2316--10510[label="1;1pkt 1fpkt"];
5954--10510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.3" dst_port="8080" src_ip="49.43.240.236" src_port="59032"/>
    </slice>
    <from sec="1229058240" usec="0"/>
    <to sec="1229058266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
2721[label="40.37.201.35;s;27pkt 27fpkt", shape=diamond, color=yellow];
5957[label="40.37.201.35;s;18pkt 18fpkt", shape=hexagon, color=black];
8642[label="40.37.201.35;27pkt 27fpkt", shape=pentagon, color=darkviolet];
10840[label="40.37.201.35;26pkt 26fpkt", shape=invtriangle, color=brown];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.37.201.35:80, 128.64.17.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63648: (2.04082%)&lt;BR/&gt; 63647: (2.04082%)&lt;BR/&gt; 63646: (2.04082%)&lt;BR/&gt; 63645: (2.04082%)&gt;];
}
2721--5957[label="1;18pkt 18fpkt"];
2721--8642[label="1;27pkt 27fpkt"];
2721--10840[label="1;26pkt 26fpkt"];
5957--8642[label="1;18pkt 18fpkt"];
5957--10840[label="0.944444;17pkt 17fpkt"];
8642--10840[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.17.163" src_ip="40.37.201.35" src_port="80"/>
    </slice>
    <from sec="1229058266" usec="0"/>
    <to sec="1229058405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
2744[label="97.156.164.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
5964[label="97.156.164.26;d;1pkt 1fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.152:8080, 97.156.164.26:1157}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1157: (50%)&gt;];
}
2744--5964[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="97.156.164.26" dst_port="1157" src_ip="174.194.172.152" src_port="8080"/>
    </slice>
    <from sec="1229058290" usec="0"/>
    <to sec="1229058321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
28[label="133.72.2.39s;2pkt 2fpkt", shape=rectangle, color=red];
2770[label="193.208.176.71;d;2pkt 2fpkt", shape=diamond, color=yellow];
5968[label="193.208.176.71;d;2pkt 2fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.39:1137, 42.200.125.103:1003}[33.3333%]&lt;BR/&gt;{133.72.2.39:1055, 193.208.176.71:80}[33.3333%]&lt;BR/&gt;{133.72.2.39:1123, 193.208.176.71:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 1123: (25%)&lt;BR/&gt; 1055: (16.6667%)&lt;BR/&gt; 1137: (8.33333%)&lt;BR/&gt; 1003: (8.33333%)&gt;];
}
28--482[label="1;1pkt 1fpkt"];
28--483[label="1;2pkt 2fpkt"];
28--2770[label="0.5;1pkt 1fpkt"];
28--4867[label="1;1pkt 1fpkt"];
28--5968[label="0.5;1pkt 1fpkt"];
2770--5968[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.208.176.71" dst_port="80" src_ip="133.72.2.39" src_port="1123"/>
      <filter dst_ip="193.208.176.71" dst_port="80" src_ip="133.72.2.39" src_port="1055"/>
      <filter dst_ip="42.200.125.103" dst_port="1003" src_ip="133.72.2.39" src_port="1137"/>
    </slice>
    <from sec="1229058026" usec="0"/>
    <to sec="1229058710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
834[label="128.208.196.175;s;128pkt 128fpkt", shape=diamond, color=yellow];
2816[label="41.207.122.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
5976[label="41.207.122.154;d;1pkt 1fpkt", shape=hexagon, color=black];
7132[label="128.208.196.175;s;128pkt 128fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.196.175:123, *:123}[30.4688%]&lt;BR/&gt;{128.208.196.175:80, *:*}[27.3438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (50.3876%)&lt;BR/&gt; 80: (13.9535%)&lt;BR/&gt; 57976: (0.775194%)&lt;BR/&gt; 1207: (0.775194%)&lt;BR/&gt; 64861: (0.387597%)&gt;];
}
834--835[label="1;1pkt 1fpkt"];
834--2579[label="0.232558;10pkt 10fpkt"];
834--2816[label="1;1pkt 1fpkt"];
834--4569[label="0.4;12pkt 12fpkt"];
834--4990[label="1;1pkt 1fpkt"];
834--5976[label="1;1pkt 1fpkt"];
834--7132[label="1;128pkt 128fpkt"];
834--8131[label="0.0078125;1pkt 1fpkt"];
834--8180[label="0.0078125;1pkt 1fpkt"];
834--8219[label="0.0078125;1pkt 1fpkt"];
2816--5976[label="1;1pkt 1fpkt"];
2816--7132[label="1;1pkt 1fpkt"];
5976--7132[label="1;1pkt 1fpkt"];
7132--8131[label="0.0078125;1pkt 1fpkt"];
7132--8180[label="0.0078125;1pkt 1fpkt"];
7132--8219[label="0.0078125;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.208.196.175" src_port="80"/>
      <filter dst_port="123" src_ip="128.208.196.175" src_port="123"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1305[label="214.49.21.73;s;3pkt 3fpkt", shape=diamond, color=yellow];
1306[label="215.160.185.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
5163[label="214.49.21.73;s;3pkt 3fpkt", shape=hexagon, color=black];
5998[label="215.160.185.223;d;1pkt 1fpkt", shape=hexagon, color=black];
9057[label="214.49.21.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.21.73:54278, 6.224.137.23:80}[33.3333%]&lt;BR/&gt;{214.49.21.73:54273, 214.131.174.119:80}[33.3333%]&lt;BR/&gt;{214.49.21.73:52288, 215.160.185.223:3724}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 52288: (20%)&lt;BR/&gt; 3724: (20%)&lt;BR/&gt; 54278: (15%)&lt;BR/&gt; 54273: (15%)&gt;];
}
1305--1306[label="1;1pkt 1fpkt"];
1305--5163[label="1;3pkt 3fpkt"];
1305--5998[label="1;1pkt 1fpkt"];
1305--8119[label="0.666667;2pkt 2fpkt"];
1305--9057[label="1;2pkt 2fpkt"];
1306--5163[label="1;1pkt 1fpkt"];
1306--5998[label="1;1pkt 1fpkt"];
5163--5998[label="1;1pkt 1fpkt"];
5163--8119[label="0.666667;2pkt 2fpkt"];
5163--9057[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.185.223" dst_port="3724" src_ip="214.49.21.73" src_port="52288"/>
      <filter dst_ip="214.131.174.119" dst_port="80" src_ip="214.49.21.73" src_port="54273"/>
      <filter dst_ip="6.224.137.23" dst_port="80" src_ip="214.49.21.73" src_port="54278"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
2850[label="192.22.33.114;d;166pkt 166fpkt", shape=diamond, color=yellow];
2976[label="128.208.236.225;s;154pkt 154fpkt", shape=diamond, color=yellow];
6017[label="192.22.33.114;d;128pkt 128fpkt", shape=hexagon, color=black];
7931[label="192.22.33.114;d;111pkt 111fpkt", shape=polygon, color=gold];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.148.109:*, 192.22.33.114:80}[31.6872%]&lt;BR/&gt;{128.208.236.225:*, 192.22.33.172:80}[31.6872%]&lt;BR/&gt;{128.208.236.225:*, 192.22.33.114:80}[31.6872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0322%)&lt;BR/&gt; 443: (1.9678%)&lt;BR/&gt; 4103: (0.357782%)&lt;BR/&gt; 4101: (0.357782%)&lt;BR/&gt; 4099: (0.357782%)&gt;];
}
2850--2976[label="0.5;77pkt 77fpkt"];
2850--6017[label="1;128pkt 128fpkt"];
2850--6537[label="0.0060241;1pkt 1fpkt"];
2850--7380[label="0.0060241;1pkt 1fpkt"];
2850--7507[label="0.0116279;1pkt 1fpkt"];
2850--7931[label="1;111pkt 111fpkt"];
2850--8061[label="0.0060241;1pkt 1fpkt"];
2850--8119[label="0.060241;10pkt 10fpkt"];
2850--8134[label="0.0662651;11pkt 11fpkt"];
2850--8165[label="0.0361446;6pkt 6fpkt"];
2850--8208[label="0.0361446;6pkt 6fpkt"];
2850--8241[label="0.0361446;6pkt 6fpkt"];
2976--4172[label="0.827957;77pkt 77fpkt"];
2976--6017[label="0.46875;60pkt 60fpkt"];
2976--7931[label="0.468468;52pkt 52fpkt"];
2976--8119[label="0.0649351;10pkt 10fpkt"];
2976--8134[label="0.0779221;12pkt 12fpkt"];
2976--8165[label="0.038961;6pkt 6fpkt"];
2976--8208[label="0.038961;6pkt 6fpkt"];
2976--8241[label="0.038961;6pkt 6fpkt"];
6017--6537[label="0.0078125;1pkt 1fpkt"];
6017--7380[label="0.0078125;1pkt 1fpkt"];
6017--7507[label="0.0116279;1pkt 1fpkt"];
6017--7931[label="1;111pkt 111fpkt"];
6017--8061[label="0.0078125;1pkt 1fpkt"];
6017--8119[label="0.078125;10pkt 10fpkt"];
6017--8134[label="0.0859375;11pkt 11fpkt"];
7931--8061[label="0.00900901;1pkt 1fpkt"];
7931--8119[label="0.0900901;10pkt 10fpkt"];
7931--8134[label="0.0990991;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="192.22.33.114" dst_port="80" src_ip="128.208.236.225"/>
      <filter dst_ip="192.22.33.172" dst_port="80" src_ip="128.208.236.225"/>
      <filter dst_ip="192.22.33.114" dst_port="80" src_ip="133.72.148.109"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
739[label="128.64.245.119;d;12pkt 12fpkt", shape=diamond, color=yellow];
752[label="206.22.20.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
6024[label="206.22.20.237;s;1pkt 1fpkt", shape=hexagon, color=black];
6774[label="128.64.245.119;d;12pkt 12fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.233.182.73:80, 128.64.245.119:*}[66.6667%]&lt;BR/&gt;{*:*, 128.64.245.119:8080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 8080: (19.2308%)&lt;BR/&gt; 57808: (7.69231%)&lt;BR/&gt; 59599: (3.84615%)&lt;BR/&gt; 25500: (3.84615%)&gt;];
}
739--752[label="1;1pkt 1fpkt"];
739--6024[label="1;1pkt 1fpkt"];
739--6774[label="1;12pkt 12fpkt"];
739--8131[label="0.166667;2pkt 2fpkt"];
739--8180[label="0.166667;2pkt 2fpkt"];
739--8219[label="0.166667;2pkt 2fpkt"];
752--6024[label="1;1pkt 1fpkt"];
752--6774[label="1;1pkt 1fpkt"];
6024--6774[label="1;1pkt 1fpkt"];
6774--8131[label="0.166667;2pkt 2fpkt"];
6774--8180[label="0.166667;2pkt 2fpkt"];
6774--8219[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.245.119" dst_port="8080"/>
      <filter dst_ip="128.64.245.119" src_ip="101.233.182.73" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1415[label="174.194.19.73;d;9pkt 9fpkt", shape=diamond, color=yellow];
1881[label="37.115.65.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
2308[label="44.55.216.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
3892[label="46.198.65.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
5792[label="174.194.19.73;d;7pkt 7fpkt", shape=hexagon, color=black];
6039[label="37.115.65.5;s;1pkt 1fpkt", shape=hexagon, color=black];
6221[label="44.55.216.48;s;1pkt 1fpkt", shape=hexagon, color=black];
7596[label="46.198.65.209;s;1pkt 1fpkt", shape=hexagon, color=black];
9070[label="201.90.40.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.19.73:53241}[55.5556%]&lt;BR/&gt;{*:80, 174.194.19.73:*}[33.3333%]&lt;BR/&gt;{65.61.201.254:*, 174.194.19.73:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53241: (36.9565%)&lt;BR/&gt; 80: (10.8696%)&lt;BR/&gt; 2000: (8.69565%)&lt;BR/&gt; 1957: (8.69565%)&lt;BR/&gt; 1192: (8.69565%)&gt;];
}
1415--1881[label="1;1pkt 1fpkt"];
1415--1949[label="0.111111;1pkt 1fpkt"];
1415--2308[label="1;1pkt 1fpkt"];
1415--3765[label="0.111111;1pkt 1fpkt"];
1415--3892[label="1;1pkt 1fpkt"];
1415--5792[label="1;7pkt 7fpkt"];
1415--6039[label="1;1pkt 1fpkt"];
1415--6221[label="1;1pkt 1fpkt"];
1415--7169[label="0.111111;1pkt 1fpkt"];
1415--7596[label="1;1pkt 1fpkt"];
1415--9070[label="1;1pkt 1fpkt"];
1881--5792[label="1;1pkt 1fpkt"];
1881--6039[label="1;1pkt 1fpkt"];
2308--5792[label="1;1pkt 1fpkt"];
2308--6221[label="1;1pkt 1fpkt"];
3892--5792[label="1;1pkt 1fpkt"];
3892--7596[label="1;1pkt 1fpkt"];
5792--6039[label="1;1pkt 1fpkt"];
5792--6221[label="1;1pkt 1fpkt"];
5792--7169[label="0.142857;1pkt 1fpkt"];
5792--7596[label="1;1pkt 1fpkt"];
5792--9070[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.73" src_ip="65.61.201.254"/>
      <filter dst_ip="174.194.19.73" src_port="80"/>
      <filter dst_ip="174.194.19.73" dst_port="53241"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1431[label="215.40.233.81;d;543pkt 543fpkt", shape=diamond, color=yellow];
6045[label="215.40.233.81;d;465pkt 465fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 215.40.233.81:*}[80.2947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.6825%)&lt;BR/&gt; 0: (19.9405%)&lt;BR/&gt; 61433: (0.198413%)&lt;BR/&gt; 58237: (0.198413%)&lt;BR/&gt; 57055: (0.198413%)&gt;];
}
1431--4752[label="0.0110497;6pkt 6fpkt"];
1431--5423[label="0.00184162;1pkt 1fpkt"];
1431--6045[label="1;465pkt 465fpkt"];
1431--7751[label="0.0110497;6pkt 6fpkt"];
1431--8109[label="0.0110497;6pkt 6fpkt"];
1431--8160[label="0.00184162;1pkt 1fpkt"];
1431--8161[label="0.00552486;3pkt 3fpkt"];
1431--8162[label="0.00184162;1pkt 1fpkt"];
1431--8203[label="0.00184162;1pkt 1fpkt"];
1431--8204[label="0.00552486;3pkt 3fpkt"];
1431--8205[label="0.00184162;1pkt 1fpkt"];
1431--8236[label="0.00184162;1pkt 1fpkt"];
1431--8237[label="0.00552486;3pkt 3fpkt"];
1431--8238[label="0.00184162;1pkt 1fpkt"];
1431--8509[label="0.00184162;1pkt 1fpkt"];
1431--11717[label="0.0110497;6pkt 6fpkt"];
1431--12267[label="0.0110497;6pkt 6fpkt"];
6045--8509[label="0.00215054;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.233.81" src_port="53"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
837[label="214.49.2.247;d;2629pkt 2629fpkt", shape=diamond, color=yellow];
1689[label="6.0.80.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
1764[label="1.144.73.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
5351[label="6.0.80.212;s;1pkt 1fpkt", shape=hexagon, color=black];
5371[label="1.144.73.144;s;1pkt 1fpkt", shape=hexagon, color=black];
7410[label="214.49.2.247;d;2629pkt 2629fpkt", shape=hexagon, color=black];
8993[label="34.227.42.69;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11018[label="34.227.42.69;11pkt 11fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.49.2.247:7596}[92.8003%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7596: (46.3475%)&lt;BR/&gt; 0: (3.29296%)&lt;BR/&gt; 6881: (0.700227%)&lt;BR/&gt; 80: (0.529902%)&lt;BR/&gt; 16001: (0.227101%)&gt;];
}
837--1689[label="1;1pkt 1fpkt"];
837--1764[label="1;1pkt 1fpkt"];
837--2417[label="0.857143;6pkt 6fpkt"];
837--5351[label="1;1pkt 1fpkt"];
837--5371[label="1;1pkt 1fpkt"];
837--6053[label="0.833333;5pkt 5fpkt"];
837--7410[label="1;2629pkt 2629fpkt"];
837--8131[label="0.00152149;4pkt 4fpkt"];
837--8180[label="0.00152149;4pkt 4fpkt"];
837--8219[label="0.00152149;4pkt 4fpkt"];
837--8993[label="0.0909091;1pkt 1fpkt"];
837--11018[label="0.0909091;1pkt 1fpkt"];
1689--5351[label="1;1pkt 1fpkt"];
1689--7410[label="1;1pkt 1fpkt"];
1764--5371[label="1;1pkt 1fpkt"];
1764--7410[label="1;1pkt 1fpkt"];
5351--7410[label="1;1pkt 1fpkt"];
5371--7410[label="1;1pkt 1fpkt"];
7410--8131[label="0.00152149;4pkt 4fpkt"];
7410--8180[label="0.00152149;4pkt 4fpkt"];
7410--8219[label="0.00152149;4pkt 4fpkt"];
7410--8993[label="0.0909091;1pkt 1fpkt"];
7410--11018[label="0.0909091;1pkt 1fpkt"];
8993--11018[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.2.247" dst_port="7596"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
934[label="174.194.172.193;s;134pkt 134fpkt", shape=diamond, color=yellow];
2244[label="204.69.48.174;d;18pkt 18fpkt", shape=diamond, color=yellow];
2440[label="41.207.126.72;d;67pkt 67fpkt", shape=diamond, color=yellow];
5534[label="174.194.172.193;s;134pkt 134fpkt", shape=hexagon, color=black];
5680[label="204.69.48.174;d;18pkt 18fpkt", shape=hexagon, color=black];
6068[label="41.207.126.72;d;41pkt 41fpkt", shape=hexagon, color=black];
8070[label="174.194.172.193;s;134pkt 134fpkt", shape=polygon, color=gold];
10159[label="174.194.172.193;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.193:80, 41.207.126.72:*}[38.5621%]&lt;BR/&gt;{174.194.172.193:80, 34.240.64.104:*}[20.2614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7089%)&lt;BR/&gt; 65105: (0.436681%)&lt;BR/&gt; 63689: (0.436681%)&lt;BR/&gt; 62211: (0.436681%)&lt;BR/&gt; 57733: (0.436681%)&gt;];
}
934--1042[label="0.224806;29pkt 29fpkt"];
934--1979[label="0.0392157;2pkt 2fpkt"];
934--2244[label="1;18pkt 18fpkt"];
934--2440[label="0.820896;55pkt 55fpkt"];
934--3061[label="0.522727;23pkt 23fpkt"];
934--5050[label="0.224806;29pkt 29fpkt"];
934--5534[label="1;134pkt 134fpkt"];
934--5680[label="1;18pkt 18fpkt"];
934--6068[label="0.829268;34pkt 34fpkt"];
934--6846[label="0.0434783;2pkt 2fpkt"];
934--6959[label="0.526316;20pkt 20fpkt"];
934--7997[label="0.526316;20pkt 20fpkt"];
934--8070[label="1;134pkt 134fpkt"];
934--8131[label="0.0149254;2pkt 2fpkt"];
934--8180[label="0.0149254;2pkt 2fpkt"];
934--8219[label="0.0149254;2pkt 2fpkt"];
934--10159[label="1;134pkt 134fpkt"];
2244--5534[label="1;18pkt 18fpkt"];
2244--5680[label="1;18pkt 18fpkt"];
2244--8070[label="1;18pkt 18fpkt"];
2244--10159[label="1;18pkt 18fpkt"];
2440--5534[label="0.820896;55pkt 55fpkt"];
2440--6068[label="1;41pkt 41fpkt"];
2440--8070[label="0.820896;55pkt 55fpkt"];
2440--8131[label="0.0298507;2pkt 2fpkt"];
2440--8180[label="0.0298507;2pkt 2fpkt"];
2440--8219[label="0.0298507;2pkt 2fpkt"];
2440--10159[label="0.820896;55pkt 55fpkt"];
5534--5680[label="1;18pkt 18fpkt"];
5534--6068[label="0.829268;34pkt 34fpkt"];
5534--6846[label="0.0434783;2pkt 2fpkt"];
5534--6959[label="0.526316;20pkt 20fpkt"];
5534--7997[label="0.526316;20pkt 20fpkt"];
5534--8070[label="1;134pkt 134fpkt"];
5534--8131[label="0.0149254;2pkt 2fpkt"];
5534--8180[label="0.0149254;2pkt 2fpkt"];
5534--8219[label="0.0149254;2pkt 2fpkt"];
5534--10159[label="1;134pkt 134fpkt"];
5680--8070[label="1;18pkt 18fpkt"];
5680--10159[label="1;18pkt 18fpkt"];
6068--8070[label="0.829268;34pkt 34fpkt"];
6068--8131[label="0.0487805;2pkt 2fpkt"];
6068--8180[label="0.0487805;2pkt 2fpkt"];
6068--8219[label="0.0487805;2pkt 2fpkt"];
6068--10159[label="0.829268;34pkt 34fpkt"];
8070--8131[label="0.0149254;2pkt 2fpkt"];
8070--8180[label="0.0149254;2pkt 2fpkt"];
8070--8219[label="0.0149254;2pkt 2fpkt"];
8070--10159[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.72" src_ip="174.194.172.193" src_port="80"/>
      <filter dst_ip="34.240.64.104" src_ip="174.194.172.193" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
2453[label="172.20.32.65;s;382pkt 382fpkt", shape=diamond, color=yellow];
6081[label="172.20.32.65;s;230pkt 230fpkt", shape=hexagon, color=black];
8953[label="172.20.32.65;417pkt 417fpkt", shape=pentagon, color=darkviolet];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.32.65:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.26045%)&lt;BR/&gt; 80: (8.16327%)&lt;BR/&gt; 54503: (0.437318%)&lt;BR/&gt; 45280: (0.388727%)&lt;BR/&gt; 16446: (0.388727%)&gt;];
}
2453--6081[label="1;230pkt 230fpkt"];
2453--8119[label="0.0157068;6pkt 6fpkt"];
2453--8122[label="0.0157068;6pkt 6fpkt"];
2453--8134[label="0.0157068;6pkt 6fpkt"];
2453--8154[label="0.0078534;3pkt 3fpkt"];
2453--8165[label="0.0052356;2pkt 2fpkt"];
2453--8198[label="0.0078534;3pkt 3fpkt"];
2453--8208[label="0.0052356;2pkt 2fpkt"];
2453--8231[label="0.0078534;3pkt 3fpkt"];
2453--8241[label="0.0052356;2pkt 2fpkt"];
2453--8953[label="1;382pkt 382fpkt"];
6081--8119[label="0.026087;6pkt 6fpkt"];
6081--8122[label="0.026087;6pkt 6fpkt"];
6081--8134[label="0.026087;6pkt 6fpkt"];
6081--8953[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter src_ip="172.20.32.65"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1497[label="133.72.218.102;d;44pkt 44fpkt", shape=diamond, color=yellow];
2915[label="1.92.87.107;s;10pkt 10fpkt", shape=diamond, color=yellow];
6085[label="1.92.87.107;s;10pkt 10fpkt", shape=hexagon, color=black];
6431[label="133.72.218.102;d;44pkt 44fpkt", shape=hexagon, color=black];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.92.87.107:*, 133.72.218.102:63309}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63309: (49.0741%)&lt;BR/&gt; 38625: (1.85185%)&lt;BR/&gt; 38579: (1.85185%)&lt;BR/&gt; 38555: (1.85185%)&lt;BR/&gt; 38536: (1.85185%)&gt;];
}
1497--2915[label="1;10pkt 10fpkt"];
1497--6085[label="1;10pkt 10fpkt"];
1497--6431[label="1;44pkt 44fpkt"];
2915--6085[label="1;10pkt 10fpkt"];
2915--6431[label="1;10pkt 10fpkt"];
6085--6431[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.218.102" dst_port="63309" src_ip="1.92.87.107"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2467[label="200.160.178.140;s;1098pkt 1098fpkt", shape=diamond, color=yellow];
4144[label="154.79.233.187;d;611pkt 611fpkt", shape=diamond, color=yellow];
6089[label="200.160.178.140;s;1098pkt 1098fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.160.178.140:*, 154.79.233.187:161}[55.6466%]&lt;BR/&gt;{200.160.178.140:*, 154.79.233.186:161}[35.4281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 161: (50%)&lt;BR/&gt; 61003: (0.0712504%)&lt;BR/&gt; 26842: (0.0712504%)&lt;BR/&gt; 64318: (0.0534378%)&lt;BR/&gt; 64223: (0.0534378%)&gt;];
}
2467--4144[label="1;611pkt 611fpkt"];
2467--6089[label="1;1098pkt 1098fpkt"];
4144--6089[label="1;611pkt 611fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.233.187" dst_port="161" src_ip="200.160.178.140"/>
      <filter dst_ip="154.79.233.186" dst_port="161" src_ip="200.160.178.140"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16033,1.80748,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
96[label="128.81.73.245s;1pkt 1fpkt", shape=rectangle, color=red];
997[label="41.207.126.111;d;66pkt 66fpkt", shape=diamond, color=yellow];
998[label="128.81.73.245;s;76pkt 76fpkt", shape=diamond, color=yellow];
5278[label="128.81.73.245;s;44pkt 44fpkt", shape=hexagon, color=black];
6091[label="41.207.126.111;d;41pkt 41fpkt", shape=hexagon, color=black];
10570[label="128.81.73.245;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.73.245:80, 41.207.126.111:*}[85.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6753%)&lt;BR/&gt; 65471: (0.811688%)&lt;BR/&gt; 59688: (0.811688%)&lt;BR/&gt; 58574: (0.811688%)&lt;BR/&gt; 56960: (0.811688%)&gt;];
}
96--997[label="1;1pkt 1fpkt"];
96--998[label="1;1pkt 1fpkt"];
96--10570[label="1;1pkt 1fpkt"];
997--998[label="0.984848;65pkt 65fpkt"];
997--5278[label="0.75;33pkt 33fpkt"];
997--6091[label="1;41pkt 41fpkt"];
997--8131[label="0.0757576;5pkt 5fpkt"];
997--8180[label="0.0757576;5pkt 5fpkt"];
997--8219[label="0.0757576;5pkt 5fpkt"];
997--10570[label="0.984848;65pkt 65fpkt"];
998--5278[label="1;44pkt 44fpkt"];
998--6091[label="0.97561;40pkt 40fpkt"];
998--8131[label="0.0789474;6pkt 6fpkt"];
998--8180[label="0.0789474;6pkt 6fpkt"];
998--8219[label="0.0789474;6pkt 6fpkt"];
998--10570[label="1;76pkt 76fpkt"];
5278--6091[label="0.804878;33pkt 33fpkt"];
5278--8131[label="0.136364;6pkt 6fpkt"];
5278--8180[label="0.136364;6pkt 6fpkt"];
5278--8219[label="0.136364;6pkt 6fpkt"];
5278--10570[label="1;44pkt 44fpkt"];
6091--8131[label="0.121951;5pkt 5fpkt"];
6091--8180[label="0.121951;5pkt 5fpkt"];
6091--8219[label="0.121951;5pkt 5fpkt"];
6091--10570[label="0.97561;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.111" src_ip="128.81.73.245" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
425[label="172.45.41.130;d;70pkt 70fpkt", shape=diamond, color=yellow];
426[label="218.157.119.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
906[label="214.49.184.145;d;908pkt 908fpkt", shape=diamond, color=yellow];
1261[label="193.236.244.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
2608[label="214.49.4.205;d;11pkt 11fpkt", shape=diamond, color=yellow];
2763[label="214.241.0.194;s;289pkt 289fpkt", shape=diamond, color=yellow];
2764[label="193.195.156.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
2773[label="193.195.156.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
3238[label="42.236.40.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
3680[label="214.241.3.82;s;20pkt 20fpkt", shape=diamond, color=yellow];
4216[label="41.212.202.112;s;117pkt 117fpkt", shape=diamond, color=yellow];
4239[label="45.73.57.147;s;25pkt 25fpkt", shape=diamond, color=yellow];
4730[label="42.236.37.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
4854[label="172.45.41.130;d;60pkt 60fpkt", shape=hexagon, color=black];
5011[label="214.49.184.145;d;908pkt 908fpkt", shape=hexagon, color=black];
5348[label="193.236.244.218;s;1pkt 1fpkt", shape=hexagon, color=black];
5795[label="193.236.246.133;s;265pkt 265fpkt", shape=hexagon, color=black];
5852[label="42.74.144.146;s;97pkt 97fpkt", shape=hexagon, color=black];
5966[label="193.195.156.76;s;1pkt 1fpkt", shape=hexagon, color=black];
5969[label="193.195.156.78;s;1pkt 1fpkt", shape=hexagon, color=black];
6244[label="214.241.0.194;s;289pkt 289fpkt", shape=hexagon, color=black];
6732[label="214.241.3.82;s;9pkt 9fpkt", shape=hexagon, color=black];
6924[label="214.49.4.205;d;11pkt 11fpkt", shape=hexagon, color=black];
7494[label="41.212.193.25;s;93pkt 93fpkt", shape=hexagon, color=black];
7677[label="193.195.145.88;s;84pkt 84fpkt", shape=hexagon, color=black];
7741[label="42.236.37.49;s;1pkt 1fpkt", shape=hexagon, color=black];
9125[label="218.157.119.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9345[label="7.58.3.101;49pkt 49fpkt", shape=pentagon, color=darkviolet];
9848[label="218.157.119.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10282[label="42.236.45.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10369[label="193.236.244.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11424[label="218.157.119.155;2pkt 2fpkt", shape=invtriangle, color=brown];
11670[label="42.236.45.208;1pkt 1fpkt", shape=invtriangle, color=brown];
11712[label="193.236.244.218;1pkt 1fpkt", shape=invtriangle, color=brown];
12243[label="42.236.45.208;1pkt 1fpkt", shape=invhouse, color=bisque];
12263[label="193.236.244.218;1pkt 1fpkt", shape=invhouse, color=bisque];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.49.184.145:*}[46.4377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9856%)&lt;BR/&gt; 443: (1.32291%)&lt;BR/&gt; 20129: (0.886951%)&lt;BR/&gt; 0: (0.270595%)&lt;BR/&gt; 59966: (0.105232%)&gt;];
}
425--426[label="1;1pkt 1fpkt"];
425--846[label="0.0857143;6pkt 6fpkt"];
425--2006[label="0.114286;8pkt 8fpkt"];
425--2029[label="0.171429;12pkt 12fpkt"];
425--2987[label="0.114286;8pkt 8fpkt"];
425--4854[label="1;60pkt 60fpkt"];
425--5795[label="0.0714286;5pkt 5fpkt"];
425--5852[label="0.142857;10pkt 10fpkt"];
425--7179[label="0.0857143;6pkt 6fpkt"];
425--7201[label="0.114286;8pkt 8fpkt"];
425--8031[label="0.0857143;6pkt 6fpkt"];
425--8131[label="0.157143;11pkt 11fpkt"];
425--8180[label="0.157143;11pkt 11fpkt"];
425--8219[label="0.157143;11pkt 11fpkt"];
425--9125[label="1;1pkt 1fpkt"];
425--9848[label="0.5;1pkt 1fpkt"];
425--11424[label="0.5;1pkt 1fpkt"];
426--4854[label="1;1pkt 1fpkt"];
426--9125[label="1;1pkt 1fpkt"];
906--909[label="1;1pkt 1fpkt"];
906--1261[label="1;1pkt 1fpkt"];
906--1457[label="0.0151844;7pkt 7fpkt"];
906--1660[label="0.315789;12pkt 12fpkt"];
906--1974[label="0.00544959;2pkt 2fpkt"];
906--2066[label="0.00626959;2pkt 2fpkt"];
906--2367[label="0.0296296;4pkt 4fpkt"];
906--2400[label="0.0232558;6pkt 6fpkt"];
906--2421[label="0.396825;25pkt 25fpkt"];
906--2482[label="0.210526;44pkt 44fpkt"];
906--2496[label="0.0298507;2pkt 2fpkt"];
906--2532[label="0.040404;4pkt 4fpkt"];
906--2763[label="0.0207612;6pkt 6fpkt"];
906--2923[label="0.0392157;4pkt 4fpkt"];
906--2978[label="0.235849;25pkt 25fpkt"];
906--3003[label="0.00434783;1pkt 1fpkt"];
906--3238[label="1;1pkt 1fpkt"];
906--3680[label="0.45;9pkt 9fpkt"];
906--3765[label="0.531915;25pkt 25fpkt"];
906--3812[label="0.0344828;4pkt 4fpkt"];
906--4042[label="0.107143;9pkt 9fpkt"];
906--4108[label="0.0217391;2pkt 2fpkt"];
906--4156[label="0.0625;2pkt 2fpkt"];
906--4159[label="0.0430108;4pkt 4fpkt"];
906--4189[label="0.122642;13pkt 13fpkt"];
906--4216[label="0.042735;5pkt 5fpkt"];
906--4239[label="0.08;2pkt 2fpkt"];
906--4340[label="1;2pkt 2fpkt"];
906--4501[label="0.0769231;4pkt 4fpkt"];
906--4532[label="0.0588235;5pkt 5fpkt"];
906--4730[label="1;1pkt 1fpkt"];
906--4985[label="0.0223464;12pkt 12fpkt"];
906--5011[label="1;908pkt 908fpkt"];
906--5229[label="0.308271;123pkt 123fpkt"];
906--5252[label="1;1pkt 1fpkt"];
906--5341[label="0.34375;11pkt 11fpkt"];
906--5348[label="1;1pkt 1fpkt"];
906--5461[label="0.0122905;11pkt 11fpkt"];
906--5781[label="0.0206186;4pkt 4fpkt"];
906--5795[label="0.0792453;21pkt 21fpkt"];
906--5802[label="0.333333;17pkt 17fpkt"];
906--6005[label="0.0755149;33pkt 33fpkt"];
906--6097[label="0.0034965;1pkt 1fpkt"];
906--6145[label="0.00626959;2pkt 2fpkt"];
906--6244[label="0.0207612;6pkt 6fpkt"];
906--6732[label="0.333333;3pkt 3fpkt"];
906--6739[label="0.0105263;1pkt 1fpkt"];
906--7169[label="0.531915;25pkt 25fpkt"];
906--7184[label="0.0645161;2pkt 2fpkt"];
906--7194[label="0.235849;25pkt 25fpkt"];
906--7328[label="1;2pkt 2fpkt"];
906--7426[label="0.0151844;7pkt 7fpkt"];
906--7494[label="0.0430108;4pkt 4fpkt"];
906--7504[label="0.0588235;5pkt 5fpkt"];
906--7677[label="0.107143;9pkt 9fpkt"];
906--7741[label="1;1pkt 1fpkt"];
906--7821[label="0.0277778;12pkt 12fpkt"];
906--7880[label="1;487pkt 487fpkt"];
906--8034[label="0.0645161;2pkt 2fpkt"];
906--8131[label="0.061674;56pkt 56fpkt"];
906--8180[label="0.061674;56pkt 56fpkt"];
906--8219[label="0.061674;56pkt 56fpkt"];
906--8411[label="1;1pkt 1fpkt"];
906--8552[label="0.0816327;4pkt 4fpkt"];
906--8830[label="0.015873;1pkt 1fpkt"];
906--8987[label="0.229358;25pkt 25fpkt"];
906--9008[label="0.0416667;2pkt 2fpkt"];
906--9135[label="0.0512821;2pkt 2fpkt"];
906--9177[label="0.0425532;2pkt 2fpkt"];
906--9198[label="0.25;11pkt 11fpkt"];
906--9224[label="0.0121145;11pkt 11fpkt"];
906--9272[label="0.0392157;2pkt 2fpkt"];
906--9331[label="0.315789;12pkt 12fpkt"];
906--9345[label="0.0408163;2pkt 2fpkt"];
906--9368[label="0.0510204;5pkt 5fpkt"];
906--9460[label="0.111111;6pkt 6fpkt"];
906--9517[label="0.0336134;4pkt 4fpkt"];
906--9558[label="0.0416667;2pkt 2fpkt"];
906--9779[label="0.0645161;2pkt 2fpkt"];
906--9810[label="0.00943396;1pkt 1fpkt"];
906--9989[label="0.00392157;1pkt 1fpkt"];
906--10087[label="0.0350877;2pkt 2fpkt"];
906--10243[label="0.389868;354pkt 354fpkt"];
906--10282[label="1;1pkt 1fpkt"];
906--10369[label="1;1pkt 1fpkt"];
906--10620[label="0.0655738;4pkt 4fpkt"];
906--10735[label="1;1pkt 1fpkt"];
906--11015[label="0.229358;25pkt 25fpkt"];
906--11025[label="0.0416667;2pkt 2fpkt"];
906--11085[label="0.0512821;2pkt 2fpkt"];
906--11128[label="0.0121145;11pkt 11fpkt"];
906--11154[label="0.0392157;2pkt 2fpkt"];
906--11201[label="0.0510204;5pkt 5fpkt"];
906--11238[label="0.111111;6pkt 6fpkt"];
906--11262[label="0.0336134;4pkt 4fpkt"];
906--11550[label="0.0350877;2pkt 2fpkt"];
906--11644[label="0.389868;354pkt 354fpkt"];
906--11670[label="1;1pkt 1fpkt"];
906--11712[label="1;1pkt 1fpkt"];
906--11881[label="1;1pkt 1fpkt"];
906--12025[label="0.0121145;11pkt 11fpkt"];
906--12037[label="0.0392157;2pkt 2fpkt"];
906--12054[label="0.0510204;5pkt 5fpkt"];
906--12233[label="0.389868;354pkt 354fpkt"];
906--12243[label="1;1pkt 1fpkt"];
906--12263[label="1;1pkt 1fpkt"];
1261--5011[label="1;1pkt 1fpkt"];
1261--5348[label="1;1pkt 1fpkt"];
1261--7880[label="1;1pkt 1fpkt"];
1261--8131[label="1;1pkt 1fpkt"];
1261--8180[label="1;1pkt 1fpkt"];
1261--8219[label="1;1pkt 1fpkt"];
1261--10369[label="1;1pkt 1fpkt"];
1261--11712[label="1;1pkt 1fpkt"];
1261--12263[label="1;1pkt 1fpkt"];
2608--2764[label="1;1pkt 1fpkt"];
2608--2773[label="1;1pkt 1fpkt"];
2608--5795[label="0.454545;5pkt 5fpkt"];
2608--5966[label="1;1pkt 1fpkt"];
2608--5969[label="1;1pkt 1fpkt"];
2608--6924[label="1;11pkt 11fpkt"];
2608--7426[label="0.272727;3pkt 3fpkt"];
2608--8131[label="0.0909091;1pkt 1fpkt"];
2608--8180[label="0.0909091;1pkt 1fpkt"];
2608--8219[label="0.0909091;1pkt 1fpkt"];
2763--5011[label="0.0207612;6pkt 6fpkt"];
2763--6244[label="1;289pkt 289fpkt"];
2764--5966[label="1;1pkt 1fpkt"];
2764--6924[label="1;1pkt 1fpkt"];
2773--5969[label="1;1pkt 1fpkt"];
2773--6924[label="1;1pkt 1fpkt"];
3238--5011[label="1;1pkt 1fpkt"];
3238--7880[label="1;1pkt 1fpkt"];
3680--5011[label="0.45;9pkt 9fpkt"];
3680--6732[label="1;9pkt 9fpkt"];
4216--4251[label="0.00854701;1pkt 1fpkt"];
4216--5011[label="0.042735;5pkt 5fpkt"];
4216--5014[label="0.00854701;1pkt 1fpkt"];
4216--5158[label="0.00854701;1pkt 1fpkt"];
4216--5175[label="0.0769231;9pkt 9fpkt"];
4216--5839[label="0.00854701;1pkt 1fpkt"];
4216--6104[label="0.0854701;10pkt 10fpkt"];
4216--6293[label="0.00854701;1pkt 1fpkt"];
4216--7260[label="0.00854701;1pkt 1fpkt"];
4216--7880[label="0.025641;3pkt 3fpkt"];
4216--8131[label="0.00854701;1pkt 1fpkt"];
4216--8180[label="0.00854701;1pkt 1fpkt"];
4216--8219[label="0.00854701;1pkt 1fpkt"];
4239--5011[label="0.08;2pkt 2fpkt"];
4239--7371[label="0.04;1pkt 1fpkt"];
4239--8131[label="0.04;1pkt 1fpkt"];
4239--8180[label="0.04;1pkt 1fpkt"];
4239--8219[label="0.04;1pkt 1fpkt"];
4239--9779[label="1;25pkt 25fpkt"];
4730--5011[label="1;1pkt 1fpkt"];
4730--7741[label="1;1pkt 1fpkt"];
4854--5795[label="0.0833333;5pkt 5fpkt"];
4854--5852[label="0.166667;10pkt 10fpkt"];
4854--7179[label="0.1;6pkt 6fpkt"];
4854--7201[label="0.133333;8pkt 8fpkt"];
4854--8031[label="0.1;6pkt 6fpkt"];
4854--8131[label="0.183333;11pkt 11fpkt"];
4854--8180[label="0.183333;11pkt 11fpkt"];
4854--8219[label="0.183333;11pkt 11fpkt"];
4854--9125[label="1;1pkt 1fpkt"];
4854--9848[label="0.5;1pkt 1fpkt"];
4854--11424[label="0.5;1pkt 1fpkt"];
5011--5229[label="0.308271;123pkt 123fpkt"];
5011--5252[label="1;1pkt 1fpkt"];
5011--5341[label="0.34375;11pkt 11fpkt"];
5011--5348[label="1;1pkt 1fpkt"];
5011--5461[label="0.0122905;11pkt 11fpkt"];
5011--5781[label="0.0206186;4pkt 4fpkt"];
5011--5795[label="0.0792453;21pkt 21fpkt"];
5011--5802[label="0.333333;17pkt 17fpkt"];
5011--6005[label="0.0755149;33pkt 33fpkt"];
5011--6097[label="0.0034965;1pkt 1fpkt"];
5011--6145[label="0.00626959;2pkt 2fpkt"];
5011--6244[label="0.0207612;6pkt 6fpkt"];
5011--6732[label="0.333333;3pkt 3fpkt"];
5011--6739[label="0.0105263;1pkt 1fpkt"];
5011--7169[label="0.531915;25pkt 25fpkt"];
5011--7184[label="0.0645161;2pkt 2fpkt"];
5011--7194[label="0.235849;25pkt 25fpkt"];
5011--7328[label="1;2pkt 2fpkt"];
5011--7426[label="0.0151844;7pkt 7fpkt"];
5011--7494[label="0.0430108;4pkt 4fpkt"];
5011--7504[label="0.0588235;5pkt 5fpkt"];
5011--7677[label="0.107143;9pkt 9fpkt"];
5011--7741[label="1;1pkt 1fpkt"];
5011--7821[label="0.0277778;12pkt 12fpkt"];
5011--7880[label="1;487pkt 487fpkt"];
5011--8034[label="0.0645161;2pkt 2fpkt"];
5011--8131[label="0.061674;56pkt 56fpkt"];
5011--8180[label="0.061674;56pkt 56fpkt"];
5011--8219[label="0.061674;56pkt 56fpkt"];
5011--8411[label="1;1pkt 1fpkt"];
5011--8552[label="0.0816327;4pkt 4fpkt"];
5011--8830[label="0.015873;1pkt 1fpkt"];
5011--8987[label="0.229358;25pkt 25fpkt"];
5011--9008[label="0.0416667;2pkt 2fpkt"];
5011--9135[label="0.0512821;2pkt 2fpkt"];
5011--9177[label="0.0425532;2pkt 2fpkt"];
5011--9198[label="0.25;11pkt 11fpkt"];
5011--9224[label="0.0121145;11pkt 11fpkt"];
5011--9272[label="0.0392157;2pkt 2fpkt"];
5011--9331[label="0.315789;12pkt 12fpkt"];
5011--9345[label="0.0408163;2pkt 2fpkt"];
5011--9368[label="0.0510204;5pkt 5fpkt"];
5011--9460[label="0.111111;6pkt 6fpkt"];
5011--9517[label="0.0336134;4pkt 4fpkt"];
5011--9558[label="0.0416667;2pkt 2fpkt"];
5011--9779[label="0.0645161;2pkt 2fpkt"];
5011--9810[label="0.00943396;1pkt 1fpkt"];
5011--9989[label="0.00392157;1pkt 1fpkt"];
5011--10087[label="0.0350877;2pkt 2fpkt"];
5011--10243[label="0.389868;354pkt 354fpkt"];
5011--10282[label="1;1pkt 1fpkt"];
5011--10369[label="1;1pkt 1fpkt"];
5011--10620[label="0.0655738;4pkt 4fpkt"];
5011--10735[label="1;1pkt 1fpkt"];
5011--11015[label="0.229358;25pkt 25fpkt"];
5011--11025[label="0.0416667;2pkt 2fpkt"];
5011--11085[label="0.0512821;2pkt 2fpkt"];
5011--11128[label="0.0121145;11pkt 11fpkt"];
5011--11154[label="0.0392157;2pkt 2fpkt"];
5011--11201[label="0.0510204;5pkt 5fpkt"];
5011--11238[label="0.111111;6pkt 6fpkt"];
5011--11262[label="0.0336134;4pkt 4fpkt"];
5011--11550[label="0.0350877;2pkt 2fpkt"];
5011--11644[label="0.389868;354pkt 354fpkt"];
5011--11670[label="1;1pkt 1fpkt"];
5011--11712[label="1;1pkt 1fpkt"];
5011--11881[label="1;1pkt 1fpkt"];
5011--12025[label="0.0121145;11pkt 11fpkt"];
5011--12037[label="0.0392157;2pkt 2fpkt"];
5011--12054[label="0.0510204;5pkt 5fpkt"];
5011--12233[label="0.389868;354pkt 354fpkt"];
5011--12243[label="1;1pkt 1fpkt"];
5011--12263[label="1;1pkt 1fpkt"];
5348--7880[label="1;1pkt 1fpkt"];
5348--8131[label="1;1pkt 1fpkt"];
5348--8180[label="1;1pkt 1fpkt"];
5348--8219[label="1;1pkt 1fpkt"];
5348--10369[label="1;1pkt 1fpkt"];
5348--11712[label="1;1pkt 1fpkt"];
5348--12263[label="1;1pkt 1fpkt"];
5795--6104[label="0.0325581;7pkt 7fpkt"];
5795--6293[label="0.29434;78pkt 78fpkt"];
5795--6488[label="0.00754717;2pkt 2fpkt"];
5795--6530[label="0.147059;5pkt 5fpkt"];
5795--6924[label="0.454545;5pkt 5fpkt"];
5795--7371[label="0.0301887;8pkt 8fpkt"];
5795--7572[label="0.0582524;6pkt 6fpkt"];
5795--7880[label="0.0490566;13pkt 13fpkt"];
5795--7956[label="0.147059;5pkt 5fpkt"];
5795--7980[label="0.142857;20pkt 20fpkt"];
5795--8131[label="0.109434;29pkt 29fpkt"];
5795--8180[label="0.109434;29pkt 29fpkt"];
5795--8219[label="0.109434;29pkt 29fpkt"];
5852--6312[label="0.443299;43pkt 43fpkt"];
5852--7105[label="0.0405405;3pkt 3fpkt"];
5852--7371[label="0.0721649;7pkt 7fpkt"];
5852--8131[label="0.195876;19pkt 19fpkt"];
5852--8180[label="0.195876;19pkt 19fpkt"];
5852--8219[label="0.195876;19pkt 19fpkt"];
5966--6924[label="1;1pkt 1fpkt"];
5969--6924[label="1;1pkt 1fpkt"];
6924--7426[label="0.272727;3pkt 3fpkt"];
6924--8131[label="0.0909091;1pkt 1fpkt"];
6924--8180[label="0.0909091;1pkt 1fpkt"];
6924--8219[label="0.0909091;1pkt 1fpkt"];
7494--7880[label="0.0322581;3pkt 3fpkt"];
7494--8131[label="0.129032;12pkt 12fpkt"];
7494--8180[label="0.129032;12pkt 12fpkt"];
7494--8219[label="0.129032;12pkt 12fpkt"];
7677--7980[label="0.0119048;1pkt 1fpkt"];
9848--11424[label="1;2pkt 2fpkt"];
10282--11670[label="1;1pkt 1fpkt"];
10282--12243[label="1;1pkt 1fpkt"];
10369--11712[label="1;1pkt 1fpkt"];
10369--12263[label="1;1pkt 1fpkt"];
11670--12243[label="1;1pkt 1fpkt"];
11712--12263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.184.145" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1545[label="214.49.185.77;s;24pkt 24fpkt", shape=diamond, color=yellow];
2001[label="41.207.126.86;d;22pkt 22fpkt", shape=diamond, color=yellow];
5843[label="41.207.126.86;d;22pkt 22fpkt", shape=hexagon, color=black];
6112[label="214.49.185.77;s;18pkt 18fpkt", shape=hexagon, color=black];
7948[label="214.49.185.77;s;18pkt 18fpkt", shape=polygon, color=gold];
9105[label="214.49.185.77;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10075[label="215.40.234.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.185.77:80, 116.52.224.228:*}[30%]&lt;BR/&gt;{215.40.234.181:443, 41.207.126.86:*}[22.5%]&lt;BR/&gt;{214.49.185.77:80, 41.207.126.86:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.625%)&lt;BR/&gt; 443: (9.375%)&lt;BR/&gt; 60416: (2.08333%)&lt;BR/&gt; 46631: (2.08333%)&lt;BR/&gt; 43022: (2.08333%)&gt;];
}
1545--2001[label="0.363636;8pkt 8fpkt"];
1545--5843[label="0.363636;8pkt 8fpkt"];
1545--6112[label="1;18pkt 18fpkt"];
1545--7948[label="1;18pkt 18fpkt"];
1545--8131[label="0.125;3pkt 3fpkt"];
1545--8180[label="0.125;3pkt 3fpkt"];
1545--8219[label="0.125;3pkt 3fpkt"];
1545--9105[label="1;24pkt 24fpkt"];
2001--5843[label="1;22pkt 22fpkt"];
2001--6112[label="0.388889;7pkt 7fpkt"];
2001--7948[label="0.388889;7pkt 7fpkt"];
2001--8131[label="0.0909091;2pkt 2fpkt"];
2001--8180[label="0.0909091;2pkt 2fpkt"];
2001--8219[label="0.0909091;2pkt 2fpkt"];
2001--9105[label="0.363636;8pkt 8fpkt"];
2001--10075[label="0.933333;14pkt 14fpkt"];
5843--6112[label="0.388889;7pkt 7fpkt"];
5843--7948[label="0.388889;7pkt 7fpkt"];
5843--8131[label="0.0909091;2pkt 2fpkt"];
5843--8180[label="0.0909091;2pkt 2fpkt"];
5843--8219[label="0.0909091;2pkt 2fpkt"];
5843--9105[label="0.363636;8pkt 8fpkt"];
5843--10075[label="0.933333;14pkt 14fpkt"];
6112--7948[label="1;18pkt 18fpkt"];
6112--8131[label="0.166667;3pkt 3fpkt"];
6112--8180[label="0.166667;3pkt 3fpkt"];
6112--8219[label="0.166667;3pkt 3fpkt"];
6112--9105[label="1;18pkt 18fpkt"];
7948--8131[label="0.166667;3pkt 3fpkt"];
7948--8180[label="0.166667;3pkt 3fpkt"];
7948--8219[label="0.166667;3pkt 3fpkt"];
7948--9105[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.86" src_ip="214.49.185.77" src_port="80"/>
      <filter dst_ip="116.52.224.228" src_ip="214.49.185.77" src_port="80"/>
      <filter dst_ip="41.207.126.86" src_ip="215.40.234.181" src_port="443"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
243[label="133.72.128.83;d;771pkt 771fpkt", shape=diamond, color=yellow];
904[label="223.68.229.248;s;404pkt 404fpkt", shape=diamond, color=yellow];
918[label="223.70.56.148;s;97pkt 97fpkt", shape=diamond, color=yellow];
1007[label="101.208.88.167;s;252pkt 252fpkt", shape=diamond, color=yellow];
1102[label="97.163.1.243;s;447pkt 447fpkt", shape=diamond, color=yellow];
3908[label="214.132.100.143;s;20pkt 20fpkt", shape=diamond, color=yellow];
5009[label="223.68.229.248;s;388pkt 388fpkt", shape=hexagon, color=black];
5015[label="223.70.56.148;s;97pkt 97fpkt", shape=hexagon, color=black];
5069[label="97.163.1.243;s;447pkt 447fpkt", shape=hexagon, color=black];
5552[label="101.208.88.167;s;252pkt 252fpkt", shape=hexagon, color=black];
5713[label="133.72.128.83;d;638pkt 638fpkt", shape=hexagon, color=black];
8950[label="96.221.169.64;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9218[label="6.18.26.88;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9416[label="194.228.108.107;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9417[label="200.59.114.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9789[label="223.70.56.148;97pkt 97fpkt", shape=pentagon, color=darkviolet];
10555[label="97.163.1.243;491pkt 491fpkt", shape=pentagon, color=darkviolet];
10730[label="0.116.20.15;1pkt 1fpkt", shape=invtriangle, color=brown];
11126[label="6.18.26.88;4pkt 4fpkt", shape=invtriangle, color=brown];
11217[label="194.228.108.107;11pkt 11fpkt", shape=invtriangle, color=brown];
11394[label="223.70.56.148;97pkt 97fpkt", shape=invtriangle, color=brown];
11810[label="97.163.1.243;491pkt 491fpkt", shape=invtriangle, color=brown];
11877[label="0.116.20.15;1pkt 1fpkt", shape=invhouse, color=bisque];
11987[label="96.221.169.68;4pkt 4fpkt", shape=invhouse, color=bisque];
12024[label="6.18.26.88;4pkt 4fpkt", shape=invhouse, color=bisque];
12302[label="97.163.1.243;491pkt 491fpkt", shape=invhouse, color=bisque];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.128.83:*}[54.8867%]&lt;BR/&gt;{97.163.1.243:80, 133.72.128.85:*}[34.0652%]&lt;BR/&gt;{223.68.229.248:80, *:*}[28.6119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8646%)&lt;BR/&gt; 443: (0.135404%)&lt;BR/&gt; 40793: (0.0631883%)&lt;BR/&gt; 40026: (0.0631883%)&lt;BR/&gt; 40020: (0.0631883%)&gt;];
}
243--904[label="0.621287;251pkt 251fpkt"];
243--918[label="1;97pkt 97fpkt"];
243--1007[label="1;252pkt 252fpkt"];
243--1039[label="0.933333;42pkt 42fpkt"];
243--1102[label="0.01566;7pkt 7fpkt"];
243--3908[label="1;20pkt 20fpkt"];
243--5009[label="0.608247;236pkt 236fpkt"];
243--5015[label="1;97pkt 97fpkt"];
243--5069[label="0.01566;7pkt 7fpkt"];
243--5552[label="1;252pkt 252fpkt"];
243--5713[label="1;638pkt 638fpkt"];
243--6118[label="0.933333;42pkt 42fpkt"];
243--8131[label="0.076524;59pkt 59fpkt"];
243--8180[label="0.076524;59pkt 59fpkt"];
243--8219[label="0.076524;59pkt 59fpkt"];
243--8950[label="0.888889;16pkt 16fpkt"];
243--9218[label="1;4pkt 4fpkt"];
243--9416[label="0.818182;9pkt 9fpkt"];
243--9417[label="1;1pkt 1fpkt"];
243--9789[label="1;97pkt 97fpkt"];
243--10555[label="0.0142566;7pkt 7fpkt"];
243--10730[label="1;1pkt 1fpkt"];
243--11126[label="1;4pkt 4fpkt"];
243--11217[label="0.818182;9pkt 9fpkt"];
243--11394[label="1;97pkt 97fpkt"];
243--11810[label="0.0142566;7pkt 7fpkt"];
243--11877[label="1;1pkt 1fpkt"];
243--11987[label="1;4pkt 4fpkt"];
243--12024[label="1;4pkt 4fpkt"];
243--12302[label="0.0142566;7pkt 7fpkt"];
904--5009[label="1;388pkt 388fpkt"];
904--5713[label="0.509901;206pkt 206fpkt"];
904--6312[label="0.376238;152pkt 152fpkt"];
904--8131[label="0.0990099;40pkt 40fpkt"];
904--8180[label="0.0990099;40pkt 40fpkt"];
904--8219[label="0.0990099;40pkt 40fpkt"];
918--5015[label="1;97pkt 97fpkt"];
918--5713[label="1;97pkt 97fpkt"];
918--8131[label="0.14433;14pkt 14fpkt"];
918--8180[label="0.14433;14pkt 14fpkt"];
918--8219[label="0.14433;14pkt 14fpkt"];
918--9789[label="1;97pkt 97fpkt"];
918--11394[label="1;97pkt 97fpkt"];
1007--5552[label="1;252pkt 252fpkt"];
1007--5713[label="0.825397;208pkt 208fpkt"];
1007--8131[label="0.0515873;13pkt 13fpkt"];
1007--8180[label="0.0515873;13pkt 13fpkt"];
1007--8219[label="0.0515873;13pkt 13fpkt"];
1102--5069[label="1;447pkt 447fpkt"];
1102--5713[label="0.00894855;4pkt 4fpkt"];
1102--6312[label="0.98434;440pkt 440fpkt"];
1102--8131[label="0.0850112;38pkt 38fpkt"];
1102--8180[label="0.0850112;38pkt 38fpkt"];
1102--8219[label="0.0850112;38pkt 38fpkt"];
1102--10555[label="1;447pkt 447fpkt"];
1102--11810[label="1;447pkt 447fpkt"];
1102--12302[label="1;447pkt 447fpkt"];
3908--5713[label="0.7;14pkt 14fpkt"];
5009--5713[label="0.530928;206pkt 206fpkt"];
5009--6312[label="0.391753;152pkt 152fpkt"];
5009--8131[label="0.103093;40pkt 40fpkt"];
5009--8180[label="0.103093;40pkt 40fpkt"];
5009--8219[label="0.103093;40pkt 40fpkt"];
5015--5713[label="1;97pkt 97fpkt"];
5015--8131[label="0.14433;14pkt 14fpkt"];
5015--8180[label="0.14433;14pkt 14fpkt"];
5015--8219[label="0.14433;14pkt 14fpkt"];
5015--9789[label="1;97pkt 97fpkt"];
5015--11394[label="1;97pkt 97fpkt"];
5069--5713[label="0.00894855;4pkt 4fpkt"];
5069--6312[label="0.98434;440pkt 440fpkt"];
5069--8131[label="0.0850112;38pkt 38fpkt"];
5069--8180[label="0.0850112;38pkt 38fpkt"];
5069--8219[label="0.0850112;38pkt 38fpkt"];
5069--10555[label="1;447pkt 447fpkt"];
5069--11810[label="1;447pkt 447fpkt"];
5069--12302[label="1;447pkt 447fpkt"];
5552--5713[label="0.825397;208pkt 208fpkt"];
5552--8131[label="0.0515873;13pkt 13fpkt"];
5552--8180[label="0.0515873;13pkt 13fpkt"];
5552--8219[label="0.0515873;13pkt 13fpkt"];
5713--6118[label="0.711111;32pkt 32fpkt"];
5713--8131[label="0.0924765;59pkt 59fpkt"];
5713--8180[label="0.0924765;59pkt 59fpkt"];
5713--8219[label="0.0924765;59pkt 59fpkt"];
5713--8950[label="0.444444;8pkt 8fpkt"];
5713--9218[label="0.75;3pkt 3fpkt"];
5713--9416[label="0.545455;6pkt 6fpkt"];
5713--9417[label="1;1pkt 1fpkt"];
5713--9789[label="1;97pkt 97fpkt"];
5713--10555[label="0.00814664;4pkt 4fpkt"];
5713--11126[label="0.75;3pkt 3fpkt"];
5713--11217[label="0.545455;6pkt 6fpkt"];
5713--11394[label="1;97pkt 97fpkt"];
5713--11810[label="0.00814664;4pkt 4fpkt"];
5713--11987[label="1;4pkt 4fpkt"];
5713--12024[label="0.75;3pkt 3fpkt"];
5713--12302[label="0.00814664;4pkt 4fpkt"];
9218--11126[label="1;4pkt 4fpkt"];
9218--12024[label="1;4pkt 4fpkt"];
9416--11217[label="1;11pkt 11fpkt"];
9789--11394[label="1;97pkt 97fpkt"];
10555--11810[label="1;491pkt 491fpkt"];
10555--12302[label="1;491pkt 491fpkt"];
10730--11877[label="1;1pkt 1fpkt"];
11126--12024[label="1;4pkt 4fpkt"];
11810--12302[label="1;491pkt 491fpkt"];
</description>
    <slice>
      <filter src_ip="223.68.229.248" src_port="80"/>
      <filter dst_ip="133.72.128.83" src_port="80"/>
      <filter dst_ip="133.72.128.85" src_ip="97.163.1.243" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
2069[label="205.207.34.214;s;1327pkt 1327fpkt", shape=diamond, color=yellow];
6148[label="205.207.34.214;s;849pkt 849fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.207.34.214:*, 214.56.201.59:7733}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7733: (50%)&lt;BR/&gt; 5000: (0.0459559%)&lt;BR/&gt; 4999: (0.0459559%)&lt;BR/&gt; 4998: (0.0459559%)&lt;BR/&gt; 4996: (0.0459559%)&gt;];
}
2069--6148[label="1;849pkt 849fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.201.59" dst_port="7733" src_ip="205.207.34.214"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
512[label="133.72.64.82;d;483pkt 483fpkt", shape=diamond, color=yellow];
825[label="101.84.25.203;s;870pkt 870fpkt", shape=diamond, color=yellow];
949[label="174.194.18.43;d;205pkt 205fpkt", shape=diamond, color=yellow];
5229[label="101.84.25.203;s;399pkt 399fpkt", shape=hexagon, color=black];
5436[label="133.72.64.82;d;211pkt 211fpkt", shape=hexagon, color=black];
9831[label="101.184.79.153;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10243[label="101.84.25.203;928pkt 928fpkt", shape=pentagon, color=darkviolet];
11416[label="101.184.79.153;8pkt 8fpkt", shape=invtriangle, color=brown];
11644[label="101.84.25.203;928pkt 928fpkt", shape=invtriangle, color=brown];
12233[label="101.84.25.203;928pkt 928fpkt", shape=invhouse, color=bisque];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.84.25.203:80, 214.49.184.145:*}[32.6531%]&lt;BR/&gt;{101.84.25.203:80, 133.72.64.82:*}[30.6122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9972%)&lt;BR/&gt; 53: (1.17754%)&lt;BR/&gt; 443: (0.553543%)&lt;BR/&gt; 25: (0.231481%)&lt;BR/&gt; 3703: (0.110709%)&gt;];
}
512--818[label="0.00414079;2pkt 2fpkt"];
512--825[label="0.612836;296pkt 296fpkt"];
512--1023[label="0.00235294;1pkt 1fpkt"];
512--1970[label="0.0144928;7pkt 7fpkt"];
512--1974[label="0.00544959;2pkt 2fpkt"];
512--2029[label="0.00571429;1pkt 1fpkt"];
512--2447[label="0.0124224;6pkt 6fpkt"];
512--2562[label="0.125;8pkt 8fpkt"];
512--4985[label="0.00207039;1pkt 1fpkt"];
512--5229[label="0.290727;116pkt 116fpkt"];
512--5436[label="1;211pkt 211fpkt"];
512--5852[label="0.0103093;1pkt 1fpkt"];
512--6074[label="0.0124224;6pkt 6fpkt"];
512--6097[label="0.00699301;2pkt 2fpkt"];
512--6149[label="0.125;8pkt 8fpkt"];
512--7161[label="0.0144928;7pkt 7fpkt"];
512--7466[label="0.00235294;1pkt 1fpkt"];
512--7821[label="0.00231481;1pkt 1fpkt"];
512--8131[label="0.132505;64pkt 64fpkt"];
512--8180[label="0.132505;64pkt 64fpkt"];
512--8219[label="0.132505;64pkt 64fpkt"];
512--8639[label="0.00930233;2pkt 2fpkt"];
512--8755[label="0.0383142;10pkt 10fpkt"];
512--8916[label="0.00543478;1pkt 1fpkt"];
512--9487[label="0.0143885;2pkt 2fpkt"];
512--9690[label="0.777778;7pkt 7fpkt"];
512--9821[label="0.375;3pkt 3fpkt"];
512--9831[label="0.375;3pkt 3fpkt"];
512--10243[label="0.612836;296pkt 296fpkt"];
512--10984[label="0.00543478;1pkt 1fpkt"];
512--11251[label="0.0143885;2pkt 2fpkt"];
512--11411[label="0.375;3pkt 3fpkt"];
512--11416[label="0.375;3pkt 3fpkt"];
512--11644[label="0.612836;296pkt 296fpkt"];
512--11977[label="0.00543478;1pkt 1fpkt"];
512--12233[label="0.612836;296pkt 296fpkt"];
825--906[label="0.406897;354pkt 354fpkt"];
825--949[label="0.726829;149pkt 149fpkt"];
825--5011[label="0.406897;354pkt 354fpkt"];
825--5229[label="1;399pkt 399fpkt"];
825--5436[label="0.549763;116pkt 116fpkt"];
825--7880[label="0.412731;201pkt 201fpkt"];
825--8131[label="0.0701149;61pkt 61fpkt"];
825--8180[label="0.0701149;61pkt 61fpkt"];
825--8219[label="0.0701149;61pkt 61fpkt"];
825--10243[label="1;870pkt 870fpkt"];
825--11644[label="1;870pkt 870fpkt"];
825--12233[label="1;870pkt 870fpkt"];
949--950[label="1;54pkt 54fpkt"];
949--5025[label="1;54pkt 54fpkt"];
949--5229[label="0.609756;125pkt 125fpkt"];
949--8131[label="0.102439;21pkt 21fpkt"];
949--8180[label="0.102439;21pkt 21fpkt"];
949--8219[label="0.102439;21pkt 21fpkt"];
949--10243[label="0.726829;149pkt 149fpkt"];
949--11644[label="0.726829;149pkt 149fpkt"];
949--12233[label="0.726829;149pkt 149fpkt"];
5229--5436[label="0.549763;116pkt 116fpkt"];
5229--7880[label="0.308271;123pkt 123fpkt"];
5229--8131[label="0.152882;61pkt 61fpkt"];
5229--8180[label="0.152882;61pkt 61fpkt"];
5229--8219[label="0.152882;61pkt 61fpkt"];
5229--10243[label="1;399pkt 399fpkt"];
5229--11644[label="1;399pkt 399fpkt"];
5229--12233[label="1;399pkt 399fpkt"];
5436--5852[label="0.0103093;1pkt 1fpkt"];
5436--6074[label="0.0236967;5pkt 5fpkt"];
5436--6097[label="0.00947867;2pkt 2fpkt"];
5436--7161[label="0.0236967;5pkt 5fpkt"];
5436--7466[label="0.00473934;1pkt 1fpkt"];
5436--7821[label="0.00473934;1pkt 1fpkt"];
5436--8131[label="0.303318;64pkt 64fpkt"];
5436--8180[label="0.303318;64pkt 64fpkt"];
5436--8219[label="0.303318;64pkt 64fpkt"];
5436--8639[label="0.00473934;1pkt 1fpkt"];
5436--8916[label="0.00543478;1pkt 1fpkt"];
5436--9487[label="0.00719424;1pkt 1fpkt"];
5436--9690[label="0.666667;6pkt 6fpkt"];
5436--9821[label="0.375;3pkt 3fpkt"];
5436--9831[label="0.375;3pkt 3fpkt"];
5436--10243[label="0.549763;116pkt 116fpkt"];
5436--10984[label="0.00543478;1pkt 1fpkt"];
5436--11251[label="0.00719424;1pkt 1fpkt"];
5436--11411[label="0.375;3pkt 3fpkt"];
5436--11416[label="0.375;3pkt 3fpkt"];
5436--11644[label="0.549763;116pkt 116fpkt"];
5436--11977[label="0.00543478;1pkt 1fpkt"];
5436--12233[label="0.549763;116pkt 116fpkt"];
9831--11416[label="1;8pkt 8fpkt"];
10243--11644[label="1;928pkt 928fpkt"];
10243--12233[label="1;928pkt 928fpkt"];
11644--12233[label="1;928pkt 928fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.64.82" src_ip="101.84.25.203" src_port="80"/>
      <filter dst_ip="214.49.184.145" src_ip="101.84.25.203" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2073[label="22.37.128.214;s;2pkt 2fpkt", shape=diamond, color=yellow];
6154[label="22.37.128.214;s;2pkt 2fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.37.128.214:59716, 169.18.131.118:51177}[50%]&lt;BR/&gt;{22.37.128.214:63537, 169.18.131.118:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63537: (25%)&lt;BR/&gt; 59716: (25%)&lt;BR/&gt; 51177: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
2073--6154[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="80" src_ip="22.37.128.214" src_port="63537"/>
      <filter dst_ip="169.18.131.118" dst_port="51177" src_ip="22.37.128.214" src_port="59716"/>
    </slice>
    <from sec="1229058009" usec="0"/>
    <to sec="1229058438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
1623[label="133.72.126.23;d;62pkt 62fpkt", shape=diamond, color=yellow];
1733[label="214.241.0.192;s;52pkt 52fpkt", shape=diamond, color=yellow];
1753[label="214.241.0.238;s;20pkt 20fpkt", shape=diamond, color=yellow];
3162[label="214.241.2.195;s;7pkt 7fpkt", shape=diamond, color=yellow];
5361[label="214.241.0.192;s;52pkt 52fpkt", shape=hexagon, color=black];
5913[label="214.241.0.238;s;20pkt 20fpkt", shape=hexagon, color=black];
6175[label="133.72.126.23;d;53pkt 53fpkt", shape=hexagon, color=black];
7807[label="214.241.0.192;s;10pkt 10fpkt", shape=polygon, color=gold];
7900[label="133.72.126.23;d;53pkt 53fpkt", shape=polygon, color=gold];
10169[label="214.241.2.195;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10554[label="214.241.0.243;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11809[label="214.241.0.243;5pkt 5fpkt", shape=invtriangle, color=brown];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.0.192:80, 214.49.185.51:*}[34.7368%]&lt;BR/&gt;{214.241.0.238:80, 133.72.126.23:*}[21.0526%]&lt;BR/&gt;{214.241.0.192:80, 133.72.126.23:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6879%)&lt;BR/&gt; 443: (1.44509%)&lt;BR/&gt; 53718: (0.867052%)&lt;BR/&gt; 53714: (0.867052%)&lt;BR/&gt; 53713: (0.867052%)&gt;];
}
1623--1733[label="0.365385;19pkt 19fpkt"];
1623--1753[label="1;20pkt 20fpkt"];
1623--1759[label="1;3pkt 3fpkt"];
1623--3162[label="1;7pkt 7fpkt"];
1623--5361[label="0.365385;19pkt 19fpkt"];
1623--5368[label="1;3pkt 3fpkt"];
1623--5913[label="1;20pkt 20fpkt"];
1623--6175[label="1;53pkt 53fpkt"];
1623--7807[label="1;10pkt 10fpkt"];
1623--7900[label="1;53pkt 53fpkt"];
1623--8131[label="0.209677;13pkt 13fpkt"];
1623--8180[label="0.209677;13pkt 13fpkt"];
1623--8219[label="0.209677;13pkt 13fpkt"];
1623--10143[label="0.306452;19pkt 19fpkt"];
1623--10169[label="1;7pkt 7fpkt"];
1623--10500[label="0.75;3pkt 3fpkt"];
1623--10554[label="1;5pkt 5fpkt"];
1623--11783[label="0.75;3pkt 3fpkt"];
1623--11809[label="1;5pkt 5fpkt"];
1733--5361[label="1;52pkt 52fpkt"];
1733--6175[label="0.192308;10pkt 10fpkt"];
1733--7807[label="1;10pkt 10fpkt"];
1733--7900[label="0.192308;10pkt 10fpkt"];
1733--10143[label="1;52pkt 52fpkt"];
1753--5913[label="1;20pkt 20fpkt"];
1753--6175[label="1;20pkt 20fpkt"];
1753--7900[label="1;20pkt 20fpkt"];
1753--8131[label="0.4;8pkt 8fpkt"];
1753--8180[label="0.4;8pkt 8fpkt"];
1753--8219[label="0.4;8pkt 8fpkt"];
3162--6175[label="1;7pkt 7fpkt"];
3162--7900[label="1;7pkt 7fpkt"];
3162--10169[label="1;7pkt 7fpkt"];
5361--6175[label="0.192308;10pkt 10fpkt"];
5361--7807[label="1;10pkt 10fpkt"];
5361--7900[label="0.192308;10pkt 10fpkt"];
5361--10143[label="1;52pkt 52fpkt"];
5913--6175[label="1;20pkt 20fpkt"];
5913--7900[label="1;20pkt 20fpkt"];
5913--8131[label="0.4;8pkt 8fpkt"];
5913--8180[label="0.4;8pkt 8fpkt"];
5913--8219[label="0.4;8pkt 8fpkt"];
6175--7807[label="1;10pkt 10fpkt"];
6175--7900[label="1;53pkt 53fpkt"];
6175--8131[label="0.245283;13pkt 13fpkt"];
6175--8180[label="0.245283;13pkt 13fpkt"];
6175--8219[label="0.245283;13pkt 13fpkt"];
6175--10143[label="0.188679;10pkt 10fpkt"];
6175--10169[label="1;7pkt 7fpkt"];
6175--10500[label="0.75;3pkt 3fpkt"];
6175--10554[label="1;5pkt 5fpkt"];
6175--11783[label="0.75;3pkt 3fpkt"];
6175--11809[label="1;5pkt 5fpkt"];
7807--7900[label="1;10pkt 10fpkt"];
7807--10143[label="1;10pkt 10fpkt"];
7900--8131[label="0.245283;13pkt 13fpkt"];
7900--8180[label="0.245283;13pkt 13fpkt"];
7900--8219[label="0.245283;13pkt 13fpkt"];
7900--10143[label="0.188679;10pkt 10fpkt"];
7900--10169[label="1;7pkt 7fpkt"];
7900--10500[label="0.75;3pkt 3fpkt"];
7900--10554[label="1;5pkt 5fpkt"];
7900--11783[label="0.75;3pkt 3fpkt"];
7900--11809[label="1;5pkt 5fpkt"];
10554--11809[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.126.23" src_ip="214.241.0.192" src_port="80"/>
      <filter dst_ip="214.49.185.51" src_ip="214.241.0.192" src_port="80"/>
      <filter dst_ip="133.72.126.23" src_ip="214.241.0.238" src_port="80"/>
    </slice>
    <from sec="1229058020" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2186[label="174.194.253.208;d;15pkt 15fpkt", shape=diamond, color=yellow];
2280[label="34.236.149.139;s;12pkt 12fpkt", shape=diamond, color=yellow];
6202[label="174.194.253.208;d;15pkt 15fpkt", shape=hexagon, color=black];
7908[label="174.194.253.208;d;15pkt 15fpkt", shape=polygon, color=gold];
9696[label="34.236.149.139;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.236.149.139:80, 174.194.253.208:*}[80%]&lt;BR/&gt;{41.212.192.109:80, 174.194.253.208:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49493: (3.62319%)&lt;BR/&gt; 49492: (3.62319%)&lt;BR/&gt; 49491: (3.62319%)&lt;BR/&gt; 49490: (3.62319%)&gt;];
}
2186--2280[label="1;12pkt 12fpkt"];
2186--6202[label="1;15pkt 15fpkt"];
2186--7908[label="1;15pkt 15fpkt"];
2186--9696[label="1;12pkt 12fpkt"];
2280--6202[label="1;12pkt 12fpkt"];
2280--7908[label="1;12pkt 12fpkt"];
2280--9696[label="1;12pkt 12fpkt"];
6202--7908[label="1;15pkt 15fpkt"];
6202--9696[label="1;12pkt 12fpkt"];
7908--9696[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.253.208" src_ip="34.236.149.139" src_port="80"/>
      <filter dst_ip="174.194.253.208" src_ip="41.212.192.109" src_port="80"/>
    </slice>
    <from sec="1229058145" usec="0"/>
    <to sec="1229058325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
2189[label="128.208.180.51;s;102pkt 102fpkt", shape=diamond, color=yellow];
6203[label="128.208.180.51;s;102pkt 102fpkt", shape=hexagon, color=black];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.180.51:*, 49.27.64.180:80}[22.549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60204: (0.490196%)&lt;BR/&gt; 59584: (0.490196%)&lt;BR/&gt; 58726: (0.490196%)&lt;BR/&gt; 58271: (0.490196%)&gt;];
}
2189--6203[label="1;102pkt 102fpkt"];
2189--8134[label="0.421569;43pkt 43fpkt"];
6203--8134[label="0.421569;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="49.27.64.180" dst_port="80" src_ip="128.208.180.51"/>
    </slice>
    <from sec="1229058151" usec="0"/>
    <to sec="1229058295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2700[label="34.227.42.138;d;15pkt 15fpkt", shape=diamond, color=yellow];
4412[label="174.194.176.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
5972[label="174.194.135.64;s;1pkt 1fpkt", shape=hexagon, color=black];
6219[label="34.227.42.138;d;15pkt 15fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 34.227.42.138:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53380: (4.54545%)&lt;BR/&gt; 53378: (4.54545%)&lt;BR/&gt; 38428: (4.54545%)&lt;BR/&gt; 55761: (3.0303%)&gt;];
}
2700--4412[label="1;2pkt 2fpkt"];
2700--5972[label="1;1pkt 1fpkt"];
2700--6219[label="1;15pkt 15fpkt"];
2700--8947[label="0.0666667;1pkt 1fpkt"];
4412--6219[label="1;2pkt 2fpkt"];
5972--6219[label="1;1pkt 1fpkt"];
5972--8947[label="1;1pkt 1fpkt"];
6219--8947[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.227.42.138" dst_port="80"/>
    </slice>
    <from sec="1229058229" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
2701[label="34.227.42.138;s;13pkt 13fpkt", shape=diamond, color=yellow];
4411[label="174.194.176.44;d;2pkt 2fpkt", shape=diamond, color=yellow];
6220[label="34.227.42.138;s;13pkt 13fpkt", shape=hexagon, color=black];
7713[label="174.194.176.44;d;2pkt 2fpkt", shape=hexagon, color=black];
7910[label="34.227.42.138;s;5pkt 5fpkt", shape=polygon, color=gold];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.227.42.138:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53380: (5.71429%)&lt;BR/&gt; 53378: (5.71429%)&lt;BR/&gt; 53621: (4.28571%)&lt;BR/&gt; 50272: (4.28571%)&gt;];
}
2701--4411[label="1;2pkt 2fpkt"];
2701--6220[label="1;13pkt 13fpkt"];
2701--7713[label="1;2pkt 2fpkt"];
2701--7910[label="1;5pkt 5fpkt"];
4411--6220[label="1;2pkt 2fpkt"];
4411--7713[label="1;2pkt 2fpkt"];
6220--7713[label="1;2pkt 2fpkt"];
6220--7910[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="34.227.42.138" src_port="80"/>
    </slice>
    <from sec="1229058229" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2688[label="128.64.240.212;d;62pkt 62fpkt", shape=diamond, color=yellow];
2741[label="194.32.193.88;s;32pkt 32fpkt", shape=diamond, color=yellow];
6235[label="194.32.193.88;s;32pkt 32fpkt", shape=hexagon, color=black];
9229[label="194.32.193.88;62pkt 62fpkt", shape=pentagon, color=darkviolet];
11132[label="194.32.193.88;62pkt 62fpkt", shape=invtriangle, color=brown];
12027[label="194.32.193.88;62pkt 62fpkt", shape=invhouse, color=bisque];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.32.193.88:80, 128.64.240.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52961: (0.961538%)&lt;BR/&gt; 52960: (0.961538%)&lt;BR/&gt; 52959: (0.961538%)&lt;BR/&gt; 52958: (0.961538%)&gt;];
}
2688--2741[label="1;32pkt 32fpkt"];
2688--6235[label="1;32pkt 32fpkt"];
2688--9229[label="1;62pkt 62fpkt"];
2688--11132[label="1;62pkt 62fpkt"];
2688--12027[label="1;62pkt 62fpkt"];
2741--6235[label="1;32pkt 32fpkt"];
2741--9229[label="1;32pkt 32fpkt"];
2741--11132[label="1;32pkt 32fpkt"];
2741--12027[label="1;32pkt 32fpkt"];
6235--9229[label="1;32pkt 32fpkt"];
6235--11132[label="1;32pkt 32fpkt"];
6235--12027[label="1;32pkt 32fpkt"];
9229--11132[label="1;62pkt 62fpkt"];
9229--12027[label="1;62pkt 62fpkt"];
11132--12027[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.240.212" src_ip="194.32.193.88" src_port="80"/>
    </slice>
    <from sec="1229058209" usec="0"/>
    <to sec="1229058834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
2792[label="200.236.34.65;s;45pkt 45fpkt", shape=diamond, color=yellow];
6249[label="200.236.34.65;s;45pkt 45fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.236.34.65:80, 133.72.2.39:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1284: (1.11111%)&lt;BR/&gt; 1276: (1.11111%)&lt;BR/&gt; 1274: (1.11111%)&lt;BR/&gt; 1270: (1.11111%)&gt;];
}
2792--6249[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.2.39" src_ip="200.236.34.65" src_port="80"/>
    </slice>
    <from sec="1229058336" usec="0"/>
    <to sec="1229058664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
3240[label="7.153.208.56;s;30pkt 30fpkt", shape=diamond, color=yellow];
6272[label="7.153.208.56;s;30pkt 30fpkt", shape=hexagon, color=black];
8865[label="7.153.208.56;30pkt 30fpkt", shape=pentagon, color=darkviolet];
10959[label="7.153.208.56;30pkt 30fpkt", shape=invtriangle, color=brown];
11963[label="7.153.208.56;30pkt 30fpkt", shape=invhouse, color=bisque];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.153.208.56:*, 215.40.227.25:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4364: (1.66667%)&lt;BR/&gt; 4363: (1.66667%)&lt;BR/&gt; 4359: (1.66667%)&lt;BR/&gt; 4354: (1.66667%)&gt;];
}
3240--5127[label="1;30pkt 30fpkt"];
3240--6272[label="1;30pkt 30fpkt"];
3240--8865[label="1;30pkt 30fpkt"];
3240--10959[label="1;30pkt 30fpkt"];
3240--11963[label="1;30pkt 30fpkt"];
6272--8865[label="1;30pkt 30fpkt"];
6272--10959[label="1;30pkt 30fpkt"];
6272--11963[label="1;30pkt 30fpkt"];
8865--10959[label="1;30pkt 30fpkt"];
8865--11963[label="1;30pkt 30fpkt"];
10959--11963[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.227.25" dst_port="80" src_ip="7.153.208.56"/>
    </slice>
    <from sec="1229058441" usec="0"/>
    <to sec="1229058487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
3247[label="7.194.198.7;d;3pkt 3fpkt", shape=diamond, color=yellow];
6276[label="7.194.198.7;d;3pkt 3fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.224.2:8080, 7.194.198.7:1617}[33.3333%]&lt;BR/&gt;{215.40.224.2:8080, 7.194.198.7:1618}[33.3333%]&lt;BR/&gt;{215.40.224.2:8080, 7.194.198.7:1619}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1619: (16.6667%)&lt;BR/&gt; 1618: (16.6667%)&lt;BR/&gt; 1617: (16.6667%)&gt;];
}
3247--6276[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="7.194.198.7" dst_port="1619" src_ip="215.40.224.2" src_port="8080"/>
      <filter dst_ip="7.194.198.7" dst_port="1618" src_ip="215.40.224.2" src_port="8080"/>
      <filter dst_ip="7.194.198.7" dst_port="1617" src_ip="215.40.224.2" src_port="8080"/>
    </slice>
    <from sec="1229058450" usec="0"/>
    <to sec="1229058467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
2584[label="192.22.73.63;d;78pkt 78fpkt", shape=diamond, color=yellow];
3584[label="214.49.10.96;s;2pkt 2fpkt", shape=diamond, color=yellow];
9183[label="215.40.250.84;98pkt 98fpkt", shape=pentagon, color=darkviolet];
11106[label="215.40.250.84;98pkt 98fpkt", shape=invtriangle, color=brown];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.250.84:*, *:53}[51.4286%]&lt;BR/&gt;{174.194.204.43:*, 192.22.73.63:25}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.6087%)&lt;BR/&gt; 25: (15.0362%)&lt;BR/&gt; 1080: (0.724638%)&lt;BR/&gt; 0: (0.724638%)&lt;BR/&gt; 31664: (0.543478%)&gt;];
}
2584--3584[label="0.5;1pkt 1fpkt"];
2584--3783[label="0.027027;2pkt 2fpkt"];
2584--5440[label="0.0128205;1pkt 1fpkt"];
2584--5995[label="0.0897436;7pkt 7fpkt"];
2584--7145[label="0.0128205;1pkt 1fpkt"];
2584--8012[label="0.0641026;5pkt 5fpkt"];
2584--8118[label="0.0384615;3pkt 3fpkt"];
2584--8152[label="0.0641026;5pkt 5fpkt"];
2584--8195[label="0.0641026;5pkt 5fpkt"];
2584--8228[label="0.0641026;5pkt 5fpkt"];
2584--8741[label="0.807692;63pkt 63fpkt"];
2584--9183[label="0.025641;2pkt 2fpkt"];
2584--10026[label="0.0192308;1pkt 1fpkt"];
2584--10893[label="0.807692;63pkt 63fpkt"];
2584--11106[label="0.025641;2pkt 2fpkt"];
2584--11515[label="0.0192308;1pkt 1fpkt"];
9183--11106[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.40.250.84"/>
      <filter dst_ip="192.22.73.63" dst_port="25" src_ip="174.194.204.43"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602726,1.87805,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1229058000" usec="0"/>
      <to sec="1229058558" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
528[label="128.224.21.7;s;310pkt 310fpkt", shape=diamond, color=yellow];
6321[label="128.224.21.7;s;251pkt 251fpkt", shape=hexagon, color=black];
8329[label="128.224.21.7;327pkt 327fpkt", shape=pentagon, color=darkviolet];
10681[label="128.224.21.7;328pkt 328fpkt", shape=invtriangle, color=brown];
11860[label="128.224.21.7;328pkt 328fpkt", shape=invhouse, color=bisque];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.224.21.7:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
528--3265[label="0.00322581;1pkt 1fpkt"];
528--3274[label="0.00322581;1pkt 1fpkt"];
528--3277[label="0.00322581;1pkt 1fpkt"];
528--3288[label="0.00322581;1pkt 1fpkt"];
528--3319[label="0.00322581;1pkt 1fpkt"];
528--3699[label="0.00322581;1pkt 1fpkt"];
528--3703[label="0.00322581;1pkt 1fpkt"];
528--3704[label="0.00322581;1pkt 1fpkt"];
528--3712[label="0.00322581;1pkt 1fpkt"];
528--4484[label="0.00369004;1pkt 1fpkt"];
528--6321[label="1;251pkt 251fpkt"];
528--6351[label="0.00403226;1pkt 1fpkt"];
528--6786[label="0.00322581;1pkt 1fpkt"];
528--6823[label="0.00333333;1pkt 1fpkt"];
528--7124[label="0.00322581;1pkt 1fpkt"];
528--7130[label="0.00353357;1pkt 1fpkt"];
528--8065[label="0.00322581;1pkt 1fpkt"];
528--8329[label="0.996774;309pkt 309fpkt"];
528--10681[label="1;310pkt 310fpkt"];
528--11860[label="1;310pkt 310fpkt"];
6321--6351[label="0.00403226;1pkt 1fpkt"];
6321--6786[label="0.00398406;1pkt 1fpkt"];
6321--6823[label="0.00398406;1pkt 1fpkt"];
6321--7124[label="0.00398406;1pkt 1fpkt"];
6321--7130[label="0.00398406;1pkt 1fpkt"];
6321--8065[label="0.00398406;1pkt 1fpkt"];
6321--8329[label="0.996016;250pkt 250fpkt"];
6321--10681[label="1;251pkt 251fpkt"];
6321--11860[label="1;251pkt 251fpkt"];
8329--10681[label="1;327pkt 327fpkt"];
8329--11860[label="1;327pkt 327fpkt"];
10681--11860[label="1;328pkt 328fpkt"];
</description>
    <slice>
      <filter src_ip="128.224.21.7"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
1335[label="22.35.217.48;s;4pkt 4fpkt", shape=diamond, color=yellow];
6323[label="22.35.217.48;s;4pkt 4fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.35.217.48:57361, 169.18.131.118:58277}[25%]&lt;BR/&gt;{22.35.217.48:62483, 169.18.131.118:58277}[25%]&lt;BR/&gt;{22.35.217.48:62488, 169.18.131.118:58277}[25%]&lt;BR/&gt;{22.35.217.48:62536, 169.18.131.118:58277}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58277: (50%)&lt;BR/&gt; 62536: (12.5%)&lt;BR/&gt; 62488: (12.5%)&lt;BR/&gt; 62483: (12.5%)&lt;BR/&gt; 57361: (12.5%)&gt;];
}
1335--6323[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="58277" src_ip="22.35.217.48" src_port="62536"/>
      <filter dst_ip="169.18.131.118" dst_port="58277" src_ip="22.35.217.48" src_port="62488"/>
      <filter dst_ip="169.18.131.118" dst_port="58277" src_ip="22.35.217.48" src_port="62483"/>
      <filter dst_ip="169.18.131.118" dst_port="58277" src_ip="22.35.217.48" src_port="57361"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
2845[label="169.18.169.90;d;1192pkt 1192fpkt", shape=diamond, color=yellow];
6328[label="169.18.169.90;d;1085pkt 1085fpkt", shape=hexagon, color=black];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.18.169.90:6930}[99.3289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6930: (49.6706%)&lt;BR/&gt; 1812: (0.17567%)&lt;BR/&gt; 1811: (0.17567%)&lt;BR/&gt; 1688: (0.17567%)&lt;BR/&gt; 3376: (0.131752%)&gt;];
}
2845--6328[label="1;1085pkt 1085fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.169.90" dst_port="6930"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
411[label="128.64.247.77;d;12pkt 12fpkt", shape=diamond, color=yellow];
803[label="56.15.147.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="52.209.228.172;s;3pkt 3fpkt", shape=diamond, color=yellow];
1392[label="50.244.211.104;s;4pkt 4fpkt", shape=diamond, color=yellow];
3269[label="203.175.5.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
5222[label="50.244.211.104;s;4pkt 4fpkt", shape=hexagon, color=black];
5420[label="128.64.247.77;d;4pkt 4fpkt", shape=hexagon, color=black];
5728[label="52.209.228.172;s;1pkt 1fpkt", shape=hexagon, color=black];
6332[label="203.175.5.102;s;1pkt 1fpkt", shape=hexagon, color=black];
7927[label="203.175.5.102;s;1pkt 1fpkt", shape=polygon, color=gold];
10128[label="56.15.147.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.244.211.104:49022, 128.64.247.77:*}[33.3333%]&lt;BR/&gt;{206.140.88.81:8000, 128.64.247.77:*}[25%]&lt;BR/&gt;{52.209.228.172:6881, 128.64.247.77:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49022: (19.697%)&lt;BR/&gt; 6881: (12.1212%)&lt;BR/&gt; 62078: (7.57576%)&lt;BR/&gt; 49674: (7.57576%)&lt;BR/&gt; 49702: (6.06061%)&gt;];
}
411--803[label="1;1pkt 1fpkt"];
411--1302[label="1;3pkt 3fpkt"];
411--1392[label="1;4pkt 4fpkt"];
411--3269[label="1;1pkt 1fpkt"];
411--5222[label="1;4pkt 4fpkt"];
411--5420[label="1;4pkt 4fpkt"];
411--5728[label="1;1pkt 1fpkt"];
411--6332[label="1;1pkt 1fpkt"];
411--7927[label="1;1pkt 1fpkt"];
411--10128[label="1;1pkt 1fpkt"];
803--5420[label="1;1pkt 1fpkt"];
803--10128[label="1;1pkt 1fpkt"];
1302--5420[label="0.333333;1pkt 1fpkt"];
1302--5728[label="1;1pkt 1fpkt"];
1392--5222[label="1;4pkt 4fpkt"];
1392--5420[label="0.25;1pkt 1fpkt"];
3269--5420[label="1;1pkt 1fpkt"];
3269--6332[label="1;1pkt 1fpkt"];
3269--7927[label="1;1pkt 1fpkt"];
5222--5420[label="0.25;1pkt 1fpkt"];
5420--5728[label="1;1pkt 1fpkt"];
5420--6332[label="1;1pkt 1fpkt"];
5420--7927[label="1;1pkt 1fpkt"];
5420--10128[label="1;1pkt 1fpkt"];
6332--7927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.247.77" src_ip="50.244.211.104" src_port="49022"/>
      <filter dst_ip="128.64.247.77" src_ip="52.209.228.172" src_port="6881"/>
      <filter dst_ip="128.64.247.77" src_ip="206.140.88.81" src_port="8000"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
960[label="133.72.105.76;d;22pkt 22fpkt", shape=diamond, color=yellow];
1361[label="214.140.238.235;s;2403pkt 2403fpkt", shape=diamond, color=yellow];
3553[label="174.194.235.92;d;5pkt 5fpkt", shape=diamond, color=yellow];
3628[label="44.77.169.82;s;3pkt 3fpkt", shape=diamond, color=yellow];
5027[label="133.72.105.76;d;20pkt 20fpkt", shape=hexagon, color=black];
6349[label="214.140.238.235;s;2403pkt 2403fpkt", shape=hexagon, color=black];
6672[label="174.194.235.92;d;5pkt 5fpkt", shape=hexagon, color=black];
8480[label="204.190.155.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8904[label="97.111.180.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9156[label="1.232.148.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9214[label="6.202.170.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10404[label="200.239.199.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10499[label="214.140.238.235;2609pkt 2609fpkt", shape=pentagon, color=darkviolet];
11123[label="6.202.170.87;1pkt 1fpkt", shape=invtriangle, color=brown];
11730[label="200.239.199.223;1pkt 1fpkt", shape=invtriangle, color=brown];
11782[label="214.140.238.235;2609pkt 2609fpkt", shape=invtriangle, color=brown];
11892[label="204.190.155.20;1pkt 1fpkt", shape=invhouse, color=bisque];
12276[label="200.239.199.223;1pkt 1fpkt", shape=invhouse, color=bisque];
12296[label="214.140.238.235;2609pkt 2609fpkt", shape=invhouse, color=bisque];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.140.238.235:3283, *:1434}[99.0509%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3283: (49.7598%)&lt;BR/&gt; 1434: (49.7598%)&lt;BR/&gt; 29101: (0.185083%)&lt;BR/&gt; 80: (0.0472553%)&lt;BR/&gt; 3423: (0.0196897%)&gt;];
}
960--1361[label="0.0454545;1pkt 1fpkt"];
960--4910[label="0.0454545;1pkt 1fpkt"];
960--5027[label="1;20pkt 20fpkt"];
960--6349[label="0.0454545;1pkt 1fpkt"];
960--8063[label="0.0454545;1pkt 1fpkt"];
960--8156[label="0.0454545;1pkt 1fpkt"];
960--8200[label="0.0454545;1pkt 1fpkt"];
960--8233[label="0.0454545;1pkt 1fpkt"];
960--8480[label="1;1pkt 1fpkt"];
960--8904[label="1;1pkt 1fpkt"];
960--9156[label="1;1pkt 1fpkt"];
960--9214[label="1;1pkt 1fpkt"];
960--10404[label="1;1pkt 1fpkt"];
960--10499[label="0.0454545;1pkt 1fpkt"];
960--11123[label="1;1pkt 1fpkt"];
960--11730[label="1;1pkt 1fpkt"];
960--11782[label="0.0454545;1pkt 1fpkt"];
960--11892[label="1;1pkt 1fpkt"];
960--12276[label="1;1pkt 1fpkt"];
960--12296[label="0.0454545;1pkt 1fpkt"];
1361--3553[label="0.2;1pkt 1fpkt"];
1361--6349[label="1;2403pkt 2403fpkt"];
1361--6672[label="0.2;1pkt 1fpkt"];
1361--8124[label="0.0621597;137pkt 137fpkt"];
1361--8156[label="0.0592224;131pkt 131fpkt"];
1361--8200[label="0.0592224;131pkt 131fpkt"];
1361--8233[label="0.0591957;131pkt 131fpkt"];
1361--10499[label="1;2403pkt 2403fpkt"];
1361--11782[label="1;2403pkt 2403fpkt"];
1361--12296[label="1;2403pkt 2403fpkt"];
3553--3628[label="1;3pkt 3fpkt"];
3553--4594[label="0.2;1pkt 1fpkt"];
3553--6349[label="0.2;1pkt 1fpkt"];
3553--6672[label="1;5pkt 5fpkt"];
3553--10499[label="0.2;1pkt 1fpkt"];
3553--11782[label="0.2;1pkt 1fpkt"];
3553--12296[label="0.2;1pkt 1fpkt"];
3628--6672[label="1;3pkt 3fpkt"];
5027--8063[label="0.05;1pkt 1fpkt"];
5027--8480[label="1;1pkt 1fpkt"];
5027--8904[label="1;1pkt 1fpkt"];
5027--9156[label="1;1pkt 1fpkt"];
5027--9214[label="1;1pkt 1fpkt"];
5027--10404[label="1;1pkt 1fpkt"];
5027--11123[label="1;1pkt 1fpkt"];
5027--11730[label="1;1pkt 1fpkt"];
5027--11892[label="1;1pkt 1fpkt"];
5027--12276[label="1;1pkt 1fpkt"];
6349--6672[label="0.2;1pkt 1fpkt"];
6349--8124[label="0.0621597;137pkt 137fpkt"];
6349--8156[label="0.0592224;131pkt 131fpkt"];
6349--8200[label="0.0592224;131pkt 131fpkt"];
6349--8233[label="0.0591957;131pkt 131fpkt"];
6349--10499[label="1;2403pkt 2403fpkt"];
6349--11782[label="1;2403pkt 2403fpkt"];
6349--12296[label="1;2403pkt 2403fpkt"];
6672--10499[label="0.2;1pkt 1fpkt"];
6672--11782[label="0.2;1pkt 1fpkt"];
6672--12296[label="0.2;1pkt 1fpkt"];
8480--11892[label="1;1pkt 1fpkt"];
9214--11123[label="1;1pkt 1fpkt"];
10404--11730[label="1;1pkt 1fpkt"];
10404--12276[label="1;1pkt 1fpkt"];
10499--11782[label="1;2609pkt 2609fpkt"];
10499--12296[label="1;2609pkt 2609fpkt"];
11730--12276[label="1;1pkt 1fpkt"];
11782--12296[label="1;2609pkt 2609fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="214.140.238.235" src_port="3283"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
3274[label="96.176.94.27;d;358pkt 358fpkt", shape=diamond, color=yellow];
6351[label="96.176.94.27;d;248pkt 248fpkt", shape=hexagon, color=black];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 96.176.94.27:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3274--3705[label="0.00657895;1pkt 1fpkt"];
3274--6013[label="0.0027933;1pkt 1fpkt"];
3274--6062[label="0.0027933;1pkt 1fpkt"];
3274--6071[label="0.0027933;1pkt 1fpkt"];
3274--6321[label="0.00398406;1pkt 1fpkt"];
3274--6351[label="1;248pkt 248fpkt"];
3274--7125[label="0.00746269;1pkt 1fpkt"];
3274--7409[label="0.0027933;1pkt 1fpkt"];
3274--8022[label="0.0027933;1pkt 1fpkt"];
3274--8329[label="0.0030581;1pkt 1fpkt"];
3274--9488[label="0.0027933;1pkt 1fpkt"];
3274--10345[label="0.0027933;1pkt 1fpkt"];
3274--10681[label="0.00304878;1pkt 1fpkt"];
3274--11252[label="0.0027933;1pkt 1fpkt"];
3274--11860[label="0.00304878;1pkt 1fpkt"];
3274--12070[label="0.0027933;1pkt 1fpkt"];
6351--7125[label="0.00746269;1pkt 1fpkt"];
6351--7409[label="0.00403226;1pkt 1fpkt"];
6351--8329[label="0.00403226;1pkt 1fpkt"];
6351--9488[label="0.00403226;1pkt 1fpkt"];
6351--10681[label="0.00403226;1pkt 1fpkt"];
6351--11252[label="0.00403226;1pkt 1fpkt"];
6351--11860[label="0.00403226;1pkt 1fpkt"];
6351--12070[label="0.00403226;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.176.94.27"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
1433[label="47.164.250.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
6386[label="47.164.250.117;s;1pkt 1fpkt", shape=hexagon, color=black];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.164.250.117:62742, 169.18.131.118:64180}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64180: (50%)&lt;BR/&gt; 62742: (50%)&gt;];
}
1433--6386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="64180" src_ip="47.164.250.117" src_port="62742"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
3292[label="154.79.105.108;d;74pkt 74fpkt", shape=diamond, color=yellow];
6392[label="154.79.105.108;d;74pkt 74fpkt", shape=hexagon, color=black];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 154.79.105.108:2228}[70.2703%]&lt;BR/&gt;{*:*, 154.79.105.108:2117}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2228: (35.1351%)&lt;BR/&gt; 2117: (13.5135%)&lt;BR/&gt; 23210: (1.35135%)&lt;BR/&gt; 13755: (1.35135%)&lt;BR/&gt; 65296: (0.675676%)&gt;];
}
3292--6392[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.105.108" dst_port="2228"/>
      <filter dst_ip="154.79.105.108" dst_port="2117"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
3293[label="154.79.105.108;s;51pkt 51fpkt", shape=diamond, color=yellow];
6393[label="154.79.105.108;s;51pkt 51fpkt", shape=hexagon, color=black];
9428[label="154.79.105.108;52pkt 52fpkt", shape=pentagon, color=darkviolet];
11222[label="154.79.105.108;52pkt 52fpkt", shape=invtriangle, color=brown];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.79.105.108:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3293--6393[label="1;51pkt 51fpkt"];
3293--9428[label="1;51pkt 51fpkt"];
3293--11222[label="1;51pkt 51fpkt"];
6393--9428[label="1;51pkt 51fpkt"];
6393--11222[label="1;51pkt 51fpkt"];
9428--11222[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="154.79.105.108"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
2880[label="100.38.9.18;d;359pkt 359fpkt", shape=diamond, color=yellow];
2947[label="133.72.218.112;s;188pkt 188fpkt", shape=diamond, color=yellow];
3701[label="10.100.7.23;s;222pkt 222fpkt", shape=diamond, color=yellow];
3748[label="174.194.130.96;s;235pkt 235fpkt", shape=diamond, color=yellow];
6398[label="100.38.9.18;d;269pkt 269fpkt", shape=hexagon, color=black];
6832[label="174.194.130.96;s;190pkt 190fpkt", shape=hexagon, color=black];
7479[label="133.72.218.112;s;188pkt 188fpkt", shape=hexagon, color=black];
8510[label="10.100.7.23;240pkt 240fpkt", shape=pentagon, color=darkviolet];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.100.7.23:*, *:*}[28.0374%]&lt;BR/&gt;{174.194.130.96:*, *:*}[27.4533%]&lt;BR/&gt;{133.72.218.112:*, *:*}[21.9626%]&lt;BR/&gt;{133.72.57.35:*, 100.38.9.18:28221}[21.6121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28221: (29.8519%)&lt;BR/&gt; 8899: (4.54786%)&lt;BR/&gt; 4661: (4.54786%)&lt;BR/&gt; 8911: (4.49498%)&lt;BR/&gt; 3004: (1.90375%)&gt;];
}
2880--2947[label="0.329787;62pkt 62fpkt"];
2880--3701[label="0.135135;30pkt 30fpkt"];
2880--3748[label="0.314894;74pkt 74fpkt"];
2880--6341[label="0.0222841;8pkt 8fpkt"];
2880--6398[label="1;269pkt 269fpkt"];
2880--6832[label="0.347368;66pkt 66fpkt"];
2880--7479[label="0.329787;62pkt 62fpkt"];
2880--8510[label="0.125;30pkt 30fpkt"];
2947--6398[label="0.292553;55pkt 55fpkt"];
2947--7479[label="1;188pkt 188fpkt"];
3701--6398[label="0.103604;23pkt 23fpkt"];
3701--8153[label="0.0135135;3pkt 3fpkt"];
3701--8164[label="0.0045045;1pkt 1fpkt"];
3701--8196[label="0.0135135;3pkt 3fpkt"];
3701--8207[label="0.0045045;1pkt 1fpkt"];
3701--8229[label="0.0135135;3pkt 3fpkt"];
3701--8240[label="0.0045045;1pkt 1fpkt"];
3701--8510[label="1;222pkt 222fpkt"];
3748--6398[label="0.246809;58pkt 58fpkt"];
3748--6832[label="1;190pkt 190fpkt"];
3748--8153[label="0.00425532;1pkt 1fpkt"];
3748--8164[label="0.00425532;1pkt 1fpkt"];
3748--8196[label="0.00425532;1pkt 1fpkt"];
3748--8207[label="0.00425532;1pkt 1fpkt"];
3748--8229[label="0.00425532;1pkt 1fpkt"];
3748--8240[label="0.00425532;1pkt 1fpkt"];
6398--6832[label="0.305263;58pkt 58fpkt"];
6398--7479[label="0.292553;55pkt 55fpkt"];
6398--8510[label="0.0958333;23pkt 23fpkt"];
6832--8153[label="0.00526316;1pkt 1fpkt"];
6832--8164[label="0.00526316;1pkt 1fpkt"];
6832--8196[label="0.00526316;1pkt 1fpkt"];
6832--8207[label="0.00526316;1pkt 1fpkt"];
6832--8229[label="0.00526316;1pkt 1fpkt"];
6832--8240[label="0.00526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="10.100.7.23"/>
      <filter src_ip="174.194.130.96"/>
      <filter src_ip="133.72.218.112"/>
      <filter dst_ip="100.38.9.18" dst_port="28221" src_ip="133.72.57.35"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
2432[label="215.40.232.214;d;482pkt 482fpkt", shape=diamond, color=yellow];
6404[label="215.40.232.214;d;427pkt 427fpkt", shape=hexagon, color=black];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.40.232.214:0}[97.3029%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0198%)&lt;BR/&gt; 33438: (0.385039%)&lt;BR/&gt; 33437: (0.220022%)&lt;BR/&gt; 1080: (0.165017%)&lt;BR/&gt; 16434: (0.110011%)&gt;];
}
2432--4752[label="0.0124481;6pkt 6fpkt"];
2432--4953[label="0.00207469;1pkt 1fpkt"];
2432--5423[label="0.00207469;1pkt 1fpkt"];
2432--6404[label="1;427pkt 427fpkt"];
2432--7751[label="0.0124481;6pkt 6fpkt"];
2432--8109[label="0.0124481;6pkt 6fpkt"];
2432--8160[label="0.00207469;1pkt 1fpkt"];
2432--8161[label="0.00622407;3pkt 3fpkt"];
2432--8162[label="0.00207469;1pkt 1fpkt"];
2432--8203[label="0.00207469;1pkt 1fpkt"];
2432--8204[label="0.00622407;3pkt 3fpkt"];
2432--8205[label="0.00207469;1pkt 1fpkt"];
2432--8236[label="0.00207469;1pkt 1fpkt"];
2432--8237[label="0.00622407;3pkt 3fpkt"];
2432--8238[label="0.00207469;1pkt 1fpkt"];
2432--8284[label="0.166667;1pkt 1fpkt"];
2432--8509[label="0.00207469;1pkt 1fpkt"];
2432--11717[label="0.0124481;6pkt 6fpkt"];
2432--12267[label="0.0124481;6pkt 6fpkt"];
6404--8284[label="0.166667;1pkt 1fpkt"];
6404--8509[label="0.00234192;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.232.214"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
3306[label="101.193.22.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
6409[label="101.193.22.93;d;1pkt 1fpkt", shape=hexagon, color=black];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.67.69:62919, 101.193.22.93:5188}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62919: (50%)&lt;BR/&gt; 5188: (50%)&gt;];
}
3306--6409[label="1;1pkt 1fpkt"];
3306--8995[label="1;1pkt 1fpkt"];
6409--8995[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.193.22.93" dst_port="5188" src_ip="133.72.67.69" src_port="62919"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
928[label="102.84.195.50;s;7pkt 7fpkt", shape=diamond, color=yellow];
6411[label="102.84.195.50;s;7pkt 7fpkt", shape=hexagon, color=black];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.84.195.50:*, 169.18.131.118:62698}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62698: (42.8571%)&lt;BR/&gt; 55226: (7.14286%)&lt;BR/&gt; 51413: (7.14286%)&lt;BR/&gt; 48893: (7.14286%)&lt;BR/&gt; 48891: (7.14286%)&gt;];
}
928--6411[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="62698" src_ip="102.84.195.50"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.901222,1.8158,010,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1451[label="200.107.20.251;s;2524pkt 2524fpkt", shape=diamond, color=yellow];
2872[label="128.64.203.161;d;48pkt 48fpkt", shape=diamond, color=yellow];
3092[label="101.208.94.23;s;153pkt 153fpkt", shape=diamond, color=yellow];
3093[label="204.100.229.35;s;138pkt 138fpkt", shape=diamond, color=yellow];
3150[label="101.184.78.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
3224[label="0.69.42.60;s;20pkt 20fpkt", shape=diamond, color=yellow];
3317[label="133.72.172.4;d;54pkt 54fpkt", shape=diamond, color=yellow];
3527[label="194.200.10.201;s;7pkt 7fpkt", shape=diamond, color=yellow];
3639[label="4.98.230.22;s;20pkt 20fpkt", shape=diamond, color=yellow];
3801[label="133.72.18.21;d;16pkt 16fpkt", shape=diamond, color=yellow];
3841[label="133.72.157.9;d;38pkt 38fpkt", shape=diamond, color=yellow];
4111[label="133.72.204.199;d;27pkt 27fpkt", shape=diamond, color=yellow];
4162[label="133.72.132.136;d;20pkt 20fpkt", shape=diamond, color=yellow];
4433[label="133.72.163.71;d;3pkt 3fpkt", shape=diamond, color=yellow];
5254[label="200.107.20.251;s;2524pkt 2524fpkt", shape=hexagon, color=black];
5861[label="169.18.228.80;d;61pkt 61fpkt", shape=hexagon, color=black];
6041[label="128.64.203.161;d;48pkt 48fpkt", shape=hexagon, color=black];
6224[label="101.208.94.23;s;91pkt 91fpkt", shape=hexagon, color=black];
6225[label="204.100.229.35;s;138pkt 138fpkt", shape=hexagon, color=black];
6419[label="133.72.172.4;d;40pkt 40fpkt", shape=hexagon, color=black];
6641[label="128.208.192.12;d;4pkt 4fpkt", shape=hexagon, color=black];
6659[label="101.184.78.21;s;2pkt 2fpkt", shape=hexagon, color=black];
6690[label="0.69.42.60;s;16pkt 16fpkt", shape=hexagon, color=black];
7048[label="4.98.230.22;s;20pkt 20fpkt", shape=hexagon, color=black];
7387[label="133.72.159.80;d;73pkt 73fpkt", shape=hexagon, color=black];
7499[label="133.72.18.21;d;16pkt 16fpkt", shape=hexagon, color=black];
11896[label="4.98.230.22;20pkt 20fpkt", shape=invhouse, color=bisque];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.107.20.251:7000, *:*}[80.2034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (41.2543%)&lt;BR/&gt; 80: (8.67222%)&lt;BR/&gt; 50040: (0.0571615%)&lt;BR/&gt; 1286: (0.0489956%)&lt;BR/&gt; 1229: (0.0408297%)&gt;];
}
1451--3317[label="0.0185185;1pkt 1fpkt"];
1451--3841[label="0.0263158;1pkt 1fpkt"];
1451--4433[label="0.333333;1pkt 1fpkt"];
1451--5199[label="0.008;1pkt 1fpkt"];
1451--5254[label="1;2524pkt 2524fpkt"];
1451--6419[label="0.025;1pkt 1fpkt"];
2872--3092[label="0.0208333;1pkt 1fpkt"];
2872--3093[label="0.0208333;1pkt 1fpkt"];
2872--3527[label="1;7pkt 7fpkt"];
2872--6041[label="1;48pkt 48fpkt"];
2872--6225[label="0.0208333;1pkt 1fpkt"];
2872--8119[label="0.0208333;1pkt 1fpkt"];
2872--8134[label="0.0833333;4pkt 4fpkt"];
3092--3266[label="0.0106383;1pkt 1fpkt"];
3092--3317[label="0.0185185;1pkt 1fpkt"];
3092--3411[label="0.0277778;1pkt 1fpkt"];
3092--3523[label="0.25;1pkt 1fpkt"];
3092--3740[label="0.025641;1pkt 1fpkt"];
3092--3801[label="0.0625;1pkt 1fpkt"];
3092--3841[label="0.0263158;1pkt 1fpkt"];
3092--3878[label="0.00653595;1pkt 1fpkt"];
3092--4092[label="0.0136986;1pkt 1fpkt"];
3092--4111[label="0.037037;1pkt 1fpkt"];
3092--4162[label="0.05;1pkt 1fpkt"];
3092--4174[label="0.0172414;1pkt 1fpkt"];
3092--4489[label="0.00819672;1pkt 1fpkt"];
3092--4512[label="0.0144928;1pkt 1fpkt"];
3092--4565[label="0.00806452;1pkt 1fpkt"];
3092--5522[label="0.00877193;1pkt 1fpkt"];
3092--5726[label="0.0188679;1pkt 1fpkt"];
3092--5744[label="0.0126582;1pkt 1fpkt"];
3092--5861[label="0.0163934;1pkt 1fpkt"];
3092--6041[label="0.0208333;1pkt 1fpkt"];
3092--6155[label="0.00934579;1pkt 1fpkt"];
3092--6224[label="1;91pkt 91fpkt"];
3092--6333[label="0.00653595;1pkt 1fpkt"];
3092--6368[label="0.00653595;1pkt 1fpkt"];
3092--6374[label="0.00980392;1pkt 1fpkt"];
3092--6419[label="0.025;1pkt 1fpkt"];
3092--6519[label="0.00884956;1pkt 1fpkt"];
3092--6641[label="0.25;1pkt 1fpkt"];
3092--6759[label="0.00653595;1pkt 1fpkt"];
3092--6804[label="0.00653595;1pkt 1fpkt"];
3092--6939[label="0.0114943;1pkt 1fpkt"];
3092--6948[label="0.0232558;1pkt 1fpkt"];
3092--7370[label="0.00862069;1pkt 1fpkt"];
3092--7384[label="0.0106383;1pkt 1fpkt"];
3092--7387[label="0.0136986;1pkt 1fpkt"];
3092--7437[label="0.00819672;1pkt 1fpkt"];
3092--7439[label="0.025641;1pkt 1fpkt"];
3092--7473[label="0.012987;1pkt 1fpkt"];
3092--7499[label="0.0625;1pkt 1fpkt"];
3092--7529[label="0.0277778;1pkt 1fpkt"];
3092--7571[label="0.00806452;1pkt 1fpkt"];
3092--7854[label="0.0126582;1pkt 1fpkt"];
3092--7996[label="0.0232558;1pkt 1fpkt"];
3093--3317[label="0.0185185;1pkt 1fpkt"];
3093--3411[label="0.0277778;1pkt 1fpkt"];
3093--3523[label="0.25;1pkt 1fpkt"];
3093--3740[label="0.025641;1pkt 1fpkt"];
3093--3801[label="0.0625;1pkt 1fpkt"];
3093--3841[label="0.0263158;1pkt 1fpkt"];
3093--3878[label="0.00724638;1pkt 1fpkt"];
3093--4092[label="0.0136986;1pkt 1fpkt"];
3093--4111[label="0.037037;1pkt 1fpkt"];
3093--4162[label="0.05;1pkt 1fpkt"];
3093--4174[label="0.0172414;1pkt 1fpkt"];
3093--4489[label="0.00819672;1pkt 1fpkt"];
3093--4512[label="0.0144928;1pkt 1fpkt"];
3093--4565[label="0.00806452;1pkt 1fpkt"];
3093--5522[label="0.00877193;1pkt 1fpkt"];
3093--5744[label="0.0126582;1pkt 1fpkt"];
3093--6041[label="0.0208333;1pkt 1fpkt"];
3093--6225[label="1;138pkt 138fpkt"];
3093--6333[label="0.00724638;1pkt 1fpkt"];
3093--6368[label="0.00724638;1pkt 1fpkt"];
3093--6374[label="0.00980392;1pkt 1fpkt"];
3093--6419[label="0.025;1pkt 1fpkt"];
3093--6519[label="0.00884956;1pkt 1fpkt"];
3093--6641[label="0.25;1pkt 1fpkt"];
3093--6759[label="0.00724638;1pkt 1fpkt"];
3093--6804[label="0.00724638;1pkt 1fpkt"];
3093--6939[label="0.0114943;1pkt 1fpkt"];
3093--6948[label="0.0232558;1pkt 1fpkt"];
3093--7370[label="0.00862069;1pkt 1fpkt"];
3093--7387[label="0.0136986;1pkt 1fpkt"];
3093--7437[label="0.00819672;1pkt 1fpkt"];
3093--7439[label="0.025641;1pkt 1fpkt"];
3093--7473[label="0.012987;1pkt 1fpkt"];
3093--7499[label="0.0625;1pkt 1fpkt"];
3093--7529[label="0.0277778;1pkt 1fpkt"];
3093--7571[label="0.00806452;1pkt 1fpkt"];
3093--7854[label="0.0126582;1pkt 1fpkt"];
3093--7996[label="0.0232558;1pkt 1fpkt"];
3150--4433[label="1;2pkt 2fpkt"];
3150--6659[label="1;2pkt 2fpkt"];
3224--3801[label="0.5625;9pkt 9fpkt"];
3224--4162[label="0.15;3pkt 3fpkt"];
3224--6690[label="1;16pkt 16fpkt"];
3224--7499[label="0.5625;9pkt 9fpkt"];
3317--3639[label="1;20pkt 20fpkt"];
3317--3863[label="0.0638298;3pkt 3fpkt"];
3317--5254[label="0.0185185;1pkt 1fpkt"];
3317--6224[label="0.0185185;1pkt 1fpkt"];
3317--6225[label="0.0185185;1pkt 1fpkt"];
3317--6419[label="1;40pkt 40fpkt"];
3317--7048[label="1;20pkt 20fpkt"];
3317--7579[label="0.259259;14pkt 14fpkt"];
3317--8119[label="0.0185185;1pkt 1fpkt"];
3317--8134[label="0.111111;6pkt 6fpkt"];
3317--11896[label="1;20pkt 20fpkt"];
3527--6041[label="1;7pkt 7fpkt"];
3639--6419[label="1;20pkt 20fpkt"];
3639--7048[label="1;20pkt 20fpkt"];
3639--11896[label="1;20pkt 20fpkt"];
3801--6224[label="0.0625;1pkt 1fpkt"];
3801--6225[label="0.0625;1pkt 1fpkt"];
3801--6690[label="0.375;6pkt 6fpkt"];
3801--7499[label="1;16pkt 16fpkt"];
3801--8119[label="0.125;2pkt 2fpkt"];
3841--3863[label="0.210526;8pkt 8fpkt"];
3841--5254[label="0.0263158;1pkt 1fpkt"];
3841--6225[label="0.0263158;1pkt 1fpkt"];
3841--7579[label="0.421053;16pkt 16fpkt"];
3841--8119[label="0.0263158;1pkt 1fpkt"];
3841--8134[label="0.0263158;1pkt 1fpkt"];
3841--9879[label="0.285714;2pkt 2fpkt"];
3841--11441[label="0.285714;2pkt 2fpkt"];
3841--12155[label="0.285714;2pkt 2fpkt"];
4111--4317[label="0.615385;8pkt 8fpkt"];
4111--6224[label="0.037037;1pkt 1fpkt"];
4111--6225[label="0.037037;1pkt 1fpkt"];
4111--8134[label="0.0740741;2pkt 2fpkt"];
4162--6224[label="0.05;1pkt 1fpkt"];
4162--6225[label="0.05;1pkt 1fpkt"];
4162--6690[label="0.1875;3pkt 3fpkt"];
4433--5254[label="0.333333;1pkt 1fpkt"];
4433--6659[label="1;2pkt 2fpkt"];
5254--6419[label="0.025;1pkt 1fpkt"];
5861--8119[label="0.0327869;2pkt 2fpkt"];
5861--8134[label="0.0491803;3pkt 3fpkt"];
5861--10015[label="0.0909091;1pkt 1fpkt"];
5861--10454[label="0.131148;8pkt 8fpkt"];
6041--6225[label="0.0208333;1pkt 1fpkt"];
6041--8119[label="0.0208333;1pkt 1fpkt"];
6041--8134[label="0.0833333;4pkt 4fpkt"];
6224--6419[label="0.025;1pkt 1fpkt"];
6224--6519[label="0.010989;1pkt 1fpkt"];
6224--6641[label="0.25;1pkt 1fpkt"];
6224--6759[label="0.010989;1pkt 1fpkt"];
6224--6804[label="0.010989;1pkt 1fpkt"];
6224--6939[label="0.0114943;1pkt 1fpkt"];
6224--7437[label="0.010989;1pkt 1fpkt"];
6224--7499[label="0.0625;1pkt 1fpkt"];
6224--7529[label="0.0277778;1pkt 1fpkt"];
6225--6333[label="0.00724638;1pkt 1fpkt"];
6225--6368[label="0.00724638;1pkt 1fpkt"];
6225--6374[label="0.00980392;1pkt 1fpkt"];
6225--6419[label="0.025;1pkt 1fpkt"];
6225--6519[label="0.00884956;1pkt 1fpkt"];
6225--6641[label="0.25;1pkt 1fpkt"];
6225--6759[label="0.00724638;1pkt 1fpkt"];
6225--6804[label="0.00724638;1pkt 1fpkt"];
6225--6939[label="0.0114943;1pkt 1fpkt"];
6225--6948[label="0.0232558;1pkt 1fpkt"];
6225--7370[label="0.00862069;1pkt 1fpkt"];
6225--7387[label="0.0136986;1pkt 1fpkt"];
6225--7437[label="0.00819672;1pkt 1fpkt"];
6225--7439[label="0.025641;1pkt 1fpkt"];
6225--7473[label="0.012987;1pkt 1fpkt"];
6225--7499[label="0.0625;1pkt 1fpkt"];
6225--7529[label="0.0277778;1pkt 1fpkt"];
6225--7571[label="0.00806452;1pkt 1fpkt"];
6225--7854[label="0.0126582;1pkt 1fpkt"];
6225--7996[label="0.0232558;1pkt 1fpkt"];
6419--7048[label="1;20pkt 20fpkt"];
6419--7579[label="0.15;6pkt 6fpkt"];
6419--8119[label="0.025;1pkt 1fpkt"];
6419--8134[label="0.15;6pkt 6fpkt"];
6419--11896[label="1;20pkt 20fpkt"];
6641--9075[label="0.5;2pkt 2fpkt"];
6641--11061[label="0.5;2pkt 2fpkt"];
6690--7499[label="0.375;6pkt 6fpkt"];
7048--11896[label="1;20pkt 20fpkt"];
7387--8119[label="0.0547945;4pkt 4fpkt"];
7387--8134[label="0.0958904;7pkt 7fpkt"];
7387--8165[label="0.0273973;2pkt 2fpkt"];
7387--8208[label="0.0273973;2pkt 2fpkt"];
7387--8241[label="0.0273973;2pkt 2fpkt"];
7387--10479[label="0.134615;7pkt 7fpkt"];
7387--10523[label="0.932203;55pkt 55fpkt"];
7387--11797[label="0.932203;55pkt 55fpkt"];
7499--8119[label="0.125;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="200.107.20.251" src_port="7000"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
2476[label="128.208.180.239;s;2pkt 2fpkt", shape=diamond, color=yellow];
2926[label="201.203.95.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
6449[label="201.203.95.83;d;1pkt 1fpkt", shape=hexagon, color=black];
6450[label="128.208.180.239;s;2pkt 2fpkt", shape=hexagon, color=black];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.180.239:49780, 201.209.66.32:7708}[50%]&lt;BR/&gt;{128.208.180.239:49786, 201.203.95.83:7709}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49786: (33.3333%)&lt;BR/&gt; 7709: (33.3333%)&lt;BR/&gt; 49780: (16.6667%)&lt;BR/&gt; 7708: (16.6667%)&gt;];
}
2476--2926[label="1;1pkt 1fpkt"];
2476--6449[label="1;1pkt 1fpkt"];
2476--6450[label="1;2pkt 2fpkt"];
2926--6449[label="1;1pkt 1fpkt"];
2926--6450[label="1;1pkt 1fpkt"];
6449--6450[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.203.95.83" dst_port="7709" src_ip="128.208.180.239" src_port="49786"/>
      <filter dst_ip="201.209.66.32" dst_port="7708" src_ip="128.208.180.239" src_port="49780"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
3351[label="174.194.94.228;d;56pkt 56fpkt", shape=diamond, color=yellow];
3352[label="194.70.65.53;s;56pkt 56fpkt", shape=diamond, color=yellow];
6460[label="194.70.65.53;s;53pkt 53fpkt", shape=hexagon, color=black];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.70.65.53:443, 174.194.94.228:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2923: (0.909091%)&lt;BR/&gt; 2922: (0.909091%)&lt;BR/&gt; 2920: (0.909091%)&lt;BR/&gt; 2919: (0.909091%)&gt;];
}
3351--3352[label="1;56pkt 56fpkt"];
3351--6460[label="1;53pkt 53fpkt"];
3352--6460[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.94.228" src_ip="194.70.65.53" src_port="443"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
466[label="165.181.120.204;d;1449pkt 1449fpkt", shape=diamond, color=yellow];
1053[label="133.72.218.100;s;62pkt 62fpkt", shape=diamond, color=yellow];
1143[label="128.208.138.116;s;33pkt 33fpkt", shape=diamond, color=yellow];
1233[label="197.30.247.119;d;3pkt 3fpkt", shape=diamond, color=yellow];
4545[label="133.72.88.25;s;16pkt 16fpkt", shape=diamond, color=yellow];
9251[label="133.72.197.91;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9343[label="133.72.218.100;64pkt 64fpkt", shape=pentagon, color=darkviolet];
9563[label="133.72.220.124;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11141[label="133.72.197.91;19pkt 19fpkt", shape=invtriangle, color=brown];
12030[label="133.72.197.91;19pkt 19fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.128.85:*, 165.181.120.204:80}[56.3327%]&lt;BR/&gt;{133.72.128.83:*, 165.181.120.204:80}[31.632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3813%)&lt;BR/&gt; 47421: (0.147319%)&lt;BR/&gt; 5190: (0.147319%)&lt;BR/&gt; 993: (0.147319%)&lt;BR/&gt; 55535: (0.117855%)&gt;];
}
466--468[label="0.616977;894pkt 894fpkt"];
466--497[label="0.00414079;6pkt 6fpkt"];
466--637[label="0.0121457;3pkt 3fpkt"];
466--709[label="0.000690131;1pkt 1fpkt"];
466--819[label="0.00357782;2pkt 2fpkt"];
466--1047[label="0.000690131;1pkt 1fpkt"];
466--1053[label="0.0483871;3pkt 3fpkt"];
466--1070[label="0.00840336;1pkt 1fpkt"];
466--1143[label="0.0909091;3pkt 3fpkt"];
466--4545[label="0.0625;1pkt 1fpkt"];
466--5194[label="0.0149254;3pkt 3fpkt"];
466--5396[label="0.00442478;1pkt 1fpkt"];
466--5577[label="0.01;1pkt 1fpkt"];
466--6316[label="0.00414079;6pkt 6fpkt"];
466--7103[label="0.348656;493pkt 493fpkt"];
466--8119[label="0.0917874;133pkt 133fpkt"];
466--8134[label="0.047619;69pkt 69fpkt"];
466--8165[label="0.0193237;28pkt 28fpkt"];
466--8208[label="0.0193237;28pkt 28fpkt"];
466--8241[label="0.0193237;28pkt 28fpkt"];
466--8376[label="0.0666667;1pkt 1fpkt"];
466--8412[label="0.0013369;1pkt 1fpkt"];
466--8462[label="0.00719424;1pkt 1fpkt"];
466--8605[label="0.000690131;1pkt 1fpkt"];
466--8660[label="0.00280899;1pkt 1fpkt"];
466--9187[label="0.616977;894pkt 894fpkt"];
466--9196[label="0.0227273;1pkt 1fpkt"];
466--9251[label="0.0526316;1pkt 1fpkt"];
466--9343[label="0.046875;3pkt 3fpkt"];
466--9563[label="0.0769231;1pkt 1fpkt"];
466--10067[label="0.0238095;1pkt 1fpkt"];
466--10715[label="0.0666667;1pkt 1fpkt"];
466--10736[label="0.00133511;1pkt 1fpkt"];
466--10825[label="0.000690131;1pkt 1fpkt"];
466--11108[label="0.616977;894pkt 894fpkt"];
466--11141[label="0.0526316;1pkt 1fpkt"];
466--11872[label="0.0625;1pkt 1fpkt"];
466--11915[label="0.000690131;1pkt 1fpkt"];
466--12020[label="0.616977;894pkt 894fpkt"];
466--12030[label="0.0526316;1pkt 1fpkt"];
1053--1449[label="0.0322581;2pkt 2fpkt"];
1053--1553[label="0.047619;1pkt 1fpkt"];
1053--2088[label="0.314286;11pkt 11fpkt"];
1053--2913[label="0.016129;1pkt 1fpkt"];
1053--2986[label="0.16129;10pkt 10fpkt"];
1053--5253[label="0.0322581;2pkt 2fpkt"];
1053--8119[label="0.129032;8pkt 8fpkt"];
1053--9343[label="0.983871;61pkt 61fpkt"];
1143--1233[label="0.666667;2pkt 2fpkt"];
1143--2986[label="0.121212;4pkt 4fpkt"];
1143--5565[label="0.0606061;2pkt 2fpkt"];
4545--5565[label="0.0625;1pkt 1fpkt"];
9251--11141[label="1;19pkt 19fpkt"];
9251--12030[label="1;19pkt 19fpkt"];
11141--12030[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="165.181.120.204" dst_port="80" src_ip="133.72.128.85"/>
      <filter dst_ip="165.181.120.204" dst_port="80" src_ip="133.72.128.83"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2491[label="172.45.42.229;d;132pkt 132fpkt", shape=diamond, color=yellow];
2969[label="217.173.181.7;s;147pkt 147fpkt", shape=diamond, color=yellow];
6467[label="172.45.42.229;d;100pkt 100fpkt", shape=hexagon, color=black];
6491[label="217.173.181.7;s;147pkt 147fpkt", shape=hexagon, color=black];
8333[label="217.173.181.7;158pkt 158fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.173.181.7:6667, 172.45.42.229:*}[99.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 65180: (0.365497%)&lt;BR/&gt; 64536: (0.365497%)&lt;BR/&gt; 62537: (0.365497%)&lt;BR/&gt; 62510: (0.365497%)&gt;];
}
2491--2969[label="0.992424;131pkt 131fpkt"];
2491--6467[label="1;100pkt 100fpkt"];
2491--6491[label="0.992424;131pkt 131fpkt"];
2491--8333[label="0.984848;130pkt 130fpkt"];
2969--6467[label="0.99;99pkt 99fpkt"];
2969--6491[label="1;147pkt 147fpkt"];
2969--8333[label="0.993197;146pkt 146fpkt"];
6467--6491[label="0.99;99pkt 99fpkt"];
6467--8333[label="0.98;98pkt 98fpkt"];
6491--8333[label="0.993197;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.42.229" src_ip="217.173.181.7" src_port="6667"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1569[label="49.35.67.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
6505[label="49.35.67.181;s;1pkt 1fpkt", shape=hexagon, color=black];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.35.67.181:6112, 169.18.131.118:64639}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64639: (50%)&lt;BR/&gt; 6112: (50%)&gt;];
}
1569--6505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.131.118" dst_port="64639" src_ip="49.35.67.181" src_port="6112"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
3122[label="85.208.147.37;d;625pkt 625fpkt", shape=diamond, color=yellow];
6246[label="85.208.147.37;d;625pkt 625fpkt", shape=hexagon, color=black];
6513[label="133.72.50.144;s;267pkt 267fpkt", shape=hexagon, color=black];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.50.144:*, 85.208.147.37:80}[99.2051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.967%)&lt;BR/&gt; 46563: (0.0988794%)&lt;BR/&gt; 46562: (0.0988794%)&lt;BR/&gt; 46561: (0.0988794%)&lt;BR/&gt; 46559: (0.0988794%)&gt;];
}
3122--6246[label="1;625pkt 625fpkt"];
3122--6513[label="0.985019;263pkt 263fpkt"];
3122--7491[label="0.00177936;1pkt 1fpkt"];
3122--9741[label="0.9984;624pkt 624fpkt"];
6246--6513[label="0.985019;263pkt 263fpkt"];
6246--7491[label="0.00177936;1pkt 1fpkt"];
6246--9741[label="0.9984;624pkt 624fpkt"];
6513--7191[label="0.0078125;1pkt 1fpkt"];
6513--8134[label="0.00749064;2pkt 2fpkt"];
6513--9741[label="1;267pkt 267fpkt"];
</description>
    <slice>
      <filter dst_ip="85.208.147.37" dst_port="80" src_ip="133.72.50.144"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
4180[label="203.145.139.15;s;128pkt 128fpkt", shape=diamond, color=yellow];
6514[label="215.40.229.211;d;110pkt 110fpkt", shape=hexagon, color=black];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.145.139.15:80, 215.40.229.211:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3193%)&lt;BR/&gt; 25: (1.2605%)&lt;BR/&gt; 38546: (0.420168%)&lt;BR/&gt; 38536: (0.420168%)&lt;BR/&gt; 38535: (0.420168%)&gt;];
}
4180--6514[label="0.927273;102pkt 102fpkt"];
4180--8131[label="0.0390625;5pkt 5fpkt"];
4180--8180[label="0.0390625;5pkt 5fpkt"];
4180--8219[label="0.0390625;5pkt 5fpkt"];
6514--8131[label="0.0454545;5pkt 5fpkt"];
6514--8180[label="0.0454545;5pkt 5fpkt"];
6514--8219[label="0.0454545;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.229.211" src_ip="203.145.139.15" src_port="80"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
2558[label="205.204.121.188;s;763pkt 763fpkt", shape=diamond, color=yellow];
6526[label="205.204.121.188;s;763pkt 763fpkt", shape=hexagon, color=black];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.204.121.188:*, 214.56.201.59:9781}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9781: (50%)&lt;BR/&gt; 4240: (0.0655308%)&lt;BR/&gt; 4235: (0.0655308%)&lt;BR/&gt; 4234: (0.0655308%)&lt;BR/&gt; 4232: (0.0655308%)&gt;];
}
2558--6526[label="1;763pkt 763fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.201.59" dst_port="9781" src_ip="205.204.121.188"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
2582[label="174.194.204.43;d;68pkt 68fpkt", shape=diamond, color=yellow];
2585[label="192.22.73.63;s;61pkt 61fpkt", shape=diamond, color=yellow];
3583[label="214.49.10.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
6549[label="192.22.73.63;s;46pkt 46fpkt", shape=hexagon, color=black];
7024[label="214.49.10.96;d;1pkt 1fpkt", shape=hexagon, color=black];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.73.63:25, 174.194.204.43:*}[88.7324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.435%)&lt;BR/&gt; 55662: (1.12994%)&lt;BR/&gt; 50103: (0.847458%)&lt;BR/&gt; 50097: (0.847458%)&lt;BR/&gt; 50096: (0.847458%)&gt;];
}
2582--2585[label="0.95082;58pkt 58fpkt"];
2582--6549[label="0.934783;43pkt 43fpkt"];
2585--3583[label="1;1pkt 1fpkt"];
2585--6549[label="1;46pkt 46fpkt"];
2585--7024[label="1;1pkt 1fpkt"];
3583--6549[label="1;1pkt 1fpkt"];
3583--7024[label="1;1pkt 1fpkt"];
6549--7024[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.204.43" src_ip="192.22.73.63" src_port="25"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
3031[label="133.72.168.176;s;51pkt 51fpkt", shape=diamond, color=yellow];
3253[label="34.227.17.222;d;2pkt 2fpkt", shape=diamond, color=yellow];
6557[label="133.72.168.176;s;44pkt 44fpkt", shape=hexagon, color=black];
6699[label="34.227.17.222;d;2pkt 2fpkt", shape=hexagon, color=black];
10029[label="133.72.168.176;56pkt 56fpkt", shape=pentagon, color=darkviolet];
11516[label="133.72.168.176;56pkt 56fpkt", shape=invtriangle, color=brown];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.168.176:995, 1.144.27.20:*}[26.7857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 63589: (1.4218%)&lt;BR/&gt; 63588: (1.4218%)&lt;BR/&gt; 65004: (0.947867%)&lt;BR/&gt; 64172: (0.947867%)&gt;];
}
3031--3253[label="1;2pkt 2fpkt"];
3031--6557[label="1;44pkt 44fpkt"];
3031--6699[label="1;2pkt 2fpkt"];
3031--10029[label="1;51pkt 51fpkt"];
3031--11516[label="1;51pkt 51fpkt"];
3253--6557[label="1;2pkt 2fpkt"];
3253--6699[label="1;2pkt 2fpkt"];
3253--10029[label="1;2pkt 2fpkt"];
3253--11516[label="1;2pkt 2fpkt"];
6557--6699[label="1;2pkt 2fpkt"];
6557--10029[label="1;44pkt 44fpkt"];
6557--11516[label="1;44pkt 44fpkt"];
6699--10029[label="1;2pkt 2fpkt"];
6699--11516[label="1;2pkt 2fpkt"];
10029--11516[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="1.144.27.20" src_ip="133.72.168.176" src_port="995"/>
    </slice>
    <from sec="1229058018" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
3478[label="128.81.165.96;s;57pkt 57fpkt", shape=diamond, color=yellow];
6579[label="128.81.165.96;s;43pkt 43fpkt", shape=hexagon, color=black];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.165.96:25, 200.147.46.231:*}[35.0877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65122: (1%)&lt;BR/&gt; 50617: (1%)&lt;BR/&gt; 50608: (1%)&lt;BR/&gt; 50399: (1%)&gt;];
}
3478--6579[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="200.147.46.231" src_ip="128.81.165.96" src_port="25"/>
    </slice>
    <from sec="1229058045" usec="0"/>
    <to sec="1229058820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1237[label="41.207.116.192;d;4pkt 4fpkt", shape=diamond, color=yellow];
5106[label="41.207.116.192;d;4pkt 4fpkt", shape=hexagon, color=black];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.118.221:80, 41.207.116.192:38684}[25%]&lt;BR/&gt;{174.194.118.221:80, 41.207.116.192:40872}[25%]&lt;BR/&gt;{174.194.118.221:80, 41.207.116.192:47687}[25%]&lt;BR/&gt;{174.194.118.221:80, 41.207.116.192:56070}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56070: (12.5%)&lt;BR/&gt; 47687: (12.5%)&lt;BR/&gt; 40872: (12.5%)&lt;BR/&gt; 38684: (12.5%)&gt;];
}
1237--1238[label="1;4pkt 4fpkt"];
1237--5106[label="1;4pkt 4fpkt"];
1237--6585[label="1;4pkt 4fpkt"];
1237--7965[label="1;4pkt 4fpkt"];
5106--6585[label="1;4pkt 4fpkt"];
5106--7965[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.192" dst_port="56070" src_ip="174.194.118.221" src_port="80"/>
      <filter dst_ip="41.207.116.192" dst_port="47687" src_ip="174.194.118.221" src_port="80"/>
      <filter dst_ip="41.207.116.192" dst_port="40872" src_ip="174.194.118.221" src_port="80"/>
      <filter dst_ip="41.207.116.192" dst_port="38684" src_ip="174.194.118.221" src_port="80"/>
    </slice>
    <from sec="1229058057" usec="0"/>
    <to sec="1229058253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
2631[label="128.64.247.18;d;75pkt 75fpkt", shape=diamond, color=yellow];
2772[label="214.239.98.25;s;68pkt 68fpkt", shape=diamond, color=yellow];
6587[label="128.64.247.18;d;75pkt 75fpkt", shape=hexagon, color=black];
8537[label="214.239.98.25;68pkt 68fpkt", shape=pentagon, color=darkviolet];
10789[label="214.239.98.25;68pkt 68fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.239.98.25:80, 128.64.247.18:*}[90.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1538: (0.706215%)&lt;BR/&gt; 1537: (0.706215%)&lt;BR/&gt; 1535: (0.706215%)&lt;BR/&gt; 1534: (0.706215%)&gt;];
}
2631--2772[label="1;68pkt 68fpkt"];
2631--6587[label="1;75pkt 75fpkt"];
2631--8131[label="0.0266667;2pkt 2fpkt"];
2631--8180[label="0.0266667;2pkt 2fpkt"];
2631--8219[label="0.0266667;2pkt 2fpkt"];
2631--8537[label="1;68pkt 68fpkt"];
2631--10789[label="1;68pkt 68fpkt"];
2772--6587[label="1;68pkt 68fpkt"];
2772--8537[label="1;68pkt 68fpkt"];
2772--10789[label="1;68pkt 68fpkt"];
6587--8131[label="0.0266667;2pkt 2fpkt"];
6587--8180[label="0.0266667;2pkt 2fpkt"];
6587--8219[label="0.0266667;2pkt 2fpkt"];
6587--8537[label="1;68pkt 68fpkt"];
6587--10789[label="1;68pkt 68fpkt"];
8537--10789[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.247.18" src_ip="214.239.98.25" src_port="80"/>
    </slice>
    <from sec="1229058064" usec="0"/>
    <to sec="1229058466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1831[label="128.64.151.18;s;183pkt 183fpkt", shape=diamond, color=yellow];
3483[label="42.238.68.82;d;84pkt 84fpkt", shape=diamond, color=yellow];
3739[label="206.175.133.246;d;3pkt 3fpkt", shape=diamond, color=yellow];
6956[label="42.238.68.82;d;84pkt 84fpkt", shape=hexagon, color=black];
7148[label="206.175.133.246;d;3pkt 3fpkt", shape=hexagon, color=black];
7388[label="128.64.151.18;s;183pkt 183fpkt", shape=hexagon, color=black];
8454[label="128.64.151.18;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.151.18:*, 42.238.68.82:80}[44.9735%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1401%)&lt;BR/&gt; 50352: (7.82967%)&lt;BR/&gt; 443: (0.686813%)&lt;BR/&gt; 36392: (0.412088%)&lt;BR/&gt; 50014: (0.343407%)&gt;];
}
1831--3483[label="0.988095;83pkt 83fpkt"];
1831--3497[label="0.888889;16pkt 16fpkt"];
1831--3739[label="1;3pkt 3fpkt"];
1831--6615[label="0.888889;16pkt 16fpkt"];
1831--6956[label="0.988095;83pkt 83fpkt"];
1831--7148[label="1;3pkt 3fpkt"];
1831--7388[label="1;183pkt 183fpkt"];
1831--8134[label="0.125683;23pkt 23fpkt"];
1831--8165[label="0.0437158;8pkt 8fpkt"];
1831--8208[label="0.0437158;8pkt 8fpkt"];
1831--8241[label="0.0437158;8pkt 8fpkt"];
1831--8454[label="1;183pkt 183fpkt"];
3483--5440[label="0.0119048;1pkt 1fpkt"];
3483--6956[label="1;84pkt 84fpkt"];
3483--7388[label="0.988095;83pkt 83fpkt"];
3483--8134[label="0.178571;15pkt 15fpkt"];
3483--8165[label="0.0119048;1pkt 1fpkt"];
3483--8208[label="0.0119048;1pkt 1fpkt"];
3483--8241[label="0.0119048;1pkt 1fpkt"];
3483--8454[label="0.988095;83pkt 83fpkt"];
3739--7148[label="1;3pkt 3fpkt"];
3739--7388[label="1;3pkt 3fpkt"];
3739--8454[label="1;3pkt 3fpkt"];
6956--7388[label="0.988095;83pkt 83fpkt"];
6956--8134[label="0.178571;15pkt 15fpkt"];
6956--8165[label="0.0119048;1pkt 1fpkt"];
6956--8208[label="0.0119048;1pkt 1fpkt"];
6956--8241[label="0.0119048;1pkt 1fpkt"];
6956--8454[label="0.988095;83pkt 83fpkt"];
7148--7388[label="1;3pkt 3fpkt"];
7148--8454[label="1;3pkt 3fpkt"];
7388--8134[label="0.125683;23pkt 23fpkt"];
7388--8165[label="0.0437158;8pkt 8fpkt"];
7388--8208[label="0.0437158;8pkt 8fpkt"];
7388--8241[label="0.0437158;8pkt 8fpkt"];
7388--8454[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_ip="42.238.68.82" dst_port="80" src_ip="128.64.151.18"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
2279[label="100.178.237.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
6624[label="100.178.237.99;d;1pkt 1fpkt", shape=hexagon, color=black];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:1103, 100.178.237.99:25267}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25267: (50%)&lt;BR/&gt; 1103: (50%)&gt;];
}
2279--6624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="100.178.237.99" dst_port="25267" src_ip="133.72.2.38" src_port="1103"/>
    </slice>
    <from sec="1229058219" usec="0"/>
    <to sec="1229058494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
2879[label="133.72.5.141;d;128pkt 128fpkt", shape=diamond, color=yellow];
3492[label="174.194.116.169;d;179pkt 179fpkt", shape=diamond, color=yellow];
3518[label="216.178.18.204;s;12pkt 12fpkt", shape=diamond, color=yellow];
6051[label="133.72.5.141;d;128pkt 128fpkt", shape=hexagon, color=black];
6600[label="174.194.116.169;d;107pkt 107fpkt", shape=hexagon, color=black];
6631[label="216.178.18.204;s;12pkt 12fpkt", shape=hexagon, color=black];
8408[label="6.195.55.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8581[label="41.23.146.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9554[label="36.190.42.123;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9677[label="192.22.44.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10251[label="216.178.18.204;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10514[label="216.9.82.237;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10732[label="6.195.55.15;3pkt 3fpkt", shape=invtriangle, color=brown];
11281[label="36.190.42.123;36pkt 36fpkt", shape=invtriangle, color=brown];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 174.194.116.169:*}[53.7538%]&lt;BR/&gt;{*:80, 133.72.5.141:*}[30.3303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5816%)&lt;BR/&gt; 52279: (5.78635%)&lt;BR/&gt; 53: (5.78635%)&lt;BR/&gt; 0: (1.48368%)&lt;BR/&gt; 443: (0.74184%)&gt;];
}
2879--2892[label="0.0078125;1pkt 1fpkt"];
2879--3290[label="0.0078125;1pkt 1fpkt"];
2879--3373[label="0.0078125;1pkt 1fpkt"];
2879--3518[label="0.75;9pkt 9fpkt"];
2879--3736[label="0.0078125;1pkt 1fpkt"];
2879--4166[label="0.0078125;1pkt 1fpkt"];
2879--4493[label="0.0078125;1pkt 1fpkt"];
2879--4509[label="0.0078125;1pkt 1fpkt"];
2879--4857[label="0.00884956;1pkt 1fpkt"];
2879--6051[label="1;128pkt 128fpkt"];
2879--6074[label="0.0078125;1pkt 1fpkt"];
2879--6408[label="0.0078125;1pkt 1fpkt"];
2879--6631[label="0.75;9pkt 9fpkt"];
2879--6820[label="0.0078125;1pkt 1fpkt"];
2879--6858[label="0.0078125;1pkt 1fpkt"];
2879--7161[label="0.0078125;1pkt 1fpkt"];
2879--7500[label="0.0078125;1pkt 1fpkt"];
2879--7517[label="0.0078125;1pkt 1fpkt"];
2879--8131[label="0.0234375;3pkt 3fpkt"];
2879--8180[label="0.0234375;3pkt 3fpkt"];
2879--8219[label="0.0234375;3pkt 3fpkt"];
2879--8624[label="0.0078125;1pkt 1fpkt"];
2879--8639[label="0.0078125;1pkt 1fpkt"];
2879--8974[label="0.0078125;1pkt 1fpkt"];
2879--9554[label="0.444444;16pkt 16fpkt"];
2879--10251[label="0.529412;9pkt 9fpkt"];
2879--10255[label="0.0078125;1pkt 1fpkt"];
2879--10832[label="0.0078125;1pkt 1fpkt"];
2879--11281[label="0.444444;16pkt 16fpkt"];
3492--3518[label="0.166667;2pkt 2fpkt"];
3492--4594[label="0.04;2pkt 2fpkt"];
3492--6005[label="0.0670391;12pkt 12fpkt"];
3492--6600[label="1;107pkt 107fpkt"];
3492--6631[label="0.166667;2pkt 2fpkt"];
3492--7194[label="0.0377358;4pkt 4fpkt"];
3492--8408[label="1;3pkt 3fpkt"];
3492--8581[label="1;3pkt 3fpkt"];
3492--8987[label="0.0366972;4pkt 4fpkt"];
3492--9677[label="1;5pkt 5fpkt"];
3492--10251[label="0.117647;2pkt 2fpkt"];
3492--10514[label="1;5pkt 5fpkt"];
3492--10732[label="1;3pkt 3fpkt"];
3492--11015[label="0.0366972;4pkt 4fpkt"];
3518--6051[label="0.75;9pkt 9fpkt"];
3518--6600[label="0.166667;2pkt 2fpkt"];
3518--6631[label="1;12pkt 12fpkt"];
3518--10251[label="1;12pkt 12fpkt"];
6051--6074[label="0.0078125;1pkt 1fpkt"];
6051--6408[label="0.0078125;1pkt 1fpkt"];
6051--6631[label="0.75;9pkt 9fpkt"];
6051--6820[label="0.0078125;1pkt 1fpkt"];
6051--6858[label="0.0078125;1pkt 1fpkt"];
6051--7161[label="0.0078125;1pkt 1fpkt"];
6051--7500[label="0.0078125;1pkt 1fpkt"];
6051--7517[label="0.0078125;1pkt 1fpkt"];
6051--8131[label="0.0234375;3pkt 3fpkt"];
6051--8180[label="0.0234375;3pkt 3fpkt"];
6051--8219[label="0.0234375;3pkt 3fpkt"];
6051--8624[label="0.0078125;1pkt 1fpkt"];
6051--8639[label="0.0078125;1pkt 1fpkt"];
6051--8974[label="0.0078125;1pkt 1fpkt"];
6051--9554[label="0.444444;16pkt 16fpkt"];
6051--10251[label="0.529412;9pkt 9fpkt"];
6051--10255[label="0.0078125;1pkt 1fpkt"];
6051--10832[label="0.0078125;1pkt 1fpkt"];
6051--11281[label="0.444444;16pkt 16fpkt"];
6600--6631[label="0.166667;2pkt 2fpkt"];
6600--7194[label="0.0377358;4pkt 4fpkt"];
6600--8408[label="0.666667;2pkt 2fpkt"];
6600--8581[label="1;3pkt 3fpkt"];
6600--8987[label="0.0373832;4pkt 4fpkt"];
6600--9677[label="1;5pkt 5fpkt"];
6600--10251[label="0.117647;2pkt 2fpkt"];
6600--10514[label="0.6;3pkt 3fpkt"];
6600--10732[label="0.666667;2pkt 2fpkt"];
6600--11015[label="0.0373832;4pkt 4fpkt"];
6631--10251[label="1;12pkt 12fpkt"];
8408--10732[label="1;3pkt 3fpkt"];
9554--11281[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.116.169" src_port="80"/>
      <filter dst_ip="133.72.5.141" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
2755[label="101.238.45.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
6635[label="101.238.45.55;s;1pkt 1fpkt", shape=hexagon, color=black];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.238.45.55:80, 133.72.181.164:4193}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4193: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2755--6635[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.181.164" dst_port="4193" src_ip="101.238.45.55" src_port="80"/>
    </slice>
    <from sec="1229058293" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
2815[label="174.194.122.236;d;22pkt 22fpkt", shape=diamond, color=yellow];
2822[label="0.169.164.88;s;15pkt 15fpkt", shape=diamond, color=yellow];
6663[label="0.169.164.88;s;15pkt 15fpkt", shape=hexagon, color=black];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.164.88:80, 174.194.122.236:*}[68.1818%]&lt;BR/&gt;{214.241.1.163:80, 174.194.122.236:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4178: (2.88462%)&lt;BR/&gt; 4177: (2.88462%)&lt;BR/&gt; 4176: (2.88462%)&lt;BR/&gt; 4173: (2.88462%)&gt;];
}
2815--2822[label="1;15pkt 15fpkt"];
2815--6663[label="1;15pkt 15fpkt"];
2822--6663[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.122.236" src_ip="0.169.164.88" src_port="80"/>
      <filter dst_ip="174.194.122.236" src_ip="214.241.1.163" src_port="80"/>
    </slice>
    <from sec="1229058354" usec="0"/>
    <to sec="1229058535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
3169[label="153.88.136.3;d;5pkt 5fpkt", shape=diamond, color=yellow];
6667[label="153.88.136.3;d;5pkt 5fpkt", shape=hexagon, color=black];
7972[label="153.88.136.3;d;5pkt 5fpkt", shape=polygon, color=gold];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.154.200:4197, 153.88.136.3:80}[20%]&lt;BR/&gt;{133.72.154.200:4199, 153.88.136.3:80}[20%]&lt;BR/&gt;{133.72.154.200:4201, 153.88.136.3:80}[20%]&lt;BR/&gt;{133.72.154.200:4203, 153.88.136.3:80}[20%]&lt;BR/&gt;{133.72.154.200:4205, 153.88.136.3:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4205: (10%)&lt;BR/&gt; 4203: (10%)&lt;BR/&gt; 4201: (10%)&lt;BR/&gt; 4199: (10%)&gt;];
}
3169--3448[label="1;5pkt 5fpkt"];
3169--6667[label="1;5pkt 5fpkt"];
3169--7972[label="1;5pkt 5fpkt"];
6667--7972[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="153.88.136.3" dst_port="80" src_ip="133.72.154.200" src_port="4205"/>
      <filter dst_ip="153.88.136.3" dst_port="80" src_ip="133.72.154.200" src_port="4203"/>
      <filter dst_ip="153.88.136.3" dst_port="80" src_ip="133.72.154.200" src_port="4201"/>
      <filter dst_ip="153.88.136.3" dst_port="80" src_ip="133.72.154.200" src_port="4199"/>
      <filter dst_ip="153.88.136.3" dst_port="80" src_ip="133.72.154.200" src_port="4197"/>
    </slice>
    <from sec="1229058373" usec="0"/>
    <to sec="1229058552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602726,1.87805,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.90.40.74"/>
      <from sec="1229058393" usec="0"/>
      <to sec="1229058558" usec="0"/>
    </slice>
    <from sec="1229058393" usec="0"/>
    <to sec="1229058558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
3198[label="0.169.138.138;s;2pkt 2fpkt", shape=diamond, color=yellow];
6679[label="0.169.138.138;s;2pkt 2fpkt", shape=hexagon, color=black];
9680[label="0.169.138.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.138.138:80, 133.72.194.112:7504}[50%]&lt;BR/&gt;{0.169.138.138:80, 133.72.194.112:8717}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 8717: (25%)&lt;BR/&gt; 7504: (25%)&gt;];
}
3198--5313[label="1;2pkt 2fpkt"];
3198--6679[label="1;2pkt 2fpkt"];
3198--9680[label="1;2pkt 2fpkt"];
6679--9680[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.194.112" dst_port="8717" src_ip="0.169.138.138" src_port="80"/>
      <filter dst_ip="133.72.194.112" dst_port="7504" src_ip="0.169.138.138" src_port="80"/>
    </slice>
    <from sec="1229058401" usec="0"/>
    <to sec="1229058455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
3567[label="204.65.123.109;s;70pkt 70fpkt", shape=diamond, color=yellow];
6683[label="204.65.123.109;s;68pkt 68fpkt", shape=hexagon, color=black];
7974[label="204.65.123.109;s;68pkt 68fpkt", shape=polygon, color=gold];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.65.123.109:80, 128.87.90.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62237: (0.728155%)&lt;BR/&gt; 62207: (0.728155%)&lt;BR/&gt; 62190: (0.728155%)&lt;BR/&gt; 62145: (0.728155%)&gt;];
}
3567--5714[label="1;70pkt 70fpkt"];
3567--6683[label="1;68pkt 68fpkt"];
3567--7974[label="1;68pkt 68fpkt"];
6683--7974[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.180" src_ip="204.65.123.109" src_port="80"/>
    </slice>
    <from sec="1229058407" usec="0"/>
    <to sec="1229058585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
3616[label="214.239.98.23;s;104pkt 104fpkt", shape=diamond, color=yellow];
3943[label="133.72.150.108;d;104pkt 104fpkt", shape=diamond, color=yellow];
6706[label="214.239.98.23;s;104pkt 104fpkt", shape=hexagon, color=black];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.239.98.23:80, 133.72.150.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2496: (0.480769%)&lt;BR/&gt; 2494: (0.480769%)&lt;BR/&gt; 2492: (0.480769%)&lt;BR/&gt; 2490: (0.480769%)&gt;];
}
3616--3943[label="1;104pkt 104fpkt"];
3616--6706[label="1;104pkt 104fpkt"];
3943--6706[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.150.108" src_ip="214.239.98.23" src_port="80"/>
    </slice>
    <from sec="1229058439" usec="0"/>
    <to sec="1229058558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
3651[label="201.203.1.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
6719[label="201.203.1.196;d;1pkt 1fpkt", shape=hexagon, color=black];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:1183, 201.203.1.196:49991}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49991: (50%)&lt;BR/&gt; 1183: (50%)&gt;];
}
3651--6719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.203.1.196" dst_port="49991" src_ip="133.72.2.38" src_port="1183"/>
    </slice>
    <from sec="1229058499" usec="0"/>
    <to sec="1229058518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
3610[label="208.165.28.178;d;3pkt 3fpkt", shape=diamond, color=yellow];
3611[label="133.72.94.133;s;4pkt 4fpkt", shape=diamond, color=yellow];
3654[label="128.64.117.116;s;7pkt 7fpkt", shape=diamond, color=yellow];
6703[label="208.165.28.178;d;3pkt 3fpkt", shape=hexagon, color=black];
6721[label="128.64.117.116;s;7pkt 7fpkt", shape=hexagon, color=black];
9503[label="128.64.117.116;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9631[label="133.72.94.133;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.117.116:*, 72.206.224.254:80}[54.5455%]&lt;BR/&gt;{133.72.94.133:*, *:80}[36.3636%]&lt;BR/&gt;{*:*, 208.165.28.178:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1493: (7.14286%)&lt;BR/&gt; 1052: (5.71429%)&lt;BR/&gt; 1047: (5.71429%)&lt;BR/&gt; 1510: (4.28571%)&gt;];
}
3610--3611[label="0.666667;2pkt 2fpkt"];
3610--3654[label="0.333333;1pkt 1fpkt"];
3610--6703[label="1;3pkt 3fpkt"];
3610--6721[label="0.333333;1pkt 1fpkt"];
3610--9503[label="0.333333;1pkt 1fpkt"];
3610--9631[label="0.666667;2pkt 2fpkt"];
3611--6703[label="0.666667;2pkt 2fpkt"];
3611--9631[label="1;4pkt 4fpkt"];
3654--6703[label="0.333333;1pkt 1fpkt"];
3654--6721[label="1;7pkt 7fpkt"];
3654--9503[label="1;7pkt 7fpkt"];
6703--6721[label="0.333333;1pkt 1fpkt"];
6703--9503[label="0.333333;1pkt 1fpkt"];
6703--9631[label="0.666667;2pkt 2fpkt"];
6721--9503[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.94.133"/>
      <filter dst_ip="208.165.28.178" dst_port="80"/>
      <filter dst_ip="72.206.224.254" dst_port="80" src_ip="128.64.117.116"/>
    </slice>
    <from sec="1229058471" usec="0"/>
    <to sec="1229058660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.966306,1.79111,502,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1418[label="128.208.242.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1419[label="215.155.124.73;s;5pkt 5fpkt", shape=diamond, color=yellow];
6787[label="215.155.124.73;s;5pkt 5fpkt", shape=hexagon, color=black];
11051[label="215.155.124.73;5pkt 5fpkt", shape=invtriangle, color=brown];
11993[label="215.155.124.73;4pkt 4fpkt", shape=invhouse, color=bisque];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.155.124.73:22, 128.208.242.29:36474}[20%]&lt;BR/&gt;{215.155.124.73:21, 128.208.243.74:57388}[20%]&lt;BR/&gt;{215.155.124.73:25, 128.208.192.28:53674}[20%]&lt;BR/&gt;{215.155.124.73:64815, 128.208.192.28:25}[20%]&lt;BR/&gt;{215.155.124.73:64817, 128.208.192.28:113}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (20%)&lt;BR/&gt; 36474: (12.5%)&lt;BR/&gt; 22: (12.5%)&lt;BR/&gt; 64817: (10%)&lt;BR/&gt; 64815: (10%)&gt;];
}
1418--1419[label="1;1pkt 1fpkt"];
1418--6787[label="1;1pkt 1fpkt"];
1418--11051[label="1;1pkt 1fpkt"];
1418--11993[label="1;1pkt 1fpkt"];
1419--4112[label="0.6;3pkt 3fpkt"];
1419--6787[label="1;5pkt 5fpkt"];
1419--11051[label="1;5pkt 5fpkt"];
1419--11993[label="1;4pkt 4fpkt"];
6787--11051[label="1;5pkt 5fpkt"];
6787--11993[label="1;4pkt 4fpkt"];
11051--11993[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.192.28" dst_port="113" src_ip="215.155.124.73" src_port="64817"/>
      <filter dst_ip="128.208.192.28" dst_port="25" src_ip="215.155.124.73" src_port="64815"/>
      <filter dst_ip="128.208.192.28" dst_port="53674" src_ip="215.155.124.73" src_port="25"/>
      <filter dst_ip="128.208.243.74" dst_port="57388" src_ip="215.155.124.73" src_port="21"/>
      <filter dst_ip="128.208.242.29" dst_port="36474" src_ip="215.155.124.73" src_port="22"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
3719[label="41.207.126.155;d;76pkt 76fpkt", shape=diamond, color=yellow];
3720[label="132.5.230.68;s;79pkt 79fpkt", shape=diamond, color=yellow];
6793[label="41.207.126.155;d;61pkt 61fpkt", shape=hexagon, color=black];
6794[label="132.5.230.68;s;79pkt 79fpkt", shape=hexagon, color=black];
8021[label="132.5.230.68;s;72pkt 72fpkt", shape=polygon, color=gold];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.5.230.68:80, 41.207.126.155:*}[96.2025%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64265: (0.681199%)&lt;BR/&gt; 62770: (0.681199%)&lt;BR/&gt; 62080: (0.681199%)&lt;BR/&gt; 61679: (0.681199%)&gt;];
}
3719--3720[label="1;76pkt 76fpkt"];
3719--6793[label="1;61pkt 61fpkt"];
3719--6794[label="1;76pkt 76fpkt"];
3719--8021[label="0.958333;69pkt 69fpkt"];
3719--8131[label="0.0394737;3pkt 3fpkt"];
3719--8180[label="0.0394737;3pkt 3fpkt"];
3719--8219[label="0.0394737;3pkt 3fpkt"];
3720--6793[label="1;61pkt 61fpkt"];
3720--6794[label="1;79pkt 79fpkt"];
3720--8021[label="1;72pkt 72fpkt"];
3720--8131[label="0.0506329;4pkt 4fpkt"];
3720--8180[label="0.0506329;4pkt 4fpkt"];
3720--8219[label="0.0506329;4pkt 4fpkt"];
6793--6794[label="1;61pkt 61fpkt"];
6793--8021[label="1;61pkt 61fpkt"];
6793--8131[label="0.0491803;3pkt 3fpkt"];
6793--8180[label="0.0491803;3pkt 3fpkt"];
6793--8219[label="0.0491803;3pkt 3fpkt"];
6794--8021[label="1;72pkt 72fpkt"];
6794--8131[label="0.0506329;4pkt 4fpkt"];
6794--8180[label="0.0506329;4pkt 4fpkt"];
6794--8219[label="0.0506329;4pkt 4fpkt"];
8021--8131[label="0.0555556;4pkt 4fpkt"];
8021--8180[label="0.0555556;4pkt 4fpkt"];
8021--8219[label="0.0555556;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.155" src_ip="132.5.230.68" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
1513[label="214.57.117.48;d;4pkt 4fpkt", shape=diamond, color=yellow];
1912[label="214.57.117.50;d;3pkt 3fpkt", shape=diamond, color=yellow];
1913[label="174.194.173.43;s;8pkt 8fpkt", shape=diamond, color=yellow];
2921[label="69.66.81.215;d;9pkt 9fpkt", shape=diamond, color=yellow];
6400[label="174.194.173.43;s;8pkt 8fpkt", shape=hexagon, color=black];
6444[label="214.57.117.48;d;4pkt 4fpkt", shape=hexagon, color=black];
6808[label="214.57.117.50;d;3pkt 3fpkt", shape=hexagon, color=black];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.204.73:995, 69.66.81.215:*}[31.25%]&lt;BR/&gt;{174.194.173.43:22, 214.57.117.48:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (39.7436%)&lt;BR/&gt; 995: (6.41026%)&lt;BR/&gt; 54278: (5.12821%)&lt;BR/&gt; 50235: (5.12821%)&lt;BR/&gt; 50227: (5.12821%)&gt;];
}
1513--1913[label="1;4pkt 4fpkt"];
1513--6400[label="1;4pkt 4fpkt"];
1513--6444[label="1;4pkt 4fpkt"];
1912--1913[label="1;3pkt 3fpkt"];
1912--6400[label="1;3pkt 3fpkt"];
1912--6808[label="1;3pkt 3fpkt"];
1913--2921[label="0.125;1pkt 1fpkt"];
1913--6400[label="1;8pkt 8fpkt"];
1913--6444[label="1;4pkt 4fpkt"];
1913--6808[label="1;3pkt 3fpkt"];
2921--6400[label="0.125;1pkt 1fpkt"];
6400--6444[label="1;4pkt 4fpkt"];
6400--6808[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.117.48" src_ip="174.194.173.43" src_port="22"/>
      <filter dst_ip="69.66.81.215" src_ip="174.194.204.73" src_port="995"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
2893[label="133.72.67.69;d;47pkt 47fpkt", shape=diamond, color=yellow];
3307[label="101.193.22.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
6816[label="133.72.67.69;d;44pkt 44fpkt", shape=hexagon, color=black];
10183[label="200.2.139.196;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.72.67.69:60244}[65.3846%]&lt;BR/&gt;{*:80, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60244: (32.8283%)&lt;BR/&gt; 80: (10.6061%)&lt;BR/&gt; 8000: (2.0202%)&lt;BR/&gt; 0: (2.0202%)&lt;BR/&gt; 62919: (1.51515%)&gt;];
}
2893--3307[label="1;1pkt 1fpkt"];
2893--6816[label="1;44pkt 44fpkt"];
2893--8131[label="0.0212766;1pkt 1fpkt"];
2893--8180[label="0.0212766;1pkt 1fpkt"];
2893--8219[label="0.0212766;1pkt 1fpkt"];
2893--10183[label="0.285714;2pkt 2fpkt"];
3307--6816[label="1;1pkt 1fpkt"];
6816--8131[label="0.0227273;1pkt 1fpkt"];
6816--8180[label="0.0227273;1pkt 1fpkt"];
6816--8219[label="0.0227273;1pkt 1fpkt"];
6816--10183[label="0.285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="133.72.67.69" dst_port="60244"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
461[label="128.64.244.78;d;422pkt 422fpkt", shape=diamond, color=yellow];
886[label="136.140.210.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
1467[label="6.68.32.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
1844[label="205.213.15.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
2418[label="200.218.86.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
3918[label="97.54.106.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
5002[label="136.140.210.141;s;1pkt 1fpkt", shape=hexagon, color=black];
5171[label="128.64.244.78;d;195pkt 195fpkt", shape=hexagon, color=black];
5469[label="205.213.15.255;s;1pkt 1fpkt", shape=hexagon, color=black];
6395[label="200.218.86.234;s;1pkt 1fpkt", shape=hexagon, color=black];
6819[label="6.68.32.71;s;1pkt 1fpkt", shape=hexagon, color=black];
9022[label="6.68.32.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.244.78:56959}[77.0142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56959: (37.8788%)&lt;BR/&gt; 5901: (6.9378%)&lt;BR/&gt; 4672: (4.94418%)&lt;BR/&gt; 0: (3.0303%)&lt;BR/&gt; 6261: (0.398724%)&gt;];
}
461--886[label="1;1pkt 1fpkt"];
461--1467[label="1;1pkt 1fpkt"];
461--1844[label="1;1pkt 1fpkt"];
461--2418[label="1;1pkt 1fpkt"];
461--3918[label="1;1pkt 1fpkt"];
461--5002[label="1;1pkt 1fpkt"];
461--5171[label="1;195pkt 195fpkt"];
461--5469[label="1;1pkt 1fpkt"];
461--6395[label="1;1pkt 1fpkt"];
461--6819[label="1;1pkt 1fpkt"];
461--9022[label="1;1pkt 1fpkt"];
886--5002[label="1;1pkt 1fpkt"];
886--5171[label="1;1pkt 1fpkt"];
1467--5171[label="1;1pkt 1fpkt"];
1467--6819[label="1;1pkt 1fpkt"];
1467--9022[label="1;1pkt 1fpkt"];
1844--5171[label="1;1pkt 1fpkt"];
1844--5469[label="1;1pkt 1fpkt"];
2418--5171[label="1;1pkt 1fpkt"];
2418--6395[label="1;1pkt 1fpkt"];
5002--5171[label="1;1pkt 1fpkt"];
5171--5469[label="1;1pkt 1fpkt"];
5171--6395[label="1;1pkt 1fpkt"];
5171--6819[label="1;1pkt 1fpkt"];
5171--9022[label="1;1pkt 1fpkt"];
6819--9022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.244.78" dst_port="56959"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602726,1.87805,020,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
6821[label="133.72.20.44;s;423pkt 423fpkt", shape=hexagon, color=black];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.20.44:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6821--8745[label="1;423pkt 423fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.20.44"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
3755[label="128.208.180.239;d;3pkt 3fpkt", shape=diamond, color=yellow];
4133[label="201.203.95.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
6839[label="128.208.180.239;d;3pkt 3fpkt", shape=hexagon, color=black];
7159[label="201.203.95.83;s;1pkt 1fpkt", shape=hexagon, color=black];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.176.94.27:1082, 128.208.180.239:1434}[33.3333%]&lt;BR/&gt;{201.209.66.32:7708, 128.208.180.239:49780}[33.3333%]&lt;BR/&gt;{201.203.95.83:7709, 128.208.180.239:49786}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49786: (25%)&lt;BR/&gt; 7709: (25%)&lt;BR/&gt; 49780: (12.5%)&lt;BR/&gt; 7708: (12.5%)&lt;BR/&gt; 1434: (12.5%)&gt;];
}
3755--4133[label="1;1pkt 1fpkt"];
3755--6839[label="1;3pkt 3fpkt"];
3755--7159[label="1;1pkt 1fpkt"];
3755--8156[label="0.333333;1pkt 1fpkt"];
3755--8200[label="0.333333;1pkt 1fpkt"];
3755--8233[label="0.333333;1pkt 1fpkt"];
4133--6839[label="1;1pkt 1fpkt"];
4133--7159[label="1;1pkt 1fpkt"];
6839--7159[label="1;1pkt 1fpkt"];
6839--8156[label="0.333333;1pkt 1fpkt"];
6839--8200[label="0.333333;1pkt 1fpkt"];
6839--8233[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.180.239" dst_port="49786" src_ip="201.203.95.83" src_port="7709"/>
      <filter dst_ip="128.208.180.239" dst_port="49780" src_ip="201.209.66.32" src_port="7708"/>
      <filter dst_ip="128.208.180.239" dst_port="1434" src_ip="96.176.94.27" src_port="1082"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
1641[label="144.203.23.159;s;32pkt 32fpkt", shape=diamond, color=yellow];
2004[label="174.194.91.7;s;17pkt 17fpkt", shape=diamond, color=yellow];
5330[label="144.203.23.159;s;5pkt 5fpkt", shape=hexagon, color=black];
5383[label="48.220.89.85;d;1pkt 1fpkt", shape=hexagon, color=black];
6846[label="34.227.54.94;d;46pkt 46fpkt", shape=hexagon, color=black];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 34.227.54.94:*}[55.1724%]&lt;BR/&gt;{144.203.23.159:80, *:*}[34.4828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5149%)&lt;BR/&gt; 54503: (1.48515%)&lt;BR/&gt; 46485: (1.48515%)&lt;BR/&gt; 36439: (1.48515%)&lt;BR/&gt; 54095: (0.990099%)&gt;];
}
1641--1796[label="0.142857;1pkt 1fpkt"];
1641--1979[label="0.28125;9pkt 9fpkt"];
1641--5330[label="1;5pkt 5fpkt"];
1641--5383[label="1;1pkt 1fpkt"];
1641--6846[label="0.21875;7pkt 7fpkt"];
1641--8131[label="0.03125;1pkt 1fpkt"];
1641--8180[label="0.03125;1pkt 1fpkt"];
1641--8219[label="0.03125;1pkt 1fpkt"];
2004--3508[label="0.0588235;1pkt 1fpkt"];
2004--6113[label="1;17pkt 17fpkt"];
2004--6846[label="0.0588235;1pkt 1fpkt"];
2004--6975[label="0.0588235;1pkt 1fpkt"];
2004--8030[label="1;15pkt 15fpkt"];
2004--8131[label="0.0588235;1pkt 1fpkt"];
2004--8180[label="0.0588235;1pkt 1fpkt"];
2004--8219[label="0.0588235;1pkt 1fpkt"];
5330--5383[label="1;1pkt 1fpkt"];
5330--6846[label="0.4;2pkt 2fpkt"];
5330--8131[label="0.2;1pkt 1fpkt"];
5330--8180[label="0.2;1pkt 1fpkt"];
5330--8219[label="0.2;1pkt 1fpkt"];
6846--6905[label="0.0294118;1pkt 1fpkt"];
6846--7102[label="0.130435;6pkt 6fpkt"];
6846--7281[label="0.111111;1pkt 1fpkt"];
6846--7992[label="0.0294118;1pkt 1fpkt"];
6846--8008[label="0.130435;6pkt 6fpkt"];
6846--8030[label="0.0666667;1pkt 1fpkt"];
6846--8070[label="0.0434783;2pkt 2fpkt"];
6846--8131[label="0.0652174;3pkt 3fpkt"];
6846--8180[label="0.0652174;3pkt 3fpkt"];
6846--8219[label="0.0652174;3pkt 3fpkt"];
6846--8540[label="0.130435;6pkt 6fpkt"];
6846--9983[label="0.222222;2pkt 2fpkt"];
6846--10159[label="0.0434783;2pkt 2fpkt"];
6846--10427[label="0.0217391;1pkt 1fpkt"];
6846--10790[label="0.130435;6pkt 6fpkt"];
6846--11744[label="0.0217391;1pkt 1fpkt"];
6846--12281[label="0.0217391;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.203.23.159" src_port="80"/>
      <filter dst_ip="34.227.54.94" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
3367[label="41.207.116.164;d;158pkt 158fpkt", shape=diamond, color=yellow];
3368[label="133.72.159.68;s;165pkt 165fpkt", shape=diamond, color=yellow];
6853[label="41.207.116.164;d;140pkt 140fpkt", shape=hexagon, color=black];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.159.68:8888, 41.207.116.164:*}[92.2619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (49.46%)&lt;BR/&gt; 80: (0.539957%)&lt;BR/&gt; 65362: (0.323974%)&lt;BR/&gt; 65320: (0.323974%)&lt;BR/&gt; 64941: (0.323974%)&gt;];
}
3367--3368[label="0.981013;155pkt 155fpkt"];
3367--6853[label="1;140pkt 140fpkt"];
3367--8131[label="0.00632911;1pkt 1fpkt"];
3367--8180[label="0.00632911;1pkt 1fpkt"];
3367--8219[label="0.00632911;1pkt 1fpkt"];
3368--6853[label="0.985714;138pkt 138fpkt"];
6853--8131[label="0.00714286;1pkt 1fpkt"];
6853--8180[label="0.00714286;1pkt 1fpkt"];
6853--8219[label="0.00714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.164" src_ip="133.72.159.68" src_port="8888"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1396[label="128.64.243.96;s;148pkt 148fpkt", shape=diamond, color=yellow];
2889[label="100.53.251.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
3784[label="96.14.65.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
5489[label="128.64.243.96;s;148pkt 148fpkt", shape=hexagon, color=black];
6812[label="100.53.251.97;d;1pkt 1fpkt", shape=hexagon, color=black];
6857[label="96.14.65.77;d;2pkt 2fpkt", shape=hexagon, color=black];
9294[label="128.64.243.96;160pkt 160fpkt", shape=pentagon, color=darkviolet];
11167[label="128.64.243.96;160pkt 160fpkt", shape=invtriangle, color=brown];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.243.96:*, *:80}[31.875%]&lt;BR/&gt;{128.64.243.96:15005, *:*}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.9164%)&lt;BR/&gt; 15005: (13.9871%)&lt;BR/&gt; 8000: (6.10932%)&lt;BR/&gt; 16818: (3.37621%)&lt;BR/&gt; 10000: (3.21543%)&gt;];
}
1396--2889[label="1;1pkt 1fpkt"];
1396--3784[label="1;2pkt 2fpkt"];
1396--5489[label="1;148pkt 148fpkt"];
1396--6812[label="1;1pkt 1fpkt"];
1396--6857[label="1;2pkt 2fpkt"];
1396--8119[label="0.027027;4pkt 4fpkt"];
1396--9294[label="1;148pkt 148fpkt"];
1396--11167[label="1;148pkt 148fpkt"];
2889--5489[label="1;1pkt 1fpkt"];
2889--6812[label="1;1pkt 1fpkt"];
2889--9294[label="1;1pkt 1fpkt"];
2889--11167[label="1;1pkt 1fpkt"];
3784--5489[label="1;2pkt 2fpkt"];
3784--6857[label="1;2pkt 2fpkt"];
3784--9294[label="1;2pkt 2fpkt"];
3784--11167[label="1;2pkt 2fpkt"];
5489--6812[label="1;1pkt 1fpkt"];
5489--6857[label="1;2pkt 2fpkt"];
5489--8119[label="0.027027;4pkt 4fpkt"];
5489--9294[label="1;148pkt 148fpkt"];
5489--11167[label="1;148pkt 148fpkt"];
6812--9294[label="1;1pkt 1fpkt"];
6812--11167[label="1;1pkt 1fpkt"];
6857--9294[label="1;2pkt 2fpkt"];
6857--11167[label="1;2pkt 2fpkt"];
9294--11167[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.243.96" src_port="15005"/>
      <filter dst_port="80" src_ip="128.64.243.96"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
2960[label="215.40.236.59;d;82pkt 82fpkt", shape=diamond, color=yellow];
3375[label="215.9.69.39;s;57pkt 57fpkt", shape=diamond, color=yellow];
6862[label="215.9.69.39;s;45pkt 45fpkt", shape=hexagon, color=black];
9977[label="42.155.89.170;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.69.39:*, 215.40.236.59:80}[61.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7172%)&lt;BR/&gt; 25: (2.0202%)&lt;BR/&gt; 0: (1.26263%)&lt;BR/&gt; 48950: (0.757576%)&lt;BR/&gt; 48889: (0.757576%)&gt;];
}
2960--3375[label="1;57pkt 57fpkt"];
2960--4752[label="0.0121951;1pkt 1fpkt"];
2960--5423[label="0.0121951;1pkt 1fpkt"];
2960--6766[label="0.0121951;1pkt 1fpkt"];
2960--6862[label="1;45pkt 45fpkt"];
2960--7751[label="0.0121951;1pkt 1fpkt"];
2960--8109[label="0.0121951;1pkt 1fpkt"];
2960--8118[label="0.0121951;1pkt 1fpkt"];
2960--8119[label="0.0487805;4pkt 4fpkt"];
2960--8134[label="0.0365854;3pkt 3fpkt"];
2960--8147[label="0.0121951;1pkt 1fpkt"];
2960--8165[label="0.0365854;3pkt 3fpkt"];
2960--8208[label="0.0365854;3pkt 3fpkt"];
2960--8241[label="0.0365854;3pkt 3fpkt"];
2960--8509[label="0.0121951;1pkt 1fpkt"];
2960--8589[label="0.0666667;1pkt 1fpkt"];
2960--9849[label="0.05;1pkt 1fpkt"];
2960--9977[label="0.285714;4pkt 4fpkt"];
2960--11717[label="0.0121951;1pkt 1fpkt"];
2960--12267[label="0.0121951;1pkt 1fpkt"];
3375--6862[label="1;45pkt 45fpkt"];
3375--8119[label="0.0701754;4pkt 4fpkt"];
3375--8134[label="0.0526316;3pkt 3fpkt"];
3375--8165[label="0.0350877;2pkt 2fpkt"];
3375--8208[label="0.0350877;2pkt 2fpkt"];
3375--8241[label="0.0350877;2pkt 2fpkt"];
6862--8119[label="0.0888889;4pkt 4fpkt"];
6862--8134[label="0.0666667;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.236.59" dst_port="80" src_ip="215.9.69.39"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
912[label="154.79.11.252;s;12pkt 12fpkt", shape=diamond, color=yellow];
3301[label="0.33.190.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
3363[label="100.131.104.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
3379[label="100.129.30.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
6059[label="154.79.11.252;s;12pkt 12fpkt", shape=hexagon, color=black];
6402[label="0.33.190.107;d;1pkt 1fpkt", shape=hexagon, color=black];
6864[label="100.129.30.233;d;1pkt 1fpkt", shape=hexagon, color=black];
7475[label="100.131.104.189;d;1pkt 1fpkt", shape=hexagon, color=black];
10621[label="154.79.11.252;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.79.11.252:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
912--3301[label="1;1pkt 1fpkt"];
912--3363[label="1;1pkt 1fpkt"];
912--3379[label="1;1pkt 1fpkt"];
912--6059[label="1;12pkt 12fpkt"];
912--6402[label="1;1pkt 1fpkt"];
912--6864[label="1;1pkt 1fpkt"];
912--7475[label="1;1pkt 1fpkt"];
912--10621[label="1;2pkt 2fpkt"];
3301--6059[label="1;1pkt 1fpkt"];
3301--6402[label="1;1pkt 1fpkt"];
3363--6059[label="1;1pkt 1fpkt"];
3363--7475[label="1;1pkt 1fpkt"];
3379--6059[label="1;1pkt 1fpkt"];
3379--6864[label="1;1pkt 1fpkt"];
6059--6402[label="1;1pkt 1fpkt"];
6059--6864[label="1;1pkt 1fpkt"];
6059--7475[label="1;1pkt 1fpkt"];
6059--10621[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="154.79.11.252"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
3796[label="222.160.112.162;d;73pkt 73fpkt", shape=diamond, color=yellow];
6869[label="222.160.112.162;d;73pkt 73fpkt", shape=hexagon, color=black];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.233.26:*, 222.160.112.162:80}[98.6301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3151%)&lt;BR/&gt; 2234: (0.684932%)&lt;BR/&gt; 2231: (0.684932%)&lt;BR/&gt; 2229: (0.684932%)&lt;BR/&gt; 2226: (0.684932%)&gt;];
}
3796--6869[label="1;73pkt 73fpkt"];
3796--8119[label="0.0547945;4pkt 4fpkt"];
3796--8134[label="0.109589;8pkt 8fpkt"];
3796--8165[label="0.0136986;1pkt 1fpkt"];
3796--8208[label="0.0136986;1pkt 1fpkt"];
3796--8241[label="0.0136986;1pkt 1fpkt"];
3796--8554[label="0.333333;1pkt 1fpkt"];
3796--10798[label="0.333333;1pkt 1fpkt"];
6869--8119[label="0.0547945;4pkt 4fpkt"];
6869--8134[label="0.109589;8pkt 8fpkt"];
6869--8165[label="0.0136986;1pkt 1fpkt"];
6869--8208[label="0.0136986;1pkt 1fpkt"];
6869--8241[label="0.0136986;1pkt 1fpkt"];
6869--8554[label="0.333333;1pkt 1fpkt"];
6869--10798[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.160.112.162" dst_port="80" src_ip="128.208.233.26"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
1579[label="214.36.21.40;s;3pkt 3fpkt", shape=diamond, color=yellow];
6885[label="214.36.21.40;s;2pkt 2fpkt", shape=hexagon, color=black];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.36.21.40:49168, 215.40.236.51:995}[33.3333%]&lt;BR/&gt;{214.36.21.40:49183, 215.40.236.51:995}[33.3333%]&lt;BR/&gt;{214.36.21.40:49351, 215.40.236.51:995}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 49183: (20%)&lt;BR/&gt; 49168: (20%)&lt;BR/&gt; 49351: (10%)&gt;];
}
1579--6885[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.236.51" dst_port="995" src_ip="214.36.21.40" src_port="49351"/>
      <filter dst_ip="215.40.236.51" dst_port="995" src_ip="214.36.21.40" src_port="49183"/>
      <filter dst_ip="215.40.236.51" dst_port="995" src_ip="214.36.21.40" src_port="49168"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
3422[label="128.64.5.71;d;91pkt 91fpkt", shape=diamond, color=yellow];
3423[label="215.9.69.202;s;55pkt 55fpkt", shape=diamond, color=yellow];
6896[label="215.9.69.202;s;55pkt 55fpkt", shape=hexagon, color=black];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.69.202:*, 128.64.5.71:80}[60.4396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56473: (0.746269%)&lt;BR/&gt; 56402: (0.746269%)&lt;BR/&gt; 56398: (0.746269%)&lt;BR/&gt; 56327: (0.746269%)&gt;];
}
3422--3423[label="1;55pkt 55fpkt"];
3422--6896[label="1;55pkt 55fpkt"];
3422--8119[label="0.032967;3pkt 3fpkt"];
3422--8134[label="0.032967;3pkt 3fpkt"];
3422--8165[label="0.032967;3pkt 3fpkt"];
3422--8208[label="0.032967;3pkt 3fpkt"];
3422--8241[label="0.032967;3pkt 3fpkt"];
3423--6896[label="1;55pkt 55fpkt"];
3423--8119[label="0.0545455;3pkt 3fpkt"];
3423--8134[label="0.0545455;3pkt 3fpkt"];
3423--8165[label="0.0363636;2pkt 2fpkt"];
3423--8208[label="0.0363636;2pkt 2fpkt"];
3423--8241[label="0.0363636;2pkt 2fpkt"];
6896--8119[label="0.0545455;3pkt 3fpkt"];
6896--8134[label="0.0545455;3pkt 3fpkt"];
6896--8165[label="0.0363636;2pkt 2fpkt"];
6896--8208[label="0.0363636;2pkt 2fpkt"];
6896--8241[label="0.0363636;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.5.71" dst_port="80" src_ip="215.9.69.202"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
3475[label="41.207.116.204;d;18pkt 18fpkt", shape=diamond, color=yellow];
3476[label="128.81.133.2;s;18pkt 18fpkt", shape=diamond, color=yellow];
6944[label="41.207.116.204;d;18pkt 18fpkt", shape=hexagon, color=black];
6945[label="128.81.133.2;s;18pkt 18fpkt", shape=hexagon, color=black];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.133.2:80, 41.207.116.204:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63355: (2.77778%)&lt;BR/&gt; 62200: (2.77778%)&lt;BR/&gt; 59645: (2.77778%)&lt;BR/&gt; 58397: (2.77778%)&gt;];
}
3475--3476[label="1;18pkt 18fpkt"];
3475--6944[label="1;18pkt 18fpkt"];
3475--6945[label="1;18pkt 18fpkt"];
3475--8131[label="0.0555556;1pkt 1fpkt"];
3475--8180[label="0.0555556;1pkt 1fpkt"];
3475--8219[label="0.0555556;1pkt 1fpkt"];
3476--6944[label="1;18pkt 18fpkt"];
3476--6945[label="1;18pkt 18fpkt"];
3476--8131[label="0.0555556;1pkt 1fpkt"];
3476--8180[label="0.0555556;1pkt 1fpkt"];
3476--8219[label="0.0555556;1pkt 1fpkt"];
6944--6945[label="1;18pkt 18fpkt"];
6944--8131[label="0.0555556;1pkt 1fpkt"];
6944--8180[label="0.0555556;1pkt 1fpkt"];
6944--8219[label="0.0555556;1pkt 1fpkt"];
6945--8131[label="0.0555556;1pkt 1fpkt"];
6945--8180[label="0.0555556;1pkt 1fpkt"];
6945--8219[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.204" src_ip="128.81.133.2" src_port="80"/>
    </slice>
    <from sec="1229058044" usec="0"/>
    <to sec="1229058805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
2086[label="128.208.175.139;s;124pkt 124fpkt", shape=diamond, color=yellow];
2201[label="100.143.115.114;d;32pkt 32fpkt", shape=diamond, color=yellow];
6965[label="100.143.115.114;d;32pkt 32fpkt", shape=hexagon, color=black];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.175.139:*, 100.143.115.114:80}[25.8065%]&lt;BR/&gt;{128.208.175.139:*, 201.187.116.223:80}[21.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2006: (0.797872%)&lt;BR/&gt; 1989: (0.797872%)&lt;BR/&gt; 1988: (0.797872%)&lt;BR/&gt; 1974: (0.797872%)&gt;];
}
2086--2201[label="1;32pkt 32fpkt"];
2086--6965[label="1;32pkt 32fpkt"];
2086--8134[label="0.112903;14pkt 14fpkt"];
2201--6965[label="1;32pkt 32fpkt"];
2201--8134[label="0.125;4pkt 4fpkt"];
6965--8134[label="0.125;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="100.143.115.114" dst_port="80" src_ip="128.208.175.139"/>
      <filter dst_ip="201.187.116.223" dst_port="80" src_ip="128.208.175.139"/>
    </slice>
    <from sec="1229058012" usec="0"/>
    <to sec="1229058545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
3906[label="41.207.116.69;d;10pkt 10fpkt", shape=diamond, color=yellow];
4082[label="128.81.180.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
6974[label="41.207.116.69;d;7pkt 7fpkt", shape=hexagon, color=black];
7099[label="128.81.180.205;s;1pkt 1fpkt", shape=hexagon, color=black];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.28.46:80, 41.207.116.69:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50573: (10.5263%)&lt;BR/&gt; 62991: (5.26316%)&lt;BR/&gt; 55441: (5.26316%)&lt;BR/&gt; 51360: (5.26316%)&gt;];
}
3906--4082[label="1;1pkt 1fpkt"];
3906--6974[label="1;7pkt 7fpkt"];
3906--7099[label="1;1pkt 1fpkt"];
4082--6974[label="1;1pkt 1fpkt"];
4082--7099[label="1;1pkt 1fpkt"];
6974--7099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.69" src_ip="144.203.28.46" src_port="80"/>
    </slice>
    <from sec="1229058241" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15085,1.91427,503,1 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
133[label="133.72.158.87s;51pkt 51fpkt", shape=rectangle, color=red];
6990[label="214.57.43.178;d;224pkt 224fpkt", shape=hexagon, color=black];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.87:*, 214.57.43.178:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3407: (0.363636%)&lt;BR/&gt; 3405: (0.363636%)&lt;BR/&gt; 3403: (0.363636%)&lt;BR/&gt; 3401: (0.363636%)&gt;];
}
133--6990[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.43.178" dst_port="80" src_ip="133.72.158.87"/>
    </slice>
    <from sec="1229058334" usec="0"/>
    <to sec="1229058516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602726,1.87805,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.90.40.74"/>
      <from sec="1229058393" usec="0"/>
      <to sec="1229058630" usec="0"/>
    </slice>
    <from sec="1229058393" usec="0"/>
    <to sec="1229058630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
3190[label="200.0.254.253;d;5pkt 5fpkt", shape=diamond, color=yellow];
7009[label="200.0.254.253;d;5pkt 5fpkt", shape=hexagon, color=black];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.236.47:80, 200.0.254.253:51674}[20%]&lt;BR/&gt;{215.40.236.47:80, 200.0.254.253:51682}[20%]&lt;BR/&gt;{215.40.236.47:80, 200.0.254.253:51706}[20%]&lt;BR/&gt;{215.40.236.47:80, 200.0.254.253:51952}[20%]&lt;BR/&gt;{215.40.236.47:80, 200.0.254.253:52154}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52154: (10%)&lt;BR/&gt; 51952: (10%)&lt;BR/&gt; 51706: (10%)&lt;BR/&gt; 51682: (10%)&gt;];
}
3190--7009[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.0.254.253" dst_port="52154" src_ip="215.40.236.47" src_port="80"/>
      <filter dst_ip="200.0.254.253" dst_port="51952" src_ip="215.40.236.47" src_port="80"/>
      <filter dst_ip="200.0.254.253" dst_port="51706" src_ip="215.40.236.47" src_port="80"/>
      <filter dst_ip="200.0.254.253" dst_port="51682" src_ip="215.40.236.47" src_port="80"/>
      <filter dst_ip="200.0.254.253" dst_port="51674" src_ip="215.40.236.47" src_port="80"/>
    </slice>
    <from sec="1229058395" usec="0"/>
    <to sec="1229058501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
276[label="214.56.221.60;s;914pkt 914fpkt", shape=diamond, color=yellow];
1290[label="45.183.111.215;d;180pkt 180fpkt", shape=diamond, color=yellow];
1654[label="214.70.41.9;d;84pkt 84fpkt", shape=diamond, color=yellow];
2124[label="116.52.137.47;d;165pkt 165fpkt", shape=diamond, color=yellow];
2626[label="214.93.204.228;d;118pkt 118fpkt", shape=diamond, color=yellow];
2748[label="41.100.134.50;d;34pkt 34fpkt", shape=diamond, color=yellow];
3194[label="54.176.253.203;d;29pkt 29fpkt", shape=diamond, color=yellow];
5613[label="116.52.137.47;d;158pkt 158fpkt", shape=hexagon, color=black];
5895[label="214.93.204.228;d;92pkt 92fpkt", shape=hexagon, color=black];
5984[label="214.56.221.60;s;914pkt 914fpkt", shape=hexagon, color=black];
7011[label="54.176.253.203;d;29pkt 29fpkt", shape=hexagon, color=black];
7530[label="34.227.42.140;d;23pkt 23fpkt", shape=hexagon, color=black];
9723[label="174.194.168.141;40pkt 40fpkt", shape=pentagon, color=darkviolet];
11363[label="174.194.168.141;40pkt 40fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.221.60:*, *:80}[62.5874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2979%)&lt;BR/&gt; 53103: (0.921986%)&lt;BR/&gt; 443: (0.673759%)&lt;BR/&gt; 51336: (0.106383%)&lt;BR/&gt; 43520: (0.106383%)&gt;];
}
276--491[label="0.00218818;2pkt 2fpkt"];
276--494[label="0.0875;7pkt 7fpkt"];
276--1290[label="0.0166667;3pkt 3fpkt"];
276--1315[label="0.860697;173pkt 173fpkt"];
276--1552[label="0.00177936;1pkt 1fpkt"];
276--1654[label="1;84pkt 84fpkt"];
276--1656[label="0.0592105;9pkt 9fpkt"];
276--1825[label="0.0173913;4pkt 4fpkt"];
276--2094[label="0.00490196;1pkt 1fpkt"];
276--2124[label="0.0424242;7pkt 7fpkt"];
276--2390[label="0.00543478;1pkt 1fpkt"];
276--2626[label="0.0254237;3pkt 3fpkt"];
276--2748[label="0.852941;29pkt 29fpkt"];
276--2901[label="0.0729167;7pkt 7fpkt"];
276--2940[label="0.0123457;1pkt 1fpkt"];
276--3174[label="1;15pkt 15fpkt"];
276--3194[label="1;29pkt 29fpkt"];
276--3749[label="0.0123457;1pkt 1fpkt"];
276--4547[label="0.0434783;1pkt 1fpkt"];
276--5338[label="0.0592105;9pkt 9fpkt"];
276--5568[label="0.00263852;1pkt 1fpkt"];
276--5601[label="0.00515464;1pkt 1fpkt"];
276--5613[label="0.0443038;7pkt 7fpkt"];
276--5895[label="0.0217391;2pkt 2fpkt"];
276--5983[label="0.0186335;3pkt 3fpkt"];
276--5984[label="1;914pkt 914fpkt"];
276--6309[label="0.860697;173pkt 173fpkt"];
276--6420[label="0.12069;7pkt 7fpkt"];
276--6670[label="1;15pkt 15fpkt"];
276--7011[label="1;29pkt 29fpkt"];
276--7378[label="0.00218818;2pkt 2fpkt"];
276--7530[label="0.0434783;1pkt 1fpkt"];
276--7864[label="0.0625;4pkt 4fpkt"];
276--8119[label="0.0798687;73pkt 73fpkt"];
276--8134[label="0.125821;115pkt 115fpkt"];
276--8165[label="0.00984683;9pkt 9fpkt"];
276--8208[label="0.00984683;9pkt 9fpkt"];
276--8241[label="0.00984683;9pkt 9fpkt"];
1290--1603[label="0.0502793;9pkt 9fpkt"];
1290--1624[label="0.0833333;2pkt 2fpkt"];
1290--2598[label="0.00555556;1pkt 1fpkt"];
1290--2835[label="0.0236686;4pkt 4fpkt"];
1290--2931[label="0.0136986;1pkt 1fpkt"];
1290--3034[label="0.00900901;1pkt 1fpkt"];
1290--3444[label="0.0461538;3pkt 3fpkt"];
1290--5143[label="0.0188679;1pkt 1fpkt"];
1290--5324[label="0.285714;2pkt 2fpkt"];
1290--5983[label="1;161pkt 161fpkt"];
1290--5984[label="0.0166667;3pkt 3fpkt"];
1290--6157[label="0.0502793;9pkt 9fpkt"];
1290--6177[label="0.01;1pkt 1fpkt"];
1290--6287[label="0.0236686;4pkt 4fpkt"];
1290--6322[label="0.0444444;8pkt 8fpkt"];
1290--7393[label="0.416667;75pkt 75fpkt"];
1290--7405[label="0.00877193;1pkt 1fpkt"];
1290--7562[label="0.0461538;3pkt 3fpkt"];
1290--7961[label="0.0123457;1pkt 1fpkt"];
1290--8087[label="0.0461538;3pkt 3fpkt"];
1290--8119[label="0.0777778;14pkt 14fpkt"];
1290--8134[label="0.211111;38pkt 38fpkt"];
1290--8165[label="0.0111111;2pkt 2fpkt"];
1290--8208[label="0.0111111;2pkt 2fpkt"];
1290--8241[label="0.0111111;2pkt 2fpkt"];
1290--8412[label="0.0388889;7pkt 7fpkt"];
1290--8753[label="0.00854701;1pkt 1fpkt"];
1290--8983[label="0.00555556;1pkt 1fpkt"];
1290--9187[label="0.0833333;15pkt 15fpkt"];
1290--9366[label="0.05;9pkt 9fpkt"];
1290--9723[label="0.025;1pkt 1fpkt"];
1290--10634[label="0.0188679;1pkt 1fpkt"];
1290--10736[label="0.0388889;7pkt 7fpkt"];
1290--10899[label="0.00862069;1pkt 1fpkt"];
1290--11108[label="0.0833333;15pkt 15fpkt"];
1290--11363[label="0.025;1pkt 1fpkt"];
1290--11838[label="0.0188679;1pkt 1fpkt"];
1290--12020[label="0.0833333;15pkt 15fpkt"];
1290--12057[label="0.0666667;2pkt 2fpkt"];
1654--5984[label="1;84pkt 84fpkt"];
1654--8119[label="0.0119048;1pkt 1fpkt"];
1654--8134[label="0.52381;44pkt 44fpkt"];
2124--2181[label="0.0424242;7pkt 7fpkt"];
2124--5045[label="0.0545455;9pkt 9fpkt"];
2124--5296[label="0.719512;59pkt 59fpkt"];
2124--5613[label="1;158pkt 158fpkt"];
2124--5984[label="0.0424242;7pkt 7fpkt"];
2124--6201[label="0.0424242;7pkt 7fpkt"];
2124--8119[label="0.0484848;8pkt 8fpkt"];
2124--8134[label="0.115152;19pkt 19fpkt"];
2124--8165[label="0.00606061;1pkt 1fpkt"];
2124--8208[label="0.00606061;1pkt 1fpkt"];
2124--8241[label="0.00606061;1pkt 1fpkt"];
2124--8471[label="0.593939;98pkt 98fpkt"];
2124--9146[label="0.109091;18pkt 18fpkt"];
2124--11089[label="0.109091;18pkt 18fpkt"];
2124--12014[label="0.109091;18pkt 18fpkt"];
2626--2663[label="0.533898;63pkt 63fpkt"];
2626--5895[label="1;92pkt 92fpkt"];
2626--5984[label="0.0254237;3pkt 3fpkt"];
2626--8134[label="0.00847458;1pkt 1fpkt"];
2626--10363[label="0.533898;63pkt 63fpkt"];
2748--5984[label="0.852941;29pkt 29fpkt"];
3194--5984[label="1;29pkt 29fpkt"];
3194--7011[label="1;29pkt 29fpkt"];
5613--5984[label="0.0443038;7pkt 7fpkt"];
5613--6201[label="0.0379747;6pkt 6fpkt"];
5613--8119[label="0.0506329;8pkt 8fpkt"];
5613--8134[label="0.120253;19pkt 19fpkt"];
5613--8471[label="0.588608;93pkt 93fpkt"];
5613--9146[label="0.107595;17pkt 17fpkt"];
5613--11089[label="0.107595;17pkt 17fpkt"];
5613--12014[label="0.107595;17pkt 17fpkt"];
5895--5984[label="0.0217391;2pkt 2fpkt"];
5895--8134[label="0.0108696;1pkt 1fpkt"];
5895--10363[label="0.413043;38pkt 38fpkt"];
5984--6309[label="0.860697;173pkt 173fpkt"];
5984--6420[label="0.12069;7pkt 7fpkt"];
5984--6670[label="1;15pkt 15fpkt"];
5984--7011[label="1;29pkt 29fpkt"];
5984--7378[label="0.00218818;2pkt 2fpkt"];
5984--7530[label="0.0434783;1pkt 1fpkt"];
5984--7864[label="0.0625;4pkt 4fpkt"];
5984--8119[label="0.0798687;73pkt 73fpkt"];
5984--8134[label="0.125821;115pkt 115fpkt"];
5984--8165[label="0.00984683;9pkt 9fpkt"];
5984--8208[label="0.00984683;9pkt 9fpkt"];
5984--8241[label="0.00984683;9pkt 9fpkt"];
7530--7961[label="0.0434783;1pkt 1fpkt"];
7530--8119[label="0.130435;3pkt 3fpkt"];
7530--8134[label="0.130435;3pkt 3fpkt"];
7530--8753[label="0.0434783;1pkt 1fpkt"];
7530--10899[label="0.0434783;1pkt 1fpkt"];
9723--11363[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="214.56.221.60"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
3614[label="128.81.242.148;s;3pkt 3fpkt", shape=diamond, color=yellow];
3668[label="41.207.125.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
7036[label="128.81.242.148;s;3pkt 3fpkt", shape=hexagon, color=black];
7055[label="41.207.125.156;d;1pkt 1fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.242.148:80, 41.207.125.156:55711}[33.3333%]&lt;BR/&gt;{128.81.242.148:80, 34.227.54.85:42358}[33.3333%]&lt;BR/&gt;{128.81.242.148:80, 34.227.54.85:45379}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55711: (25%)&lt;BR/&gt; 45379: (12.5%)&lt;BR/&gt; 42358: (12.5%)&gt;];
}
3614--3668[label="1;1pkt 1fpkt"];
3614--7036[label="1;3pkt 3fpkt"];
3614--7055[label="1;1pkt 1fpkt"];
3668--7036[label="1;1pkt 1fpkt"];
3668--7055[label="1;1pkt 1fpkt"];
7036--7055[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.227.54.85" dst_port="45379" src_ip="128.81.242.148" src_port="80"/>
      <filter dst_ip="34.227.54.85" dst_port="42358" src_ip="128.81.242.148" src_port="80"/>
      <filter dst_ip="41.207.125.156" dst_port="55711" src_ip="128.81.242.148" src_port="80"/>
    </slice>
    <from sec="1229058473" usec="0"/>
    <to sec="1229058618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
3646[label="42.236.42.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
7051[label="42.236.42.62;s;1pkt 1fpkt", shape=hexagon, color=black];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.42.62:80, 214.49.29.37:52160}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52160: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3646--7051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.29.37" dst_port="52160" src_ip="42.236.42.62" src_port="80"/>
    </slice>
    <from sec="1229058497" usec="0"/>
    <to sec="1229058587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
3971[label="133.72.158.29;s;88pkt 88fpkt", shape=diamond, color=yellow];
4044[label="34.215.41.22;d;55pkt 55fpkt", shape=diamond, color=yellow];
7053[label="133.72.158.29;s;88pkt 88fpkt", shape=hexagon, color=black];
7083[label="34.215.41.22;d;55pkt 55fpkt", shape=hexagon, color=black];
8575[label="133.72.158.29;88pkt 88fpkt", shape=pentagon, color=darkviolet];
10809[label="133.72.158.29;88pkt 88fpkt", shape=invtriangle, color=brown];
11909[label="133.72.158.29;88pkt 88fpkt", shape=invhouse, color=bisque];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.29:*, 34.215.41.22:80}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 443: (2.27273%)&lt;BR/&gt; 4523: (0.636364%)&lt;BR/&gt; 4521: (0.636364%)&lt;BR/&gt; 4519: (0.636364%)&gt;];
}
3971--4044[label="1;55pkt 55fpkt"];
3971--7053[label="1;88pkt 88fpkt"];
3971--7083[label="1;55pkt 55fpkt"];
3971--8575[label="1;88pkt 88fpkt"];
3971--10809[label="1;88pkt 88fpkt"];
3971--11909[label="1;88pkt 88fpkt"];
4044--7053[label="1;55pkt 55fpkt"];
4044--7083[label="1;55pkt 55fpkt"];
4044--8575[label="1;55pkt 55fpkt"];
4044--10809[label="1;55pkt 55fpkt"];
4044--11909[label="1;55pkt 55fpkt"];
7053--7083[label="1;55pkt 55fpkt"];
7053--8575[label="1;88pkt 88fpkt"];
7053--10809[label="1;88pkt 88fpkt"];
7053--11909[label="1;88pkt 88fpkt"];
7083--8575[label="1;55pkt 55fpkt"];
7083--10809[label="1;55pkt 55fpkt"];
7083--11909[label="1;55pkt 55fpkt"];
8575--10809[label="1;88pkt 88fpkt"];
8575--11909[label="1;88pkt 88fpkt"];
10809--11909[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="34.215.41.22" dst_port="80" src_ip="133.72.158.29"/>
    </slice>
    <from sec="1229058509" usec="0"/>
    <to sec="1229058614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
3987[label="128.208.246.49;s;174pkt 174fpkt", shape=diamond, color=yellow];
4048[label="1.235.34.39;d;113pkt 113fpkt", shape=diamond, color=yellow];
7086[label="1.235.34.39;d;113pkt 113fpkt", shape=hexagon, color=black];
8798[label="128.208.246.49;192pkt 192fpkt", shape=pentagon, color=darkviolet];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.246.49:*, 1.235.34.39:80}[58.8542%]&lt;BR/&gt;{128.208.246.49:*, 1.235.34.38:80}[26.5625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53748: (0.337838%)&lt;BR/&gt; 53747: (0.337838%)&lt;BR/&gt; 53746: (0.337838%)&lt;BR/&gt; 53745: (0.337838%)&gt;];
}
3987--4048[label="1;113pkt 113fpkt"];
3987--7086[label="1;113pkt 113fpkt"];
3987--8165[label="0.0114943;2pkt 2fpkt"];
3987--8208[label="0.0114943;2pkt 2fpkt"];
3987--8241[label="0.0114943;2pkt 2fpkt"];
3987--8798[label="1;174pkt 174fpkt"];
4048--7086[label="1;113pkt 113fpkt"];
4048--8798[label="1;113pkt 113fpkt"];
7086--8798[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_ip="1.235.34.39" dst_port="80" src_ip="128.208.246.49"/>
      <filter dst_ip="1.235.34.38" dst_port="80" src_ip="128.208.246.49"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
4073[label="38.212.28.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
7097[label="38.212.28.101;d;1pkt 1fpkt", shape=hexagon, color=black];
8006[label="38.212.28.101;d;1pkt 1fpkt", shape=polygon, color=gold];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.126.213:40881, 38.212.28.101:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40881: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4073--7097[label="1;1pkt 1fpkt"];
4073--8006[label="1;1pkt 1fpkt"];
7097--8006[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.212.28.101" dst_port="80" src_ip="133.72.126.213" src_port="40881"/>
    </slice>
    <from sec="1229058628" usec="0"/>
    <to sec="1229058662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17345,1.85023,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
46[label="133.72.128.83s;3pkt 3fpkt", shape=rectangle, color=red];
244[label="133.72.128.83;s;1414pkt 1414fpkt", shape=diamond, color=yellow];
757[label="222.62.39.95;d;104pkt 104fpkt", shape=diamond, color=yellow];
903[label="223.68.229.248;d;405pkt 405fpkt", shape=diamond, color=yellow];
917[label="223.70.56.148;d;97pkt 97fpkt", shape=diamond, color=yellow];
1066[label="210.151.185.201;d;120pkt 120fpkt", shape=diamond, color=yellow];
1241[label="41.100.133.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1288[label="34.235.93.238;d;53pkt 53fpkt", shape=diamond, color=yellow];
1541[label="36.166.23.99;d;219pkt 219fpkt", shape=diamond, color=yellow];
2008[label="96.221.169.65;d;45pkt 45fpkt", shape=diamond, color=yellow];
5008[label="223.68.229.248;d;405pkt 405fpkt", shape=hexagon, color=black];
5394[label="34.235.93.238;d;26pkt 26fpkt", shape=hexagon, color=black];
5811[label="223.70.56.148;d;97pkt 97fpkt", shape=hexagon, color=black];
6477[label="96.221.169.65;d;45pkt 45fpkt", shape=hexagon, color=black];
6879[label="210.151.185.201;d;120pkt 120fpkt", shape=hexagon, color=black];
7103[label="133.72.128.83;s;1414pkt 1414fpkt", shape=hexagon, color=black];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.128.83:*, 165.181.120.204:80}[28.6461%]&lt;BR/&gt;{*:*, 223.68.229.248:80}[23.4747%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9343%)&lt;BR/&gt; 0: (0.131349%)&lt;BR/&gt; 41630: (0.0437828%)&lt;BR/&gt; 41616: (0.0437828%)&lt;BR/&gt; 41611: (0.0437828%)&gt;];
}
46--178[label="0.333333;1pkt 1fpkt"];
46--195[label="0.333333;1pkt 1fpkt"];
46--244[label="1;3pkt 3fpkt"];
46--422[label="0.666667;2pkt 2fpkt"];
46--1241[label="1;1pkt 1fpkt"];
46--7103[label="1;3pkt 3fpkt"];
46--8134[label="0.333333;1pkt 1fpkt"];
244--422[label="1;5pkt 5fpkt"];
244--466[label="0.348656;493pkt 493fpkt"];
244--578[label="0.386364;17pkt 17fpkt"];
244--757[label="0.480769;50pkt 50fpkt"];
244--870[label="0.0769231;5pkt 5fpkt"];
244--903[label="0.582716;236pkt 236fpkt"];
244--917[label="1;97pkt 97fpkt"];
244--1066[label="0.9;108pkt 108fpkt"];
244--1241[label="1;1pkt 1fpkt"];
244--1288[label="0.339623;18pkt 18fpkt"];
244--1541[label="0.872146;191pkt 191fpkt"];
244--1586[label="0.434783;20pkt 20fpkt"];
244--2008[label="0.8;36pkt 36fpkt"];
244--5008[label="0.582716;236pkt 236fpkt"];
244--5394[label="0.576923;15pkt 15fpkt"];
244--5513[label="0.0784314;4pkt 4fpkt"];
244--5811[label="1;97pkt 97fpkt"];
244--6477[label="0.8;36pkt 36fpkt"];
244--6879[label="0.9;108pkt 108fpkt"];
244--7103[label="1;1414pkt 1414fpkt"];
244--7119[label="0.447368;17pkt 17fpkt"];
244--8119[label="0.096181;136pkt 136fpkt"];
244--8134[label="0.0806223;114pkt 114fpkt"];
244--8165[label="0.000707214;1pkt 1fpkt"];
244--8208[label="0.000707214;1pkt 1fpkt"];
244--8241[label="0.000707214;1pkt 1fpkt"];
757--7103[label="0.480769;50pkt 50fpkt"];
757--8119[label="0.105769;11pkt 11fpkt"];
757--8134[label="0.0480769;5pkt 5fpkt"];
757--8165[label="0.0192308;2pkt 2fpkt"];
757--8208[label="0.0192308;2pkt 2fpkt"];
757--8241[label="0.0192308;2pkt 2fpkt"];
757--9187[label="0.519231;54pkt 54fpkt"];
757--11108[label="0.519231;54pkt 54fpkt"];
757--12020[label="0.519231;54pkt 54fpkt"];
903--5008[label="1;405pkt 405fpkt"];
903--7103[label="0.582716;236pkt 236fpkt"];
903--8119[label="0.0320988;13pkt 13fpkt"];
903--8134[label="0.0962963;39pkt 39fpkt"];
903--8165[label="0.0222222;9pkt 9fpkt"];
903--8208[label="0.0222222;9pkt 9fpkt"];
903--8241[label="0.0222222;9pkt 9fpkt"];
903--9187[label="0.377778;153pkt 153fpkt"];
903--10197[label="0.025641;1pkt 1fpkt"];
903--11108[label="0.377778;153pkt 153fpkt"];
903--11621[label="0.025641;1pkt 1fpkt"];
903--12020[label="0.377778;153pkt 153fpkt"];
917--5811[label="1;97pkt 97fpkt"];
917--7103[label="1;97pkt 97fpkt"];
917--8119[label="0.113402;11pkt 11fpkt"];
917--8134[label="0.14433;14pkt 14fpkt"];
1066--6879[label="1;120pkt 120fpkt"];
1066--7103[label="0.9;108pkt 108fpkt"];
1066--8119[label="0.075;9pkt 9fpkt"];
1066--9187[label="0.00833333;1pkt 1fpkt"];
1066--11108[label="0.00833333;1pkt 1fpkt"];
1066--12020[label="0.00833333;1pkt 1fpkt"];
1241--7103[label="1;1pkt 1fpkt"];
1288--5394[label="1;26pkt 26fpkt"];
1288--7103[label="0.339623;18pkt 18fpkt"];
1288--8119[label="0.0188679;1pkt 1fpkt"];
1288--8134[label="0.0754717;4pkt 4fpkt"];
1288--8165[label="0.132075;7pkt 7fpkt"];
1288--8208[label="0.132075;7pkt 7fpkt"];
1288--8241[label="0.132075;7pkt 7fpkt"];
1288--9187[label="0.415094;22pkt 22fpkt"];
1288--11108[label="0.415094;22pkt 22fpkt"];
1288--12020[label="0.415094;22pkt 22fpkt"];
1541--7103[label="0.872146;191pkt 191fpkt"];
1541--8119[label="0.0502283;11pkt 11fpkt"];
1541--8134[label="0.0639269;14pkt 14fpkt"];
1541--8165[label="0.0273973;6pkt 6fpkt"];
1541--8208[label="0.0273973;6pkt 6fpkt"];
1541--8241[label="0.0273973;6pkt 6fpkt"];
2008--6477[label="1;45pkt 45fpkt"];
2008--7103[label="0.8;36pkt 36fpkt"];
2008--8119[label="0.0666667;3pkt 3fpkt"];
2008--8134[label="0.0444444;2pkt 2fpkt"];
2008--8165[label="0.0888889;4pkt 4fpkt"];
2008--8208[label="0.0888889;4pkt 4fpkt"];
2008--8241[label="0.0888889;4pkt 4fpkt"];
5008--7103[label="0.582716;236pkt 236fpkt"];
5008--8119[label="0.0320988;13pkt 13fpkt"];
5008--8134[label="0.0962963;39pkt 39fpkt"];
5008--8165[label="0.0222222;9pkt 9fpkt"];
5008--8208[label="0.0222222;9pkt 9fpkt"];
5008--8241[label="0.0222222;9pkt 9fpkt"];
5008--9187[label="0.377778;153pkt 153fpkt"];
5008--10197[label="0.025641;1pkt 1fpkt"];
5008--11108[label="0.377778;153pkt 153fpkt"];
5008--11621[label="0.025641;1pkt 1fpkt"];
5008--12020[label="0.377778;153pkt 153fpkt"];
5394--7103[label="0.576923;15pkt 15fpkt"];
5394--8119[label="0.0384615;1pkt 1fpkt"];
5394--8134[label="0.153846;4pkt 4fpkt"];
5394--9187[label="0.269231;7pkt 7fpkt"];
5394--11108[label="0.269231;7pkt 7fpkt"];
5394--12020[label="0.269231;7pkt 7fpkt"];
5811--7103[label="1;97pkt 97fpkt"];
5811--8119[label="0.113402;11pkt 11fpkt"];
5811--8134[label="0.14433;14pkt 14fpkt"];
6477--7103[label="0.8;36pkt 36fpkt"];
6477--8119[label="0.0666667;3pkt 3fpkt"];
6477--8134[label="0.0444444;2pkt 2fpkt"];
6477--8165[label="0.0888889;4pkt 4fpkt"];
6477--8208[label="0.0888889;4pkt 4fpkt"];
6477--8241[label="0.0888889;4pkt 4fpkt"];
6879--7103[label="0.9;108pkt 108fpkt"];
6879--8119[label="0.075;9pkt 9fpkt"];
6879--9187[label="0.00833333;1pkt 1fpkt"];
6879--11108[label="0.00833333;1pkt 1fpkt"];
6879--12020[label="0.00833333;1pkt 1fpkt"];
7103--7119[label="0.447368;17pkt 17fpkt"];
7103--8119[label="0.096181;136pkt 136fpkt"];
7103--8134[label="0.0806223;114pkt 114fpkt"];
7103--8165[label="0.000707214;1pkt 1fpkt"];
7103--8208[label="0.000707214;1pkt 1fpkt"];
7103--8241[label="0.000707214;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.68.229.248" dst_port="80"/>
      <filter dst_ip="165.181.120.204" dst_port="80" src_ip="133.72.128.83"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
267[label="174.194.19.167;d;2pkt 2fpkt", shape=diamond, color=yellow];
270[label="215.160.185.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
3330[label="215.40.235.10;d;37pkt 37fpkt", shape=diamond, color=yellow];
3767[label="192.22.70.148;s;18pkt 18fpkt", shape=diamond, color=yellow];
5135[label="215.160.185.140;s;1pkt 1fpkt", shape=hexagon, color=black];
6848[label="192.22.70.148;s;18pkt 18fpkt", shape=hexagon, color=black];
7104[label="174.194.19.167;d;2pkt 2fpkt", shape=hexagon, color=black];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.40.235.10:*}[50.9091%]&lt;BR/&gt;{192.22.70.148:5222, *:*}[29.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5222: (22.1519%)&lt;BR/&gt; 80: (17.7215%)&lt;BR/&gt; 443: (3.79747%)&lt;BR/&gt; 49682: (2.53165%)&lt;BR/&gt; 49170: (2.53165%)&gt;];
}
267--270[label="1;1pkt 1fpkt"];
267--3767[label="0.5;1pkt 1fpkt"];
267--5135[label="1;1pkt 1fpkt"];
267--6848[label="0.5;1pkt 1fpkt"];
267--7104[label="1;2pkt 2fpkt"];
270--5135[label="1;1pkt 1fpkt"];
270--7104[label="1;1pkt 1fpkt"];
3330--3767[label="0.0555556;1pkt 1fpkt"];
3330--4953[label="0.027027;1pkt 1fpkt"];
3330--5423[label="0.027027;1pkt 1fpkt"];
3330--6128[label="0.108108;4pkt 4fpkt"];
3330--6848[label="0.0555556;1pkt 1fpkt"];
3330--8131[label="0.027027;1pkt 1fpkt"];
3330--8180[label="0.027027;1pkt 1fpkt"];
3330--8219[label="0.027027;1pkt 1fpkt"];
3330--8509[label="0.027027;1pkt 1fpkt"];
3330--8770[label="0.108108;4pkt 4fpkt"];
3330--10611[label="0.0769231;1pkt 1fpkt"];
3330--10906[label="0.108108;4pkt 4fpkt"];
3767--6848[label="1;18pkt 18fpkt"];
3767--7104[label="0.5;1pkt 1fpkt"];
5135--7104[label="1;1pkt 1fpkt"];
6848--7104[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.22.70.148" src_port="5222"/>
      <filter dst_ip="215.40.235.10" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
1836[label="214.56.229.93;d;269pkt 269fpkt", shape=diamond, color=yellow];
2463[label="169.18.169.100;d;233pkt 233fpkt", shape=diamond, color=yellow];
2577[label="44.77.28.93;s;15pkt 15fpkt", shape=diamond, color=yellow];
3028[label="41.249.108.220;s;16pkt 16fpkt", shape=diamond, color=yellow];
3283[label="154.79.169.219;d;275pkt 275fpkt", shape=diamond, color=yellow];
5763[label="214.56.229.93;d;224pkt 224fpkt", shape=hexagon, color=black];
5829[label="128.224.20.131;d;220pkt 220fpkt", shape=hexagon, color=black];
6147[label="174.194.207.70;d;81pkt 81fpkt", shape=hexagon, color=black];
6555[label="41.249.108.220;s;16pkt 16fpkt", shape=hexagon, color=black];
6909[label="44.77.28.93;s;13pkt 13fpkt", shape=hexagon, color=black];
8589[label="40.2.167.31;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8930[label="200.12.74.63;20pkt 20fpkt", shape=pentagon, color=darkviolet];
9832[label="203.132.120.153;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11505[label="43.92.171.172;11pkt 11fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[32.43%]&lt;BR/&gt;{*:*, 154.79.169.219:*}[24.8419%]&lt;BR/&gt;{*:*, 169.18.169.100:*}[21.0479%]&lt;BR/&gt;{*:*, 128.224.20.131:*}[20.5962%]&lt;BR/&gt;{*:*, 214.56.229.93:25}[20.0542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.2553%)&lt;BR/&gt; 53: (7.12271%)&lt;BR/&gt; 113: (0.352609%)&lt;BR/&gt; 0: (0.352609%)&lt;BR/&gt; 443: (0.282087%)&gt;];
}
1836--2577[label="0.0666667;1pkt 1fpkt"];
1836--3028[label="0.125;2pkt 2fpkt"];
1836--3853[label="0.0666667;1pkt 1fpkt"];
1836--5763[label="1;224pkt 224fpkt"];
1836--6555[label="0.125;2pkt 2fpkt"];
1836--6909[label="0.0769231;1pkt 1fpkt"];
1836--6916[label="0.0769231;1pkt 1fpkt"];
1836--8118[label="0.0446097;12pkt 12fpkt"];
1836--8152[label="0.0557621;15pkt 15fpkt"];
1836--8195[label="0.0557621;15pkt 15fpkt"];
1836--8228[label="0.0557621;15pkt 15fpkt"];
1836--8589[label="0.133333;2pkt 2fpkt"];
1836--8926[label="0.0384615;1pkt 1fpkt"];
1836--8996[label="0.0526316;1pkt 1fpkt"];
1836--9555[label="0.105263;2pkt 2fpkt"];
1836--9832[label="0.3;3pkt 3fpkt"];
1836--9849[label="0.05;1pkt 1fpkt"];
1836--10549[label="0.0357143;1pkt 1fpkt"];
1836--10988[label="0.0384615;1pkt 1fpkt"];
1836--11505[label="0.0909091;1pkt 1fpkt"];
1836--11805[label="0.0357143;1pkt 1fpkt"];
2463--2577[label="0.333333;5pkt 5fpkt"];
2463--3028[label="0.3125;5pkt 5fpkt"];
2463--3758[label="0.0113636;1pkt 1fpkt"];
2463--3853[label="0.2;3pkt 3fpkt"];
2463--6555[label="0.3125;5pkt 5fpkt"];
2463--6909[label="0.384615;5pkt 5fpkt"];
2463--6916[label="0.230769;3pkt 3fpkt"];
2463--8118[label="0.0257511;6pkt 6fpkt"];
2463--8152[label="0.00429185;1pkt 1fpkt"];
2463--8195[label="0.00429185;1pkt 1fpkt"];
2463--8228[label="0.00429185;1pkt 1fpkt"];
2463--8589[label="0.2;3pkt 3fpkt"];
2463--9832[label="0.2;2pkt 2fpkt"];
2463--9849[label="0.25;5pkt 5fpkt"];
2577--3283[label="0.0666667;1pkt 1fpkt"];
2577--5763[label="0.0666667;1pkt 1fpkt"];
2577--5829[label="0.133333;2pkt 2fpkt"];
2577--6909[label="1;13pkt 13fpkt"];
2577--7134[label="0.2;3pkt 3fpkt"];
3028--3283[label="0.125;2pkt 2fpkt"];
3028--5763[label="0.0625;1pkt 1fpkt"];
3028--5829[label="0.125;2pkt 2fpkt"];
3028--6555[label="1;16pkt 16fpkt"];
3283--3853[label="0.2;3pkt 3fpkt"];
3283--4089[label="0.00363636;1pkt 1fpkt"];
3283--4109[label="0.0208333;1pkt 1fpkt"];
3283--5832[label="0.00363636;1pkt 1fpkt"];
3283--6036[label="0.00727273;2pkt 2fpkt"];
3283--6453[label="0.00363636;1pkt 1fpkt"];
3283--6555[label="0.125;2pkt 2fpkt"];
3283--6909[label="0.0769231;1pkt 1fpkt"];
3283--6916[label="0.230769;3pkt 3fpkt"];
3283--7107[label="0.00363636;1pkt 1fpkt"];
3283--7423[label="0.00727273;2pkt 2fpkt"];
3283--8118[label="0.00727273;2pkt 2fpkt"];
3283--8152[label="0.00363636;1pkt 1fpkt"];
3283--8153[label="0.0109091;3pkt 3fpkt"];
3283--8164[label="0.00363636;1pkt 1fpkt"];
3283--8195[label="0.00363636;1pkt 1fpkt"];
3283--8196[label="0.0109091;3pkt 3fpkt"];
3283--8207[label="0.00363636;1pkt 1fpkt"];
3283--8228[label="0.00363636;1pkt 1fpkt"];
3283--8229[label="0.0109091;3pkt 3fpkt"];
3283--8240[label="0.00363636;1pkt 1fpkt"];
3283--8589[label="0.133333;2pkt 2fpkt"];
3283--8649[label="0.166667;2pkt 2fpkt"];
3283--9480[label="0.0153846;2pkt 2fpkt"];
3283--9504[label="0.0327273;9pkt 9fpkt"];
3283--9522[label="0.0327273;9pkt 9fpkt"];
3283--9849[label="0.15;3pkt 3fpkt"];
3283--10031[label="0.0196078;1pkt 1fpkt"];
3283--11257[label="0.0327273;9pkt 9fpkt"];
3283--11265[label="0.0327273;9pkt 9fpkt"];
3283--12074[label="0.0327273;9pkt 9fpkt"];
3283--12078[label="0.0327273;9pkt 9fpkt"];
5763--6555[label="0.0625;1pkt 1fpkt"];
5763--6909[label="0.0769231;1pkt 1fpkt"];
5763--6916[label="0.0769231;1pkt 1fpkt"];
5763--8118[label="0.0535714;12pkt 12fpkt"];
5763--8589[label="0.0666667;1pkt 1fpkt"];
5763--8996[label="0.0526316;1pkt 1fpkt"];
5763--9555[label="0.105263;2pkt 2fpkt"];
5763--9832[label="0.2;2pkt 2fpkt"];
5763--9849[label="0.05;1pkt 1fpkt"];
5763--10549[label="0.0357143;1pkt 1fpkt"];
5763--11505[label="0.0909091;1pkt 1fpkt"];
5763--11805[label="0.0357143;1pkt 1fpkt"];
5829--6130[label="0.484848;16pkt 16fpkt"];
5829--6555[label="0.125;2pkt 2fpkt"];
5829--6909[label="0.153846;2pkt 2fpkt"];
5829--6916[label="0.153846;2pkt 2fpkt"];
5829--7952[label="0.484848;16pkt 16fpkt"];
5829--8118[label="0.0545455;12pkt 12fpkt"];
5829--8589[label="0.133333;2pkt 2fpkt"];
5829--8623[label="0.0625;1pkt 1fpkt"];
5829--9132[label="0.0555556;1pkt 1fpkt"];
5829--9832[label="0.2;2pkt 2fpkt"];
5829--9849[label="0.15;3pkt 3fpkt"];
6147--8118[label="0.0740741;6pkt 6fpkt"];
6147--8930[label="1;20pkt 20fpkt"];
6147--11505[label="0.0909091;1pkt 1fpkt"];
6909--7134[label="0.230769;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.169.219"/>
      <filter dst_ip="169.18.169.100"/>
      <filter dst_ip="128.224.20.131"/>
      <filter src_port="25"/>
      <filter dst_ip="214.56.229.93" dst_port="25"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
2462[label="215.40.232.66;s;489pkt 489fpkt", shape=diamond, color=yellow];
7155[label="215.40.232.66;s;483pkt 483fpkt", shape=hexagon, color=black];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.232.66:0, *:0}[98.5685%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0741%)&lt;BR/&gt; 1080: (0.154321%)&lt;BR/&gt; 4641: (0.102881%)&lt;BR/&gt; 2385: (0.102881%)&lt;BR/&gt; 139: (0.102881%)&gt;];
}
2462--4751[label="0.0122699;6pkt 6fpkt"];
2462--5428[label="0.00408998;2pkt 2fpkt"];
2462--5730[label="0.00204499;1pkt 1fpkt"];
2462--5772[label="0.00294118;1pkt 1fpkt"];
2462--7155[label="1;483pkt 483fpkt"];
2462--7750[label="0.0122699;6pkt 6fpkt"];
2462--8108[label="0.0122699;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="215.40.232.66"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
2919[label="144.203.87.49;s;37pkt 37fpkt", shape=diamond, color=yellow];
7156[label="144.203.87.49;s;33pkt 33fpkt", shape=hexagon, color=black];
8789[label="144.203.87.49;38pkt 38fpkt", shape=pentagon, color=darkviolet];
10921[label="144.203.87.49;37pkt 37fpkt", shape=invtriangle, color=brown];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.87.49:80, 41.207.122.51:*}[30.7692%]&lt;BR/&gt;{144.203.87.49:80, 41.207.122.53:*}[28.2051%]&lt;BR/&gt;{144.203.87.49:80, 41.207.122.52:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64640: (1.37931%)&lt;BR/&gt; 62420: (1.37931%)&lt;BR/&gt; 61884: (1.37931%)&lt;BR/&gt; 61871: (1.37931%)&gt;];
}
2919--7156[label="1;33pkt 33fpkt"];
2919--8131[label="0.108108;4pkt 4fpkt"];
2919--8180[label="0.108108;4pkt 4fpkt"];
2919--8219[label="0.108108;4pkt 4fpkt"];
2919--8789[label="0.972973;36pkt 36fpkt"];
2919--10921[label="0.945946;35pkt 35fpkt"];
7156--8131[label="0.121212;4pkt 4fpkt"];
7156--8180[label="0.121212;4pkt 4fpkt"];
7156--8219[label="0.121212;4pkt 4fpkt"];
7156--8789[label="0.969697;32pkt 32fpkt"];
7156--10921[label="0.939394;31pkt 31fpkt"];
8789--10921[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.122.51" src_ip="144.203.87.49" src_port="80"/>
      <filter dst_ip="41.207.122.53" src_ip="144.203.87.49" src_port="80"/>
      <filter dst_ip="41.207.122.52" src_ip="144.203.87.49" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
812[label="65.54.9.60;d;6pkt 6fpkt", shape=diamond, color=yellow];
990[label="214.49.0.231;s;33pkt 33fpkt", shape=diamond, color=yellow];
4632[label="65.54.88.8;d;8pkt 8fpkt", shape=diamond, color=yellow];
4982[label="65.54.9.60;d;6pkt 6fpkt", shape=hexagon, color=black];
7158[label="214.49.0.231;s;33pkt 33fpkt", shape=hexagon, color=black];
7654[label="65.54.88.8;d;8pkt 8fpkt", shape=hexagon, color=black];
8020[label="65.54.9.60;d;6pkt 6fpkt", shape=polygon, color=gold];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.0.231:*, 65.54.93.0:80}[34.2857%]&lt;BR/&gt;{214.49.0.231:*, 65.54.88.8:80}[22.8571%]&lt;BR/&gt;{214.49.0.231:*, 211.140.116.92:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1235: (2.5%)&lt;BR/&gt; 1234: (2.5%)&lt;BR/&gt; 1233: (2.5%)&lt;BR/&gt; 1232: (2.5%)&gt;];
}
812--990[label="0.666667;4pkt 4fpkt"];
812--1406[label="0.5;1pkt 1fpkt"];
812--4982[label="1;6pkt 6fpkt"];
812--7158[label="0.666667;4pkt 4fpkt"];
812--8020[label="1;6pkt 6fpkt"];
812--8119[label="0.666667;4pkt 4fpkt"];
812--8134[label="0.166667;1pkt 1fpkt"];
990--4632[label="1;8pkt 8fpkt"];
990--4982[label="0.666667;4pkt 4fpkt"];
990--7035[label="0.8;8pkt 8fpkt"];
990--7158[label="1;33pkt 33fpkt"];
990--7654[label="1;8pkt 8fpkt"];
990--8020[label="0.666667;4pkt 4fpkt"];
990--8119[label="0.0606061;2pkt 2fpkt"];
990--8134[label="0.030303;1pkt 1fpkt"];
990--8165[label="0.0606061;2pkt 2fpkt"];
990--8208[label="0.0606061;2pkt 2fpkt"];
990--8241[label="0.0606061;2pkt 2fpkt"];
4632--7158[label="1;8pkt 8fpkt"];
4632--7654[label="1;8pkt 8fpkt"];
4632--8165[label="0.25;2pkt 2fpkt"];
4632--8208[label="0.25;2pkt 2fpkt"];
4632--8241[label="0.25;2pkt 2fpkt"];
4982--7158[label="0.666667;4pkt 4fpkt"];
4982--8020[label="1;6pkt 6fpkt"];
4982--8119[label="0.666667;4pkt 4fpkt"];
4982--8134[label="0.166667;1pkt 1fpkt"];
7158--7654[label="1;8pkt 8fpkt"];
7158--8020[label="0.666667;4pkt 4fpkt"];
7158--8119[label="0.0606061;2pkt 2fpkt"];
7158--8134[label="0.030303;1pkt 1fpkt"];
7158--8165[label="0.0606061;2pkt 2fpkt"];
7158--8208[label="0.0606061;2pkt 2fpkt"];
7158--8241[label="0.0606061;2pkt 2fpkt"];
7654--8165[label="0.25;2pkt 2fpkt"];
7654--8208[label="0.25;2pkt 2fpkt"];
7654--8241[label="0.25;2pkt 2fpkt"];
8020--8119[label="0.666667;4pkt 4fpkt"];
8020--8134[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="65.54.93.0" dst_port="80" src_ip="214.49.0.231"/>
      <filter dst_ip="211.140.116.92" dst_port="80" src_ip="214.49.0.231"/>
      <filter dst_ip="65.54.88.8" dst_port="80" src_ip="214.49.0.231"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
3756[label="133.72.3.30;s;589pkt 589fpkt", shape=diamond, color=yellow];
7160[label="133.72.3.30;s;565pkt 565fpkt", shape=hexagon, color=black];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.3.30:*, *:53}[92.8693%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.0867%)&lt;BR/&gt; 44579: (0.17331%)&lt;BR/&gt; 31730: (0.17331%)&lt;BR/&gt; 22181: (0.17331%)&lt;BR/&gt; 4869: (0.17331%)&gt;];
}
3756--4099[label="0.00742115;4pkt 4fpkt"];
3756--4121[label="0.00509338;3pkt 3fpkt"];
3756--4123[label="0.00554017;2pkt 2fpkt"];
3756--4201[label="0.00174216;1pkt 1fpkt"];
3756--6405[label="0.00509338;3pkt 3fpkt"];
3756--7129[label="0.00817996;4pkt 4fpkt"];
3756--7150[label="0.00625;2pkt 2fpkt"];
3756--7160[label="1;565pkt 565fpkt"];
3756--7166[label="0.0101868;6pkt 6fpkt"];
3756--7443[label="0.00339559;2pkt 2fpkt"];
3756--7454[label="0.00679117;4pkt 4fpkt"];
3756--7485[label="0.00509338;3pkt 3fpkt"];
3756--7540[label="0.00174216;1pkt 1fpkt"];
3756--8153[label="0.0118846;7pkt 7fpkt"];
3756--8164[label="0.00169779;1pkt 1fpkt"];
3756--8196[label="0.0118846;7pkt 7fpkt"];
3756--8207[label="0.00169779;1pkt 1fpkt"];
3756--8229[label="0.0118846;7pkt 7fpkt"];
3756--8240[label="0.00169779;1pkt 1fpkt"];
7160--7166[label="0.0106195;6pkt 6fpkt"];
7160--7443[label="0.00353982;2pkt 2fpkt"];
7160--7454[label="0.00707965;4pkt 4fpkt"];
7160--7485[label="0.00530973;3pkt 3fpkt"];
7160--7540[label="0.00176991;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="133.72.3.30"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
3785[label="96.14.65.77;s;2pkt 2fpkt", shape=diamond, color=yellow];
7181[label="96.14.65.77;s;2pkt 2fpkt", shape=hexagon, color=black];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.14.65.77:8000, 128.64.243.96:4000}[50%]&lt;BR/&gt;{96.14.65.77:8000, 128.64.243.96:4002}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 4002: (25%)&lt;BR/&gt; 4000: (25%)&gt;];
}
3785--7181[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.243.96" dst_port="4002" src_ip="96.14.65.77" src_port="8000"/>
      <filter dst_ip="128.64.243.96" dst_port="4000" src_ip="96.14.65.77" src_port="8000"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
2038[label="41.207.116.24;d;74pkt 74fpkt", shape=diamond, color=yellow];
2039[label="144.203.172.252;s;75pkt 75fpkt", shape=diamond, color=yellow];
6880[label="144.203.172.252;s;75pkt 75fpkt", shape=hexagon, color=black];
7192[label="41.207.116.24;d;65pkt 65fpkt", shape=hexagon, color=black];
10625[label="144.203.172.252;81pkt 81fpkt", shape=pentagon, color=darkviolet];
11834[label="144.203.172.252;81pkt 81fpkt", shape=invtriangle, color=brown];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.172.252:80, 41.207.116.24:*}[98.7654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64970: (0.665188%)&lt;BR/&gt; 64652: (0.665188%)&lt;BR/&gt; 64510: (0.665188%)&lt;BR/&gt; 63734: (0.665188%)&gt;];
}
2038--2039[label="1;74pkt 74fpkt"];
2038--6880[label="1;74pkt 74fpkt"];
2038--7192[label="1;65pkt 65fpkt"];
2038--8131[label="0.0405405;3pkt 3fpkt"];
2038--8180[label="0.0405405;3pkt 3fpkt"];
2038--8219[label="0.0405405;3pkt 3fpkt"];
2038--10625[label="1;74pkt 74fpkt"];
2038--11834[label="1;74pkt 74fpkt"];
2039--2110[label="0.0133333;1pkt 1fpkt"];
2039--6180[label="0.0140845;1pkt 1fpkt"];
2039--6880[label="1;75pkt 75fpkt"];
2039--7192[label="1;65pkt 65fpkt"];
2039--8131[label="0.0533333;4pkt 4fpkt"];
2039--8180[label="0.0533333;4pkt 4fpkt"];
2039--8219[label="0.0533333;4pkt 4fpkt"];
2039--10625[label="1;75pkt 75fpkt"];
2039--11834[label="1;75pkt 75fpkt"];
6880--7192[label="1;65pkt 65fpkt"];
6880--8131[label="0.0533333;4pkt 4fpkt"];
6880--8180[label="0.0533333;4pkt 4fpkt"];
6880--8219[label="0.0533333;4pkt 4fpkt"];
6880--10625[label="1;75pkt 75fpkt"];
6880--11834[label="1;75pkt 75fpkt"];
7192--8131[label="0.0461538;3pkt 3fpkt"];
7192--8180[label="0.0461538;3pkt 3fpkt"];
7192--8219[label="0.0461538;3pkt 3fpkt"];
7192--10625[label="1;65pkt 65fpkt"];
7192--11834[label="1;65pkt 65fpkt"];
10625--11834[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.24" src_ip="144.203.172.252" src_port="80"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
1503[label="214.56.200.239;d;2555pkt 2555fpkt", shape=diamond, color=yellow];
2047[label="4.92.43.123;s;1758pkt 1758fpkt", shape=diamond, color=yellow];
4203[label="201.192.197.172;s;598pkt 598fpkt", shape=diamond, color=yellow];
5274[label="214.56.200.239;d;2555pkt 2555fpkt", shape=hexagon, color=black];
6887[label="4.92.43.123;s;1758pkt 1758fpkt", shape=hexagon, color=black];
7215[label="201.192.197.172;s;538pkt 538fpkt", shape=hexagon, color=black];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.92.43.123:*, 214.56.200.239:62997}[68.8063%]&lt;BR/&gt;{201.192.197.172:*, 214.56.200.239:62997}[23.4051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62997: (50%)&lt;BR/&gt; 3383: (0.051219%)&lt;BR/&gt; 2399: (0.051219%)&lt;BR/&gt; 2390: (0.051219%)&lt;BR/&gt; 2301: (0.051219%)&gt;];
}
1503--2047[label="1;1758pkt 1758fpkt"];
1503--4203[label="1;598pkt 598fpkt"];
1503--5274[label="1;2555pkt 2555fpkt"];
1503--6887[label="1;1758pkt 1758fpkt"];
1503--7215[label="1;538pkt 538fpkt"];
1503--8126[label="0.0654155;122pkt 122fpkt"];
1503--8158[label="0.0814728;208pkt 208fpkt"];
1503--8202[label="0.0814728;208pkt 208fpkt"];
1503--8235[label="0.0814409;208pkt 208fpkt"];
2047--5274[label="1;1758pkt 1758fpkt"];
2047--6887[label="1;1758pkt 1758fpkt"];
2047--8126[label="0.0500569;88pkt 88fpkt"];
2047--8158[label="0.0625711;110pkt 110fpkt"];
2047--8202[label="0.0625711;110pkt 110fpkt"];
2047--8235[label="0.0625711;110pkt 110fpkt"];
4203--5274[label="1;598pkt 598fpkt"];
4203--7215[label="1;538pkt 538fpkt"];
4203--8126[label="0.048495;29pkt 29fpkt"];
4203--8158[label="0.09699;58pkt 58fpkt"];
4203--8202[label="0.09699;58pkt 58fpkt"];
4203--8235[label="0.09699;58pkt 58fpkt"];
5274--6887[label="1;1758pkt 1758fpkt"];
5274--7215[label="1;538pkt 538fpkt"];
5274--8126[label="0.0654155;122pkt 122fpkt"];
5274--8158[label="0.0814728;208pkt 208fpkt"];
5274--8202[label="0.0814728;208pkt 208fpkt"];
5274--8235[label="0.0814409;208pkt 208fpkt"];
6887--8126[label="0.0500569;88pkt 88fpkt"];
6887--8158[label="0.0625711;110pkt 110fpkt"];
6887--8202[label="0.0625711;110pkt 110fpkt"];
6887--8235[label="0.0625711;110pkt 110fpkt"];
7215--8126[label="0.0539033;29pkt 29fpkt"];
7215--8158[label="0.0390335;21pkt 21fpkt"];
7215--8202[label="0.0390335;21pkt 21fpkt"];
7215--8235[label="0.0390335;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.200.239" dst_port="62997" src_ip="4.92.43.123"/>
      <filter dst_ip="214.56.200.239" dst_port="62997" src_ip="201.192.197.172"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
2499[label="154.79.242.186;s;4pkt 4fpkt", shape=diamond, color=yellow];
3836[label="7.142.153.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
4187[label="7.140.101.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
7221[label="7.142.153.28;d;1pkt 1fpkt", shape=hexagon, color=black];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.79.242.186:0, 7.142.153.28:0}[25%]&lt;BR/&gt;{154.79.242.186:0, 7.140.101.123:0}[25%]&lt;BR/&gt;{154.79.242.186:0, 7.142.35.125:0}[25%]&lt;BR/&gt;{154.79.242.186:0, 205.232.22.150:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2499--3277[label="0.25;1pkt 1fpkt"];
2499--3836[label="1;1pkt 1fpkt"];
2499--4187[label="1;1pkt 1fpkt"];
2499--7221[label="1;1pkt 1fpkt"];
3836--7221[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.232.22.150" src_ip="154.79.242.186"/>
      <filter dst_ip="7.142.35.125" src_ip="154.79.242.186"/>
      <filter dst_ip="7.140.101.123" src_ip="154.79.242.186"/>
      <filter dst_ip="7.142.153.28" src_ip="154.79.242.186"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
3366[label="214.49.185.77;d;68pkt 68fpkt", shape=diamond, color=yellow];
3848[label="215.9.69.26;s;52pkt 52fpkt", shape=diamond, color=yellow];
7229[label="215.9.69.26;s;52pkt 52fpkt", shape=hexagon, color=black];
7478[label="214.49.185.77;d;68pkt 68fpkt", shape=hexagon, color=black];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.69.26:*, 214.49.185.77:80}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60969: (0.833333%)&lt;BR/&gt; 60876: (0.833333%)&lt;BR/&gt; 60787: (0.833333%)&lt;BR/&gt; 59448: (0.833333%)&gt;];
}
3366--3402[label="0.161765;11pkt 11fpkt"];
3366--3848[label="1;52pkt 52fpkt"];
3366--7229[label="1;52pkt 52fpkt"];
3366--7478[label="1;68pkt 68fpkt"];
3366--8119[label="0.0588235;4pkt 4fpkt"];
3366--8134[label="0.0588235;4pkt 4fpkt"];
3366--8165[label="0.0147059;1pkt 1fpkt"];
3366--8208[label="0.0147059;1pkt 1fpkt"];
3366--8241[label="0.0147059;1pkt 1fpkt"];
3366--10454[label="0.161765;11pkt 11fpkt"];
3848--7229[label="1;52pkt 52fpkt"];
3848--7478[label="1;52pkt 52fpkt"];
3848--8119[label="0.0576923;3pkt 3fpkt"];
3848--8134[label="0.0576923;3pkt 3fpkt"];
3848--8165[label="0.0192308;1pkt 1fpkt"];
3848--8208[label="0.0192308;1pkt 1fpkt"];
3848--8241[label="0.0192308;1pkt 1fpkt"];
7229--7478[label="1;52pkt 52fpkt"];
7229--8119[label="0.0576923;3pkt 3fpkt"];
7229--8134[label="0.0576923;3pkt 3fpkt"];
7229--8165[label="0.0192308;1pkt 1fpkt"];
7229--8208[label="0.0192308;1pkt 1fpkt"];
7229--8241[label="0.0192308;1pkt 1fpkt"];
7478--8119[label="0.0588235;4pkt 4fpkt"];
7478--8134[label="0.0588235;4pkt 4fpkt"];
7478--8165[label="0.0147059;1pkt 1fpkt"];
7478--8208[label="0.0147059;1pkt 1fpkt"];
7478--8241[label="0.0147059;1pkt 1fpkt"];
7478--10454[label="0.161765;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.77" dst_port="80" src_ip="215.9.69.26"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
1205[label="174.194.19.84;d;7pkt 7fpkt", shape=diamond, color=yellow];
1229[label="42.236.33.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
5103[label="42.236.33.28;s;1pkt 1fpkt", shape=hexagon, color=black];
5621[label="174.194.19.84;d;7pkt 7fpkt", shape=hexagon, color=black];
8562[label="42.236.33.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.41.32:80, 174.194.19.84:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1812: (14.7059%)&lt;BR/&gt; 1886: (5.88235%)&lt;BR/&gt; 1877: (5.88235%)&lt;BR/&gt; 1870: (5.88235%)&gt;];
}
1205--1229[label="1;1pkt 1fpkt"];
1205--1457[label="0.714286;5pkt 5fpkt"];
1205--1613[label="0.142857;1pkt 1fpkt"];
1205--5103[label="1;1pkt 1fpkt"];
1205--5621[label="1;7pkt 7fpkt"];
1205--7231[label="0.142857;1pkt 1fpkt"];
1205--7426[label="0.714286;5pkt 5fpkt"];
1205--8131[label="0.142857;1pkt 1fpkt"];
1205--8180[label="0.142857;1pkt 1fpkt"];
1205--8219[label="0.142857;1pkt 1fpkt"];
1205--8562[label="1;1pkt 1fpkt"];
1229--5103[label="1;1pkt 1fpkt"];
1229--5621[label="1;1pkt 1fpkt"];
1229--8562[label="1;1pkt 1fpkt"];
5103--5621[label="1;1pkt 1fpkt"];
5103--8562[label="1;1pkt 1fpkt"];
5621--7231[label="0.142857;1pkt 1fpkt"];
5621--7426[label="0.714286;5pkt 5fpkt"];
5621--8131[label="0.142857;1pkt 1fpkt"];
5621--8180[label="0.142857;1pkt 1fpkt"];
5621--8219[label="0.142857;1pkt 1fpkt"];
5621--8562[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.84" src_ip="192.22.41.32" src_port="80"/>
    </slice>
    <from sec="1229058045" usec="0"/>
    <to sec="1229058519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2590[label="192.133.178.86;d;107pkt 107fpkt", shape=diamond, color=yellow];
3455[label="133.72.18.240;s;49pkt 49fpkt", shape=diamond, color=yellow];
6167[label="192.133.178.86;d;80pkt 80fpkt", shape=hexagon, color=black];
7239[label="133.72.18.240;s;49pkt 49fpkt", shape=hexagon, color=black];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.133.178.86:443}[69.0323%]&lt;BR/&gt;{133.72.18.240:*, 41.207.116.245:*}[30.9677%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (33.1579%)&lt;BR/&gt; 21: (8.42105%)&lt;BR/&gt; 44242: (0.701754%)&lt;BR/&gt; 65235: (0.350877%)&lt;BR/&gt; 64945: (0.350877%)&gt;];
}
2590--3455[label="0.0204082;1pkt 1fpkt"];
2590--4838[label="0.282609;26pkt 26fpkt"];
2590--6167[label="1;80pkt 80fpkt"];
2590--7239[label="0.0204082;1pkt 1fpkt"];
2590--8122[label="0.0747664;8pkt 8fpkt"];
2590--8154[label="0.0654206;7pkt 7fpkt"];
2590--8198[label="0.0654206;7pkt 7fpkt"];
2590--8231[label="0.0654206;7pkt 7fpkt"];
2590--9308[label="0.25;26pkt 26fpkt"];
2590--11173[label="0.25;26pkt 26fpkt"];
2590--12042[label="0.25;26pkt 26fpkt"];
3455--5298[label="0.530612;26pkt 26fpkt"];
3455--6167[label="0.0204082;1pkt 1fpkt"];
3455--7239[label="1;49pkt 49fpkt"];
6167--7239[label="0.0204082;1pkt 1fpkt"];
6167--8122[label="0.1;8pkt 8fpkt"];
6167--9308[label="0.225;18pkt 18fpkt"];
6167--11173[label="0.225;18pkt 18fpkt"];
6167--12042[label="0.225;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.245" src_ip="133.72.18.240"/>
      <filter dst_ip="192.133.178.86" dst_port="443"/>
    </slice>
    <from sec="1229058015" usec="0"/>
    <to sec="1229058819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
3917[label="128.87.185.170;d;35pkt 35fpkt", shape=diamond, color=yellow];
4639[label="5.135.54.33;s;30pkt 30fpkt", shape=diamond, color=yellow];
7272[label="128.87.185.170;d;25pkt 25fpkt", shape=hexagon, color=black];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.135.54.33:*, 128.87.185.170:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31719: (1.66667%)&lt;BR/&gt; 31708: (1.66667%)&lt;BR/&gt; 31588: (1.66667%)&lt;BR/&gt; 31587: (1.66667%)&gt;];
}
3917--4639[label="1;30pkt 30fpkt"];
3917--7272[label="1;25pkt 25fpkt"];
4639--7272[label="0.8;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.185.170" dst_port="80" src_ip="5.135.54.33"/>
    </slice>
    <from sec="1229058332" usec="0"/>
    <to sec="1229058771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
3961[label="6.0.11.46;d;254pkt 254fpkt", shape=diamond, color=yellow];
7296[label="6.0.11.46;d;254pkt 254fpkt", shape=hexagon, color=black];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 6.0.11.46:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3961--7296[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_ip="6.0.11.46"/>
    </slice>
    <from sec="1229058494" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
994[label="128.208.192.26;s;137pkt 137fpkt", shape=diamond, color=yellow];
3970[label="171.129.223.129;d;117pkt 117fpkt", shape=diamond, color=yellow];
7037[label="128.208.192.26;s;134pkt 134fpkt", shape=hexagon, color=black];
7302[label="171.129.223.129;d;117pkt 117fpkt", shape=hexagon, color=black];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.26:80, 171.129.223.129:*}[84.058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52382: (0.39604%)&lt;BR/&gt; 52381: (0.39604%)&lt;BR/&gt; 52380: (0.39604%)&lt;BR/&gt; 52379: (0.39604%)&gt;];
}
994--3970[label="0.991453;116pkt 116fpkt"];
994--7037[label="1;134pkt 134fpkt"];
994--7302[label="0.991453;116pkt 116fpkt"];
3970--7037[label="0.991453;116pkt 116fpkt"];
3970--7302[label="1;117pkt 117fpkt"];
3970--10517[label="0.00854701;1pkt 1fpkt"];
3970--11794[label="0.00854701;1pkt 1fpkt"];
7037--7302[label="0.991453;116pkt 116fpkt"];
7302--10517[label="0.00854701;1pkt 1fpkt"];
7302--11794[label="0.00854701;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.129.223.129" src_ip="128.208.192.26" src_port="80"/>
    </slice>
    <from sec="1229058477" usec="0"/>
    <to sec="1229058772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
3982[label="204.10.237.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
7309[label="204.10.237.55;s;1pkt 1fpkt", shape=hexagon, color=black];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.10.237.55:1491, 215.40.224.9:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1491: (50%)&gt;];
}
3982--7309[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.9" dst_port="8080" src_ip="204.10.237.55" src_port="1491"/>
    </slice>
    <from sec="1229058534" usec="0"/>
    <to sec="1229058697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
246[label="133.72.144.202;s;32pkt 32fpkt", shape=diamond, color=yellow];
247[label="160.223.79.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
4329[label="217.231.86.176;d;15pkt 15fpkt", shape=diamond, color=yellow];
5981[label="160.223.79.184;d;1pkt 1fpkt", shape=hexagon, color=black];
7325[label="217.231.86.176;d;12pkt 12fpkt", shape=hexagon, color=black];
7373[label="133.72.144.202;s;32pkt 32fpkt", shape=hexagon, color=black];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.144.202:*, 217.231.86.176:80}[46.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2205: (2.15054%)&lt;BR/&gt; 2201: (2.15054%)&lt;BR/&gt; 2197: (2.15054%)&lt;BR/&gt; 2195: (2.15054%)&gt;];
}
246--247[label="1;1pkt 1fpkt"];
246--924[label="0.03125;1pkt 1fpkt"];
246--2970[label="0.1875;6pkt 6fpkt"];
246--4065[label="1;1pkt 1fpkt"];
246--4329[label="1;15pkt 15fpkt"];
246--5981[label="1;1pkt 1fpkt"];
246--6126[label="0.1875;6pkt 6fpkt"];
246--6814[label="0.03125;1pkt 1fpkt"];
246--7093[label="1;1pkt 1fpkt"];
246--7325[label="1;12pkt 12fpkt"];
246--7373[label="1;32pkt 32fpkt"];
246--8119[label="0.03125;1pkt 1fpkt"];
246--8134[label="0.03125;1pkt 1fpkt"];
246--8165[label="0.0625;2pkt 2fpkt"];
246--8208[label="0.0625;2pkt 2fpkt"];
246--8241[label="0.0625;2pkt 2fpkt"];
247--5981[label="1;1pkt 1fpkt"];
247--7373[label="1;1pkt 1fpkt"];
247--8119[label="1;1pkt 1fpkt"];
247--8134[label="1;1pkt 1fpkt"];
4329--7325[label="1;12pkt 12fpkt"];
4329--7373[label="1;15pkt 15fpkt"];
4329--8165[label="0.0666667;1pkt 1fpkt"];
4329--8208[label="0.0666667;1pkt 1fpkt"];
4329--8241[label="0.0666667;1pkt 1fpkt"];
5981--7373[label="1;1pkt 1fpkt"];
5981--8119[label="1;1pkt 1fpkt"];
5981--8134[label="1;1pkt 1fpkt"];
7325--7373[label="1;12pkt 12fpkt"];
7373--8119[label="0.03125;1pkt 1fpkt"];
7373--8134[label="0.03125;1pkt 1fpkt"];
7373--8165[label="0.0625;2pkt 2fpkt"];
7373--8208[label="0.0625;2pkt 2fpkt"];
7373--8241[label="0.0625;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.231.86.176" dst_port="80" src_ip="133.72.144.202"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
4340[label="193.195.156.15;s;2pkt 2fpkt", shape=diamond, color=yellow];
7328[label="193.195.156.15;s;2pkt 2fpkt", shape=hexagon, color=black];
8411[label="193.195.156.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10735[label="193.195.156.15;1pkt 1fpkt", shape=invtriangle, color=brown];
11881[label="193.195.156.15;1pkt 1fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.195.156.15:80, 214.49.184.145:64940}[50%]&lt;BR/&gt;{193.195.156.15:80, 214.49.184.145:65360}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65360: (35.7143%)&lt;BR/&gt; 64940: (14.2857%)&gt;];
}
4340--5011[label="1;2pkt 2fpkt"];
4340--7328[label="1;2pkt 2fpkt"];
4340--8411[label="1;1pkt 1fpkt"];
4340--10735[label="1;1pkt 1fpkt"];
4340--11881[label="1;1pkt 1fpkt"];
7328--8411[label="1;1pkt 1fpkt"];
7328--10735[label="1;1pkt 1fpkt"];
7328--11881[label="1;1pkt 1fpkt"];
8411--10735[label="1;1pkt 1fpkt"];
8411--11881[label="1;1pkt 1fpkt"];
10735--11881[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.184.145" dst_port="65360" src_ip="193.195.156.15" src_port="80"/>
      <filter dst_ip="214.49.184.145" dst_port="64940" src_ip="193.195.156.15" src_port="80"/>
    </slice>
    <from sec="1229058618" usec="0"/>
    <to sec="1229058680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
4085[label="144.203.219.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
7337[label="144.203.219.105;s;1pkt 1fpkt", shape=hexagon, color=black];
8103[label="144.203.219.105;s;1pkt 1fpkt", shape=polygon, color=gold];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.219.105:80, 41.207.116.26:45522}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45522: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4085--7337[label="1;1pkt 1fpkt"];
4085--8103[label="1;1pkt 1fpkt"];
7337--8103[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.26" dst_port="45522" src_ip="144.203.219.105" src_port="80"/>
    </slice>
    <from sec="1229058643" usec="0"/>
    <to sec="1229058770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
4366[label="200.236.84.138;s;6pkt 6fpkt", shape=diamond, color=yellow];
7340[label="200.236.84.138;s;6pkt 6fpkt", shape=hexagon, color=black];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.236.84.138:80, 133.72.181.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1308: (8.33333%)&lt;BR/&gt; 1306: (8.33333%)&lt;BR/&gt; 1290: (8.33333%)&lt;BR/&gt; 1288: (8.33333%)&gt;];
}
4366--7340[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.181.178" src_ip="200.236.84.138" src_port="80"/>
    </slice>
    <from sec="1229058652" usec="0"/>
    <to sec="1229058693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
4381[label="195.200.108.31;s;98pkt 98fpkt", shape=diamond, color=yellow];
7345[label="195.200.108.31;s;98pkt 98fpkt", shape=hexagon, color=black];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.200.108.31:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 29965: (0.510204%)&lt;BR/&gt; 28747: (0.510204%)&lt;BR/&gt; 28689: (0.510204%)&lt;BR/&gt; 28121: (0.510204%)&gt;];
}
4381--7345[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="195.200.108.31"/>
    </slice>
    <from sec="1229058662" usec="0"/>
    <to sec="1229058674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
4429[label="55.9.244.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
7355[label="55.9.244.95;d;1pkt 1fpkt", shape=hexagon, color=black];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.224.8:8080, 55.9.244.95:57946}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57946: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
4429--7355[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="55.9.244.95" dst_port="57946" src_ip="215.40.224.8" src_port="8080"/>
    </slice>
    <from sec="1229058682" usec="0"/>
    <to sec="1229058712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
4440[label="192.100.25.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
7358[label="192.100.25.3;s;1pkt 1fpkt", shape=hexagon, color=black];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.100.25.3:80, 215.40.224.9:59916}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59916: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4440--7358[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.9" dst_port="59916" src_ip="192.100.25.3" src_port="80"/>
    </slice>
    <from sec="1229058692" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
4458[label="214.49.26.4;d;117pkt 117fpkt", shape=diamond, color=yellow];
4462[label="116.32.130.28;s;66pkt 66fpkt", shape=diamond, color=yellow];
7364[label="116.32.130.28;s;66pkt 66fpkt", shape=hexagon, color=black];
8054[label="116.32.130.28;s;66pkt 66fpkt", shape=polygon, color=gold];
8566[label="116.32.130.28;66pkt 66fpkt", shape=pentagon, color=darkviolet];
10803[label="116.32.130.28;66pkt 66fpkt", shape=invtriangle, color=brown];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.32.130.28:80, 214.49.26.4:*}[56.4103%]&lt;BR/&gt;{193.233.236.64:80, 214.49.26.4:*}[31.6239%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56797: (0.671141%)&lt;BR/&gt; 56796: (0.671141%)&lt;BR/&gt; 56795: (0.671141%)&lt;BR/&gt; 56794: (0.671141%)&gt;];
}
4458--4462[label="1;66pkt 66fpkt"];
4458--6005[label="0.00854701;1pkt 1fpkt"];
4458--7324[label="0.181818;2pkt 2fpkt"];
4458--7364[label="1;66pkt 66fpkt"];
4458--8054[label="1;66pkt 66fpkt"];
4458--8566[label="1;66pkt 66fpkt"];
4458--10803[label="1;66pkt 66fpkt"];
4462--7364[label="1;66pkt 66fpkt"];
4462--8054[label="1;66pkt 66fpkt"];
4462--8566[label="1;66pkt 66fpkt"];
4462--10803[label="1;66pkt 66fpkt"];
7364--8054[label="1;66pkt 66fpkt"];
7364--8566[label="1;66pkt 66fpkt"];
7364--10803[label="1;66pkt 66fpkt"];
8054--8566[label="1;66pkt 66fpkt"];
8054--10803[label="1;66pkt 66fpkt"];
8566--10803[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.26.4" src_ip="116.32.130.28" src_port="80"/>
      <filter dst_ip="214.49.26.4" src_ip="193.233.236.64" src_port="80"/>
    </slice>
    <from sec="1229058710" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
629[label="128.64.161.185;d;408pkt 408fpkt", shape=diamond, color=yellow];
631[label="120.237.35.245;s;402pkt 402fpkt", shape=diamond, color=yellow];
5193[label="128.64.161.185;d;408pkt 408fpkt", shape=hexagon, color=black];
7390[label="120.237.35.245;s;402pkt 402fpkt", shape=hexagon, color=black];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.237.35.245:80, 128.64.161.185:*}[98.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65504: (0.123457%)&lt;BR/&gt; 65429: (0.123457%)&lt;BR/&gt; 65418: (0.123457%)&lt;BR/&gt; 65405: (0.123457%)&gt;];
}
629--631[label="1;402pkt 402fpkt"];
629--5193[label="1;408pkt 408fpkt"];
629--7390[label="1;402pkt 402fpkt"];
629--8131[label="0.105392;43pkt 43fpkt"];
629--8180[label="0.105392;43pkt 43fpkt"];
629--8219[label="0.105392;43pkt 43fpkt"];
631--5193[label="1;402pkt 402fpkt"];
631--7390[label="1;402pkt 402fpkt"];
631--8131[label="0.106965;43pkt 43fpkt"];
631--8180[label="0.106965;43pkt 43fpkt"];
631--8219[label="0.106965;43pkt 43fpkt"];
5193--7390[label="1;402pkt 402fpkt"];
5193--8131[label="0.105392;43pkt 43fpkt"];
5193--8180[label="0.105392;43pkt 43fpkt"];
5193--8219[label="0.105392;43pkt 43fpkt"];
7390--8131[label="0.106965;43pkt 43fpkt"];
7390--8180[label="0.106965;43pkt 43fpkt"];
7390--8219[label="0.106965;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.161.185" src_ip="120.237.35.245" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1835[label="38.165.140.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
7391[label="38.165.140.139;d;1pkt 1fpkt", shape=hexagon, color=black];
8064[label="38.165.140.139;d;1pkt 1fpkt", shape=polygon, color=gold];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.133.44:24223, 38.165.140.139:49878}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49878: (50%)&lt;BR/&gt; 24223: (50%)&gt;];
}
1835--4908[label="1;1pkt 1fpkt"];
1835--7391[label="1;1pkt 1fpkt"];
1835--8064[label="1;1pkt 1fpkt"];
7391--8064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.165.140.139" dst_port="49878" src_ip="133.72.133.44" src_port="24223"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
2397[label="214.49.0.241;d;1776pkt 1776fpkt", shape=diamond, color=yellow];
7400[label="214.49.0.241;d;1776pkt 1776fpkt", shape=hexagon, color=black];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.49.0.241:22047}[89.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22047: (44.7917%)&lt;BR/&gt; 0: (3.94144%)&lt;BR/&gt; 46832: (1.21059%)&lt;BR/&gt; 16001: (0.394144%)&lt;BR/&gt; 6881: (0.197072%)&gt;];
}
2397--7400[label="1;1776pkt 1776fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.0.241" dst_port="22047"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
3710[label="169.18.169.106;d;21pkt 21fpkt", shape=diamond, color=yellow];
7402[label="169.18.169.106;d;21pkt 21fpkt", shape=hexagon, color=black];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 169.18.169.106:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.619%)&lt;BR/&gt; 64128: (2.38095%)&lt;BR/&gt; 63695: (2.38095%)&lt;BR/&gt; 59070: (2.38095%)&lt;BR/&gt; 56361: (2.38095%)&gt;];
}
3710--7402[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.169.106" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
2386[label="128.64.213.176;s;1377pkt 1377fpkt", shape=diamond, color=yellow];
3706[label="212.16.33.1;d;657pkt 657fpkt", shape=diamond, color=yellow];
3716[label="212.16.33.0;d;661pkt 661fpkt", shape=diamond, color=yellow];
7126[label="212.16.33.1;d;587pkt 587fpkt", shape=hexagon, color=black];
7127[label="128.64.213.176;s;1219pkt 1219fpkt", shape=hexagon, color=black];
7411[label="212.16.33.0;d;661pkt 661fpkt", shape=hexagon, color=black];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.213.176:*, 212.16.33.0:53}[47.1562%]&lt;BR/&gt;{128.64.213.176:*, 212.16.33.1:53}[46.8683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.6319%)&lt;BR/&gt; 0: (0.736149%)&lt;BR/&gt; 62075: (0.0774893%)&lt;BR/&gt; 52555: (0.0774893%)&lt;BR/&gt; 51102: (0.0774893%)&gt;];
}
2386--2936[label="0.00102041;1pkt 1fpkt"];
2386--3706[label="0.990868;651pkt 651fpkt"];
2386--3714[label="0.00161031;1pkt 1fpkt"];
2386--3716[label="0.990923;655pkt 655fpkt"];
2386--3721[label="0.0015361;1pkt 1fpkt"];
2386--3745[label="0.00151286;1pkt 1fpkt"];
2386--7126[label="0.989779;581pkt 581fpkt"];
2386--7127[label="1;1219pkt 1219fpkt"];
2386--7411[label="0.990923;655pkt 655fpkt"];
2386--7443[label="0.00151286;1pkt 1fpkt"];
2386--8153[label="0.0675381;93pkt 93fpkt"];
2386--8164[label="0.0239651;33pkt 33fpkt"];
2386--8196[label="0.0675381;93pkt 93fpkt"];
2386--8207[label="0.0239651;33pkt 33fpkt"];
2386--8229[label="0.0675381;93pkt 93fpkt"];
2386--8240[label="0.0239651;33pkt 33fpkt"];
3706--4117[label="0.00561798;1pkt 1fpkt"];
3706--7126[label="1;587pkt 587fpkt"];
3706--7127[label="0.885845;582pkt 582fpkt"];
3706--8153[label="0.0547945;36pkt 36fpkt"];
3706--8164[label="0.0273973;18pkt 18fpkt"];
3706--8196[label="0.0547945;36pkt 36fpkt"];
3706--8207[label="0.0273973;18pkt 18fpkt"];
3706--8229[label="0.0547945;36pkt 36fpkt"];
3706--8240[label="0.0273973;18pkt 18fpkt"];
3716--4117[label="0.00561798;1pkt 1fpkt"];
3716--7127[label="0.889561;588pkt 588fpkt"];
3716--7411[label="1;661pkt 661fpkt"];
3716--8153[label="0.0590015;39pkt 39fpkt"];
3716--8164[label="0.0226929;15pkt 15fpkt"];
3716--8196[label="0.0590015;39pkt 39fpkt"];
3716--8207[label="0.0226929;15pkt 15fpkt"];
3716--8229[label="0.0590015;39pkt 39fpkt"];
3716--8240[label="0.0226929;15pkt 15fpkt"];
7126--7127[label="0.989779;581pkt 581fpkt"];
7126--8153[label="0.00170358;1pkt 1fpkt"];
7126--8196[label="0.00170358;1pkt 1fpkt"];
7126--8229[label="0.00170358;1pkt 1fpkt"];
7127--7411[label="0.889561;588pkt 588fpkt"];
7127--8153[label="0.00164069;2pkt 2fpkt"];
7127--8164[label="0.000820345;1pkt 1fpkt"];
7127--8196[label="0.00164069;2pkt 2fpkt"];
7127--8207[label="0.000820345;1pkt 1fpkt"];
7127--8229[label="0.00164069;2pkt 2fpkt"];
7127--8240[label="0.000820345;1pkt 1fpkt"];
7411--8153[label="0.0590015;39pkt 39fpkt"];
7411--8164[label="0.0226929;15pkt 15fpkt"];
7411--8196[label="0.0590015;39pkt 39fpkt"];
7411--8207[label="0.0226929;15pkt 15fpkt"];
7411--8229[label="0.0590015;39pkt 39fpkt"];
7411--8240[label="0.0226929;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="212.16.33.0" dst_port="53" src_ip="128.64.213.176"/>
      <filter dst_ip="212.16.33.1" dst_port="53" src_ip="128.64.213.176"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
3725[label="100.38.9.18;s;360pkt 360fpkt", shape=diamond, color=yellow];
3726[label="133.72.57.35;d;245pkt 245fpkt", shape=diamond, color=yellow];
7415[label="100.38.9.18;s;360pkt 360fpkt", shape=hexagon, color=black];
7416[label="133.72.57.35;d;245pkt 245fpkt", shape=hexagon, color=black];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.38.9.18:28221, 133.72.57.35:*}[51.6291%]&lt;BR/&gt;{100.38.9.18:*, 174.194.130.96:*}[20.0501%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28221: (46.6116%)&lt;BR/&gt; 80: (2.2314%)&lt;BR/&gt; 993: (0.330579%)&lt;BR/&gt; 0: (0.330579%)&lt;BR/&gt; 4987: (0.247934%)&gt;];
}
3725--3726[label="0.840816;206pkt 206fpkt"];
3725--7415[label="1;360pkt 360fpkt"];
3725--7416[label="0.840816;206pkt 206fpkt"];
3726--3795[label="0.126984;8pkt 8fpkt"];
3726--4015[label="0.0734694;18pkt 18fpkt"];
3726--7415[label="0.840816;206pkt 206fpkt"];
3726--7416[label="1;245pkt 245fpkt"];
3726--8131[label="0.00408163;1pkt 1fpkt"];
3726--8165[label="0.00408163;1pkt 1fpkt"];
3726--8180[label="0.00408163;1pkt 1fpkt"];
3726--8208[label="0.00408163;1pkt 1fpkt"];
3726--8219[label="0.00408163;1pkt 1fpkt"];
3726--8241[label="0.00408163;1pkt 1fpkt"];
3726--8318[label="0.1;1pkt 1fpkt"];
7415--7416[label="0.840816;206pkt 206fpkt"];
7416--8131[label="0.00408163;1pkt 1fpkt"];
7416--8165[label="0.00408163;1pkt 1fpkt"];
7416--8180[label="0.00408163;1pkt 1fpkt"];
7416--8208[label="0.00408163;1pkt 1fpkt"];
7416--8219[label="0.00408163;1pkt 1fpkt"];
7416--8241[label="0.00408163;1pkt 1fpkt"];
7416--8318[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.130.96" src_ip="100.38.9.18"/>
      <filter dst_ip="133.72.57.35" src_ip="100.38.9.18" src_port="28221"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
574[label="101.157.207.163;s;15pkt 15fpkt", shape=diamond, color=yellow];
3298[label="128.64.36.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
5748[label="101.157.207.163;s;15pkt 15fpkt", shape=hexagon, color=black];
7420[label="128.64.36.158;d;2pkt 2fpkt", shape=hexagon, color=black];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.157.207.163:443, 133.72.152.36:*}[66.6667%]&lt;BR/&gt;{101.157.207.163:49549, *:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (32.3529%)&lt;BR/&gt; 49549: (17.6471%)&lt;BR/&gt; 57507: (5.88235%)&lt;BR/&gt; 27977: (5.88235%)&lt;BR/&gt; 65475: (2.94118%)&gt;];
}
574--3298[label="1;2pkt 2fpkt"];
574--4090[label="0.285714;2pkt 2fpkt"];
574--5747[label="0.666667;10pkt 10fpkt"];
574--5748[label="1;15pkt 15fpkt"];
574--7420[label="1;2pkt 2fpkt"];
3298--5748[label="1;2pkt 2fpkt"];
3298--7420[label="1;2pkt 2fpkt"];
5748--7420[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="101.157.207.163" src_port="49549"/>
      <filter dst_ip="133.72.152.36" src_ip="101.157.207.163" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2381[label="215.40.227.102;s;241pkt 241fpkt", shape=diamond, color=yellow];
4151[label="100.183.74.214;d;122pkt 122fpkt", shape=diamond, color=yellow];
4486[label="97.56.35.118;d;105pkt 105fpkt", shape=diamond, color=yellow];
6014[label="215.40.227.102;s;241pkt 241fpkt", shape=hexagon, color=black];
7427[label="97.56.35.118;d;105pkt 105fpkt", shape=hexagon, color=black];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.227.102:80, 100.183.74.214:*}[50.6224%]&lt;BR/&gt;{215.40.227.102:80, 97.56.35.118:*}[43.5685%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8771%)&lt;BR/&gt; 1318: (0.429975%)&lt;BR/&gt; 1314: (0.429975%)&lt;BR/&gt; 1310: (0.429975%)&lt;BR/&gt; 1300: (0.429975%)&gt;];
}
2381--4151[label="1;122pkt 122fpkt"];
2381--4486[label="1;105pkt 105fpkt"];
2381--4751[label="0.00829876;2pkt 2fpkt"];
2381--6014[label="1;241pkt 241fpkt"];
2381--7427[label="1;105pkt 105fpkt"];
2381--7750[label="0.00829876;2pkt 2fpkt"];
2381--8108[label="0.00829876;2pkt 2fpkt"];
2381--8131[label="0.0456432;11pkt 11fpkt"];
2381--8180[label="0.0456432;11pkt 11fpkt"];
2381--8219[label="0.0456432;11pkt 11fpkt"];
4151--6014[label="1;122pkt 122fpkt"];
4151--8131[label="0.0409836;5pkt 5fpkt"];
4151--8180[label="0.0409836;5pkt 5fpkt"];
4151--8219[label="0.0409836;5pkt 5fpkt"];
4486--6014[label="1;105pkt 105fpkt"];
4486--7427[label="1;105pkt 105fpkt"];
4486--8131[label="0.0571429;6pkt 6fpkt"];
4486--8180[label="0.0571429;6pkt 6fpkt"];
4486--8219[label="0.0571429;6pkt 6fpkt"];
6014--7427[label="1;105pkt 105fpkt"];
6014--7750[label="0.00829876;2pkt 2fpkt"];
6014--8108[label="0.00829876;2pkt 2fpkt"];
6014--8131[label="0.0456432;11pkt 11fpkt"];
6014--8180[label="0.0456432;11pkt 11fpkt"];
6014--8219[label="0.0456432;11pkt 11fpkt"];
7427--8131[label="0.0571429;6pkt 6fpkt"];
7427--8180[label="0.0571429;6pkt 6fpkt"];
7427--8219[label="0.0571429;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="100.183.74.214" src_ip="215.40.227.102" src_port="80"/>
      <filter dst_ip="97.56.35.118" src_ip="215.40.227.102" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
1468[label="216.185.48.152;s;1768pkt 1768fpkt", shape=diamond, color=yellow];
7432[label="216.185.48.152;s;1768pkt 1768fpkt", shape=hexagon, color=black];
9820[label="216.185.48.152;1910pkt 1910fpkt", shape=pentagon, color=darkviolet];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.185.48.152:53, *:*}[99.9476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.1385%)&lt;BR/&gt; 32768: (0.495777%)&lt;BR/&gt; 1024: (0.165259%)&lt;BR/&gt; 32769: (0.110173%)&lt;BR/&gt; 1038: (0.110173%)&gt;];
}
1468--7432[label="1;1768pkt 1768fpkt"];
1468--8153[label="0.00226244;4pkt 4fpkt"];
1468--8164[label="0.00226244;4pkt 4fpkt"];
1468--8196[label="0.00226244;4pkt 4fpkt"];
1468--8207[label="0.00226244;4pkt 4fpkt"];
1468--8229[label="0.00226244;4pkt 4fpkt"];
1468--8240[label="0.00226244;4pkt 4fpkt"];
1468--9820[label="1;1768pkt 1768fpkt"];
7432--8153[label="0.00226244;4pkt 4fpkt"];
7432--8164[label="0.00226244;4pkt 4fpkt"];
7432--8196[label="0.00226244;4pkt 4fpkt"];
7432--8207[label="0.00226244;4pkt 4fpkt"];
7432--8229[label="0.00226244;4pkt 4fpkt"];
7432--8240[label="0.00226244;4pkt 4fpkt"];
7432--9820[label="1;1768pkt 1768fpkt"];
</description>
    <slice>
      <filter src_ip="216.185.48.152" src_port="53"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
1953[label="0.98.244.199;s;605pkt 605fpkt", shape=diamond, color=yellow];
2927[label="169.18.157.66;d;314pkt 314fpkt", shape=diamond, color=yellow];
6452[label="169.18.157.66;d;241pkt 241fpkt", shape=hexagon, color=black];
7440[label="0.98.244.199;s;605pkt 605fpkt", shape=hexagon, color=black];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.98.244.199:6667, 169.18.157.66:*}[51.1513%]&lt;BR/&gt;{0.98.244.199:6667, 169.18.160.134:*}[25.3289%]&lt;BR/&gt;{0.98.244.199:6667, 169.18.146.224:*}[23.0263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (49.83%)&lt;BR/&gt; 80: (0.169972%)&lt;BR/&gt; 4029: (0.113314%)&lt;BR/&gt; 4026: (0.113314%)&lt;BR/&gt; 4024: (0.113314%)&gt;];
}
1953--2927[label="0.990446;311pkt 311fpkt"];
1953--4506[label="0.828402;140pkt 140fpkt"];
1953--6452[label="0.987552;238pkt 238fpkt"];
1953--7440[label="1;605pkt 605fpkt"];
2927--5725[label="0.00955414;3pkt 3fpkt"];
2927--6452[label="1;241pkt 241fpkt"];
2927--7440[label="0.990446;311pkt 311fpkt"];
6452--7440[label="0.987552;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.157.66" src_ip="0.98.244.199" src_port="6667"/>
      <filter dst_ip="169.18.160.134" src_ip="0.98.244.199" src_port="6667"/>
      <filter dst_ip="169.18.146.224" src_ip="0.98.244.199" src_port="6667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
813[label="65.54.9.60;s;6pkt 6fpkt", shape=diamond, color=yellow];
814[label="214.49.6.137;d;3pkt 3fpkt", shape=diamond, color=yellow];
4983[label="214.49.6.137;d;3pkt 3fpkt", shape=hexagon, color=black];
6781[label="65.54.9.60;s;6pkt 6fpkt", shape=hexagon, color=black];
8897[label="65.54.9.60;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10978[label="65.54.9.60;6pkt 6fpkt", shape=invtriangle, color=brown];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.54.9.60:80, 214.49.0.231:*}[50%]&lt;BR/&gt;{*:80, 214.49.6.137:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 1872: (10%)&lt;BR/&gt; 2397: (6.66667%)&lt;BR/&gt; 1235: (6.66667%)&lt;BR/&gt; 1234: (6.66667%)&gt;];
}
813--814[label="0.333333;1pkt 1fpkt"];
813--989[label="0.666667;4pkt 4fpkt"];
813--4983[label="0.333333;1pkt 1fpkt"];
813--6781[label="1;6pkt 6fpkt"];
813--7447[label="0.666667;4pkt 4fpkt"];
813--8131[label="0.333333;2pkt 2fpkt"];
813--8180[label="0.333333;2pkt 2fpkt"];
813--8219[label="0.333333;2pkt 2fpkt"];
813--8897[label="1;6pkt 6fpkt"];
813--10978[label="1;6pkt 6fpkt"];
814--4924[label="0.333333;1pkt 1fpkt"];
814--4983[label="1;3pkt 3fpkt"];
814--6781[label="0.333333;1pkt 1fpkt"];
814--8131[label="0.333333;1pkt 1fpkt"];
814--8180[label="0.333333;1pkt 1fpkt"];
814--8219[label="0.333333;1pkt 1fpkt"];
814--8897[label="0.333333;1pkt 1fpkt"];
814--10978[label="0.333333;1pkt 1fpkt"];
4983--6781[label="0.333333;1pkt 1fpkt"];
4983--8131[label="0.333333;1pkt 1fpkt"];
4983--8180[label="0.333333;1pkt 1fpkt"];
4983--8219[label="0.333333;1pkt 1fpkt"];
4983--8897[label="0.333333;1pkt 1fpkt"];
4983--10978[label="0.333333;1pkt 1fpkt"];
6781--7447[label="0.666667;4pkt 4fpkt"];
6781--8131[label="0.333333;2pkt 2fpkt"];
6781--8180[label="0.333333;2pkt 2fpkt"];
6781--8219[label="0.333333;2pkt 2fpkt"];
6781--8897[label="1;6pkt 6fpkt"];
6781--10978[label="1;6pkt 6fpkt"];
8897--10978[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.6.137" src_port="80"/>
      <filter dst_ip="214.49.0.231" src_ip="65.54.9.60" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
4496[label="214.49.21.186;s;37pkt 37fpkt", shape=diamond, color=yellow];
4497[label="101.238.193.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
7448[label="101.238.193.129;d;1pkt 1fpkt", shape=hexagon, color=black];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.21.186:10769, *:17788}[86.4865%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10769: (44.8718%)&lt;BR/&gt; 17788: (41.0256%)&lt;BR/&gt; 29000: (3.84615%)&lt;BR/&gt; 1078: (3.84615%)&lt;BR/&gt; 11302: (1.28205%)&gt;];
}
4496--4497[label="1;1pkt 1fpkt"];
4496--7448[label="1;1pkt 1fpkt"];
4497--7448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="214.49.21.186" src_port="10769"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
3789[label="206.150.64.122;d;236pkt 236fpkt", shape=diamond, color=yellow];
4517[label="133.72.57.212;s;184pkt 184fpkt", shape=diamond, color=yellow];
7183[label="206.150.64.122;d;210pkt 210fpkt", shape=hexagon, color=black];
7488[label="133.72.57.212;s;184pkt 184fpkt", shape=hexagon, color=black];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.57.212:*, 206.150.64.122:400}[34.1463%]&lt;BR/&gt;{128.64.212.107:*, 206.150.64.122:*}[25.2033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 400: (24.8771%)&lt;BR/&gt; 600: (9.82801%)&lt;BR/&gt; 80: (7.92383%)&lt;BR/&gt; 500: (3.80835%)&lt;BR/&gt; 8000: (2.33415%)&gt;];
}
3789--4517[label="0.945652;174pkt 174fpkt"];
3789--7183[label="1;210pkt 210fpkt"];
3789--7488[label="0.945652;174pkt 174fpkt"];
3789--8119[label="0.00847458;2pkt 2fpkt"];
3789--8134[label="0.00847458;2pkt 2fpkt"];
3789--8165[label="0.00423729;1pkt 1fpkt"];
3789--8208[label="0.00423729;1pkt 1fpkt"];
3789--8241[label="0.00423729;1pkt 1fpkt"];
4517--7183[label="0.842391;155pkt 155fpkt"];
4517--7488[label="1;184pkt 184fpkt"];
4517--8119[label="0.0108696;2pkt 2fpkt"];
4517--8134[label="0.0108696;2pkt 2fpkt"];
4517--8165[label="0.00543478;1pkt 1fpkt"];
4517--8208[label="0.00543478;1pkt 1fpkt"];
4517--8241[label="0.00543478;1pkt 1fpkt"];
7183--7488[label="0.842391;155pkt 155fpkt"];
7183--8119[label="0.00952381;2pkt 2fpkt"];
7183--8134[label="0.00952381;2pkt 2fpkt"];
7488--8119[label="0.0108696;2pkt 2fpkt"];
7488--8134[label="0.0108696;2pkt 2fpkt"];
7488--8165[label="0.00543478;1pkt 1fpkt"];
7488--8208[label="0.00543478;1pkt 1fpkt"];
7488--8241[label="0.00543478;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.150.64.122" src_ip="128.64.212.107"/>
      <filter dst_ip="206.150.64.122" dst_port="400" src_ip="133.72.57.212"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
2545[label="128.64.215.24;s;221pkt 221fpkt", shape=diamond, color=yellow];
7515[label="128.64.215.24;s;221pkt 221fpkt", shape=hexagon, color=black];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.215.24:113, *:*}[35.7466%]&lt;BR/&gt;{128.64.215.24:*, *:6667}[34.3891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (17.8733%)&lt;BR/&gt; 6667: (17.1946%)&lt;BR/&gt; 7000: (7.46606%)&lt;BR/&gt; 6669: (2.48869%)&lt;BR/&gt; 6668: (2.48869%)&gt;];
}
2545--7515[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.215.24" src_port="113"/>
      <filter dst_port="6667" src_ip="128.64.215.24"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
2988[label="133.72.236.192;s;61pkt 61fpkt", shape=diamond, color=yellow];
3452[label="210.201.233.217;d;36pkt 36fpkt", shape=diamond, color=yellow];
6558[label="210.201.233.217;d;36pkt 36fpkt", shape=hexagon, color=black];
7520[label="133.72.236.192;s;61pkt 61fpkt", shape=hexagon, color=black];
10151[label="133.72.236.192;66pkt 66fpkt", shape=pentagon, color=darkviolet];
11591[label="133.72.236.192;66pkt 66fpkt", shape=invtriangle, color=brown];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.236.192:*, 210.201.233.217:143}[53.7313%]&lt;BR/&gt;{133.72.236.192:17417, *:*}[40.2985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (33.1288%)&lt;BR/&gt; 17417: (14.7239%)&lt;BR/&gt; 587: (1.22699%)&lt;BR/&gt; 49559: (0.920245%)&lt;BR/&gt; 49558: (0.920245%)&gt;];
}
2988--3452[label="1;36pkt 36fpkt"];
2988--6558[label="1;36pkt 36fpkt"];
2988--7520[label="1;61pkt 61fpkt"];
2988--8131[label="0.0163934;1pkt 1fpkt"];
2988--8180[label="0.0163934;1pkt 1fpkt"];
2988--8219[label="0.0163934;1pkt 1fpkt"];
2988--10151[label="0.983607;60pkt 60fpkt"];
2988--11591[label="0.983607;60pkt 60fpkt"];
3452--6558[label="1;36pkt 36fpkt"];
3452--7520[label="1;36pkt 36fpkt"];
3452--10151[label="1;36pkt 36fpkt"];
3452--11591[label="1;36pkt 36fpkt"];
6558--7520[label="1;36pkt 36fpkt"];
6558--10151[label="1;36pkt 36fpkt"];
6558--11591[label="1;36pkt 36fpkt"];
7520--8131[label="0.0163934;1pkt 1fpkt"];
7520--8180[label="0.0163934;1pkt 1fpkt"];
7520--8219[label="0.0163934;1pkt 1fpkt"];
7520--10151[label="0.983607;60pkt 60fpkt"];
7520--11591[label="0.983607;60pkt 60fpkt"];
10151--11591[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.236.192" src_port="17417"/>
      <filter dst_ip="210.201.233.217" dst_port="143" src_ip="133.72.236.192"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2992[label="133.72.60.99;d;873pkt 873fpkt", shape=diamond, color=yellow];
7523[label="133.72.60.99;d;873pkt 873fpkt", shape=hexagon, color=black];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.66.74.124:*, 133.72.60.99:60463}[40.0916%]&lt;BR/&gt;{5.140.191.165:*, 133.72.60.99:60463}[36.197%]&lt;BR/&gt;{200.89.24.228:*, 133.72.60.99:60463}[23.5968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60463: (49.9427%)&lt;BR/&gt; 4952: (0.114548%)&lt;BR/&gt; 4825: (0.114548%)&lt;BR/&gt; 4711: (0.114548%)&lt;BR/&gt; 4695: (0.114548%)&gt;];
}
2992--7523[label="1;873pkt 873fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.60.99" dst_port="60463" src_ip="97.66.74.124"/>
      <filter dst_ip="133.72.60.99" dst_port="60463" src_ip="5.140.191.165"/>
      <filter dst_ip="133.72.60.99" dst_port="60463" src_ip="200.89.24.228"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
4198[label="172.45.58.25;d;543pkt 543fpkt", shape=diamond, color=yellow];
4199[label="6.170.116.201;s;543pkt 543fpkt", shape=diamond, color=yellow];
7212[label="172.45.58.25;d;543pkt 543fpkt", shape=hexagon, color=black];
7537[label="6.170.116.201;s;543pkt 543fpkt", shape=hexagon, color=black];
10231[label="6.170.116.201;589pkt 589fpkt", shape=pentagon, color=darkviolet];
11638[label="6.170.116.201;589pkt 589fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.170.116.201:*, 172.45.58.25:64141}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64141: (50%)&lt;BR/&gt; 4972: (0.0895522%)&lt;BR/&gt; 4966: (0.0895522%)&lt;BR/&gt; 4952: (0.0895522%)&lt;BR/&gt; 4946: (0.0895522%)&gt;];
}
4198--4199[label="1;543pkt 543fpkt"];
4198--7212[label="1;543pkt 543fpkt"];
4198--7537[label="1;543pkt 543fpkt"];
4198--10231[label="1;543pkt 543fpkt"];
4198--11638[label="1;543pkt 543fpkt"];
4199--7212[label="1;543pkt 543fpkt"];
4199--7537[label="1;543pkt 543fpkt"];
4199--10231[label="1;543pkt 543fpkt"];
4199--11638[label="1;543pkt 543fpkt"];
7212--7537[label="1;543pkt 543fpkt"];
7212--10231[label="1;543pkt 543fpkt"];
7212--11638[label="1;543pkt 543fpkt"];
7537--10231[label="1;543pkt 543fpkt"];
7537--11638[label="1;543pkt 543fpkt"];
10231--11638[label="1;589pkt 589fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.58.25" dst_port="64141" src_ip="6.170.116.201"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
3430[label="222.160.112.163;d;27pkt 27fpkt", shape=diamond, color=yellow];
7546[label="222.160.112.163;d;27pkt 27fpkt", shape=hexagon, color=black];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.233.26:*, 222.160.112.163:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2236: (1.85185%)&lt;BR/&gt; 2232: (1.85185%)&lt;BR/&gt; 2227: (1.85185%)&lt;BR/&gt; 2214: (1.85185%)&gt;];
}
3430--7546[label="1;27pkt 27fpkt"];
3430--8119[label="0.0740741;2pkt 2fpkt"];
3430--8134[label="0.0740741;2pkt 2fpkt"];
3430--8165[label="0.037037;1pkt 1fpkt"];
3430--8208[label="0.037037;1pkt 1fpkt"];
3430--8241[label="0.037037;1pkt 1fpkt"];
7546--8119[label="0.0740741;2pkt 2fpkt"];
7546--8134[label="0.0740741;2pkt 2fpkt"];
7546--8165[label="0.037037;1pkt 1fpkt"];
7546--8208[label="0.037037;1pkt 1fpkt"];
7546--8241[label="0.037037;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.160.112.163" dst_port="80" src_ip="128.208.233.26"/>
    </slice>
    <from sec="1229058009" usec="0"/>
    <to sec="1229058821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
3857[label="128.208.192.8;s;3pkt 3fpkt", shape=diamond, color=yellow];
3858[label="7.146.167.16;d;3pkt 3fpkt", shape=diamond, color=yellow];
7240[label="128.208.192.8;s;3pkt 3fpkt", shape=hexagon, color=black];
7576[label="7.146.167.16;d;3pkt 3fpkt", shape=hexagon, color=black];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.8:22, 7.146.167.16:42155}[33.3333%]&lt;BR/&gt;{128.208.192.8:22, 7.146.167.16:50083}[33.3333%]&lt;BR/&gt;{128.208.192.8:22, 7.146.167.16:50123}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 50123: (16.6667%)&lt;BR/&gt; 50083: (16.6667%)&lt;BR/&gt; 42155: (16.6667%)&gt;];
}
3857--3858[label="1;3pkt 3fpkt"];
3857--7240[label="1;3pkt 3fpkt"];
3857--7576[label="1;3pkt 3fpkt"];
3858--7240[label="1;3pkt 3fpkt"];
3858--7576[label="1;3pkt 3fpkt"];
7240--7576[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="7.146.167.16" dst_port="50123" src_ip="128.208.192.8" src_port="22"/>
      <filter dst_ip="7.146.167.16" dst_port="50083" src_ip="128.208.192.8" src_port="22"/>
      <filter dst_ip="7.146.167.16" dst_port="42155" src_ip="128.208.192.8" src_port="22"/>
    </slice>
    <from sec="1229058022" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
1179[label="214.49.20.219;s;35pkt 35fpkt", shape=diamond, color=yellow];
2290[label="192.22.11.178;d;2pkt 2fpkt", shape=diamond, color=yellow];
2543[label="192.22.12.103;d;9pkt 9fpkt", shape=diamond, color=yellow];
3647[label="32.131.7.3;d;4pkt 4fpkt", shape=diamond, color=yellow];
6134[label="192.22.12.103;d;9pkt 9fpkt", shape=hexagon, color=black];
6718[label="32.131.7.3;d;4pkt 4fpkt", shape=hexagon, color=black];
7585[label="214.49.20.219;s;35pkt 35fpkt", shape=hexagon, color=black];
10374[label="214.49.20.219;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.20.219:*, 34.227.58.8:80}[31.5789%]&lt;BR/&gt;{*:*, 192.22.12.103:80}[23.6842%]&lt;BR/&gt;{214.49.20.219:*, 85.208.174.191:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50584: (1.8797%)&lt;BR/&gt; 50583: (1.8797%)&lt;BR/&gt; 50582: (1.8797%)&lt;BR/&gt; 50581: (1.8797%)&gt;];
}
1179--1256[label="0.421053;8pkt 8fpkt"];
1179--2290[label="1;2pkt 2fpkt"];
1179--2543[label="0.666667;6pkt 6fpkt"];
1179--3647[label="1;4pkt 4fpkt"];
1179--3859[label="0.228571;8pkt 8fpkt"];
1179--6134[label="0.666667;6pkt 6fpkt"];
1179--6718[label="1;4pkt 4fpkt"];
1179--6921[label="0.171429;6pkt 6fpkt"];
1179--7585[label="1;35pkt 35fpkt"];
1179--7994[label="0.171429;6pkt 6fpkt"];
1179--8119[label="0.0285714;1pkt 1fpkt"];
1179--8134[label="0.0285714;1pkt 1fpkt"];
1179--10374[label="1;35pkt 35fpkt"];
2290--7585[label="1;2pkt 2fpkt"];
2290--10374[label="1;2pkt 2fpkt"];
2543--6134[label="1;9pkt 9fpkt"];
2543--7585[label="0.666667;6pkt 6fpkt"];
2543--8119[label="0.111111;1pkt 1fpkt"];
2543--10374[label="0.666667;6pkt 6fpkt"];
3647--6718[label="1;4pkt 4fpkt"];
3647--7585[label="1;4pkt 4fpkt"];
3647--10374[label="1;4pkt 4fpkt"];
6134--7585[label="0.666667;6pkt 6fpkt"];
6134--8119[label="0.111111;1pkt 1fpkt"];
6134--10374[label="0.666667;6pkt 6fpkt"];
6718--7585[label="1;4pkt 4fpkt"];
6718--10374[label="1;4pkt 4fpkt"];
7585--7994[label="0.171429;6pkt 6fpkt"];
7585--8119[label="0.0285714;1pkt 1fpkt"];
7585--8134[label="0.0285714;1pkt 1fpkt"];
7585--10374[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="192.22.12.103" dst_port="80"/>
      <filter dst_ip="34.227.58.8" dst_port="80" src_ip="214.49.20.219"/>
      <filter dst_ip="85.208.174.191" dst_port="80" src_ip="214.49.20.219"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
2707[label="214.57.138.245;d;186pkt 186fpkt", shape=diamond, color=yellow];
3083[label="128.208.225.179;s;21pkt 21fpkt", shape=diamond, color=yellow];
6622[label="128.208.225.179;s;21pkt 21fpkt", shape=hexagon, color=black];
6972[label="214.57.138.245;d;186pkt 186fpkt", shape=hexagon, color=black];
7613[label="133.72.158.136;s;437pkt 437fpkt", shape=hexagon, color=black];
8571[label="133.72.197.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10060[label="128.208.225.179;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.136:*, 214.57.43.184:443}[60.4462%]&lt;BR/&gt;{133.72.158.136:*, 214.57.138.245:80}[26.7748%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8907%)&lt;BR/&gt; 443: (16.9704%)&lt;BR/&gt; 20480: (1.13895%)&lt;BR/&gt; 1755: (0.341686%)&lt;BR/&gt; 1749: (0.341686%)&gt;];
}
2707--2728[label="0.709677;132pkt 132fpkt"];
2707--3083[label="0.904762;19pkt 19fpkt"];
2707--6316[label="0.00537634;1pkt 1fpkt"];
2707--6622[label="0.904762;19pkt 19fpkt"];
2707--6972[label="1;186pkt 186fpkt"];
2707--7613[label="0.709677;132pkt 132fpkt"];
2707--8571[label="1;6pkt 6fpkt"];
2707--9251[label="0.263158;5pkt 5fpkt"];
2707--10060[label="0.904762;19pkt 19fpkt"];
2707--11141[label="0.263158;5pkt 5fpkt"];
2707--12030[label="0.263158;5pkt 5fpkt"];
3083--3791[label="0.047619;1pkt 1fpkt"];
3083--6622[label="1;21pkt 21fpkt"];
3083--6972[label="0.904762;19pkt 19fpkt"];
3083--10060[label="1;21pkt 21fpkt"];
6622--6972[label="0.904762;19pkt 19fpkt"];
6622--10060[label="1;21pkt 21fpkt"];
6972--7613[label="0.709677;132pkt 132fpkt"];
6972--8571[label="1;6pkt 6fpkt"];
6972--9251[label="0.263158;5pkt 5fpkt"];
6972--10060[label="0.904762;19pkt 19fpkt"];
6972--11141[label="0.263158;5pkt 5fpkt"];
6972--12030[label="0.263158;5pkt 5fpkt"];
7613--8165[label="0.00686499;3pkt 3fpkt"];
7613--8208[label="0.00686499;3pkt 3fpkt"];
7613--8241[label="0.00686499;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.43.184" dst_port="443" src_ip="133.72.158.136"/>
      <filter dst_ip="214.57.138.245" dst_port="80" src_ip="133.72.158.136"/>
    </slice>
    <from sec="1229058214" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
3037[label="133.72.150.81;d;15pkt 15fpkt", shape=diamond, color=yellow];
3119[label="1.18.64.143;s;10pkt 10fpkt", shape=diamond, color=yellow];
6568[label="133.72.150.81;d;15pkt 15fpkt", shape=hexagon, color=black];
7622[label="1.18.64.143;s;10pkt 10fpkt", shape=hexagon, color=black];
8095[label="1.18.64.143;s;10pkt 10fpkt", shape=polygon, color=gold];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.18.64.143:80, 133.72.150.81:*}[53.3333%]&lt;BR/&gt;{1.18.64.168:80, 133.72.150.81:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 443: (8.33333%)&lt;BR/&gt; 3104: (4.16667%)&lt;BR/&gt; 3102: (4.16667%)&lt;BR/&gt; 3067: (4.16667%)&gt;];
}
3037--3119[label="1;10pkt 10fpkt"];
3037--6568[label="1;15pkt 15fpkt"];
3037--7622[label="1;10pkt 10fpkt"];
3037--8095[label="1;10pkt 10fpkt"];
3119--6568[label="1;10pkt 10fpkt"];
3119--7622[label="1;10pkt 10fpkt"];
3119--8095[label="1;10pkt 10fpkt"];
6568--7622[label="1;10pkt 10fpkt"];
6568--8095[label="1;10pkt 10fpkt"];
7622--8095[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.150.81" src_ip="1.18.64.143" src_port="80"/>
      <filter dst_ip="133.72.150.81" src_ip="1.18.64.168" src_port="80"/>
    </slice>
    <from sec="1229058028" usec="0"/>
    <to sec="1229058767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
4606[label="128.64.198.154;d;13pkt 13fpkt", shape=diamond, color=yellow];
4785[label="214.241.11.70;s;13pkt 13fpkt", shape=diamond, color=yellow];
7624[label="128.64.198.154;d;13pkt 13fpkt", shape=hexagon, color=black];
9003[label="214.241.11.70;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11022[label="214.241.11.70;8pkt 8fpkt", shape=invtriangle, color=brown];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.11.70:80, 128.64.198.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2223: (4.16667%)&lt;BR/&gt; 2186: (4.16667%)&lt;BR/&gt; 2158: (4.16667%)&lt;BR/&gt; 2144: (4.16667%)&gt;];
}
4606--4785[label="1;13pkt 13fpkt"];
4606--7624[label="1;13pkt 13fpkt"];
4606--9003[label="1;13pkt 13fpkt"];
4606--11022[label="1;8pkt 8fpkt"];
4785--7624[label="1;13pkt 13fpkt"];
4785--9003[label="1;13pkt 13fpkt"];
4785--11022[label="1;8pkt 8fpkt"];
7624--9003[label="1;13pkt 13fpkt"];
7624--11022[label="1;8pkt 8fpkt"];
9003--11022[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.198.154" src_ip="214.241.11.70" src_port="80"/>
    </slice>
    <from sec="1229058337" usec="0"/>
    <to sec="1229058886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
4304[label="133.72.166.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
4353[label="193.236.244.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
4707[label="42.236.33.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
7661[label="133.72.166.84;d;2pkt 2fpkt", shape=hexagon, color=black];
10076[label="193.236.244.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.236.33.40:80, 133.72.166.84:1677}[50%]&lt;BR/&gt;{193.236.244.181:80, 133.72.166.84:1669}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1669: (28.5714%)&lt;BR/&gt; 1677: (21.4286%)&gt;];
}
4304--4353[label="1;1pkt 1fpkt"];
4304--4707[label="1;1pkt 1fpkt"];
4304--7661[label="1;2pkt 2fpkt"];
4304--10076[label="1;1pkt 1fpkt"];
4353--7661[label="1;1pkt 1fpkt"];
4353--10076[label="1;1pkt 1fpkt"];
4707--7661[label="1;1pkt 1fpkt"];
7661--10076[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.166.84" dst_port="1669" src_ip="193.236.244.181" src_port="80"/>
      <filter dst_ip="133.72.166.84" dst_port="1677" src_ip="42.236.33.40" src_port="80"/>
    </slice>
    <from sec="1229058544" usec="0"/>
    <to sec="1229058766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
4310[label="133.72.177.106;d;37pkt 37fpkt", shape=diamond, color=yellow];
7665[label="133.72.177.106;d;37pkt 37fpkt", shape=hexagon, color=black];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.177.106:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4638: (1.35135%)&lt;BR/&gt; 4636: (1.35135%)&lt;BR/&gt; 4635: (1.35135%)&lt;BR/&gt; 4632: (1.35135%)&gt;];
}
4310--7665[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.177.106" src_port="80"/>
    </slice>
    <from sec="1229058561" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
4661[label="100.38.98.92;s;164pkt 164fpkt", shape=diamond, color=yellow];
7685[label="100.38.98.92;s;164pkt 164fpkt", shape=hexagon, color=black];
9261[label="100.38.98.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.38.98.92:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57142: (0.454545%)&lt;BR/&gt; 51761: (0.454545%)&lt;BR/&gt; 64893: (0.30303%)&lt;BR/&gt; 64090: (0.30303%)&gt;];
}
4661--7685[label="1;164pkt 164fpkt"];
4661--9261[label="1;2pkt 2fpkt"];
7685--9261[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="100.38.98.92" src_port="80"/>
    </slice>
    <from sec="1229058622" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
4074[label="215.24.16.244;d;3pkt 3fpkt", shape=diamond, color=yellow];
7687[label="215.24.16.244;d;3pkt 3fpkt", shape=hexagon, color=black];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.224.2:80, 215.24.16.244:52576}[33.3333%]&lt;BR/&gt;{215.40.224.2:80, 215.24.16.244:52580}[33.3333%]&lt;BR/&gt;{215.40.224.2:80, 215.24.16.244:52594}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52594: (16.6667%)&lt;BR/&gt; 52580: (16.6667%)&lt;BR/&gt; 52576: (16.6667%)&gt;];
}
4074--7687[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.24.16.244" dst_port="52594" src_ip="215.40.224.2" src_port="80"/>
      <filter dst_ip="215.24.16.244" dst_port="52580" src_ip="215.40.224.2" src_port="80"/>
      <filter dst_ip="215.24.16.244" dst_port="52576" src_ip="215.40.224.2" src_port="80"/>
    </slice>
    <from sec="1229058629" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
4383[label="219.82.28.132;s;6pkt 6fpkt", shape=diamond, color=yellow];
7703[label="219.82.28.132;s;6pkt 6fpkt", shape=hexagon, color=black];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.82.28.132:80, 128.208.178.103:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4812: (8.33333%)&lt;BR/&gt; 4811: (8.33333%)&lt;BR/&gt; 4810: (8.33333%)&lt;BR/&gt; 4809: (8.33333%)&gt;];
}
4383--7703[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.178.103" src_ip="219.82.28.132" src_port="80"/>
    </slice>
    <from sec="1229058664" usec="0"/>
    <to sec="1229058743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
4392[label="214.136.3.135;d;18pkt 18fpkt", shape=diamond, color=yellow];
7707[label="214.136.3.135;d;18pkt 18fpkt", shape=hexagon, color=black];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.2.38:*, 214.136.3.135:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1933: (2.77778%)&lt;BR/&gt; 1931: (2.77778%)&lt;BR/&gt; 1883: (2.77778%)&lt;BR/&gt; 1880: (2.77778%)&gt;];
}
4392--7707[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="214.136.3.135" dst_port="80" src_ip="133.72.2.38"/>
    </slice>
    <from sec="1229058668" usec="0"/>
    <to sec="1229058780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
4397[label="1.149.41.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
7709[label="1.149.41.83;d;1pkt 1fpkt", shape=hexagon, color=black];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.157.9:80, 1.149.41.83:1375}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1375: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4397--7709[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.149.41.83" dst_port="1375" src_ip="133.72.157.9" src_port="80"/>
    </slice>
    <from sec="1229058669" usec="0"/>
    <to sec="1229058676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
4419[label="128.64.151.112;s;3pkt 3fpkt", shape=diamond, color=yellow];
4421[label="194.3.8.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
7716[label="194.3.8.145;d;2pkt 2fpkt", shape=hexagon, color=black];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.151.112:1741, 214.57.103.12:80}[33.3333%]&lt;BR/&gt;{128.64.151.112:500, 194.3.8.145:500}[33.3333%]&lt;BR/&gt;{128.64.151.112:4500, 194.3.8.145:4500}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (42.8571%)&lt;BR/&gt; 500: (42.8571%)&lt;BR/&gt; 1741: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
4419--4421[label="1;2pkt 2fpkt"];
4419--7716[label="1;2pkt 2fpkt"];
4421--7716[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.3.8.145" dst_port="4500" src_ip="128.64.151.112" src_port="4500"/>
      <filter dst_ip="194.3.8.145" dst_port="500" src_ip="128.64.151.112" src_port="500"/>
      <filter dst_ip="214.57.103.12" dst_port="80" src_ip="128.64.151.112" src_port="1741"/>
    </slice>
    <from sec="1229058678" usec="0"/>
    <to sec="1229058821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
4451[label="1.4.141.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
7723[label="1.4.141.155;s;1pkt 1fpkt", shape=hexagon, color=black];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.4.141.155:8638, 174.194.19.12:12015}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12015: (50%)&lt;BR/&gt; 8638: (50%)&gt;];
}
4451--7723[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.12" dst_port="12015" src_ip="1.4.141.155" src_port="8638"/>
    </slice>
    <from sec="1229058702" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
4461[label="116.32.130.28;d;66pkt 66fpkt", shape=diamond, color=yellow];
7725[label="116.32.130.28;d;66pkt 66fpkt", shape=hexagon, color=black];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.26.4:*, 116.32.130.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56797: (0.757576%)&lt;BR/&gt; 56796: (0.757576%)&lt;BR/&gt; 56795: (0.757576%)&lt;BR/&gt; 56794: (0.757576%)&gt;];
}
4461--7363[label="1;66pkt 66fpkt"];
4461--7725[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="116.32.130.28" dst_port="80" src_ip="214.49.26.4"/>
    </slice>
    <from sec="1229058712" usec="0"/>
    <to sec="1229058726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
1730[label="101.184.79.169;s;4pkt 4fpkt", shape=diamond, color=yellow];
7726[label="101.184.79.169;s;4pkt 4fpkt", shape=hexagon, color=black];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.184.79.169:80, 172.45.39.117:3088}[25%]&lt;BR/&gt;{101.184.79.169:80, 172.45.39.117:3089}[25%]&lt;BR/&gt;{101.184.79.169:80, 172.45.39.117:3090}[25%]&lt;BR/&gt;{101.184.79.169:80, 172.45.39.117:3091}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3091: (12.5%)&lt;BR/&gt; 3090: (12.5%)&lt;BR/&gt; 3089: (12.5%)&lt;BR/&gt; 3088: (12.5%)&gt;];
}
1730--4240[label="1;4pkt 4fpkt"];
1730--7726[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.39.117" dst_port="3091" src_ip="101.184.79.169" src_port="80"/>
      <filter dst_ip="172.45.39.117" dst_port="3090" src_ip="101.184.79.169" src_port="80"/>
      <filter dst_ip="172.45.39.117" dst_port="3089" src_ip="101.184.79.169" src_port="80"/>
      <filter dst_ip="172.45.39.117" dst_port="3088" src_ip="101.184.79.169" src_port="80"/>
    </slice>
    <from sec="1229058713" usec="0"/>
    <to sec="1229058820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
4700[label="101.19.71.19;s;75pkt 75fpkt", shape=diamond, color=yellow];
7727[label="101.19.71.19;s;75pkt 75fpkt", shape=hexagon, color=black];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.19.71.19:80, 128.64.246.28:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4940: (0.666667%)&lt;BR/&gt; 4938: (0.666667%)&lt;BR/&gt; 4936: (0.666667%)&lt;BR/&gt; 4928: (0.666667%)&gt;];
}
4700--7727[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.246.28" src_ip="101.19.71.19" src_port="80"/>
    </slice>
    <from sec="1229058723" usec="0"/>
    <to sec="1229058761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
4470[label="193.195.148.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
7732[label="193.195.148.45;s;1pkt 1fpkt", shape=hexagon, color=black];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.195.148.45:80, 214.49.187.109:39726}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39726: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4470--7732[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.187.109" dst_port="39726" src_ip="193.195.148.45" src_port="80"/>
    </slice>
    <from sec="1229058731" usec="0"/>
    <to sec="1229058809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
4712[label="6.138.85.140;d;9pkt 9fpkt", shape=diamond, color=yellow];
7736[label="6.138.85.140;d;9pkt 9fpkt", shape=hexagon, color=black];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.233.13:21, 6.138.85.140:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (11.1111%)&lt;BR/&gt; 61891: (5.55556%)&lt;BR/&gt; 59982: (5.55556%)&lt;BR/&gt; 59764: (5.55556%)&lt;BR/&gt; 56426: (5.55556%)&gt;];
}
4712--7736[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="6.138.85.140" src_ip="215.40.233.13" src_port="21"/>
    </slice>
    <from sec="1229058739" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
4682[label="128.64.72.2;s;16pkt 16fpkt", shape=diamond, color=yellow];
4749[label="200.206.239.35;d;15pkt 15fpkt", shape=diamond, color=yellow];
7748[label="200.206.239.35;d;15pkt 15fpkt", shape=hexagon, color=black];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.72.2:80, 200.206.239.35:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52941: (3.26087%)&lt;BR/&gt; 52940: (3.26087%)&lt;BR/&gt; 52939: (3.26087%)&lt;BR/&gt; 52938: (3.26087%)&gt;];
}
4682--4749[label="1;15pkt 15fpkt"];
4682--7748[label="1;15pkt 15fpkt"];
4682--8274[label="1;16pkt 16fpkt"];
4749--7748[label="1;15pkt 15fpkt"];
4749--8274[label="1;15pkt 15fpkt"];
7748--8274[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="200.206.239.35" src_ip="128.64.72.2" src_port="80"/>
    </slice>
    <from sec="1229058665" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
4750[label="101.84.16.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
7749[label="101.84.16.202;s;1pkt 1fpkt", shape=hexagon, color=black];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.84.16.202:80, 133.72.88.207:2095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2095: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4750--7749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.88.207" dst_port="2095" src_ip="101.84.16.202" src_port="80"/>
    </slice>
    <from sec="1229058773" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644831,1.81273,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
4755[label="174.194.19.135;d;8pkt 8fpkt", shape=diamond, color=yellow];
4794[label="1.150.119.93;s;2pkt 2fpkt", shape=diamond, color=yellow];
7752[label="174.194.19.135;d;8pkt 8fpkt", shape=hexagon, color=black];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.19.135:36262}[50%]&lt;BR/&gt;{1.150.119.93:80, 174.194.19.135:*}[25%]&lt;BR/&gt;{1.145.139.230:80, 174.194.19.135:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 36262: (22.2222%)&lt;BR/&gt; 4693: (8.33333%)&lt;BR/&gt; 4692: (8.33333%)&lt;BR/&gt; 54069: (5.55556%)&gt;];
}
4755--4794[label="1;2pkt 2fpkt"];
4755--7752[label="1;8pkt 8fpkt"];
4794--7752[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.135" dst_port="36262"/>
      <filter dst_ip="174.194.19.135" src_ip="1.145.139.230" src_port="80"/>
      <filter dst_ip="174.194.19.135" src_ip="1.150.119.93" src_port="80"/>
    </slice>
    <from sec="1229058776" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
4766[label="214.241.3.109;s;4pkt 4fpkt", shape=diamond, color=yellow];
7758[label="214.241.3.109;s;4pkt 4fpkt", shape=hexagon, color=black];
9435[label="214.241.3.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.3.109:80, 174.194.232.252:52120}[25%]&lt;BR/&gt;{214.241.3.109:80, 174.194.232.252:52121}[25%]&lt;BR/&gt;{214.241.3.109:80, 174.194.232.252:52122}[25%]&lt;BR/&gt;{214.241.3.109:80, 174.194.232.252:52123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52123: (12.5%)&lt;BR/&gt; 52122: (12.5%)&lt;BR/&gt; 52121: (12.5%)&lt;BR/&gt; 52120: (12.5%)&gt;];
}
4766--7758[label="1;4pkt 4fpkt"];
4766--9435[label="1;4pkt 4fpkt"];
7758--9435[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.232.252" dst_port="52123" src_ip="214.241.3.109" src_port="80"/>
      <filter dst_ip="174.194.232.252" dst_port="52122" src_ip="214.241.3.109" src_port="80"/>
      <filter dst_ip="174.194.232.252" dst_port="52121" src_ip="214.241.3.109" src_port="80"/>
      <filter dst_ip="174.194.232.252" dst_port="52120" src_ip="214.241.3.109" src_port="80"/>
    </slice>
    <from sec="1229058782" usec="0"/>
    <to sec="1229058853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,501,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
216[label="215.80.160.205;d;16pkt 16fpkt", shape=diamond, color=yellow];
219[label="215.40.237.176;s;858pkt 858fpkt", shape=diamond, color=yellow];
288[label="214.132.43.210;d;2pkt 2fpkt", shape=diamond, color=yellow];
335[label="216.184.21.226;d;3pkt 3fpkt", shape=diamond, color=yellow];
378[label="194.134.174.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
464[label="57.120.215.246;d;47pkt 47fpkt", shape=diamond, color=yellow];
488[label="100.38.8.243;d;7pkt 7fpkt", shape=diamond, color=yellow];
510[label="5.97.210.104;d;76pkt 76fpkt", shape=diamond, color=yellow];
771[label="215.66.33.210;d;38pkt 38fpkt", shape=diamond, color=yellow];
1507[label="6.168.24.194;d;136pkt 136fpkt", shape=diamond, color=yellow];
2581[label="41.207.116.224;d;53pkt 53fpkt", shape=diamond, color=yellow];
2736[label="97.66.68.68;d;30pkt 30fpkt", shape=diamond, color=yellow];
3242[label="201.203.169.154;d;2pkt 2fpkt", shape=diamond, color=yellow];
4614[label="0.141.4.43;d;169pkt 169fpkt", shape=diamond, color=yellow];
4801[label="215.40.237.176;s;858pkt 858fpkt", shape=hexagon, color=black];
4865[label="57.120.215.246;d;38pkt 38fpkt", shape=hexagon, color=black];
4871[label="100.38.8.243;d;4pkt 4fpkt", shape=hexagon, color=black];
4874[label="5.97.210.104;d;52pkt 52fpkt", shape=hexagon, color=black];
4967[label="215.66.33.210;d;4pkt 4fpkt", shape=hexagon, color=black];
5157[label="194.134.174.242;d;1pkt 1fpkt", shape=hexagon, color=black];
5399[label="214.132.43.210;d;1pkt 1fpkt", shape=hexagon, color=black];
6160[label="41.207.116.224;d;50pkt 50fpkt", shape=hexagon, color=black];
6273[label="201.203.169.154;d;2pkt 2fpkt", shape=hexagon, color=black];
6438[label="6.168.24.194;d;117pkt 117fpkt", shape=hexagon, color=black];
6900[label="32.203.145.232;d;33pkt 33fpkt", shape=hexagon, color=black];
7634[label="0.141.4.43;d;169pkt 169fpkt", shape=hexagon, color=black];
7774[label="215.40.237.176;s;510pkt 510fpkt", shape=polygon, color=gold];
7811[label="214.132.43.210;d;1pkt 1fpkt", shape=polygon, color=gold];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.237.176:21, 0.141.4.43:*}[32.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.6046%)&lt;BR/&gt; 80: (1.8914%)&lt;BR/&gt; 53: (0.213545%)&lt;BR/&gt; 46392: (0.122026%)&lt;BR/&gt; 4167: (0.122026%)&gt;];
}
216--219[label="1;16pkt 16fpkt"];
216--4801[label="1;16pkt 16fpkt"];
216--7774[label="1;16pkt 16fpkt"];
219--288[label="0.5;1pkt 1fpkt"];
219--335[label="0.666667;2pkt 2fpkt"];
219--378[label="1;1pkt 1fpkt"];
219--464[label="1;47pkt 47fpkt"];
219--488[label="0.857143;6pkt 6fpkt"];
219--510[label="1;76pkt 76fpkt"];
219--529[label="0.909091;10pkt 10fpkt"];
219--771[label="1;38pkt 38fpkt"];
219--1310[label="0.00117786;1pkt 1fpkt"];
219--1507[label="1;136pkt 136fpkt"];
219--2581[label="0.886792;47pkt 47fpkt"];
219--2736[label="1;30pkt 30fpkt"];
219--3061[label="0.0454545;2pkt 2fpkt"];
219--3242[label="1;2pkt 2fpkt"];
219--3833[label="0.565217;26pkt 26fpkt"];
219--4614[label="1;169pkt 169fpkt"];
219--4751[label="0.00582751;5pkt 5fpkt"];
219--4801[label="1;858pkt 858fpkt"];
219--4865[label="1;38pkt 38fpkt"];
219--4871[label="1;4pkt 4fpkt"];
219--4874[label="1;52pkt 52fpkt"];
219--4882[label="0.8;8pkt 8fpkt"];
219--4967[label="1;4pkt 4fpkt"];
219--5157[label="1;1pkt 1fpkt"];
219--5399[label="1;1pkt 1fpkt"];
219--5730[label="0.00124378;1pkt 1fpkt"];
219--6160[label="0.88;44pkt 44fpkt"];
219--6273[label="1;2pkt 2fpkt"];
219--6438[label="1;117pkt 117fpkt"];
219--6745[label="0.666667;2pkt 2fpkt"];
219--6900[label="0.484848;16pkt 16fpkt"];
219--6959[label="0.0526316;2pkt 2fpkt"];
219--7634[label="1;169pkt 169fpkt"];
219--7750[label="0.00582751;5pkt 5fpkt"];
219--7774[label="1;510pkt 510fpkt"];
219--7811[label="1;1pkt 1fpkt"];
219--7997[label="0.0526316;2pkt 2fpkt"];
219--8108[label="0.00582751;5pkt 5fpkt"];
219--8131[label="0.0011655;1pkt 1fpkt"];
219--8180[label="0.0011655;1pkt 1fpkt"];
219--8219[label="0.0011655;1pkt 1fpkt"];
288--4801[label="0.5;1pkt 1fpkt"];
288--5399[label="1;1pkt 1fpkt"];
288--6736[label="0.5;1pkt 1fpkt"];
288--7774[label="0.5;1pkt 1fpkt"];
288--7811[label="1;1pkt 1fpkt"];
335--4801[label="0.666667;2pkt 2fpkt"];
335--4806[label="0.333333;1pkt 1fpkt"];
335--6745[label="1;3pkt 3fpkt"];
335--7774[label="0.666667;2pkt 2fpkt"];
335--7775[label="0.333333;1pkt 1fpkt"];
335--8131[label="0.333333;1pkt 1fpkt"];
335--8180[label="0.333333;1pkt 1fpkt"];
335--8219[label="0.333333;1pkt 1fpkt"];
335--10137[label="0.333333;1pkt 1fpkt"];
335--11583[label="0.333333;1pkt 1fpkt"];
378--4801[label="1;1pkt 1fpkt"];
378--5157[label="1;1pkt 1fpkt"];
378--7774[label="1;1pkt 1fpkt"];
464--4801[label="1;47pkt 47fpkt"];
464--4865[label="1;38pkt 38fpkt"];
464--7774[label="0.680851;32pkt 32fpkt"];
488--4801[label="0.857143;6pkt 6fpkt"];
488--4871[label="1;4pkt 4fpkt"];
488--7774[label="0.857143;6pkt 6fpkt"];
510--4801[label="1;76pkt 76fpkt"];
510--4874[label="1;52pkt 52fpkt"];
510--7774[label="0.828947;63pkt 63fpkt"];
771--4801[label="1;38pkt 38fpkt"];
771--4967[label="1;4pkt 4fpkt"];
771--7774[label="0.868421;33pkt 33fpkt"];
1507--4801[label="1;136pkt 136fpkt"];
1507--6438[label="1;117pkt 117fpkt"];
1507--7774[label="0.647059;88pkt 88fpkt"];
2581--4801[label="0.886792;47pkt 47fpkt"];
2581--6160[label="1;50pkt 50fpkt"];
2581--7774[label="0.584906;31pkt 31fpkt"];
2581--8131[label="0.0188679;1pkt 1fpkt"];
2581--8180[label="0.0188679;1pkt 1fpkt"];
2581--8219[label="0.0188679;1pkt 1fpkt"];
2736--4801[label="1;30pkt 30fpkt"];
3242--4801[label="1;2pkt 2fpkt"];
3242--6273[label="1;2pkt 2fpkt"];
3242--7774[label="1;2pkt 2fpkt"];
4614--4801[label="1;169pkt 169fpkt"];
4614--7634[label="1;169pkt 169fpkt"];
4614--7774[label="0.0650888;11pkt 11fpkt"];
4801--4865[label="1;38pkt 38fpkt"];
4801--4871[label="1;4pkt 4fpkt"];
4801--4874[label="1;52pkt 52fpkt"];
4801--4882[label="0.8;8pkt 8fpkt"];
4801--4967[label="1;4pkt 4fpkt"];
4801--5157[label="1;1pkt 1fpkt"];
4801--5399[label="1;1pkt 1fpkt"];
4801--5730[label="0.00124378;1pkt 1fpkt"];
4801--6160[label="0.88;44pkt 44fpkt"];
4801--6273[label="1;2pkt 2fpkt"];
4801--6438[label="1;117pkt 117fpkt"];
4801--6745[label="0.666667;2pkt 2fpkt"];
4801--6900[label="0.484848;16pkt 16fpkt"];
4801--6959[label="0.0526316;2pkt 2fpkt"];
4801--7634[label="1;169pkt 169fpkt"];
4801--7750[label="0.00582751;5pkt 5fpkt"];
4801--7774[label="1;510pkt 510fpkt"];
4801--7811[label="1;1pkt 1fpkt"];
4801--7997[label="0.0526316;2pkt 2fpkt"];
4801--8108[label="0.00582751;5pkt 5fpkt"];
4801--8131[label="0.0011655;1pkt 1fpkt"];
4801--8180[label="0.0011655;1pkt 1fpkt"];
4801--8219[label="0.0011655;1pkt 1fpkt"];
4865--7774[label="0.842105;32pkt 32fpkt"];
4871--7774[label="1;4pkt 4fpkt"];
4874--7774[label="1;52pkt 52fpkt"];
4967--7774[label="1;4pkt 4fpkt"];
5157--7774[label="1;1pkt 1fpkt"];
5399--7774[label="1;1pkt 1fpkt"];
5399--7811[label="1;1pkt 1fpkt"];
6160--7774[label="0.62;31pkt 31fpkt"];
6160--8131[label="0.02;1pkt 1fpkt"];
6160--8180[label="0.02;1pkt 1fpkt"];
6160--8219[label="0.02;1pkt 1fpkt"];
6273--7774[label="1;2pkt 2fpkt"];
6438--7774[label="0.752137;88pkt 88fpkt"];
6900--7774[label="0.242424;8pkt 8fpkt"];
6900--8007[label="0.121212;4pkt 4fpkt"];
6900--9733[label="0.030303;1pkt 1fpkt"];
6900--11367[label="0.030303;1pkt 1fpkt"];
6900--12127[label="0.030303;1pkt 1fpkt"];
7634--7774[label="0.0650888;11pkt 11fpkt"];
7774--7811[label="1;1pkt 1fpkt"];
7774--8131[label="0.00196078;1pkt 1fpkt"];
7774--8180[label="0.00196078;1pkt 1fpkt"];
7774--8219[label="0.00196078;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.141.4.43" src_ip="215.40.237.176" src_port="21"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
1104[label="215.40.248.136;s;259pkt 259fpkt", shape=diamond, color=yellow];
1284[label="201.99.63.118;d;231pkt 231fpkt", shape=diamond, color=yellow];
5071[label="215.40.248.136;s;259pkt 259fpkt", shape=hexagon, color=black];
5641[label="201.99.63.118;d;172pkt 172fpkt", shape=hexagon, color=black];
7790[label="215.40.248.136;s;259pkt 259fpkt", shape=polygon, color=gold];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.248.136:*, 201.99.63.118:80}[89.1892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1102%)&lt;BR/&gt; 0: (0.762712%)&lt;BR/&gt; 443: (0.254237%)&lt;BR/&gt; 9162: (0.211864%)&lt;BR/&gt; 9150: (0.211864%)&gt;];
}
1104--1284[label="1;231pkt 231fpkt"];
1104--1598[label="0.00534759;1pkt 1fpkt"];
1104--2031[label="0.0579151;15pkt 15fpkt"];
1104--2940[label="0.0123457;1pkt 1fpkt"];
1104--5032[label="0.0232558;2pkt 2fpkt"];
1104--5071[label="1;259pkt 259fpkt"];
1104--5641[label="1;172pkt 172fpkt"];
1104--7790[label="1;259pkt 259fpkt"];
1104--8122[label="0.003861;1pkt 1fpkt"];
1104--8134[label="0.00772201;2pkt 2fpkt"];
1104--8154[label="0.003861;1pkt 1fpkt"];
1104--8165[label="0.003861;1pkt 1fpkt"];
1104--8198[label="0.003861;1pkt 1fpkt"];
1104--8208[label="0.003861;1pkt 1fpkt"];
1104--8231[label="0.003861;1pkt 1fpkt"];
1104--8241[label="0.003861;1pkt 1fpkt"];
1284--5071[label="1;231pkt 231fpkt"];
1284--5641[label="1;172pkt 172fpkt"];
1284--7790[label="1;231pkt 231fpkt"];
1284--8134[label="0.004329;1pkt 1fpkt"];
5071--5641[label="1;172pkt 172fpkt"];
5071--7790[label="1;259pkt 259fpkt"];
5071--8122[label="0.003861;1pkt 1fpkt"];
5071--8134[label="0.00772201;2pkt 2fpkt"];
5071--8154[label="0.003861;1pkt 1fpkt"];
5071--8165[label="0.003861;1pkt 1fpkt"];
5071--8198[label="0.003861;1pkt 1fpkt"];
5071--8208[label="0.003861;1pkt 1fpkt"];
5071--8231[label="0.003861;1pkt 1fpkt"];
5071--8241[label="0.003861;1pkt 1fpkt"];
5641--7790[label="1;172pkt 172fpkt"];
5641--8134[label="0.00581395;1pkt 1fpkt"];
7790--8122[label="0.003861;1pkt 1fpkt"];
7790--8134[label="0.00772201;2pkt 2fpkt"];
7790--8154[label="0.003861;1pkt 1fpkt"];
7790--8165[label="0.003861;1pkt 1fpkt"];
7790--8198[label="0.003861;1pkt 1fpkt"];
7790--8208[label="0.003861;1pkt 1fpkt"];
7790--8231[label="0.003861;1pkt 1fpkt"];
7790--8241[label="0.003861;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.99.63.118" dst_port="80" src_ip="215.40.248.136"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
449[label="193.246.240.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
450[label="128.64.244.7;s;6pkt 6fpkt", shape=diamond, color=yellow];
4860[label="193.246.240.246;d;1pkt 1fpkt", shape=hexagon, color=black];
5167[label="128.64.244.7;s;3pkt 3fpkt", shape=hexagon, color=black];
7794[label="193.246.240.246;d;1pkt 1fpkt", shape=polygon, color=gold];
8337[label="128.64.244.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10686[label="128.64.244.7;2pkt 2fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.244.7:*, *:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.6667%)&lt;BR/&gt; 52356: (23.3333%)&lt;BR/&gt; 3690: (23.3333%)&lt;BR/&gt; 53303: (6.66667%)&lt;BR/&gt; 53284: (6.66667%)&gt;];
}
449--450[label="1;1pkt 1fpkt"];
449--4860[label="1;1pkt 1fpkt"];
449--5167[label="1;1pkt 1fpkt"];
449--7794[label="1;1pkt 1fpkt"];
449--8337[label="1;1pkt 1fpkt"];
449--10686[label="1;1pkt 1fpkt"];
450--654[label="0.166667;1pkt 1fpkt"];
450--1253[label="0.166667;1pkt 1fpkt"];
450--2002[label="0.166667;1pkt 1fpkt"];
450--2055[label="0.166667;1pkt 1fpkt"];
450--4860[label="1;1pkt 1fpkt"];
450--4920[label="0.166667;1pkt 1fpkt"];
450--5167[label="1;3pkt 3fpkt"];
450--5563[label="0.166667;1pkt 1fpkt"];
450--6588[label="0.166667;1pkt 1fpkt"];
450--7794[label="1;1pkt 1fpkt"];
450--8337[label="1;1pkt 1fpkt"];
450--10686[label="1;2pkt 2fpkt"];
4860--5167[label="1;1pkt 1fpkt"];
4860--7794[label="1;1pkt 1fpkt"];
4860--8337[label="1;1pkt 1fpkt"];
4860--10686[label="1;1pkt 1fpkt"];
5167--6588[label="0.333333;1pkt 1fpkt"];
5167--7794[label="1;1pkt 1fpkt"];
5167--8337[label="1;1pkt 1fpkt"];
5167--10686[label="0.5;1pkt 1fpkt"];
7794--8337[label="1;1pkt 1fpkt"];
7794--10686[label="1;1pkt 1fpkt"];
8337--10686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.64.244.7"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
1566[label="41.207.116.245;d;150pkt 150fpkt", shape=diamond, color=yellow];
1567[label="128.81.165.77;s;96pkt 96fpkt", shape=diamond, color=yellow];
5298[label="41.207.116.245;d;83pkt 83fpkt", shape=hexagon, color=black];
5299[label="128.81.165.77;s;96pkt 96fpkt", shape=hexagon, color=black];
7803[label="128.81.165.77;s;65pkt 65fpkt", shape=polygon, color=gold];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.165.77:80, 41.207.116.245:*}[60%]&lt;BR/&gt;{133.72.18.240:*, 41.207.116.245:*}[32%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 21: (3.77551%)&lt;BR/&gt; 443: (2.44898%)&lt;BR/&gt; 64899: (0.510204%)&lt;BR/&gt; 63849: (0.510204%)&gt;];
}
1566--1567[label="1;96pkt 96fpkt"];
1566--3455[label="0.979592;48pkt 48fpkt"];
1566--5298[label="1;83pkt 83fpkt"];
1566--5299[label="1;96pkt 96fpkt"];
1566--7239[label="0.979592;48pkt 48fpkt"];
1566--7803[label="1;65pkt 65fpkt"];
1566--8131[label="0.0333333;5pkt 5fpkt"];
1566--8180[label="0.0333333;5pkt 5fpkt"];
1566--8219[label="0.0333333;5pkt 5fpkt"];
1567--5298[label="0.650602;54pkt 54fpkt"];
1567--5299[label="1;96pkt 96fpkt"];
1567--7803[label="1;65pkt 65fpkt"];
1567--8131[label="0.0520833;5pkt 5fpkt"];
1567--8180[label="0.0520833;5pkt 5fpkt"];
1567--8219[label="0.0520833;5pkt 5fpkt"];
5298--5299[label="0.650602;54pkt 54fpkt"];
5298--7239[label="0.530612;26pkt 26fpkt"];
5298--7803[label="0.830769;54pkt 54fpkt"];
5298--8131[label="0.060241;5pkt 5fpkt"];
5298--8180[label="0.060241;5pkt 5fpkt"];
5298--8219[label="0.060241;5pkt 5fpkt"];
5299--7803[label="1;65pkt 65fpkt"];
5299--8131[label="0.0520833;5pkt 5fpkt"];
5299--8180[label="0.0520833;5pkt 5fpkt"];
5299--8219[label="0.0520833;5pkt 5fpkt"];
7803--8131[label="0.0769231;5pkt 5fpkt"];
7803--8180[label="0.0769231;5pkt 5fpkt"];
7803--8219[label="0.0769231;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.245" src_ip="133.72.18.240"/>
      <filter dst_ip="41.207.116.245" src_ip="128.81.165.77" src_port="80"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
239[label="174.194.13.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
242[label="210.243.63.191;s;30pkt 30fpkt", shape=diamond, color=yellow];
1182[label="174.194.92.102;d;29pkt 29fpkt", shape=diamond, color=yellow];
5088[label="174.194.92.102;d;29pkt 29fpkt", shape=hexagon, color=black];
5131[label="210.243.63.191;s;30pkt 30fpkt", shape=hexagon, color=black];
7805[label="174.194.92.102;d;29pkt 29fpkt", shape=polygon, color=gold];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.243.63.191:80, 174.194.92.102:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49207: (1.68919%)&lt;BR/&gt; 49206: (1.68919%)&lt;BR/&gt; 49205: (1.68919%)&lt;BR/&gt; 49204: (1.68919%)&gt;];
}
239--242[label="1;1pkt 1fpkt"];
239--5131[label="1;1pkt 1fpkt"];
242--1182[label="1;29pkt 29fpkt"];
242--5088[label="1;29pkt 29fpkt"];
242--5131[label="1;30pkt 30fpkt"];
242--7805[label="1;29pkt 29fpkt"];
242--8131[label="0.633333;19pkt 19fpkt"];
242--8180[label="0.633333;19pkt 19fpkt"];
242--8219[label="0.633333;19pkt 19fpkt"];
1182--5088[label="1;29pkt 29fpkt"];
1182--5131[label="1;29pkt 29fpkt"];
1182--7805[label="1;29pkt 29fpkt"];
1182--8131[label="0.655172;19pkt 19fpkt"];
1182--8180[label="0.655172;19pkt 19fpkt"];
1182--8219[label="0.655172;19pkt 19fpkt"];
5088--5131[label="1;29pkt 29fpkt"];
5088--7805[label="1;29pkt 29fpkt"];
5088--8131[label="0.655172;19pkt 19fpkt"];
5088--8180[label="0.655172;19pkt 19fpkt"];
5088--8219[label="0.655172;19pkt 19fpkt"];
5131--7805[label="1;29pkt 29fpkt"];
5131--8131[label="0.633333;19pkt 19fpkt"];
5131--8180[label="0.633333;19pkt 19fpkt"];
5131--8219[label="0.633333;19pkt 19fpkt"];
7805--8131[label="0.655172;19pkt 19fpkt"];
7805--8180[label="0.655172;19pkt 19fpkt"];
7805--8219[label="0.655172;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.92.102" src_ip="210.243.63.191" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
515[label="5.4.63.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
5437[label="5.4.63.215;s;1pkt 1fpkt", shape=hexagon, color=black];
7816[label="5.4.63.215;s;1pkt 1fpkt", shape=polygon, color=gold];
10335[label="5.4.63.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.4.63.215:7303, 133.72.37.55:7556}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7556: (50%)&lt;BR/&gt; 7303: (50%)&gt;];
}
515--5437[label="1;1pkt 1fpkt"];
515--6297[label="1;1pkt 1fpkt"];
515--7816[label="1;1pkt 1fpkt"];
515--10335[label="1;1pkt 1fpkt"];
5437--6297[label="1;1pkt 1fpkt"];
5437--7816[label="1;1pkt 1fpkt"];
5437--10335[label="1;1pkt 1fpkt"];
7816--10335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.37.55" dst_port="7556" src_ip="5.4.63.215" src_port="7303"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
1747[label="200.154.21.62;s;32pkt 32fpkt", shape=diamond, color=yellow];
5653[label="200.154.21.62;s;32pkt 32fpkt", shape=hexagon, color=black];
7840[label="200.154.21.62;s;32pkt 32fpkt", shape=polygon, color=gold];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.154.21.62:*, 215.40.227.25:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47139: (1.5625%)&lt;BR/&gt; 47135: (1.5625%)&lt;BR/&gt; 47119: (1.5625%)&lt;BR/&gt; 47096: (1.5625%)&gt;];
}
1747--5127[label="1;32pkt 32fpkt"];
1747--5653[label="1;32pkt 32fpkt"];
1747--7840[label="1;32pkt 32fpkt"];
1747--8134[label="1;32pkt 32fpkt"];
5653--7840[label="1;32pkt 32fpkt"];
5653--8134[label="1;32pkt 32fpkt"];
7840--8134[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.227.25" dst_port="80" src_ip="200.154.21.62"/>
    </slice>
    <from sec="1229058131" usec="0"/>
    <to sec="1229058184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2215[label="133.72.49.202;s;17pkt 17fpkt", shape=diamond, color=yellow];
2217[label="41.169.163.24;d;11pkt 11fpkt", shape=diamond, color=yellow];
5676[label="133.72.49.202;s;17pkt 17fpkt", shape=hexagon, color=black];
7842[label="133.72.49.202;s;17pkt 17fpkt", shape=polygon, color=gold];
10236[label="133.72.49.202;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.49.202:*, 41.169.163.24:80}[64.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62229: (3.16456%)&lt;BR/&gt; 62223: (3.16456%)&lt;BR/&gt; 62222: (3.16456%)&lt;BR/&gt; 62219: (3.16456%)&gt;];
}
2215--2217[label="1;11pkt 11fpkt"];
2215--3458[label="0.176471;3pkt 3fpkt"];
2215--4475[label="0.117647;2pkt 2fpkt"];
2215--5676[label="1;17pkt 17fpkt"];
2215--6561[label="0.176471;3pkt 3fpkt"];
2215--7842[label="1;17pkt 17fpkt"];
2215--10236[label="1;17pkt 17fpkt"];
2217--5676[label="1;11pkt 11fpkt"];
2217--7842[label="1;11pkt 11fpkt"];
2217--10236[label="1;11pkt 11fpkt"];
5676--6561[label="0.176471;3pkt 3fpkt"];
5676--7842[label="1;17pkt 17fpkt"];
5676--10236[label="1;17pkt 17fpkt"];
7842--10236[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="41.169.163.24" dst_port="80" src_ip="133.72.49.202"/>
    </slice>
    <from sec="1229058182" usec="0"/>
    <to sec="1229058307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
1517[label="41.207.126.36;d;63pkt 63fpkt", shape=diamond, color=yellow];
2084[label="144.203.17.5;s;41pkt 41fpkt", shape=diamond, color=yellow];
2586[label="128.81.194.2;s;27pkt 27fpkt", shape=diamond, color=yellow];
5280[label="41.207.126.36;d;52pkt 52fpkt", shape=hexagon, color=black];
5594[label="144.203.17.5;s;41pkt 41fpkt", shape=hexagon, color=black];
7558[label="128.81.194.2;s;27pkt 27fpkt", shape=hexagon, color=black];
7894[label="144.203.17.5;s;25pkt 25fpkt", shape=polygon, color=gold];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.17.5:80, 41.207.126.36:*}[56.9444%]&lt;BR/&gt;{128.81.194.2:80, 41.207.126.36:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.913%)&lt;BR/&gt; 3000: (1.08696%)&lt;BR/&gt; 64708: (0.905797%)&lt;BR/&gt; 63318: (0.905797%)&lt;BR/&gt; 61806: (0.905797%)&gt;];
}
1517--2084[label="0.853659;35pkt 35fpkt"];
1517--2586[label="0.888889;24pkt 24fpkt"];
1517--5280[label="1;52pkt 52fpkt"];
1517--5594[label="0.853659;35pkt 35fpkt"];
1517--7558[label="0.888889;24pkt 24fpkt"];
1517--7894[label="1;25pkt 25fpkt"];
1517--8131[label="0.047619;3pkt 3fpkt"];
1517--8180[label="0.047619;3pkt 3fpkt"];
1517--8219[label="0.047619;3pkt 3fpkt"];
2084--5280[label="0.682927;28pkt 28fpkt"];
2084--5594[label="1;41pkt 41fpkt"];
2084--7894[label="1;25pkt 25fpkt"];
2084--8131[label="0.0243902;1pkt 1fpkt"];
2084--8180[label="0.0243902;1pkt 1fpkt"];
2084--8219[label="0.0243902;1pkt 1fpkt"];
2586--5280[label="0.740741;20pkt 20fpkt"];
2586--7558[label="1;27pkt 27fpkt"];
2586--8131[label="0.0740741;2pkt 2fpkt"];
2586--8180[label="0.0740741;2pkt 2fpkt"];
2586--8219[label="0.0740741;2pkt 2fpkt"];
5280--5594[label="0.682927;28pkt 28fpkt"];
5280--7558[label="0.740741;20pkt 20fpkt"];
5280--7894[label="1;25pkt 25fpkt"];
5280--8131[label="0.0576923;3pkt 3fpkt"];
5280--8180[label="0.0576923;3pkt 3fpkt"];
5280--8219[label="0.0576923;3pkt 3fpkt"];
5594--7894[label="1;25pkt 25fpkt"];
5594--8131[label="0.0243902;1pkt 1fpkt"];
5594--8180[label="0.0243902;1pkt 1fpkt"];
5594--8219[label="0.0243902;1pkt 1fpkt"];
7558--8131[label="0.0740741;2pkt 2fpkt"];
7558--8180[label="0.0740741;2pkt 2fpkt"];
7558--8219[label="0.0740741;2pkt 2fpkt"];
7894--8131[label="0.04;1pkt 1fpkt"];
7894--8180[label="0.04;1pkt 1fpkt"];
7894--8219[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.36" src_ip="144.203.17.5" src_port="80"/>
      <filter dst_ip="41.207.126.36" src_ip="128.81.194.2" src_port="80"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
1667[label="41.207.122.102;d;7pkt 7fpkt", shape=diamond, color=yellow];
1668[label="128.81.64.89;s;16pkt 16fpkt", shape=diamond, color=yellow];
5625[label="128.81.64.89;s;9pkt 9fpkt", shape=hexagon, color=black];
7904[label="128.81.64.89;s;9pkt 9fpkt", shape=polygon, color=gold];
9231[label="128.81.64.89;19pkt 19fpkt", shape=pentagon, color=darkviolet];
11135[label="128.81.64.89;19pkt 19fpkt", shape=invtriangle, color=brown];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.64.89:80, 41.207.122.107:*}[35%]&lt;BR/&gt;{128.81.64.89:80, 41.207.122.102:*}[35%]&lt;BR/&gt;{128.81.64.89:80, 41.207.122.103:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61364: (3.79747%)&lt;BR/&gt; 59292: (3.79747%)&lt;BR/&gt; 56068: (3.79747%)&lt;BR/&gt; 50836: (3.79747%)&gt;];
}
1667--1668[label="0.857143;6pkt 6fpkt"];
1667--5625[label="0.857143;6pkt 6fpkt"];
1667--7904[label="0.857143;6pkt 6fpkt"];
1667--8131[label="0.142857;1pkt 1fpkt"];
1667--8180[label="0.142857;1pkt 1fpkt"];
1667--8219[label="0.142857;1pkt 1fpkt"];
1667--9231[label="0.857143;6pkt 6fpkt"];
1667--11135[label="0.857143;6pkt 6fpkt"];
1668--5625[label="1;9pkt 9fpkt"];
1668--7904[label="1;9pkt 9fpkt"];
1668--8131[label="0.0625;1pkt 1fpkt"];
1668--8180[label="0.0625;1pkt 1fpkt"];
1668--8219[label="0.0625;1pkt 1fpkt"];
1668--9231[label="1;16pkt 16fpkt"];
1668--11135[label="1;16pkt 16fpkt"];
5625--7904[label="1;9pkt 9fpkt"];
5625--8131[label="0.111111;1pkt 1fpkt"];
5625--8180[label="0.111111;1pkt 1fpkt"];
5625--8219[label="0.111111;1pkt 1fpkt"];
5625--9231[label="1;9pkt 9fpkt"];
5625--11135[label="1;9pkt 9fpkt"];
7904--8131[label="0.111111;1pkt 1fpkt"];
7904--8180[label="0.111111;1pkt 1fpkt"];
7904--8219[label="0.111111;1pkt 1fpkt"];
7904--9231[label="1;9pkt 9fpkt"];
7904--11135[label="1;9pkt 9fpkt"];
9231--11135[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.122.102" src_ip="128.81.64.89" src_port="80"/>
      <filter dst_ip="41.207.122.107" src_ip="128.81.64.89" src_port="80"/>
      <filter dst_ip="41.207.122.103" src_ip="128.81.64.89" src_port="80"/>
    </slice>
    <from sec="1229058058" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
2562[label="214.241.3.43;s;64pkt 64fpkt", shape=diamond, color=yellow];
3111[label="100.174.219.51;s;4pkt 4fpkt", shape=diamond, color=yellow];
3281[label="214.241.0.60;s;67pkt 67fpkt", shape=diamond, color=yellow];
3504[label="128.208.179.41;d;32pkt 32fpkt", shape=diamond, color=yellow];
4135[label="34.227.42.127;s;14pkt 14fpkt", shape=diamond, color=yellow];
6239[label="100.174.219.51;s;4pkt 4fpkt", shape=hexagon, color=black];
6373[label="214.241.0.60;s;67pkt 67fpkt", shape=hexagon, color=black];
7264[label="128.208.179.41;d;25pkt 25fpkt", shape=hexagon, color=black];
7912[label="100.174.219.51;s;4pkt 4fpkt", shape=polygon, color=gold];
8816[label="100.174.219.51;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8895[label="214.241.0.60;70pkt 70fpkt", shape=pentagon, color=darkviolet];
9575[label="34.227.42.127;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10976[label="214.241.0.60;70pkt 70fpkt", shape=invtriangle, color=brown];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.0.60:80, *:*}[40.113%]&lt;BR/&gt;{214.241.3.43:80, *:*}[36.1582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2867: (0.683371%)&lt;BR/&gt; 2531: (0.683371%)&lt;BR/&gt; 63507: (0.455581%)&lt;BR/&gt; 62439: (0.455581%)&gt;];
}
2562--3504[label="0.15625;5pkt 5fpkt"];
2562--4950[label="0.0294118;1pkt 1fpkt"];
2562--5723[label="0.046875;3pkt 3fpkt"];
2562--6149[label="1;64pkt 64fpkt"];
2562--7264[label="0.2;5pkt 5fpkt"];
2562--8131[label="0.125;8pkt 8fpkt"];
2562--8180[label="0.125;8pkt 8fpkt"];
2562--8219[label="0.125;8pkt 8fpkt"];
3111--3504[label="0.25;1pkt 1fpkt"];
3111--6239[label="1;4pkt 4fpkt"];
3111--7264[label="0.25;1pkt 1fpkt"];
3111--7912[label="1;4pkt 4fpkt"];
3111--8816[label="1;4pkt 4fpkt"];
3281--3504[label="0.03125;1pkt 1fpkt"];
3281--5175[label="0.0149254;1pkt 1fpkt"];
3281--5473[label="0.119403;8pkt 8fpkt"];
3281--5747[label="0.0149254;1pkt 1fpkt"];
3281--6373[label="1;67pkt 67fpkt"];
3281--7264[label="0.04;1pkt 1fpkt"];
3281--8131[label="0.0149254;1pkt 1fpkt"];
3281--8180[label="0.0149254;1pkt 1fpkt"];
3281--8219[label="0.0149254;1pkt 1fpkt"];
3281--8895[label="0.985075;66pkt 66fpkt"];
3281--10976[label="0.985075;66pkt 66fpkt"];
3504--4135[label="0.0714286;1pkt 1fpkt"];
3504--6149[label="0.15625;5pkt 5fpkt"];
3504--6239[label="0.25;1pkt 1fpkt"];
3504--6373[label="0.03125;1pkt 1fpkt"];
3504--7264[label="1;25pkt 25fpkt"];
3504--7912[label="0.25;1pkt 1fpkt"];
3504--8816[label="0.25;1pkt 1fpkt"];
3504--8830[label="0.0625;2pkt 2fpkt"];
3504--8895[label="0.03125;1pkt 1fpkt"];
3504--9575[label="0.0714286;1pkt 1fpkt"];
3504--10976[label="0.03125;1pkt 1fpkt"];
4135--7264[label="0.0714286;1pkt 1fpkt"];
4135--8131[label="0.0714286;1pkt 1fpkt"];
4135--8180[label="0.0714286;1pkt 1fpkt"];
4135--8219[label="0.0714286;1pkt 1fpkt"];
4135--9575[label="1;14pkt 14fpkt"];
6239--7264[label="0.25;1pkt 1fpkt"];
6239--7912[label="1;4pkt 4fpkt"];
6239--8816[label="1;4pkt 4fpkt"];
6373--7264[label="0.04;1pkt 1fpkt"];
6373--8131[label="0.0149254;1pkt 1fpkt"];
6373--8180[label="0.0149254;1pkt 1fpkt"];
6373--8219[label="0.0149254;1pkt 1fpkt"];
6373--8895[label="0.985075;66pkt 66fpkt"];
6373--10976[label="0.985075;66pkt 66fpkt"];
7264--7912[label="0.25;1pkt 1fpkt"];
7264--8816[label="0.25;1pkt 1fpkt"];
7264--8830[label="0.04;1pkt 1fpkt"];
7264--8895[label="0.04;1pkt 1fpkt"];
7264--9575[label="0.0714286;1pkt 1fpkt"];
7264--10976[label="0.04;1pkt 1fpkt"];
7912--8816[label="1;4pkt 4fpkt"];
8895--10976[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter src_ip="214.241.0.60" src_port="80"/>
      <filter src_ip="214.241.3.43" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
469[label="172.45.93.217;d;6pkt 6fpkt", shape=diamond, color=yellow];
471[label="211.140.116.95;s;9pkt 9fpkt", shape=diamond, color=yellow];
981[label="174.194.125.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
5429[label="172.45.93.217;d;6pkt 6fpkt", shape=hexagon, color=black];
6313[label="211.140.116.95;s;9pkt 9fpkt", shape=hexagon, color=black];
7923[label="172.45.93.217;d;6pkt 6fpkt", shape=polygon, color=gold];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.140.116.95:80, 172.45.93.217:*}[66.6667%]&lt;BR/&gt;{211.140.116.95:80, 174.194.125.233:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1185: (6.57895%)&lt;BR/&gt; 1182: (6.57895%)&lt;BR/&gt; 1180: (6.57895%)&lt;BR/&gt; 1179: (6.57895%)&gt;];
}
469--471[label="1;6pkt 6fpkt"];
469--5429[label="1;6pkt 6fpkt"];
469--6313[label="1;6pkt 6fpkt"];
469--7923[label="1;6pkt 6fpkt"];
469--8131[label="0.166667;1pkt 1fpkt"];
469--8180[label="0.166667;1pkt 1fpkt"];
469--8219[label="0.166667;1pkt 1fpkt"];
471--981[label="1;2pkt 2fpkt"];
471--1189[label="1;1pkt 1fpkt"];
471--5429[label="1;6pkt 6fpkt"];
471--6313[label="1;9pkt 9fpkt"];
471--7923[label="1;6pkt 6fpkt"];
471--8131[label="0.222222;2pkt 2fpkt"];
471--8180[label="0.222222;2pkt 2fpkt"];
471--8219[label="0.222222;2pkt 2fpkt"];
981--6313[label="1;2pkt 2fpkt"];
5429--6313[label="1;6pkt 6fpkt"];
5429--7923[label="1;6pkt 6fpkt"];
5429--8131[label="0.166667;1pkt 1fpkt"];
5429--8180[label="0.166667;1pkt 1fpkt"];
5429--8219[label="0.166667;1pkt 1fpkt"];
6313--7923[label="1;6pkt 6fpkt"];
6313--8131[label="0.222222;2pkt 2fpkt"];
6313--8180[label="0.222222;2pkt 2fpkt"];
6313--8219[label="0.222222;2pkt 2fpkt"];
7923--8131[label="0.166667;1pkt 1fpkt"];
7923--8180[label="0.166667;1pkt 1fpkt"];
7923--8219[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.93.217" src_ip="211.140.116.95" src_port="80"/>
      <filter dst_ip="174.194.125.233" src_ip="211.140.116.95" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1341[label="200.32.57.96;s;2295pkt 2295fpkt", shape=diamond, color=yellow];
6327[label="200.32.57.96;s;2295pkt 2295fpkt", shape=hexagon, color=black];
7925[label="200.32.57.96;s;1534pkt 1534fpkt", shape=polygon, color=gold];
9289[label="200.32.57.96;2483pkt 2483fpkt", shape=pentagon, color=darkviolet];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.32.57.96:37688, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37688: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1341--6327[label="1;2295pkt 2295fpkt"];
1341--7925[label="1;1534pkt 1534fpkt"];
1341--8124[label="0.0562613;124pkt 124fpkt"];
1341--8156[label="0.0601266;133pkt 133fpkt"];
1341--8200[label="0.0601266;133pkt 133fpkt"];
1341--8233[label="0.0600994;133pkt 133fpkt"];
1341--9289[label="1;2295pkt 2295fpkt"];
6327--7925[label="1;1534pkt 1534fpkt"];
6327--8124[label="0.0562613;124pkt 124fpkt"];
6327--8156[label="0.0601266;133pkt 133fpkt"];
6327--8200[label="0.0601266;133pkt 133fpkt"];
6327--8233[label="0.0600994;133pkt 133fpkt"];
6327--9289[label="1;2295pkt 2295fpkt"];
7925--8124[label="0.0808344;124pkt 124fpkt"];
7925--9289[label="1;1534pkt 1534fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="200.32.57.96" src_port="37688"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
639[label="214.49.185.136;d;352pkt 352fpkt", shape=diamond, color=yellow];
646[label="7.142.10.236;s;5pkt 5fpkt", shape=diamond, color=yellow];
647[label="214.49.186.45;d;4pkt 4fpkt", shape=diamond, color=yellow];
1160[label="194.137.93.138;s;19pkt 19fpkt", shape=diamond, color=yellow];
1340[label="208.14.155.59;s;24pkt 24fpkt", shape=diamond, color=yellow];
3180[label="194.136.97.240;s;4pkt 4fpkt", shape=diamond, color=yellow];
4363[label="193.225.130.33;s;15pkt 15fpkt", shape=diamond, color=yellow];
4631[label="174.194.232.198;d;35pkt 35fpkt", shape=diamond, color=yellow];
4918[label="214.49.186.45;d;4pkt 4fpkt", shape=hexagon, color=black];
5459[label="214.49.185.136;d;83pkt 83fpkt", shape=hexagon, color=black];
7122[label="7.142.10.236;s;5pkt 5fpkt", shape=hexagon, color=black];
7339[label="193.225.130.33;s;15pkt 15fpkt", shape=hexagon, color=black];
7930[label="214.49.186.45;d;3pkt 3fpkt", shape=polygon, color=gold];
8612[label="193.225.130.33;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9734[label="101.22.181.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10502[label="7.142.10.236;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10540[label="194.136.97.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11368[label="101.22.181.142;17pkt 17fpkt", shape=invtriangle, color=brown];
11785[label="7.142.10.236;7pkt 7fpkt", shape=invtriangle, color=brown];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.49.185.136:*}[78.6408%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5669%)&lt;BR/&gt; 8007: (2.51969%)&lt;BR/&gt; 443: (1.10236%)&lt;BR/&gt; 28221: (1.02362%)&lt;BR/&gt; 60107: (0.551181%)&gt;];
}
639--646[label="0.4;2pkt 2fpkt"];
639--655[label="0.0113636;4pkt 4fpkt"];
639--818[label="0.00284091;1pkt 1fpkt"];
639--1160[label="1;19pkt 19fpkt"];
639--1340[label="0.0416667;1pkt 1fpkt"];
639--1587[label="0.0454545;5pkt 5fpkt"];
639--2056[label="0.0743802;9pkt 9fpkt"];
639--2066[label="0.00626959;2pkt 2fpkt"];
639--3180[label="1;4pkt 4fpkt"];
639--3725[label="0.0369318;13pkt 13fpkt"];
639--4052[label="1;35pkt 35fpkt"];
639--4108[label="0.0108696;1pkt 1fpkt"];
639--4156[label="0.125;4pkt 4fpkt"];
639--4363[label="1;15pkt 15fpkt"];
639--4824[label="0.321429;9pkt 9fpkt"];
639--5447[label="0.0416667;1pkt 1fpkt"];
639--5459[label="1;83pkt 83fpkt"];
639--5461[label="0.0113636;4pkt 4fpkt"];
639--6005[label="0.0227273;8pkt 8fpkt"];
639--6145[label="0.00626959;2pkt 2fpkt"];
639--6524[label="0.1;9pkt 9fpkt"];
639--7088[label="1;35pkt 35fpkt"];
639--7122[label="0.4;2pkt 2fpkt"];
639--7184[label="0.129032;4pkt 4fpkt"];
639--7339[label="1;15pkt 15fpkt"];
639--7415[label="0.0369318;13pkt 13fpkt"];
639--8034[label="0.129032;4pkt 4fpkt"];
639--8131[label="0.0397727;14pkt 14fpkt"];
639--8180[label="0.0397727;14pkt 14fpkt"];
639--8219[label="0.0397727;14pkt 14fpkt"];
639--8612[label="1;15pkt 15fpkt"];
639--8646[label="0.5;10pkt 10fpkt"];
639--9224[label="0.0113636;4pkt 4fpkt"];
639--9327[label="0.5;6pkt 6fpkt"];
639--9711[label="1;35pkt 35fpkt"];
639--9734[label="1;17pkt 17fpkt"];
639--10502[label="0.428571;3pkt 3fpkt"];
639--10540[label="1;4pkt 4fpkt"];
639--10842[label="0.5;10pkt 10fpkt"];
639--11128[label="0.0113636;4pkt 4fpkt"];
639--11357[label="1;35pkt 35fpkt"];
639--11368[label="1;17pkt 17fpkt"];
639--11785[label="0.428571;3pkt 3fpkt"];
639--12025[label="0.0113636;4pkt 4fpkt"];
639--12119[label="1;35pkt 35fpkt"];
646--647[label="0.75;3pkt 3fpkt"];
646--4918[label="0.75;3pkt 3fpkt"];
646--5459[label="0.2;1pkt 1fpkt"];
646--7122[label="1;5pkt 5fpkt"];
646--7930[label="1;3pkt 3fpkt"];
646--10502[label="1;5pkt 5fpkt"];
646--11785[label="1;5pkt 5fpkt"];
647--4918[label="1;4pkt 4fpkt"];
647--7122[label="0.75;3pkt 3fpkt"];
647--7930[label="1;3pkt 3fpkt"];
647--10502[label="1;4pkt 4fpkt"];
647--11785[label="1;4pkt 4fpkt"];
1160--5459[label="0.526316;10pkt 10fpkt"];
1160--8131[label="0.105263;2pkt 2fpkt"];
1160--8180[label="0.105263;2pkt 2fpkt"];
1160--8219[label="0.105263;2pkt 2fpkt"];
1340--1670[label="0.0416667;1pkt 1fpkt"];
1340--1803[label="0.0416667;1pkt 1fpkt"];
1340--2195[label="0.0833333;2pkt 2fpkt"];
1340--2943[label="0.0416667;1pkt 1fpkt"];
1340--3128[label="0.0416667;1pkt 1fpkt"];
1340--4250[label="0.0833333;2pkt 2fpkt"];
1340--4631[label="0.0833333;2pkt 2fpkt"];
1340--5277[label="0.25;6pkt 6fpkt"];
1340--5447[label="1;24pkt 24fpkt"];
1340--5459[label="0.0416667;1pkt 1fpkt"];
1340--6104[label="0.0416667;1pkt 1fpkt"];
1340--7270[label="0.0416667;1pkt 1fpkt"];
1340--8131[label="0.166667;4pkt 4fpkt"];
1340--8180[label="0.166667;4pkt 4fpkt"];
1340--8219[label="0.166667;4pkt 4fpkt"];
3180--10540[label="1;4pkt 4fpkt"];
4363--7339[label="1;15pkt 15fpkt"];
4363--8612[label="1;15pkt 15fpkt"];
4631--5447[label="0.0833333;2pkt 2fpkt"];
4631--7496[label="0.0857143;3pkt 3fpkt"];
4631--10347[label="0.121212;4pkt 4fpkt"];
4631--10399[label="0.0857143;3pkt 3fpkt"];
4631--11702[label="0.121212;4pkt 4fpkt"];
4631--11728[label="0.0857143;3pkt 3fpkt"];
4631--12273[label="0.0857143;3pkt 3fpkt"];
4918--7122[label="0.75;3pkt 3fpkt"];
4918--7930[label="1;3pkt 3fpkt"];
4918--10502[label="1;4pkt 4fpkt"];
4918--11785[label="1;4pkt 4fpkt"];
5459--6005[label="0.0361446;3pkt 3fpkt"];
5459--6524[label="0.0240964;2pkt 2fpkt"];
5459--7122[label="0.2;1pkt 1fpkt"];
5459--7184[label="0.0645161;2pkt 2fpkt"];
5459--8034[label="0.0645161;2pkt 2fpkt"];
5459--8131[label="0.168675;14pkt 14fpkt"];
5459--8180[label="0.168675;14pkt 14fpkt"];
5459--8219[label="0.168675;14pkt 14fpkt"];
5459--8646[label="0.1;2pkt 2fpkt"];
5459--9327[label="0.166667;2pkt 2fpkt"];
5459--9734[label="0.0588235;1pkt 1fpkt"];
5459--10502[label="0.142857;1pkt 1fpkt"];
5459--10842[label="0.1;2pkt 2fpkt"];
5459--11368[label="0.0588235;1pkt 1fpkt"];
5459--11785[label="0.142857;1pkt 1fpkt"];
7122--7930[label="1;3pkt 3fpkt"];
7122--10502[label="1;5pkt 5fpkt"];
7122--11785[label="1;5pkt 5fpkt"];
7339--8612[label="1;15pkt 15fpkt"];
7930--10502[label="1;3pkt 3fpkt"];
7930--11785[label="1;3pkt 3fpkt"];
9734--11368[label="1;17pkt 17fpkt"];
10502--11785[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.136" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
3035[label="133.72.93.100;d;73pkt 73fpkt", shape=diamond, color=yellow];
6178[label="133.72.93.100;d;73pkt 73fpkt", shape=hexagon, color=black];
7962[label="133.72.93.100;d;64pkt 64fpkt", shape=polygon, color=gold];
8735[label="7.46.125.43;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9317[label="183.162.232.98;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.46.125.43:*, 133.72.93.100:25}[39.726%]&lt;BR/&gt;{183.162.232.98:*, 133.72.93.100:25}[27.3973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 29655: (0.772201%)&lt;BR/&gt; 29643: (0.772201%)&lt;BR/&gt; 29640: (0.772201%)&lt;BR/&gt; 29622: (0.772201%)&gt;];
}
3035--6178[label="1;73pkt 73fpkt"];
3035--7962[label="1;64pkt 64fpkt"];
3035--8118[label="0.0136986;1pkt 1fpkt"];
3035--8735[label="1;29pkt 29fpkt"];
3035--9317[label="1;20pkt 20fpkt"];
6178--7962[label="1;64pkt 64fpkt"];
6178--8118[label="0.0136986;1pkt 1fpkt"];
6178--8735[label="1;29pkt 29fpkt"];
6178--9317[label="1;20pkt 20fpkt"];
7962--8118[label="0.015625;1pkt 1fpkt"];
7962--8735[label="1;29pkt 29fpkt"];
7962--9317[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.93.100" dst_port="25" src_ip="7.46.125.43"/>
      <filter dst_ip="133.72.93.100" dst_port="25" src_ip="183.162.232.98"/>
    </slice>
    <from sec="1229058025" usec="0"/>
    <to sec="1229058776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
303[label="128.64.35.93;s;229pkt 229fpkt", shape=diamond, color=yellow];
1292[label="101.153.59.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
1888[label="97.53.117.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
2362[label="7.38.121.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
2401[label="204.82.202.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
5401[label="128.64.35.93;s;73pkt 73fpkt", shape=hexagon, color=black];
5512[label="97.53.117.175;d;1pkt 1fpkt", shape=hexagon, color=black];
5717[label="101.153.59.84;d;1pkt 1fpkt", shape=hexagon, color=black];
6034[label="204.82.202.41;d;1pkt 1fpkt", shape=hexagon, color=black];
6743[label="7.38.121.58;d;1pkt 1fpkt", shape=hexagon, color=black];
7978[label="7.38.121.58;d;1pkt 1fpkt", shape=polygon, color=gold];
9266[label="128.64.35.93;244pkt 244fpkt", shape=pentagon, color=darkviolet];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.35.93:35801, *:*}[55.3279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35801: (26.3964%)&lt;BR/&gt; 4672: (6.12613%)&lt;BR/&gt; 4662: (3.15315%)&lt;BR/&gt; 4035: (0.900901%)&lt;BR/&gt; 7118: (0.720721%)&gt;];
}
303--1292[label="1;1pkt 1fpkt"];
303--1888[label="1;1pkt 1fpkt"];
303--2362[label="1;1pkt 1fpkt"];
303--2401[label="1;1pkt 1fpkt"];
303--5401[label="1;73pkt 73fpkt"];
303--5512[label="1;1pkt 1fpkt"];
303--5717[label="1;1pkt 1fpkt"];
303--6034[label="1;1pkt 1fpkt"];
303--6743[label="1;1pkt 1fpkt"];
303--7978[label="1;1pkt 1fpkt"];
303--9266[label="1;229pkt 229fpkt"];
1292--5401[label="1;1pkt 1fpkt"];
1292--5717[label="1;1pkt 1fpkt"];
1292--9266[label="1;1pkt 1fpkt"];
1888--5401[label="1;1pkt 1fpkt"];
1888--5512[label="1;1pkt 1fpkt"];
1888--9266[label="1;1pkt 1fpkt"];
2362--5401[label="1;1pkt 1fpkt"];
2362--6743[label="1;1pkt 1fpkt"];
2362--7978[label="1;1pkt 1fpkt"];
2362--9266[label="1;1pkt 1fpkt"];
2401--5401[label="1;1pkt 1fpkt"];
2401--6034[label="1;1pkt 1fpkt"];
2401--9266[label="1;1pkt 1fpkt"];
5401--5512[label="1;1pkt 1fpkt"];
5401--5717[label="1;1pkt 1fpkt"];
5401--6034[label="1;1pkt 1fpkt"];
5401--6743[label="1;1pkt 1fpkt"];
5401--7978[label="1;1pkt 1fpkt"];
5401--9266[label="1;73pkt 73fpkt"];
5512--9266[label="1;1pkt 1fpkt"];
5717--9266[label="1;1pkt 1fpkt"];
6034--9266[label="1;1pkt 1fpkt"];
6743--7978[label="1;1pkt 1fpkt"];
6743--9266[label="1;1pkt 1fpkt"];
7978--9266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.35.93" src_port="35801"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
901[label="169.18.192.25;d;94pkt 94fpkt", shape=diamond, color=yellow];
902[label="52.105.217.253;s;96pkt 96fpkt", shape=diamond, color=yellow];
5251[label="52.105.217.253;s;74pkt 74fpkt", shape=hexagon, color=black];
6805[label="169.18.192.25;d;82pkt 82fpkt", shape=hexagon, color=black];
7985[label="52.105.217.253;s;74pkt 74fpkt", shape=polygon, color=gold];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.105.217.253:20, 169.18.192.25:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (49.0476%)&lt;BR/&gt; 21: (0.952381%)&lt;BR/&gt; 1245: (0.595238%)&lt;BR/&gt; 1244: (0.595238%)&lt;BR/&gt; 1243: (0.595238%)&gt;];
}
901--902[label="1;94pkt 94fpkt"];
901--5251[label="0.972973;72pkt 72fpkt"];
901--6805[label="1;82pkt 82fpkt"];
901--7985[label="0.972973;72pkt 72fpkt"];
902--5251[label="1;74pkt 74fpkt"];
902--6805[label="1;82pkt 82fpkt"];
902--7985[label="1;74pkt 74fpkt"];
5251--6805[label="0.972973;72pkt 72fpkt"];
5251--7985[label="1;74pkt 74fpkt"];
6805--7985[label="0.972973;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.192.25" src_ip="52.105.217.253" src_port="20"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
3433[label="41.207.116.132;d;41pkt 41fpkt", shape=diamond, color=yellow];
3434[label="132.5.230.66;s;40pkt 40fpkt", shape=diamond, color=yellow];
7224[label="41.207.116.132;d;39pkt 39fpkt", shape=hexagon, color=black];
7992[label="132.5.230.66;s;34pkt 34fpkt", shape=polygon, color=gold];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.5.230.66:80, 41.207.116.132:*}[88.3721%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65218: (1.2987%)&lt;BR/&gt; 65177: (1.2987%)&lt;BR/&gt; 61964: (1.2987%)&lt;BR/&gt; 61926: (1.2987%)&gt;];
}
3433--3434[label="0.95;38pkt 38fpkt"];
3433--6905[label="0.941176;32pkt 32fpkt"];
3433--7224[label="1;39pkt 39fpkt"];
3433--7992[label="0.941176;32pkt 32fpkt"];
3433--8131[label="0.0487805;2pkt 2fpkt"];
3433--8180[label="0.0487805;2pkt 2fpkt"];
3433--8219[label="0.0487805;2pkt 2fpkt"];
3434--3443[label="0.025;1pkt 1fpkt"];
3434--6846[label="0.025;1pkt 1fpkt"];
3434--6905[label="1;34pkt 34fpkt"];
3434--7224[label="0.923077;36pkt 36fpkt"];
3434--7234[label="0.0294118;1pkt 1fpkt"];
3434--7992[label="1;34pkt 34fpkt"];
3434--8131[label="0.05;2pkt 2fpkt"];
3434--8180[label="0.05;2pkt 2fpkt"];
3434--8219[label="0.05;2pkt 2fpkt"];
7224--7992[label="0.941176;32pkt 32fpkt"];
7224--8131[label="0.0512821;2pkt 2fpkt"];
7224--8180[label="0.0512821;2pkt 2fpkt"];
7224--8219[label="0.0512821;2pkt 2fpkt"];
7992--8131[label="0.0588235;2pkt 2fpkt"];
7992--8180[label="0.0588235;2pkt 2fpkt"];
7992--8219[label="0.0588235;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.132" src_ip="132.5.230.66" src_port="80"/>
    </slice>
    <from sec="1229058011" usec="0"/>
    <to sec="1229058797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
2394[label="194.17.254.113;s;14pkt 14fpkt", shape=diamond, color=yellow];
2761[label="174.194.35.18;d;12pkt 12fpkt", shape=diamond, color=yellow];
6022[label="194.17.254.113;s;14pkt 14fpkt", shape=hexagon, color=black];
6243[label="174.194.35.18;d;12pkt 12fpkt", shape=hexagon, color=black];
8000[label="174.194.35.18;d;12pkt 12fpkt", shape=polygon, color=gold];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.17.254.113:80, 174.194.35.18:*}[60%]&lt;BR/&gt;{192.22.44.153:80, 174.194.35.18:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50870: (3.90625%)&lt;BR/&gt; 50869: (3.90625%)&lt;BR/&gt; 50868: (3.90625%)&lt;BR/&gt; 50867: (3.90625%)&gt;];
}
2394--2761[label="0.5;6pkt 6fpkt"];
2394--6022[label="1;14pkt 14fpkt"];
2394--6243[label="0.5;6pkt 6fpkt"];
2394--8000[label="0.5;6pkt 6fpkt"];
2394--8165[label="0.142857;2pkt 2fpkt"];
2394--8208[label="0.142857;2pkt 2fpkt"];
2394--8241[label="0.142857;2pkt 2fpkt"];
2761--6005[label="0.5;6pkt 6fpkt"];
2761--6022[label="0.5;6pkt 6fpkt"];
2761--6243[label="1;12pkt 12fpkt"];
2761--8000[label="1;12pkt 12fpkt"];
6022--6243[label="0.5;6pkt 6fpkt"];
6022--8000[label="0.5;6pkt 6fpkt"];
6022--8165[label="0.142857;2pkt 2fpkt"];
6022--8208[label="0.142857;2pkt 2fpkt"];
6022--8241[label="0.142857;2pkt 2fpkt"];
6243--8000[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.35.18" src_ip="194.17.254.113" src_port="80"/>
      <filter dst_ip="174.194.35.18" src_ip="192.22.44.153" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
1926[label="215.40.232.214;s;524pkt 524fpkt", shape=diamond, color=yellow];
6062[label="215.40.232.214;s;524pkt 524fpkt", shape=hexagon, color=black];
8022[label="215.40.232.214;s;515pkt 515fpkt", shape=polygon, color=gold];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.232.214:0, *:0}[98.855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1683%)&lt;BR/&gt; 1080: (0.191939%)&lt;BR/&gt; 4536: (0.0959693%)&lt;BR/&gt; 135: (0.0959693%)&lt;BR/&gt; 8080: (0.0639795%)&gt;];
}
1926--2392[label="0.0021645;1pkt 1fpkt"];
1926--2408[label="0.0104167;1pkt 1fpkt"];
1926--3274[label="0.0027933;1pkt 1fpkt"];
1926--3277[label="0.00261097;1pkt 1fpkt"];
1926--3704[label="0.00310559;1pkt 1fpkt"];
1926--4751[label="0.0114504;6pkt 6fpkt"];
1926--5428[label="0.0019084;1pkt 1fpkt"];
1926--5730[label="0.00381679;2pkt 2fpkt"];
1926--5772[label="0.00294118;1pkt 1fpkt"];
1926--5790[label="0.0117647;1pkt 1fpkt"];
1926--5996[label="0.0104167;1pkt 1fpkt"];
1926--6062[label="1;524pkt 524fpkt"];
1926--7124[label="0.00310559;1pkt 1fpkt"];
1926--7750[label="0.0114504;6pkt 6fpkt"];
1926--8022[label="1;515pkt 515fpkt"];
1926--8065[label="0.00310559;1pkt 1fpkt"];
1926--8108[label="0.0114504;6pkt 6fpkt"];
6062--7124[label="0.00310559;1pkt 1fpkt"];
6062--7750[label="0.0114504;6pkt 6fpkt"];
6062--8022[label="1;515pkt 515fpkt"];
6062--8065[label="0.00310559;1pkt 1fpkt"];
6062--8108[label="0.0114504;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="215.40.232.214"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
1029[label="214.56.201.59;d;3880pkt 3880fpkt", shape=diamond, color=yellow];
3418[label="100.56.66.100;s;766pkt 766fpkt", shape=diamond, color=yellow];
3781[label="6.176.120.200;s;635pkt 635fpkt", shape=diamond, color=yellow];
7178[label="6.176.120.200;s;635pkt 635fpkt", shape=hexagon, color=black];
8029[label="6.176.120.200;s;570pkt 570fpkt", shape=polygon, color=gold];
9122[label="200.68.64.79;169pkt 169fpkt", shape=pentagon, color=darkviolet];
10223[label="6.176.120.200;671pkt 671fpkt", shape=pentagon, color=darkviolet];
11635[label="6.176.120.200;671pkt 671fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.207.34.214:*, 214.56.201.59:7733}[33.7659%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13109: (23.8652%)&lt;BR/&gt; 24373: (9.57859%)&lt;BR/&gt; 7733: (8.29686%)&lt;BR/&gt; 9781: (4.77054%)&lt;BR/&gt; 55604: (2.03201%)&gt;];
}
1029--2069[label="1;1327pkt 1327fpkt"];
1029--2558[label="1;763pkt 763fpkt"];
1029--3418[label="1;766pkt 766fpkt"];
1029--3781[label="1;635pkt 635fpkt"];
1029--6148[label="1;849pkt 849fpkt"];
1029--6526[label="1;763pkt 763fpkt"];
1029--7178[label="1;635pkt 635fpkt"];
1029--8029[label="1;570pkt 570fpkt"];
1029--9122[label="0.91716;155pkt 155fpkt"];
1029--10223[label="0.946349;635pkt 635fpkt"];
1029--11635[label="0.946349;635pkt 635fpkt"];
3781--7178[label="1;635pkt 635fpkt"];
3781--8029[label="1;570pkt 570fpkt"];
3781--10223[label="1;635pkt 635fpkt"];
3781--11635[label="1;635pkt 635fpkt"];
7178--8029[label="1;570pkt 570fpkt"];
7178--10223[label="1;635pkt 635fpkt"];
7178--11635[label="1;635pkt 635fpkt"];
8029--10223[label="1;570pkt 570fpkt"];
8029--11635[label="1;570pkt 570fpkt"];
10223--11635[label="1;671pkt 671fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.201.59" dst_port="7733" src_ip="205.207.34.214"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02094,1.7618,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
1202[label="174.194.105.58;d;32pkt 32fpkt", shape=diamond, color=yellow];
1207[label="0.169.164.36;s;29pkt 29fpkt", shape=diamond, color=yellow];
2077[label="133.72.144.36;d;7pkt 7fpkt", shape=diamond, color=yellow];
2351[label="214.49.7.71;d;7pkt 7fpkt", shape=diamond, color=yellow];
5094[label="174.194.105.58;d;32pkt 32fpkt", shape=hexagon, color=black];
5096[label="0.169.164.36;s;29pkt 29fpkt", shape=hexagon, color=black];
5313[label="133.72.194.112;d;10pkt 10fpkt", shape=hexagon, color=black];
5590[label="133.72.144.36;d;3pkt 3fpkt", shape=hexagon, color=black];
6231[label="214.49.7.71;d;7pkt 7fpkt", shape=hexagon, color=black];
8042[label="0.169.164.36;s;27pkt 27fpkt", shape=polygon, color=gold];
8659[label="0.169.164.36;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.164.36:80, *:*}[45.2055%]&lt;BR/&gt;{*:80, 174.194.105.58:*}[32.8767%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.814%)&lt;BR/&gt; 443: (3.72093%)&lt;BR/&gt; 2563: (1.39535%)&lt;BR/&gt; 2561: (1.39535%)&lt;BR/&gt; 1742: (1.39535%)&gt;];
}
1202--1207[label="0.206897;6pkt 6fpkt"];
1202--2376[label="0.28125;9pkt 9fpkt"];
1202--4156[label="0.03125;1pkt 1fpkt"];
1202--5094[label="1;32pkt 32fpkt"];
1202--5096[label="0.206897;6pkt 6fpkt"];
1202--6487[label="0.15625;5pkt 5fpkt"];
1202--7184[label="0.0322581;1pkt 1fpkt"];
1202--7383[label="0.28125;9pkt 9fpkt"];
1202--8034[label="0.0322581;1pkt 1fpkt"];
1202--8035[label="0.15625;5pkt 5fpkt"];
1202--8042[label="0.222222;6pkt 6fpkt"];
1202--8131[label="0.4375;14pkt 14fpkt"];
1202--8180[label="0.4375;14pkt 14fpkt"];
1202--8219[label="0.4375;14pkt 14fpkt"];
1202--8659[label="0.1875;6pkt 6fpkt"];
1207--2077[label="0.857143;6pkt 6fpkt"];
1207--2351[label="0.285714;2pkt 2fpkt"];
1207--3730[label="0.206897;6pkt 6fpkt"];
1207--5094[label="0.206897;6pkt 6fpkt"];
1207--5096[label="1;29pkt 29fpkt"];
1207--5313[label="0.2;2pkt 2fpkt"];
1207--5390[label="0.0689655;2pkt 2fpkt"];
1207--5590[label="0.666667;2pkt 2fpkt"];
1207--6231[label="0.285714;2pkt 2fpkt"];
1207--7419[label="0.206897;6pkt 6fpkt"];
1207--8042[label="1;27pkt 27fpkt"];
1207--8131[label="0.206897;6pkt 6fpkt"];
1207--8180[label="0.206897;6pkt 6fpkt"];
1207--8219[label="0.206897;6pkt 6fpkt"];
1207--8659[label="0.965517;28pkt 28fpkt"];
2077--2519[label="0.142857;1pkt 1fpkt"];
2077--5096[label="0.857143;6pkt 6fpkt"];
2077--5590[label="1;3pkt 3fpkt"];
2077--8042[label="0.857143;6pkt 6fpkt"];
2077--8659[label="0.857143;6pkt 6fpkt"];
2351--2482[label="0.142857;1pkt 1fpkt"];
2351--5096[label="0.285714;2pkt 2fpkt"];
2351--6231[label="1;7pkt 7fpkt"];
2351--8042[label="0.285714;2pkt 2fpkt"];
2351--8659[label="0.285714;2pkt 2fpkt"];
2351--10234[label="0.285714;2pkt 2fpkt"];
5094--5096[label="0.206897;6pkt 6fpkt"];
5094--6487[label="0.15625;5pkt 5fpkt"];
5094--7184[label="0.0322581;1pkt 1fpkt"];
5094--7383[label="0.28125;9pkt 9fpkt"];
5094--8034[label="0.0322581;1pkt 1fpkt"];
5094--8035[label="0.15625;5pkt 5fpkt"];
5094--8042[label="0.222222;6pkt 6fpkt"];
5094--8131[label="0.4375;14pkt 14fpkt"];
5094--8180[label="0.4375;14pkt 14fpkt"];
5094--8219[label="0.4375;14pkt 14fpkt"];
5094--8659[label="0.1875;6pkt 6fpkt"];
5096--5313[label="0.2;2pkt 2fpkt"];
5096--5390[label="0.0689655;2pkt 2fpkt"];
5096--5590[label="0.666667;2pkt 2fpkt"];
5096--6231[label="0.285714;2pkt 2fpkt"];
5096--7419[label="0.206897;6pkt 6fpkt"];
5096--8042[label="1;27pkt 27fpkt"];
5096--8131[label="0.206897;6pkt 6fpkt"];
5096--8180[label="0.206897;6pkt 6fpkt"];
5096--8219[label="0.206897;6pkt 6fpkt"];
5096--8659[label="0.965517;28pkt 28fpkt"];
5313--5461[label="0.2;2pkt 2fpkt"];
5313--6679[label="1;2pkt 2fpkt"];
5313--8042[label="0.2;2pkt 2fpkt"];
5313--8659[label="0.1;1pkt 1fpkt"];
5313--9224[label="0.2;2pkt 2fpkt"];
5313--9680[label="1;2pkt 2fpkt"];
5313--11128[label="0.2;2pkt 2fpkt"];
5313--12025[label="0.2;2pkt 2fpkt"];
5590--8042[label="0.666667;2pkt 2fpkt"];
5590--8659[label="0.666667;2pkt 2fpkt"];
6231--8042[label="0.285714;2pkt 2fpkt"];
6231--8659[label="0.285714;2pkt 2fpkt"];
6231--10234[label="0.285714;2pkt 2fpkt"];
8042--8131[label="0.222222;6pkt 6fpkt"];
8042--8180[label="0.222222;6pkt 6fpkt"];
8042--8219[label="0.222222;6pkt 6fpkt"];
8042--8659[label="0.962963;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="0.169.164.36" src_port="80"/>
      <filter dst_ip="174.194.105.58" src_port="80"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
3704[label="214.140.238.235;d;322pkt 322fpkt", shape=diamond, color=yellow];
7124[label="214.140.238.235;d;322pkt 322fpkt", shape=hexagon, color=black];
8065[label="214.140.238.235;d;322pkt 322fpkt", shape=polygon, color=gold];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.140.238.235:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3704--3705[label="0.00657895;1pkt 1fpkt"];
3704--5202[label="0.00310559;1pkt 1fpkt"];
3704--6013[label="0.00310559;1pkt 1fpkt"];
3704--6062[label="0.00310559;1pkt 1fpkt"];
3704--6071[label="0.00310559;1pkt 1fpkt"];
3704--6321[label="0.00398406;1pkt 1fpkt"];
3704--7124[label="1;322pkt 322fpkt"];
3704--7125[label="0.00746269;1pkt 1fpkt"];
3704--7409[label="0.00310559;1pkt 1fpkt"];
3704--8065[label="1;322pkt 322fpkt"];
3704--8329[label="0.00310559;1pkt 1fpkt"];
3704--9488[label="0.00310559;1pkt 1fpkt"];
3704--10345[label="0.00310559;1pkt 1fpkt"];
3704--10681[label="0.00310559;1pkt 1fpkt"];
3704--11252[label="0.00310559;1pkt 1fpkt"];
3704--11860[label="0.00310559;1pkt 1fpkt"];
3704--12070[label="0.00310559;1pkt 1fpkt"];
7124--7125[label="0.00746269;1pkt 1fpkt"];
7124--7409[label="0.00310559;1pkt 1fpkt"];
7124--8065[label="1;322pkt 322fpkt"];
7124--8329[label="0.00310559;1pkt 1fpkt"];
7124--9488[label="0.00310559;1pkt 1fpkt"];
7124--10345[label="0.00310559;1pkt 1fpkt"];
7124--10681[label="0.00310559;1pkt 1fpkt"];
7124--11252[label="0.00310559;1pkt 1fpkt"];
7124--11860[label="0.00310559;1pkt 1fpkt"];
7124--12070[label="0.00310559;1pkt 1fpkt"];
8065--8329[label="0.00310559;1pkt 1fpkt"];
8065--9488[label="0.00310559;1pkt 1fpkt"];
8065--10345[label="0.00310559;1pkt 1fpkt"];
8065--10681[label="0.00310559;1pkt 1fpkt"];
8065--11252[label="0.00310559;1pkt 1fpkt"];
8065--11860[label="0.00310559;1pkt 1fpkt"];
8065--12070[label="0.00310559;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.140.238.235"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03583,1.80563,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
1657[label="45.183.104.69;s;163pkt 163fpkt", shape=diamond, color=yellow];
2861[label="128.64.82.134;d;31pkt 31fpkt", shape=diamond, color=yellow];
5893[label="45.183.104.69;s;163pkt 163fpkt", shape=hexagon, color=black];
6031[label="128.64.82.134;d;27pkt 27fpkt", shape=hexagon, color=black];
8091[label="45.183.104.69;s;163pkt 163fpkt", shape=polygon, color=gold];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.183.104.69:80, 214.56.220.81:*}[36.2694%]&lt;BR/&gt;{45.183.104.69:80, 133.72.2.67:*}[24.3523%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7148%)&lt;BR/&gt; 59843: (2.10238%)&lt;BR/&gt; 1946: (0.457038%)&lt;BR/&gt; 1908: (0.457038%)&lt;BR/&gt; 1900: (0.457038%)&gt;];
}
1657--2834[label="0.00613497;1pkt 1fpkt"];
1657--2861[label="0.0322581;1pkt 1fpkt"];
1657--4853[label="0.00806452;1pkt 1fpkt"];
1657--5473[label="0.0122699;2pkt 2fpkt"];
1657--5715[label="0.0368098;6pkt 6fpkt"];
1657--5766[label="0.0306748;5pkt 5fpkt"];
1657--5844[label="0.0897436;7pkt 7fpkt"];
1657--5893[label="1;163pkt 163fpkt"];
1657--6031[label="0.037037;1pkt 1fpkt"];
1657--6463[label="0.0184049;3pkt 3fpkt"];
1657--7371[label="0.429448;70pkt 70fpkt"];
1657--8091[label="1;163pkt 163fpkt"];
1657--8131[label="0.122699;20pkt 20fpkt"];
1657--8180[label="0.122699;20pkt 20fpkt"];
1657--8219[label="0.122699;20pkt 20fpkt"];
2861--5893[label="0.0322581;1pkt 1fpkt"];
2861--6031[label="1;27pkt 27fpkt"];
2861--8091[label="0.0322581;1pkt 1fpkt"];
2861--8131[label="0.0645161;2pkt 2fpkt"];
2861--8180[label="0.0645161;2pkt 2fpkt"];
2861--8219[label="0.0645161;2pkt 2fpkt"];
2861--10619[label="0.516129;16pkt 16fpkt"];
5893--6031[label="0.037037;1pkt 1fpkt"];
5893--6463[label="0.0184049;3pkt 3fpkt"];
5893--7371[label="0.429448;70pkt 70fpkt"];
5893--8091[label="1;163pkt 163fpkt"];
5893--8131[label="0.122699;20pkt 20fpkt"];
5893--8180[label="0.122699;20pkt 20fpkt"];
5893--8219[label="0.122699;20pkt 20fpkt"];
6031--8091[label="0.037037;1pkt 1fpkt"];
6031--8131[label="0.0740741;2pkt 2fpkt"];
6031--8180[label="0.0740741;2pkt 2fpkt"];
6031--8219[label="0.0740741;2pkt 2fpkt"];
6031--10619[label="0.481481;13pkt 13fpkt"];
8091--8131[label="0.122699;20pkt 20fpkt"];
8091--8180[label="0.122699;20pkt 20fpkt"];
8091--8219[label="0.122699;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.81" src_ip="45.183.104.69" src_port="80"/>
      <filter dst_ip="133.72.2.67" src_ip="45.183.104.69" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
3903[label="0.169.165.104;s;11pkt 11fpkt", shape=diamond, color=yellow];
4205[label="128.224.22.229;d;49pkt 49fpkt", shape=diamond, color=yellow];
4784[label="214.49.22.206;d;3pkt 3fpkt", shape=diamond, color=yellow];
7606[label="0.169.165.104;s;11pkt 11fpkt", shape=hexagon, color=black];
7767[label="214.49.22.206;d;3pkt 3fpkt", shape=hexagon, color=black];
8093[label="0.169.165.104;s;11pkt 11fpkt", shape=polygon, color=gold];
8110[label="214.49.22.206;d;3pkt 3fpkt", shape=polygon, color=gold];
9389[label="0.169.165.104;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11209[label="0.169.165.104;12pkt 12fpkt", shape=invtriangle, color=brown];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.224.22.229:*}[78.6885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5652%)&lt;BR/&gt; 3220: (3.47826%)&lt;BR/&gt; 3219: (3.47826%)&lt;BR/&gt; 3367: (2.6087%)&lt;BR/&gt; 63509: (2.17391%)&gt;];
}
3903--4205[label="0.0909091;1pkt 1fpkt"];
3903--4784[label="0.666667;2pkt 2fpkt"];
3903--4797[label="0.272727;3pkt 3fpkt"];
3903--7545[label="0.0909091;1pkt 1fpkt"];
3903--7606[label="1;11pkt 11fpkt"];
3903--7767[label="0.666667;2pkt 2fpkt"];
3903--8093[label="1;11pkt 11fpkt"];
3903--8110[label="0.666667;2pkt 2fpkt"];
3903--9389[label="1;11pkt 11fpkt"];
3903--11209[label="1;11pkt 11fpkt"];
4205--5992[label="0.142857;7pkt 7fpkt"];
4205--7426[label="0.0816327;4pkt 4fpkt"];
4205--7545[label="1;49pkt 49fpkt"];
4205--7606[label="0.0909091;1pkt 1fpkt"];
4205--7870[label="0.142857;7pkt 7fpkt"];
4205--8093[label="0.0909091;1pkt 1fpkt"];
4205--8131[label="0.0204082;1pkt 1fpkt"];
4205--8180[label="0.0204082;1pkt 1fpkt"];
4205--8219[label="0.0204082;1pkt 1fpkt"];
4205--9389[label="0.0833333;1pkt 1fpkt"];
4205--9907[label="0.0204082;1pkt 1fpkt"];
4205--10274[label="0.142857;7pkt 7fpkt"];
4205--11209[label="0.0833333;1pkt 1fpkt"];
4205--11457[label="0.0204082;1pkt 1fpkt"];
4205--12162[label="0.0204082;1pkt 1fpkt"];
4784--7606[label="0.666667;2pkt 2fpkt"];
4784--7767[label="1;3pkt 3fpkt"];
4784--8093[label="0.666667;2pkt 2fpkt"];
4784--8110[label="1;3pkt 3fpkt"];
4784--9389[label="0.666667;2pkt 2fpkt"];
4784--11209[label="0.666667;2pkt 2fpkt"];
7606--7767[label="0.666667;2pkt 2fpkt"];
7606--8093[label="1;11pkt 11fpkt"];
7606--8110[label="0.666667;2pkt 2fpkt"];
7606--9389[label="1;11pkt 11fpkt"];
7606--11209[label="1;11pkt 11fpkt"];
7767--8093[label="0.666667;2pkt 2fpkt"];
7767--8110[label="1;3pkt 3fpkt"];
7767--9389[label="0.666667;2pkt 2fpkt"];
7767--11209[label="0.666667;2pkt 2fpkt"];
8093--8110[label="0.666667;2pkt 2fpkt"];
8093--9389[label="1;11pkt 11fpkt"];
8093--11209[label="1;11pkt 11fpkt"];
8110--9389[label="0.666667;2pkt 2fpkt"];
8110--11209[label="0.666667;2pkt 2fpkt"];
9389--11209[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.224.22.229" src_port="80"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
1040[label="128.224.20.149;d;253pkt 253fpkt", shape=diamond, color=yellow];
2155[label="101.162.169.30;s;61pkt 61fpkt", shape=diamond, color=yellow];
4092[label="133.72.159.80;d;73pkt 73fpkt", shape=diamond, color=yellow];
5049[label="128.224.20.149;d;170pkt 170fpkt", shape=hexagon, color=black];
10523[label="215.9.69.238;59pkt 59fpkt", shape=pentagon, color=darkviolet];
11797[label="215.9.69.238;59pkt 59fpkt", shape=invtriangle, color=brown];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.72.159.80:80}[22.9167%]&lt;BR/&gt;{194.151.132.124:*, 128.224.20.149:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8519%)&lt;BR/&gt; 2216: (0.37037%)&lt;BR/&gt; 4320: (0.296296%)&lt;BR/&gt; 49766: (0.222222%)&lt;BR/&gt; 49697: (0.222222%)&gt;];
}
1040--2155[label="0.901639;55pkt 55fpkt"];
1040--3093[label="0.00724638;1pkt 1fpkt"];
1040--5049[label="1;170pkt 170fpkt"];
1040--6225[label="0.00724638;1pkt 1fpkt"];
1040--8119[label="0.0790514;20pkt 20fpkt"];
1040--8134[label="0.0711462;18pkt 18fpkt"];
2155--5049[label="0.901639;55pkt 55fpkt"];
2155--8134[label="0.0655738;4pkt 4fpkt"];
4092--6225[label="0.0136986;1pkt 1fpkt"];
4092--7387[label="1;73pkt 73fpkt"];
4092--8119[label="0.0547945;4pkt 4fpkt"];
4092--8134[label="0.0958904;7pkt 7fpkt"];
4092--8165[label="0.0273973;2pkt 2fpkt"];
4092--8208[label="0.0273973;2pkt 2fpkt"];
4092--8241[label="0.0273973;2pkt 2fpkt"];
4092--10479[label="0.134615;7pkt 7fpkt"];
4092--10523[label="0.932203;55pkt 55fpkt"];
4092--11797[label="0.932203;55pkt 55fpkt"];
5049--8119[label="0.117647;20pkt 20fpkt"];
5049--8134[label="0.105882;18pkt 18fpkt"];
10523--11797[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.159.80" dst_port="80"/>
      <filter dst_ip="128.224.20.149" dst_port="80" src_ip="194.151.132.124"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.208.53.0"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.13.177.0"/>
    </slice>
    <from sec="1229058513" usec="0"/>
    <to sec="1229058517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.148.187.1"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
1860[label="128.64.243.96;d;98pkt 98fpkt", shape=diamond, color=yellow];
8280[label="7.179.1.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8436[label="152.147.24.17;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8466[label="206.116.105.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.64.243.96:*}[40%]&lt;BR/&gt;{*:8000, 128.64.243.96:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.5652%)&lt;BR/&gt; 8000: (9.56522%)&lt;BR/&gt; 443: (8.69565%)&lt;BR/&gt; 10000: (5.21739%)&lt;BR/&gt; 20: (3.91304%)&gt;];
}
1860--3785[label="1;2pkt 2fpkt"];
1860--7181[label="1;2pkt 2fpkt"];
1860--8131[label="0.0102041;1pkt 1fpkt"];
1860--8180[label="0.0102041;1pkt 1fpkt"];
1860--8219[label="0.0102041;1pkt 1fpkt"];
1860--8280[label="0.75;3pkt 3fpkt"];
1860--8344[label="0.181818;4pkt 4fpkt"];
1860--8436[label="0.0833333;1pkt 1fpkt"];
1860--8466[label="1;1pkt 1fpkt"];
1860--9659[label="0.0149254;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.243.96" src_port="80"/>
      <filter dst_ip="128.64.243.96" src_port="8000"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.145.28.3"/>
    </slice>
    <from sec="1229058848" usec="0"/>
    <to sec="1229058853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
2380[label="172.45.245.114;d;364pkt 364fpkt", shape=diamond, color=yellow];
2442[label="214.56.222.216;d;460pkt 460fpkt", shape=diamond, color=yellow];
2461[label="215.40.232.66;d;475pkt 475fpkt", shape=diamond, color=yellow];
3278[label="133.72.22.204;d;112pkt 112fpkt", shape=diamond, color=yellow];
4505[label="128.64.206.67;d;111pkt 111fpkt", shape=diamond, color=yellow];
6336[label="172.45.245.114;d;364pkt 364fpkt", shape=hexagon, color=black];
6364[label="133.72.22.204;d;107pkt 107fpkt", shape=hexagon, color=black];
8284[label="1.180.79.3;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.40.232.66:0}[30.7288%]&lt;BR/&gt;{*:0, 214.56.222.216:0}[30.1379%]&lt;BR/&gt;{*:0, 172.45.245.114:0}[23.9002%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4997%)&lt;BR/&gt; 1080: (0.0750375%)&lt;BR/&gt; 139: (0.0750375%)&lt;BR/&gt; 3167: (0.050025%)&lt;BR/&gt; 8080: (0.0250125%)&gt;];
}
2380--6336[label="1;364pkt 364fpkt"];
2380--8284[label="0.166667;1pkt 1fpkt"];
2442--5210[label="0.00217391;1pkt 1fpkt"];
2442--8284[label="0.166667;1pkt 1fpkt"];
2442--9811[label="0.00217391;1pkt 1fpkt"];
2461--4752[label="0.0126316;6pkt 6fpkt"];
2461--4864[label="0.00421053;2pkt 2fpkt"];
2461--4953[label="0.00210526;1pkt 1fpkt"];
2461--5423[label="0.00210526;1pkt 1fpkt"];
2461--7751[label="0.0126316;6pkt 6fpkt"];
2461--8109[label="0.0126316;6pkt 6fpkt"];
2461--8160[label="0.00210526;1pkt 1fpkt"];
2461--8161[label="0.00631579;3pkt 3fpkt"];
2461--8162[label="0.00210526;1pkt 1fpkt"];
2461--8203[label="0.00210526;1pkt 1fpkt"];
2461--8204[label="0.00631579;3pkt 3fpkt"];
2461--8205[label="0.00210526;1pkt 1fpkt"];
2461--8236[label="0.00210526;1pkt 1fpkt"];
2461--8237[label="0.00631579;3pkt 3fpkt"];
2461--8238[label="0.00210526;1pkt 1fpkt"];
2461--8284[label="0.166667;1pkt 1fpkt"];
2461--8509[label="0.00210526;1pkt 1fpkt"];
2461--11717[label="0.0126316;6pkt 6fpkt"];
2461--12267[label="0.0126316;6pkt 6fpkt"];
3278--6364[label="1;107pkt 107fpkt"];
3278--8121[label="0.00892857;1pkt 1fpkt"];
3278--8284[label="0.166667;1pkt 1fpkt"];
4505--8284[label="0.166667;1pkt 1fpkt"];
6336--8284[label="0.166667;1pkt 1fpkt"];
6364--8121[label="0.00934579;1pkt 1fpkt"];
6364--8284[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.232.66"/>
      <filter dst_ip="214.56.222.216"/>
      <filter dst_ip="172.45.245.114"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
2723[label="200.80.52.138;s;28pkt 28fpkt", shape=diamond, color=yellow];
4994[label="133.72.2.36;d;460pkt 460fpkt", shape=hexagon, color=black];
9769[label="100.38.48.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.2.36:*}[62.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7895%)&lt;BR/&gt; 53: (4.45344%)&lt;BR/&gt; 1370: (0.910931%)&lt;BR/&gt; 1417: (0.809717%)&lt;BR/&gt; 2400: (0.607287%)&gt;];
}
2723--4994[label="1;28pkt 28fpkt"];
4994--6785[label="0.00217391;1pkt 1fpkt"];
4994--6852[label="0.106383;5pkt 5fpkt"];
4994--7987[label="0.0540541;2pkt 2fpkt"];
4994--8063[label="0.0136986;1pkt 1fpkt"];
4994--8119[label="0.00434783;2pkt 2fpkt"];
4994--8131[label="0.00434783;2pkt 2fpkt"];
4994--8134[label="0.00434783;2pkt 2fpkt"];
4994--8165[label="0.00434783;2pkt 2fpkt"];
4994--8180[label="0.00434783;2pkt 2fpkt"];
4994--8208[label="0.00434783;2pkt 2fpkt"];
4994--8219[label="0.00434783;2pkt 2fpkt"];
4994--8241[label="0.00434783;2pkt 2fpkt"];
4994--8637[label="0.724138;21pkt 21fpkt"];
4994--9604[label="0.00217391;1pkt 1fpkt"];
4994--9769[label="1;6pkt 6fpkt"];
4994--11303[label="0.00217391;1pkt 1fpkt"];
4994--12096[label="0.00217391;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.2.36" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.72.242.3"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.192.152.4"/>
    </slice>
    <from sec="1229058424" usec="0"/>
    <to sec="1229058459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.197.220.4"/>
    </slice>
    <from sec="1229058399" usec="0"/>
    <to sec="1229058475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.2.236.4"/>
    </slice>
    <from sec="1229058187" usec="0"/>
    <to sec="1229058226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.210.32.5"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.220.36.5"/>
    </slice>
    <from sec="1229058661" usec="0"/>
    <to sec="1229058698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.74.193.5"/>
    </slice>
    <from sec="1229058029" usec="0"/>
    <to sec="1229058872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.183.208.5"/>
    </slice>
    <from sec="1229058318" usec="0"/>
    <to sec="1229058337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.56.6"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.137.192.6"/>
    </slice>
    <from sec="1229058334" usec="0"/>
    <to sec="1229058411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.72.246.6"/>
    </slice>
    <from sec="1229058883" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.230.131.7"/>
    </slice>
    <from sec="1229058062" usec="0"/>
    <to sec="1229058081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.208.196.7"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.220.5.8"/>
    </slice>
    <from sec="1229058347" usec="0"/>
    <to sec="1229058354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.138.168.8"/>
    </slice>
    <from sec="1229058807" usec="0"/>
    <to sec="1229058811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.86.117.9"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.241.1.10"/>
    </slice>
    <from sec="1229058284" usec="0"/>
    <to sec="1229058339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.18.153.10"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.3.166.10"/>
    </slice>
    <from sec="1229058756" usec="0"/>
    <to sec="1229058863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
3937[label="214.49.3.89;d;29pkt 29fpkt", shape=diamond, color=yellow];
8367[label="58.37.217.10;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9961[label="208.234.187.168;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10708[label="58.37.217.10;11pkt 11fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.49.3.89:*}[78.3784%]&lt;BR/&gt;{58.37.217.10:80, *:*}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1809: (2.67857%)&lt;BR/&gt; 1808: (2.67857%)&lt;BR/&gt; 1807: (2.67857%)&lt;BR/&gt; 1801: (2.67857%)&gt;];
}
3937--5033[label="0.0769231;2pkt 2fpkt"];
3937--6005[label="0.0689655;2pkt 2fpkt"];
3937--7282[label="1;29pkt 29fpkt"];
3937--8367[label="0.454545;5pkt 5fpkt"];
3937--9907[label="0.0689655;2pkt 2fpkt"];
3937--9961[label="0.6;3pkt 3fpkt"];
3937--10708[label="0.454545;5pkt 5fpkt"];
3937--11457[label="0.0689655;2pkt 2fpkt"];
3937--12162[label="0.0689655;2pkt 2fpkt"];
8367--10708[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="58.37.217.10" src_port="80"/>
      <filter dst_ip="214.49.3.89" src_port="80"/>
    </slice>
    <from sec="1229058293" usec="0"/>
    <to sec="1229058804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.48.238.10"/>
    </slice>
    <from sec="1229058461" usec="0"/>
    <to sec="1229058856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.105.65.12"/>
    </slice>
    <from sec="1229058361" usec="0"/>
    <to sec="1229058370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.90.168.12"/>
    </slice>
    <from sec="1229058473" usec="0"/>
    <to sec="1229058619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.66.218.12"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.195.0.13"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.32.106.13"/>
    </slice>
    <from sec="1229058196" usec="0"/>
    <to sec="1229058364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.242.189.13"/>
    </slice>
    <from sec="1229058567" usec="0"/>
    <to sec="1229058621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.31.14"/>
    </slice>
    <from sec="1229058077" usec="0"/>
    <to sec="1229058092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.100.134.14"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.116.20.15"/>
    </slice>
    <from sec="1229058687" usec="0"/>
    <to sec="1229058700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.2.114.15"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.48.1.16"/>
    </slice>
    <from sec="1229058652" usec="0"/>
    <to sec="1229058737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.66.16"/>
    </slice>
    <from sec="1229058460" usec="0"/>
    <to sec="1229058497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.156.80.16"/>
    </slice>
    <from sec="1229058284" usec="0"/>
    <to sec="1229058893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.32.199.16"/>
    </slice>
    <from sec="1229058841" usec="0"/>
    <to sec="1229058847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.11.220.16"/>
    </slice>
    <from sec="1229058022" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.242.4.17"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.187.72.17"/>
    </slice>
    <from sec="1229058428" usec="0"/>
    <to sec="1229058675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.38.9.18"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.38.143.18"/>
    </slice>
    <from sec="1229058102" usec="0"/>
    <to sec="1229058135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.196.33.19"/>
    </slice>
    <from sec="1229058396" usec="0"/>
    <to sec="1229058410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
4616[label="128.208.179.28;d;72pkt 72fpkt", shape=diamond, color=yellow];
8464[label="34.240.36.19;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10759[label="34.240.36.19;6pkt 6fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.178.36.171:80, 128.208.179.28:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2314: (1.76471%)&lt;BR/&gt; 2312: (1.76471%)&lt;BR/&gt; 2306: (1.76471%)&lt;BR/&gt; 2304: (1.76471%)&gt;];
}
4616--6190[label="0.0555556;4pkt 4fpkt"];
4616--7635[label="1;72pkt 72fpkt"];
4616--8464[label="1;7pkt 7fpkt"];
4616--9989[label="0.25;18pkt 18fpkt"];
4616--10759[label="1;6pkt 6fpkt"];
8464--10759[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.179.28" src_ip="215.178.36.171" src_port="80"/>
    </slice>
    <from sec="1229058399" usec="0"/>
    <to sec="1229058786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.197.74.19"/>
    </slice>
    <from sec="1229058328" usec="0"/>
    <to sec="1229058355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.215.31.20"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.198.48.20"/>
    </slice>
    <from sec="1229058493" usec="0"/>
    <to sec="1229058514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.239.98.20"/>
    </slice>
    <from sec="1229058739" usec="0"/>
    <to sec="1229058748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.96.245.20"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.223.7.21"/>
    </slice>
    <from sec="1229058809" usec="0"/>
    <to sec="1229058813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.64.11.21"/>
    </slice>
    <from sec="1229058296" usec="0"/>
    <to sec="1229058316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
1121[label="174.194.146.207;d;82pkt 82fpkt", shape=diamond, color=yellow];
1167[label="4.1.112.105;s;15pkt 15fpkt", shape=diamond, color=yellow];
5598[label="174.194.146.207;d;82pkt 82fpkt", shape=hexagon, color=black];
8438[label="4.1.112.17;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8488[label="4.1.112.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9398[label="4.1.112.105;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10750[label="4.1.112.17;3pkt 3fpkt", shape=invtriangle, color=brown];
11886[label="4.1.112.17;4pkt 4fpkt", shape=invhouse, color=bisque];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 174.194.146.207:*}[51.2195%]&lt;BR/&gt;{*:*, 174.194.146.207:15177}[47.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.6763%)&lt;BR/&gt; 15177: (18.8406%)&lt;BR/&gt; 51625: (1.20773%)&lt;BR/&gt; 51624: (1.20773%)&lt;BR/&gt; 51622: (1.20773%)&gt;];
}
1121--1167[label="1;15pkt 15fpkt"];
1121--5598[label="1;82pkt 82fpkt"];
1121--8131[label="0.121951;10pkt 10fpkt"];
1121--8180[label="0.121951;10pkt 10fpkt"];
1121--8219[label="0.121951;10pkt 10fpkt"];
1121--8438[label="1;4pkt 4fpkt"];
1121--8488[label="1;2pkt 2fpkt"];
1121--9398[label="1;15pkt 15fpkt"];
1121--10312[label="1;6pkt 6fpkt"];
1121--10750[label="1;3pkt 3fpkt"];
1121--11685[label="1;6pkt 6fpkt"];
1121--11886[label="1;4pkt 4fpkt"];
1121--12250[label="1;6pkt 6fpkt"];
1167--5598[label="1;15pkt 15fpkt"];
1167--9398[label="0.933333;14pkt 14fpkt"];
5598--8131[label="0.121951;10pkt 10fpkt"];
5598--8180[label="0.121951;10pkt 10fpkt"];
5598--8219[label="0.121951;10pkt 10fpkt"];
5598--8438[label="1;4pkt 4fpkt"];
5598--8488[label="1;2pkt 2fpkt"];
5598--9398[label="1;15pkt 15fpkt"];
5598--10312[label="1;6pkt 6fpkt"];
5598--10750[label="1;3pkt 3fpkt"];
5598--11685[label="1;6pkt 6fpkt"];
5598--11886[label="1;4pkt 4fpkt"];
5598--12250[label="1;6pkt 6fpkt"];
8438--10750[label="1;3pkt 3fpkt"];
8438--11886[label="1;4pkt 4fpkt"];
10750--11886[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.146.207" src_port="80"/>
      <filter dst_ip="174.194.146.207" dst_port="15177"/>
    </slice>
    <from sec="1229058014" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.75.75.22"/>
    </slice>
    <from sec="1229058025" usec="0"/>
    <to sec="1229058136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.174.22"/>
    </slice>
    <from sec="1229058043" usec="0"/>
    <to sec="1229058598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.0.85.23"/>
    </slice>
    <from sec="1229058501" usec="0"/>
    <to sec="1229058508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.184.111.23"/>
    </slice>
    <from sec="1229058502" usec="0"/>
    <to sec="1229058607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.29.79.24"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.203.224.25"/>
    </slice>
    <from sec="1229058465" usec="0"/>
    <to sec="1229058469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
1613[label="193.195.145.92;s;29pkt 29fpkt", shape=diamond, color=yellow];
4590[label="174.194.18.218;d;76pkt 76fpkt", shape=diamond, color=yellow];
4732[label="42.220.116.29;s;46pkt 46fpkt", shape=diamond, color=yellow];
4758[label="42.220.116.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
7601[label="174.194.18.218;d;76pkt 76fpkt", shape=hexagon, color=black];
7755[label="42.220.116.24;s;1pkt 1fpkt", shape=hexagon, color=black];
8573[label="42.220.116.29;46pkt 46fpkt", shape=pentagon, color=darkviolet];
10807[label="42.220.116.29;46pkt 46fpkt", shape=invtriangle, color=brown];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.220.116.29:80, 174.194.18.218:*}[44.6602%]&lt;BR/&gt;{193.195.145.92:80, *:*}[28.1553%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59717: (0.778816%)&lt;BR/&gt; 59716: (0.778816%)&lt;BR/&gt; 59715: (0.778816%)&lt;BR/&gt; 59713: (0.778816%)&gt;];
}
1613--2245[label="0.103448;3pkt 3fpkt"];
1613--4590[label="0.0689655;2pkt 2fpkt"];
1613--5277[label="0.0344828;1pkt 1fpkt"];
1613--5621[label="0.142857;1pkt 1fpkt"];
1613--6281[label="0.37931;11pkt 11fpkt"];
1613--6618[label="0.103448;3pkt 3fpkt"];
1613--7231[label="1;29pkt 29fpkt"];
1613--7601[label="0.0689655;2pkt 2fpkt"];
1613--8131[label="0.172414;5pkt 5fpkt"];
1613--8180[label="0.172414;5pkt 5fpkt"];
1613--8219[label="0.172414;5pkt 5fpkt"];
4590--4732[label="1;46pkt 46fpkt"];
4590--4758[label="1;1pkt 1fpkt"];
4590--5461[label="0.0131579;1pkt 1fpkt"];
4590--6005[label="0.118421;9pkt 9fpkt"];
4590--7231[label="0.0689655;2pkt 2fpkt"];
4590--7601[label="1;76pkt 76fpkt"];
4590--7755[label="1;1pkt 1fpkt"];
4590--8131[label="0.0131579;1pkt 1fpkt"];
4590--8180[label="0.0131579;1pkt 1fpkt"];
4590--8219[label="0.0131579;1pkt 1fpkt"];
4590--8552[label="0.0204082;1pkt 1fpkt"];
4590--8573[label="1;46pkt 46fpkt"];
4590--9224[label="0.0131579;1pkt 1fpkt"];
4590--10807[label="1;46pkt 46fpkt"];
4590--11128[label="0.0131579;1pkt 1fpkt"];
4590--12025[label="0.0131579;1pkt 1fpkt"];
4732--7601[label="1;46pkt 46fpkt"];
4732--8573[label="1;46pkt 46fpkt"];
4732--10807[label="1;46pkt 46fpkt"];
4758--7601[label="1;1pkt 1fpkt"];
4758--7755[label="1;1pkt 1fpkt"];
7601--7755[label="1;1pkt 1fpkt"];
7601--8131[label="0.0131579;1pkt 1fpkt"];
7601--8180[label="0.0131579;1pkt 1fpkt"];
7601--8219[label="0.0131579;1pkt 1fpkt"];
7601--8552[label="0.0204082;1pkt 1fpkt"];
7601--8573[label="1;46pkt 46fpkt"];
7601--9224[label="0.0131579;1pkt 1fpkt"];
7601--10807[label="1;46pkt 46fpkt"];
7601--11128[label="0.0131579;1pkt 1fpkt"];
7601--12025[label="0.0131579;1pkt 1fpkt"];
8573--10807[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="193.195.145.92" src_port="80"/>
      <filter dst_ip="174.194.18.218" src_ip="42.220.116.29" src_port="80"/>
    </slice>
    <from sec="1229058014" usec="0"/>
    <to sec="1229058791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.129.212.26"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.51.28"/>
    </slice>
    <from sec="1229058052" usec="0"/>
    <to sec="1229058074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.59.193.29"/>
    </slice>
    <from sec="1229058452" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.203.179.30"/>
    </slice>
    <from sec="1229058046" usec="0"/>
    <to sec="1229058651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.236.33.32"/>
    </slice>
    <from sec="1229058216" usec="0"/>
    <to sec="1229058235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.254.185.33"/>
    </slice>
    <from sec="1229058835" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.137.188.33"/>
    </slice>
    <from sec="1229058457" usec="0"/>
    <to sec="1229058514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.223.42.34"/>
    </slice>
    <from sec="1229058230" usec="0"/>
    <to sec="1229058785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.197.27.35"/>
    </slice>
    <from sec="1229058502" usec="0"/>
    <to sec="1229058637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.216.54.35"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.180.226.35"/>
    </slice>
    <from sec="1229058642" usec="0"/>
    <to sec="1229058746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.76.196.36"/>
    </slice>
    <from sec="1229058681" usec="0"/>
    <to sec="1229058701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.54.24.38"/>
    </slice>
    <from sec="1229058264" usec="0"/>
    <to sec="1229058268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.10.129.40"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.112.230.40"/>
    </slice>
    <from sec="1229058474" usec="0"/>
    <to sec="1229058503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.11.36.41"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.182.84.41"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.150.171.41"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.112.42"/>
    </slice>
    <from sec="1229058184" usec="0"/>
    <to sec="1229058274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.64.171.42"/>
    </slice>
    <from sec="1229058132" usec="0"/>
    <to sec="1229058139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.173.189.43"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
2897[label="133.72.20.44;s;536pkt 536fpkt", shape=diamond, color=yellow];
8745[label="133.72.20.44;586pkt 586fpkt", shape=pentagon, color=darkviolet];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.20.44:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2897--6821[label="1;423pkt 423fpkt"];
2897--8745[label="1;536pkt 536fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.20.44"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.177.44"/>
    </slice>
    <from sec="1229058045" usec="0"/>
    <to sec="1229058730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.137.45"/>
    </slice>
    <from sec="1229058458" usec="0"/>
    <to sec="1229058488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.46.65.46"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.251.135.46"/>
    </slice>
    <from sec="1229058251" usec="0"/>
    <to sec="1229058392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.207.145.46"/>
    </slice>
    <from sec="1229058283" usec="0"/>
    <to sec="1229058714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.49.174.46"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.201.81.47"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.97.138.48"/>
    </slice>
    <from sec="1229058796" usec="0"/>
    <to sec="1229058839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.55.216.48"/>
    </slice>
    <from sec="1229058238" usec="0"/>
    <to sec="1229058667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.47.82.49"/>
    </slice>
    <from sec="1229058395" usec="0"/>
    <to sec="1229058406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.140.37.52"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,002,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
1317[label="200.139.154.175;d;1029pkt 1029fpkt", shape=diamond, color=yellow];
3595[label="215.40.239.3;s;159pkt 159fpkt", shape=diamond, color=yellow];
3852[label="215.40.232.52;s;80pkt 80fpkt", shape=diamond, color=yellow];
4332[label="215.40.230.87;s;102pkt 102fpkt", shape=diamond, color=yellow];
5428[label="200.139.154.175;d;1029pkt 1029fpkt", shape=hexagon, color=black];
7125[label="215.40.232.18;s;134pkt 134fpkt", shape=hexagon, color=black];
7680[label="215.40.230.87;s;102pkt 102fpkt", shape=hexagon, color=black];
8833[label="215.40.232.52;120pkt 120fpkt", shape=pentagon, color=darkviolet];
10392[label="215.40.229.221;53pkt 53fpkt", shape=pentagon, color=darkviolet];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 200.139.154.175:*}[45.8647%]&lt;BR/&gt;{*:0, 200.139.154.175:0}[31.3534%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (41.2393%)&lt;BR/&gt; 139: (28.1517%)&lt;BR/&gt; 53: (0.76567%)&lt;BR/&gt; 52426: (0.569801%)&lt;BR/&gt; 1080: (0.160256%)&gt;];
}
1317--1387[label="0.00194363;2pkt 2fpkt"];
1317--1448[label="0.00809717;2pkt 2fpkt"];
1317--1875[label="0.00589971;2pkt 2fpkt"];
1317--1926[label="0.0019084;1pkt 1fpkt"];
1317--1973[label="0.00194363;2pkt 2fpkt"];
1317--2462[label="0.00408998;2pkt 2fpkt"];
1317--2481[label="0.0106762;3pkt 3fpkt"];
1317--2835[label="0.0118343;2pkt 2fpkt"];
1317--3296[label="0.00858369;2pkt 2fpkt"];
1317--3454[label="0.00301205;2pkt 2fpkt"];
1317--3471[label="0.0229885;2pkt 2fpkt"];
1317--3595[label="1;159pkt 159fpkt"];
1317--3705[label="0.0131579;2pkt 2fpkt"];
1317--3852[label="0.025;2pkt 2fpkt"];
1317--4332[label="1;102pkt 102fpkt"];
1317--4534[label="0.0102041;1pkt 1fpkt"];
1317--4908[label="0.00126422;1pkt 1fpkt"];
1317--5428[label="1;1029pkt 1029fpkt"];
1317--5434[label="0.00194363;2pkt 2fpkt"];
1317--5498[label="0.00589971;2pkt 2fpkt"];
1317--6062[label="0.0019084;1pkt 1fpkt"];
1317--6287[label="0.0118343;2pkt 2fpkt"];
1317--6560[label="0.0035461;2pkt 2fpkt"];
1317--6737[label="0.00194363;2pkt 2fpkt"];
1317--6806[label="0.00858369;2pkt 2fpkt"];
1317--7125[label="0.0149254;2pkt 2fpkt"];
1317--7155[label="0.00414079;2pkt 2fpkt"];
1317--7372[label="0.00243309;2pkt 2fpkt"];
1317--7422[label="0.00809717;2pkt 2fpkt"];
1317--7458[label="0.0106762;3pkt 3fpkt"];
1317--7680[label="1;102pkt 102fpkt"];
1317--8022[label="0.00194175;1pkt 1fpkt"];
1317--8279[label="0.00231214;2pkt 2fpkt"];
1317--8291[label="0.00194363;2pkt 2fpkt"];
1317--8471[label="0.00615385;2pkt 2fpkt"];
1317--8759[label="0.142857;2pkt 2fpkt"];
1317--8833[label="0.0166667;2pkt 2fpkt"];
1317--8885[label="0.0212766;2pkt 2fpkt"];
1317--9107[label="0.125;2pkt 2fpkt"];
1317--9119[label="0.125;2pkt 2fpkt"];
1317--9182[label="0.000971817;1pkt 1fpkt"];
1317--9433[label="0.08;2pkt 2fpkt"];
1317--9686[label="0.2;2pkt 2fpkt"];
1317--9854[label="0.0294118;2pkt 2fpkt"];
1317--9904[label="0.00194363;2pkt 2fpkt"];
1317--10041[label="0.00194363;2pkt 2fpkt"];
1317--10392[label="0.0377358;2pkt 2fpkt"];
1317--10421[label="0.0869565;2pkt 2fpkt"];
1317--10661[label="0.00231481;2pkt 2fpkt"];
1317--10664[label="0.00194363;2pkt 2fpkt"];
1317--10901[label="0.153846;2pkt 2fpkt"];
1317--11105[label="0.000971817;1pkt 1fpkt"];
1317--11344[label="0.2;2pkt 2fpkt"];
1317--11455[label="0.00194363;2pkt 2fpkt"];
1317--11523[label="0.00194363;2pkt 2fpkt"];
1317--11851[label="0.00231214;2pkt 2fpkt"];
1317--12113[label="0.2;2pkt 2fpkt"];
1317--12186[label="0.00194363;2pkt 2fpkt"];
3595--5428[label="1;159pkt 159fpkt"];
3852--4484[label="0.0125;1pkt 1fpkt"];
3852--4751[label="0.075;6pkt 6fpkt"];
3852--5428[label="0.025;2pkt 2fpkt"];
3852--5730[label="0.0125;1pkt 1fpkt"];
3852--5772[label="0.0125;1pkt 1fpkt"];
3852--5996[label="0.0125;1pkt 1fpkt"];
3852--7750[label="0.075;6pkt 6fpkt"];
3852--8108[label="0.075;6pkt 6fpkt"];
3852--8833[label="1;80pkt 80fpkt"];
4332--5428[label="1;102pkt 102fpkt"];
4332--7680[label="1;102pkt 102fpkt"];
5428--5434[label="0.00194363;2pkt 2fpkt"];
5428--5498[label="0.00589971;2pkt 2fpkt"];
5428--6062[label="0.0019084;1pkt 1fpkt"];
5428--6287[label="0.0118343;2pkt 2fpkt"];
5428--6560[label="0.0035461;2pkt 2fpkt"];
5428--6737[label="0.00194363;2pkt 2fpkt"];
5428--6806[label="0.00858369;2pkt 2fpkt"];
5428--7125[label="0.0149254;2pkt 2fpkt"];
5428--7155[label="0.00414079;2pkt 2fpkt"];
5428--7372[label="0.00243309;2pkt 2fpkt"];
5428--7422[label="0.00809717;2pkt 2fpkt"];
5428--7458[label="0.0106762;3pkt 3fpkt"];
5428--7680[label="1;102pkt 102fpkt"];
5428--8022[label="0.00194175;1pkt 1fpkt"];
5428--8279[label="0.00231214;2pkt 2fpkt"];
5428--8291[label="0.00194363;2pkt 2fpkt"];
5428--8471[label="0.00615385;2pkt 2fpkt"];
5428--8759[label="0.142857;2pkt 2fpkt"];
5428--8833[label="0.0166667;2pkt 2fpkt"];
5428--8885[label="0.0212766;2pkt 2fpkt"];
5428--9107[label="0.125;2pkt 2fpkt"];
5428--9119[label="0.125;2pkt 2fpkt"];
5428--9182[label="0.000971817;1pkt 1fpkt"];
5428--9433[label="0.08;2pkt 2fpkt"];
5428--9686[label="0.2;2pkt 2fpkt"];
5428--9854[label="0.0294118;2pkt 2fpkt"];
5428--9904[label="0.00194363;2pkt 2fpkt"];
5428--10041[label="0.00194363;2pkt 2fpkt"];
5428--10392[label="0.0377358;2pkt 2fpkt"];
5428--10421[label="0.0869565;2pkt 2fpkt"];
5428--10661[label="0.00231481;2pkt 2fpkt"];
5428--10664[label="0.00194363;2pkt 2fpkt"];
5428--10901[label="0.153846;2pkt 2fpkt"];
5428--11105[label="0.000971817;1pkt 1fpkt"];
5428--11344[label="0.2;2pkt 2fpkt"];
5428--11455[label="0.00194363;2pkt 2fpkt"];
5428--11523[label="0.00194363;2pkt 2fpkt"];
5428--11851[label="0.00231214;2pkt 2fpkt"];
5428--12113[label="0.2;2pkt 2fpkt"];
5428--12186[label="0.00194363;2pkt 2fpkt"];
7125--7130[label="0.00746269;1pkt 1fpkt"];
7125--8065[label="0.00746269;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.139.154.175" src_port="139"/>
      <filter dst_ip="200.139.154.175"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.135.53"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.246.154.53"/>
    </slice>
    <from sec="1229058201" usec="0"/>
    <to sec="1229058209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.161.128.54"/>
    </slice>
    <from sec="1229058634" usec="0"/>
    <to sec="1229058662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.188.152.54"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.41.158.54"/>
    </slice>
    <from sec="1229058385" usec="0"/>
    <to sec="1229058449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.238.45.55"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.83.147.55"/>
    </slice>
    <from sec="1229058289" usec="0"/>
    <to sec="1229058380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.18.100.56"/>
    </slice>
    <from sec="1229058213" usec="0"/>
    <to sec="1229058445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.80.161.57"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.122.26.58"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
1807[label="7.38.121.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
8878[label="7.38.121.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10966[label="7.38.121.58;1pkt 1fpkt", shape=invtriangle, color=brown];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.38.121.58:7550, 128.64.35.93:2658}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7550: (50%)&lt;BR/&gt; 2658: (50%)&gt;];
}
1807--6289[label="1;1pkt 1fpkt"];
1807--8878[label="1;1pkt 1fpkt"];
1807--10966[label="1;1pkt 1fpkt"];
8878--10966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.35.93" dst_port="2658" src_ip="7.38.121.58" src_port="7550"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.131.131.59"/>
    </slice>
    <from sec="1229058541" usec="0"/>
    <to sec="1229058674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.182.47.60"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.198.89.60"/>
    </slice>
    <from sec="1229058434" usec="0"/>
    <to sec="1229058556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.68.245.60"/>
    </slice>
    <from sec="1229058800" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.111.180.61"/>
    </slice>
    <from sec="1229058838" usec="0"/>
    <to sec="1229058861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.172.7.62"/>
    </slice>
    <from sec="1229058480" usec="0"/>
    <to sec="1229058864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
1060[label="215.173.19.71;d;372pkt 372fpkt", shape=diamond, color=yellow];
4284[label="144.203.77.14;s;30pkt 30fpkt", shape=diamond, color=yellow];
5054[label="215.173.19.71;d;372pkt 372fpkt", shape=hexagon, color=black];
8400[label="144.203.77.14;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8932[label="128.81.8.64;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8933[label="144.203.12.64;26pkt 26fpkt", shape=pentagon, color=darkviolet];
9059[label="128.81.72.73;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9181[label="128.81.169.84;53pkt 53fpkt", shape=pentagon, color=darkviolet];
9489[label="133.73.68.115;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9974[label="144.203.24.170;29pkt 29fpkt", shape=pentagon, color=darkviolet];
10481[label="133.73.88.233;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11104[label="128.81.169.84;53pkt 53fpkt", shape=invtriangle, color=brown];
11494[label="144.203.24.170;29pkt 29fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.173.19.71:80}[78.8584%]&lt;BR/&gt;{*:*, 215.173.19.118:80}[20.296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6244%)&lt;BR/&gt; 20480: (0.375587%)&lt;BR/&gt; 63599: (0.187793%)&lt;BR/&gt; 63598: (0.187793%)&lt;BR/&gt; 63597: (0.187793%)&gt;];
}
1060--1538[label="0.015625;4pkt 4fpkt"];
1060--1547[label="0.00268817;1pkt 1fpkt"];
1060--1827[label="0.0140187;3pkt 3fpkt"];
1060--2048[label="0.724409;92pkt 92fpkt"];
1060--3793[label="0.121951;10pkt 10fpkt"];
1060--3855[label="0.0330579;4pkt 4fpkt"];
1060--4284[label="0.166667;5pkt 5fpkt"];
1060--5054[label="1;372pkt 372fpkt"];
1060--5287[label="0.015625;4pkt 4fpkt"];
1060--5289[label="0.00268817;1pkt 1fpkt"];
1060--6139[label="0.90411;66pkt 66fpkt"];
1060--6316[label="0.0430108;16pkt 16fpkt"];
1060--6868[label="0.133333;10pkt 10fpkt"];
1060--6918[label="0.0421053;4pkt 4fpkt"];
1060--7380[label="0.0140187;3pkt 3fpkt"];
1060--8061[label="0.0140187;3pkt 3fpkt"];
1060--8119[label="0.0672043;25pkt 25fpkt"];
1060--8134[label="0.061828;23pkt 23fpkt"];
1060--8253[label="0.0325203;4pkt 4fpkt"];
1060--8383[label="0.589744;92pkt 92fpkt"];
1060--8400[label="0.114286;4pkt 4fpkt"];
1060--8605[label="0.0107527;4pkt 4fpkt"];
1060--8932[label="1;18pkt 18fpkt"];
1060--8933[label="0.923077;24pkt 24fpkt"];
1060--9033[label="0.00268817;1pkt 1fpkt"];
1060--9059[label="0.103448;3pkt 3fpkt"];
1060--9181[label="0.773585;41pkt 41fpkt"];
1060--9247[label="0.117647;2pkt 2fpkt"];
1060--9489[label="0.6;9pkt 9fpkt"];
1060--9974[label="0.241379;7pkt 7fpkt"];
1060--10436[label="0.0153257;4pkt 4fpkt"];
1060--10481[label="0.5;2pkt 2fpkt"];
1060--10645[label="0.0327869;4pkt 4fpkt"];
1060--10720[label="0.589744;92pkt 92fpkt"];
1060--10825[label="0.0107527;4pkt 4fpkt"];
1060--10992[label="0.92;23pkt 23fpkt"];
1060--11037[label="0.00268817;1pkt 1fpkt"];
1060--11104[label="0.773585;41pkt 41fpkt"];
1060--11494[label="0.241379;7pkt 7fpkt"];
1060--11844[label="0.0327869;4pkt 4fpkt"];
1060--11915[label="0.0107527;4pkt 4fpkt"];
4284--5054[label="0.166667;5pkt 5fpkt"];
4284--6493[label="0.4;12pkt 12fpkt"];
4284--8165[label="0.1;3pkt 3fpkt"];
4284--8208[label="0.1;3pkt 3fpkt"];
4284--8241[label="0.1;3pkt 3fpkt"];
4284--8400[label="0.966667;29pkt 29fpkt"];
5054--5287[label="0.015625;4pkt 4fpkt"];
5054--5289[label="0.00268817;1pkt 1fpkt"];
5054--6139[label="0.90411;66pkt 66fpkt"];
5054--6316[label="0.0430108;16pkt 16fpkt"];
5054--6868[label="0.133333;10pkt 10fpkt"];
5054--6918[label="0.0421053;4pkt 4fpkt"];
5054--7380[label="0.0140187;3pkt 3fpkt"];
5054--8061[label="0.0140187;3pkt 3fpkt"];
5054--8119[label="0.0672043;25pkt 25fpkt"];
5054--8134[label="0.061828;23pkt 23fpkt"];
5054--8253[label="0.0325203;4pkt 4fpkt"];
5054--8383[label="0.589744;92pkt 92fpkt"];
5054--8400[label="0.114286;4pkt 4fpkt"];
5054--8605[label="0.0107527;4pkt 4fpkt"];
5054--8932[label="1;18pkt 18fpkt"];
5054--8933[label="0.923077;24pkt 24fpkt"];
5054--9033[label="0.00268817;1pkt 1fpkt"];
5054--9059[label="0.103448;3pkt 3fpkt"];
5054--9181[label="0.773585;41pkt 41fpkt"];
5054--9247[label="0.117647;2pkt 2fpkt"];
5054--9489[label="0.6;9pkt 9fpkt"];
5054--9974[label="0.241379;7pkt 7fpkt"];
5054--10436[label="0.0153257;4pkt 4fpkt"];
5054--10481[label="0.5;2pkt 2fpkt"];
5054--10645[label="0.0327869;4pkt 4fpkt"];
5054--10720[label="0.589744;92pkt 92fpkt"];
5054--10825[label="0.0107527;4pkt 4fpkt"];
5054--10992[label="0.92;23pkt 23fpkt"];
5054--11037[label="0.00268817;1pkt 1fpkt"];
5054--11104[label="0.773585;41pkt 41fpkt"];
5054--11494[label="0.241379;7pkt 7fpkt"];
5054--11844[label="0.0327869;4pkt 4fpkt"];
5054--11915[label="0.0107527;4pkt 4fpkt"];
8933--10992[label="1;25pkt 25fpkt"];
9181--11104[label="1;53pkt 53fpkt"];
9974--11494[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="215.173.19.71" dst_port="80"/>
      <filter dst_ip="215.173.19.118" dst_port="80"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1321[label="133.72.2.39;d;199pkt 199fpkt", shape=diamond, color=yellow];
1364[label="101.193.77.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
5475[label="101.193.77.54;s;1pkt 1fpkt", shape=hexagon, color=black];
8844[label="101.193.77.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8937[label="200.236.34.64;28pkt 28fpkt", shape=pentagon, color=darkviolet];
9900[label="214.132.100.162;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10221[label="1.232.67.200;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10296[label="200.236.34.210;40pkt 40fpkt", shape=pentagon, color=darkviolet];
10301[label="200.236.34.211;27pkt 27fpkt", shape=pentagon, color=darkviolet];
10949[label="101.193.77.54;1pkt 1fpkt", shape=invtriangle, color=brown];
11452[label="214.132.100.162;12pkt 12fpkt", shape=invtriangle, color=brown];
11634[label="1.232.67.200;4pkt 4fpkt", shape=invtriangle, color=brown];
11680[label="200.236.34.211;27pkt 27fpkt", shape=invtriangle, color=brown];
11961[label="101.193.77.54;1pkt 1fpkt", shape=invhouse, color=bisque];
12247[label="200.236.34.211;27pkt 27fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.236.34.65:80, 133.72.2.39:*}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0519%)&lt;BR/&gt; 1209: (1.68831%)&lt;BR/&gt; 1177: (1.42857%)&lt;BR/&gt; 1207: (1.2987%)&lt;BR/&gt; 1203: (1.2987%)&gt;];
}
1321--1364[label="1;1pkt 1fpkt"];
1321--1974[label="0.00502513;1pkt 1fpkt"];
1321--2003[label="0.00502513;1pkt 1fpkt"];
1321--2792[label="1;45pkt 45fpkt"];
1321--3944[label="0.00502513;1pkt 1fpkt"];
1321--5461[label="0.00502513;1pkt 1fpkt"];
1321--5475[label="1;1pkt 1fpkt"];
1321--6249[label="1;45pkt 45fpkt"];
1321--7029[label="0.00502513;1pkt 1fpkt"];
1321--8844[label="1;1pkt 1fpkt"];
1321--8937[label="0.892857;25pkt 25fpkt"];
1321--9224[label="0.00502513;1pkt 1fpkt"];
1321--9900[label="0.166667;2pkt 2fpkt"];
1321--10221[label="0.5;2pkt 2fpkt"];
1321--10296[label="0.975;39pkt 39fpkt"];
1321--10301[label="1;27pkt 27fpkt"];
1321--10949[label="1;1pkt 1fpkt"];
1321--11128[label="0.00502513;1pkt 1fpkt"];
1321--11452[label="0.166667;2pkt 2fpkt"];
1321--11634[label="0.5;2pkt 2fpkt"];
1321--11680[label="1;27pkt 27fpkt"];
1321--11961[label="1;1pkt 1fpkt"];
1321--12025[label="0.00502513;1pkt 1fpkt"];
1321--12247[label="1;27pkt 27fpkt"];
1364--5475[label="1;1pkt 1fpkt"];
1364--8844[label="1;1pkt 1fpkt"];
1364--10949[label="1;1pkt 1fpkt"];
1364--11961[label="1;1pkt 1fpkt"];
5475--8844[label="1;1pkt 1fpkt"];
5475--10949[label="1;1pkt 1fpkt"];
5475--11961[label="1;1pkt 1fpkt"];
8844--10949[label="1;1pkt 1fpkt"];
8844--11961[label="1;1pkt 1fpkt"];
9900--11452[label="1;12pkt 12fpkt"];
10221--11634[label="1;4pkt 4fpkt"];
10301--11680[label="1;27pkt 27fpkt"];
10301--12247[label="1;27pkt 27fpkt"];
10949--11961[label="1;1pkt 1fpkt"];
11680--12247[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.2.39" src_ip="200.236.34.65" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.91.117.65"/>
    </slice>
    <from sec="1229058501" usec="0"/>
    <to sec="1229058543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.110.165.65"/>
    </slice>
    <from sec="1229058877" usec="0"/>
    <to sec="1229058893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.172.172.65"/>
    </slice>
    <from sec="1229058244" usec="0"/>
    <to sec="1229058310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.134.42.67"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.186.145.67"/>
    </slice>
    <from sec="1229058037" usec="0"/>
    <to sec="1229058042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
467[label="133.72.128.85;d;805pkt 805fpkt", shape=diamond, color=yellow];
2029[label="42.74.144.146;s;175pkt 175fpkt", shape=diamond, color=yellow];
2620[label="222.32.24.69;s;20pkt 20fpkt", shape=diamond, color=yellow];
3002[label="219.0.122.17;s;7pkt 7fpkt", shape=diamond, color=yellow];
6312[label="133.72.128.85;d;805pkt 805fpkt", shape=hexagon, color=black];
6532[label="219.0.122.17;s;7pkt 7fpkt", shape=hexagon, color=black];
6941[label="222.32.24.69;s;17pkt 17fpkt", shape=hexagon, color=black];
8439[label="219.0.122.17;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8629[label="222.32.24.35;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10834[label="222.32.24.35;5pkt 5fpkt", shape=invtriangle, color=brown];
11920[label="222.32.24.35;6pkt 6fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.163.1.243:80, 133.72.128.85:*}[48.022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4892%)&lt;BR/&gt; 443: (0.376344%)&lt;BR/&gt; 60401: (0.134409%)&lt;BR/&gt; 36340: (0.134409%)&lt;BR/&gt; 34497: (0.134409%)&gt;];
}
467--904[label="0.376238;152pkt 152fpkt"];
467--1055[label="0.00127389;1pkt 1fpkt"];
467--1076[label="0.00446429;1pkt 1fpkt"];
467--1102[label="0.98434;440pkt 440fpkt"];
467--1291[label="0.0669643;15pkt 15fpkt"];
467--2006[label="0.0909091;9pkt 9fpkt"];
467--2029[label="0.434286;76pkt 76fpkt"];
467--2620[label="1;20pkt 20fpkt"];
467--3002[label="0.142857;1pkt 1fpkt"];
467--5009[label="0.391753;152pkt 152fpkt"];
467--5069[label="0.98434;440pkt 440fpkt"];
467--5852[label="0.443299;43pkt 43fpkt"];
467--6312[label="1;805pkt 805fpkt"];
467--6487[label="0.00141243;1pkt 1fpkt"];
467--6532[label="0.142857;1pkt 1fpkt"];
467--6941[label="1;17pkt 17fpkt"];
467--7179[label="0.0947368;9pkt 9fpkt"];
467--7517[label="0.00446429;1pkt 1fpkt"];
467--8031[label="0.0947368;9pkt 9fpkt"];
467--8035[label="0.00141243;1pkt 1fpkt"];
467--8131[label="0.0795031;64pkt 64fpkt"];
467--8180[label="0.0795031;64pkt 64fpkt"];
467--8219[label="0.0795031;64pkt 64fpkt"];
467--8439[label="0.142857;1pkt 1fpkt"];
467--8629[label="1;6pkt 6fpkt"];
467--8989[label="0.48;12pkt 12fpkt"];
467--10255[label="0.00438596;1pkt 1fpkt"];
467--10555[label="0.89613;440pkt 440fpkt"];
467--10834[label="1;5pkt 5fpkt"];
467--11016[label="0.48;12pkt 12fpkt"];
467--11810[label="0.89613;440pkt 440fpkt"];
467--11920[label="1;6pkt 6fpkt"];
467--12302[label="0.89613;440pkt 440fpkt"];
2029--2782[label="0.0134228;2pkt 2fpkt"];
2029--4178[label="0.0171429;3pkt 3fpkt"];
2029--4458[label="0.00854701;1pkt 1fpkt"];
2029--4854[label="0.166667;10pkt 10fpkt"];
2029--4873[label="0.0114286;2pkt 2fpkt"];
2029--5014[label="0.00571429;1pkt 1fpkt"];
2029--5051[label="0.0171429;3pkt 3fpkt"];
2029--5175[label="0.00571429;1pkt 1fpkt"];
2029--5436[label="0.00571429;1pkt 1fpkt"];
2029--5439[label="0.0342857;6pkt 6fpkt"];
2029--5852[label="1;97pkt 97fpkt"];
2029--6312[label="0.434286;76pkt 76fpkt"];
2029--7040[label="0.0134228;2pkt 2fpkt"];
2029--7105[label="0.0405405;3pkt 3fpkt"];
2029--7371[label="0.04;7pkt 7fpkt"];
2029--8131[label="0.108571;19pkt 19fpkt"];
2029--8180[label="0.108571;19pkt 19fpkt"];
2029--8219[label="0.108571;19pkt 19fpkt"];
2620--6312[label="1;20pkt 20fpkt"];
2620--6941[label="1;17pkt 17fpkt"];
3002--4890[label="0.857143;6pkt 6fpkt"];
3002--6312[label="0.142857;1pkt 1fpkt"];
3002--6532[label="1;7pkt 7fpkt"];
3002--7778[label="0.857143;6pkt 6fpkt"];
3002--8131[label="0.571429;4pkt 4fpkt"];
3002--8180[label="0.571429;4pkt 4fpkt"];
3002--8219[label="0.571429;4pkt 4fpkt"];
3002--8439[label="1;7pkt 7fpkt"];
6312--6487[label="0.00141243;1pkt 1fpkt"];
6312--6532[label="0.142857;1pkt 1fpkt"];
6312--6941[label="1;17pkt 17fpkt"];
6312--7179[label="0.0947368;9pkt 9fpkt"];
6312--7517[label="0.00446429;1pkt 1fpkt"];
6312--8031[label="0.0947368;9pkt 9fpkt"];
6312--8035[label="0.00141243;1pkt 1fpkt"];
6312--8131[label="0.0795031;64pkt 64fpkt"];
6312--8180[label="0.0795031;64pkt 64fpkt"];
6312--8219[label="0.0795031;64pkt 64fpkt"];
6312--8439[label="0.142857;1pkt 1fpkt"];
6312--8629[label="1;6pkt 6fpkt"];
6312--8989[label="0.48;12pkt 12fpkt"];
6312--10255[label="0.00438596;1pkt 1fpkt"];
6312--10555[label="0.89613;440pkt 440fpkt"];
6312--10834[label="1;5pkt 5fpkt"];
6312--11016[label="0.48;12pkt 12fpkt"];
6312--11810[label="0.89613;440pkt 440fpkt"];
6312--11920[label="1;6pkt 6fpkt"];
6312--12302[label="0.89613;440pkt 440fpkt"];
6532--7778[label="0.857143;6pkt 6fpkt"];
6532--8131[label="0.571429;4pkt 4fpkt"];
6532--8180[label="0.571429;4pkt 4fpkt"];
6532--8219[label="0.571429;4pkt 4fpkt"];
6532--8439[label="1;7pkt 7fpkt"];
8629--10834[label="1;5pkt 5fpkt"];
8629--11920[label="1;6pkt 6fpkt"];
10834--11920[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.128.85" src_ip="97.163.1.243" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
522[label="174.194.172.237;d;700pkt 700fpkt", shape=diamond, color=yellow];
3598[label="7.142.186.170;s;17pkt 17fpkt", shape=diamond, color=yellow];
4376[label="100.172.212.11;s;21pkt 21fpkt", shape=diamond, color=yellow];
4697[label="1.144.139.194;s;5pkt 5fpkt", shape=diamond, color=yellow];
6697[label="7.142.186.170;s;17pkt 17fpkt", shape=hexagon, color=black];
7344[label="100.172.212.11;s;13pkt 13fpkt", shape=hexagon, color=black];
8543[label="214.7.40.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8544[label="6.163.46.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9004[label="1.146.17.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9877[label="7.147.134.159;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10130[label="194.17.210.189;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10791[label="214.7.40.26;6pkt 6fpkt", shape=invtriangle, color=brown];
10792[label="6.163.46.26;6pkt 6fpkt", shape=invtriangle, color=brown];
11439[label="7.147.134.159;12pkt 12fpkt", shape=invtriangle, color=brown];
11902[label="6.163.46.26;6pkt 6fpkt", shape=invhouse, color=bisque];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.172.237:80}[98.7234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7055%)&lt;BR/&gt; 1180: (0.294464%)&lt;BR/&gt; 1178: (0.294464%)&lt;BR/&gt; 1172: (0.294464%)&lt;BR/&gt; 1291: (0.235571%)&gt;];
}
522--1413[label="0.00142857;1pkt 1fpkt"];
522--1777[label="1;14pkt 14fpkt"];
522--2394[label="0.142857;2pkt 2fpkt"];
522--2505[label="0.181818;2pkt 2fpkt"];
522--2779[label="0.6;3pkt 3fpkt"];
522--2821[label="0.8;4pkt 4fpkt"];
522--3598[label="0.882353;15pkt 15fpkt"];
522--4376[label="0.952381;20pkt 20fpkt"];
522--4697[label="0.8;4pkt 4fpkt"];
522--4878[label="1;395pkt 395fpkt"];
522--5234[label="0.00142857;1pkt 1fpkt"];
522--5970[label="0.6;3pkt 3fpkt"];
522--6022[label="0.142857;2pkt 2fpkt"];
522--6117[label="0.181818;2pkt 2fpkt"];
522--6697[label="0.882353;15pkt 15fpkt"];
522--7344[label="0.923077;12pkt 12fpkt"];
522--8119[label="0.0814286;57pkt 57fpkt"];
522--8134[label="0.09;63pkt 63fpkt"];
522--8165[label="0.03;21pkt 21fpkt"];
522--8208[label="0.03;21pkt 21fpkt"];
522--8241[label="0.03;21pkt 21fpkt"];
522--8543[label="1;6pkt 6fpkt"];
522--8544[label="1;6pkt 6fpkt"];
522--8990[label="1;13pkt 13fpkt"];
522--9004[label="0.916667;11pkt 11fpkt"];
522--9179[label="1;5pkt 5fpkt"];
522--9421[label="1;6pkt 6fpkt"];
522--9877[label="1;12pkt 12fpkt"];
522--10016[label="0.777778;7pkt 7fpkt"];
522--10130[label="1;10pkt 10fpkt"];
522--10560[label="0.444444;8pkt 8fpkt"];
522--10791[label="1;6pkt 6fpkt"];
522--10792[label="1;6pkt 6fpkt"];
522--11439[label="1;12pkt 12fpkt"];
522--11902[label="1;6pkt 6fpkt"];
3598--4878[label="0.294118;5pkt 5fpkt"];
3598--6697[label="1;17pkt 17fpkt"];
4376--7344[label="1;13pkt 13fpkt"];
8543--10791[label="1;6pkt 6fpkt"];
8544--10792[label="1;6pkt 6fpkt"];
8544--11902[label="1;6pkt 6fpkt"];
9877--11439[label="1;12pkt 12fpkt"];
10792--11902[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.172.237" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
4140[label="133.72.156.163;d;5pkt 5fpkt", shape=diamond, color=yellow];
4502[label="7.217.162.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
9009[label="120.237.93.70;209pkt 209fpkt", shape=pentagon, color=darkviolet];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.237.93.70:*, 133.72.88.168:53}[95.3052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.2093%)&lt;BR/&gt; 123: (3.72093%)&lt;BR/&gt; 3567: (0.465116%)&lt;BR/&gt; 65441: (0.232558%)&lt;BR/&gt; 65397: (0.232558%)&gt;];
}
4140--4502[label="1;1pkt 1fpkt"];
4140--9009[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.88.168" dst_port="53" src_ip="120.237.93.70"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.80.116.70"/>
    </slice>
    <from sec="1229058436" usec="0"/>
    <to sec="1229058845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.151.85.71"/>
    </slice>
    <from sec="1229058499" usec="0"/>
    <to sec="1229058510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.96.131.71"/>
    </slice>
    <from sec="1229058461" usec="0"/>
    <to sec="1229058481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.21.229.71"/>
    </slice>
    <from sec="1229058592" usec="0"/>
    <to sec="1229058596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.73.7.72"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.112.72"/>
    </slice>
    <from sec="1229058235" usec="0"/>
    <to sec="1229058265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.144.72"/>
    </slice>
    <from sec="1229058371" usec="0"/>
    <to sec="1229058802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.40.235.72"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.208.53.74"/>
    </slice>
    <from sec="1229058380" usec="0"/>
    <to sec="1229058405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.192.155.75"/>
    </slice>
    <from sec="1229058271" usec="0"/>
    <to sec="1229058308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.66.145.76"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.195.156.76"/>
    </slice>
    <from sec="1229058307" usec="0"/>
    <to sec="1229058316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.73.7.77"/>
    </slice>
    <from sec="1229058133" usec="0"/>
    <to sec="1229058615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.166.115.77"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.93.12.78"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
2037[label="128.64.203.78;s;32pkt 32fpkt", shape=diamond, color=yellow];
5856[label="128.64.203.78;s;32pkt 32fpkt", shape=hexagon, color=black];
9116[label="128.64.203.78;36pkt 36fpkt", shape=pentagon, color=darkviolet];
11080[label="128.64.203.78;36pkt 36fpkt", shape=invtriangle, color=brown];
12007[label="128.64.203.78;36pkt 36fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.203.78:995, *:*}[66.6667%]&lt;BR/&gt;{128.64.203.78:110, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (32.5581%)&lt;BR/&gt; 110: (11.6279%)&lt;BR/&gt; 465: (2.90698%)&lt;BR/&gt; 62652: (1.45349%)&lt;BR/&gt; 62414: (1.45349%)&gt;];
}
2037--5856[label="1;32pkt 32fpkt"];
2037--9116[label="1;32pkt 32fpkt"];
2037--11080[label="1;32pkt 32fpkt"];
2037--12007[label="1;32pkt 32fpkt"];
5856--9116[label="1;32pkt 32fpkt"];
5856--11080[label="1;32pkt 32fpkt"];
5856--12007[label="1;32pkt 32fpkt"];
9116--11080[label="1;36pkt 36fpkt"];
9116--12007[label="1;36pkt 36fpkt"];
11080--12007[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.203.78" src_port="995"/>
      <filter src_ip="128.64.203.78" src_port="110"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.150.79"/>
    </slice>
    <from sec="1229058884" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.49.2.81"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.38.10.81"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.199.0.82"/>
    </slice>
    <from sec="1229058487" usec="0"/>
    <to sec="1229058491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.43.49.82"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.233.66.82"/>
    </slice>
    <from sec="1229058216" usec="0"/>
    <to sec="1229058323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.195.145.82"/>
    </slice>
    <from sec="1229058221" usec="0"/>
    <to sec="1229058849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
583[label="214.56.220.165;d;1840pkt 1840fpkt", shape=diamond, color=yellow];
8662[label="59.151.183.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9161[label="213.199.5.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9163[label="38.124.26.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9461[label="45.7.85.111;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9595[label="56.54.222.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9606[label="4.71.33.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10133[label="136.177.37.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11239[label="45.7.85.111;3pkt 3fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.56.220.165:6881}[25.2717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (13.6462%)&lt;BR/&gt; 0: (3.18231%)&lt;BR/&gt; 137: (2.88565%)&lt;BR/&gt; 51413: (0.728155%)&lt;BR/&gt; 30459: (0.269687%)&gt;];
}
583--608[label="0.0136986;1pkt 1fpkt"];
583--1847[label="1;5pkt 5fpkt"];
583--4901[label="1;352pkt 352fpkt"];
583--4910[label="0.0136986;1pkt 1fpkt"];
583--7780[label="1;352pkt 352fpkt"];
583--8063[label="0.0136986;1pkt 1fpkt"];
583--8662[label="1;1pkt 1fpkt"];
583--8876[label="0.333333;1pkt 1fpkt"];
583--9161[label="1;2pkt 2fpkt"];
583--9163[label="1;2pkt 2fpkt"];
583--9461[label="1;3pkt 3fpkt"];
583--9595[label="1;1pkt 1fpkt"];
583--9606[label="1;1pkt 1fpkt"];
583--10133[label="1;1pkt 1fpkt"];
583--11239[label="1;3pkt 3fpkt"];
9461--11239[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.165" dst_port="6881"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.146.83"/>
    </slice>
    <from sec="1229058105" usec="0"/>
    <to sec="1229058712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.153.59.84"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
1998[label="133.72.2.12;d;1668pkt 1668fpkt", shape=diamond, color=yellow];
2518[label="6.16.202.38;s;1023pkt 1023fpkt", shape=diamond, color=yellow];
6109[label="133.72.2.12;d;1185pkt 1185fpkt", shape=hexagon, color=black];
6497[label="6.16.202.38;s;716pkt 716fpkt", shape=hexagon, color=black];
9190[label="96.146.245.85;264pkt 264fpkt", shape=pentagon, color=darkviolet];
9645[label="4.252.11.135;331pkt 331fpkt", shape=pentagon, color=darkviolet];
11111[label="96.146.245.85;264pkt 264fpkt", shape=invtriangle, color=brown];
11324[label="4.252.11.135;331pkt 331fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.16.202.38:*, 133.72.2.12:25970}[59.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25970: (39.8737%)&lt;BR/&gt; 51466: (10.109%)&lt;BR/&gt; 2105: (0.10377%)&lt;BR/&gt; 1511: (0.10377%)&lt;BR/&gt; 1257: (0.10377%)&gt;];
}
1998--2518[label="1;1023pkt 1023fpkt"];
1998--6109[label="1;1185pkt 1185fpkt"];
1998--6497[label="1;716pkt 716fpkt"];
1998--9190[label="0.916667;242pkt 242fpkt"];
1998--9645[label="0.92145;305pkt 305fpkt"];
1998--11111[label="0.916667;242pkt 242fpkt"];
1998--11324[label="0.92145;305pkt 305fpkt"];
2518--6109[label="0.699902;716pkt 716fpkt"];
2518--6497[label="1;716pkt 716fpkt"];
6109--6497[label="1;716pkt 716fpkt"];
6109--9190[label="0.640152;169pkt 169fpkt"];
6109--9645[label="0.610272;202pkt 202fpkt"];
6109--11111[label="0.640152;169pkt 169fpkt"];
6109--11324[label="0.610272;202pkt 202fpkt"];
9190--11111[label="1;264pkt 264fpkt"];
9645--11324[label="1;331pkt 331fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.2.12" dst_port="25970" src_ip="6.16.202.38"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
2962[label="214.36.204.199;d;51pkt 51fpkt", shape=diamond, color=yellow];
9191[label="128.64.246.85;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11112[label="128.64.246.85;20pkt 20fpkt", shape=invtriangle, color=brown];
12022[label="128.64.246.85;20pkt 20fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.246.85:*, 214.36.204.199:110}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (40.0901%)&lt;BR/&gt; 5190: (4.05405%)&lt;BR/&gt; 80: (2.7027%)&lt;BR/&gt; 50831: (1.8018%)&lt;BR/&gt; 50830: (1.8018%)&gt;];
}
2962--4228[label="0.0588235;3pkt 3fpkt"];
2962--6316[label="0.0784314;4pkt 4fpkt"];
2962--7490[label="1;51pkt 51fpkt"];
2962--9191[label="0.7;14pkt 14fpkt"];
2962--9513[label="0.0967742;3pkt 3fpkt"];
2962--11112[label="0.7;14pkt 14fpkt"];
2962--12022[label="0.7;14pkt 14fpkt"];
9191--11112[label="1;20pkt 20fpkt"];
9191--12022[label="1;20pkt 20fpkt"];
11112--12022[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="214.36.204.199" dst_port="110" src_ip="128.64.246.85"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.74.71.86"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,053,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
1343[label="128.208.233.26;d;250pkt 250fpkt", shape=diamond, color=yellow];
2378[label="101.225.20.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
2670[label="192.7.153.28;s;2pkt 2fpkt", shape=diamond, color=yellow];
2671[label="169.18.237.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
3835[label="222.160.112.163;s;27pkt 27fpkt", shape=diamond, color=yellow];
4523[label="222.160.112.162;s;72pkt 72fpkt", shape=diamond, color=yellow];
5750[label="128.208.233.26;d;250pkt 250fpkt", shape=hexagon, color=black];
6967[label="169.18.237.42;d;1pkt 1fpkt", shape=hexagon, color=black];
7220[label="222.160.112.163;s;27pkt 27fpkt", shape=hexagon, color=black];
7607[label="192.7.153.28;s;2pkt 2fpkt", shape=hexagon, color=black];
8567[label="192.7.153.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9005[label="55.115.19.70;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9162[label="55.115.19.83;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11097[label="55.115.19.83;14pkt 14fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.160.112.162:80, 128.208.233.26:*}[27.5194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.5678%)&lt;BR/&gt; 443: (6.48286%)&lt;BR/&gt; 137: (2.83159%)&lt;BR/&gt; 8601: (0.52161%)&lt;BR/&gt; 0: (0.447094%)&gt;];
}
1343--2378[label="1;1pkt 1fpkt"];
1343--3321[label="0.0434783;3pkt 3fpkt"];
1343--3538[label="0.247525;25pkt 25fpkt"];
1343--3835[label="1;27pkt 27fpkt"];
1343--4523[label="1;72pkt 72fpkt"];
1343--4557[label="0.0487805;2pkt 2fpkt"];
1343--5750[label="1;250pkt 250fpkt"];
1343--6421[label="0.0333333;2pkt 2fpkt"];
1343--6655[label="0.247525;25pkt 25fpkt"];
1343--7220[label="1;27pkt 27fpkt"];
1343--7552[label="0.0487805;2pkt 2fpkt"];
1343--8086[label="0.0487805;2pkt 2fpkt"];
1343--8124[label="0.004;1pkt 1fpkt"];
1343--8131[label="0.044;11pkt 11fpkt"];
1343--8180[label="0.044;11pkt 11fpkt"];
1343--8219[label="0.044;11pkt 11fpkt"];
1343--8393[label="0.25;25pkt 25fpkt"];
1343--8925[label="0.004;1pkt 1fpkt"];
1343--9005[label="0.5;4pkt 4fpkt"];
1343--9162[label="0.857143;12pkt 12fpkt"];
1343--10987[label="0.004;1pkt 1fpkt"];
1343--11097[label="0.857143;12pkt 12fpkt"];
2378--5750[label="1;1pkt 1fpkt"];
2670--2671[label="1;1pkt 1fpkt"];
2670--5014[label="0.5;1pkt 1fpkt"];
2670--6967[label="1;1pkt 1fpkt"];
2670--7607[label="1;2pkt 2fpkt"];
2670--8567[label="1;2pkt 2fpkt"];
2671--6967[label="1;1pkt 1fpkt"];
2671--7607[label="1;1pkt 1fpkt"];
2671--8567[label="1;1pkt 1fpkt"];
3835--5750[label="1;27pkt 27fpkt"];
3835--7220[label="1;27pkt 27fpkt"];
3835--8131[label="0.0740741;2pkt 2fpkt"];
3835--8180[label="0.0740741;2pkt 2fpkt"];
3835--8219[label="0.0740741;2pkt 2fpkt"];
4523--5750[label="1;72pkt 72fpkt"];
4523--8131[label="0.0972222;7pkt 7fpkt"];
4523--8180[label="0.0972222;7pkt 7fpkt"];
4523--8219[label="0.0972222;7pkt 7fpkt"];
5750--6421[label="0.0333333;2pkt 2fpkt"];
5750--6655[label="0.247525;25pkt 25fpkt"];
5750--7220[label="1;27pkt 27fpkt"];
5750--7552[label="0.0487805;2pkt 2fpkt"];
5750--8086[label="0.0487805;2pkt 2fpkt"];
5750--8124[label="0.004;1pkt 1fpkt"];
5750--8131[label="0.044;11pkt 11fpkt"];
5750--8180[label="0.044;11pkt 11fpkt"];
5750--8219[label="0.044;11pkt 11fpkt"];
5750--8393[label="0.25;25pkt 25fpkt"];
5750--8925[label="0.004;1pkt 1fpkt"];
5750--9005[label="0.5;4pkt 4fpkt"];
5750--9162[label="0.857143;12pkt 12fpkt"];
5750--10987[label="0.004;1pkt 1fpkt"];
5750--11097[label="0.857143;12pkt 12fpkt"];
6967--7607[label="1;1pkt 1fpkt"];
6967--8567[label="1;1pkt 1fpkt"];
7220--8131[label="0.0740741;2pkt 2fpkt"];
7220--8180[label="0.0740741;2pkt 2fpkt"];
7220--8219[label="0.0740741;2pkt 2fpkt"];
7607--8567[label="1;2pkt 2fpkt"];
9162--11097[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.233.26" src_ip="222.160.112.162" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.67.98.87"/>
    </slice>
    <from sec="1229058579" usec="0"/>
    <to sec="1229058608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.196.34.88"/>
    </slice>
    <from sec="1229058487" usec="0"/>
    <to sec="1229058650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.230.96.89"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09206,1.92934,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
134[label="133.72.167.91s;2pkt 2fpkt", shape=rectangle, color=red];
9248[label="133.72.167.91;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.167.91:*, 193.234.88.10:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1540: (3.84615%)&lt;BR/&gt; 1538: (3.84615%)&lt;BR/&gt; 1658: (1.92308%)&lt;BR/&gt; 1642: (1.92308%)&gt;];
}
134--9248[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.234.88.10" dst_port="80" src_ip="133.72.167.91"/>
    </slice>
    <from sec="1229058148" usec="0"/>
    <to sec="1229058703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.204.75.94"/>
    </slice>
    <from sec="1229058253" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.44.116.98"/>
    </slice>
    <from sec="1229058317" usec="0"/>
    <to sec="1229058336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.107.171.98"/>
    </slice>
    <from sec="1229058454" usec="0"/>
    <to sec="1229058459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.80.89.99"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.38.152.99"/>
    </slice>
    <from sec="1229058352" usec="0"/>
    <to sec="1229058363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.172.73.100"/>
    </slice>
    <from sec="1229058103" usec="0"/>
    <to sec="1229058235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
3814[label="128.81.165.100;s;44pkt 44fpkt", shape=diamond, color=yellow];
7203[label="128.81.165.100;s;44pkt 44fpkt", shape=hexagon, color=black];
9341[label="128.81.165.100;48pkt 48fpkt", shape=pentagon, color=darkviolet];
11187[label="128.81.165.100;48pkt 48fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.165.100:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64074: (1.08696%)&lt;BR/&gt; 63514: (1.08696%)&lt;BR/&gt; 63263: (1.08696%)&lt;BR/&gt; 62761: (1.08696%)&gt;];
}
3814--7203[label="1;44pkt 44fpkt"];
3814--9341[label="1;44pkt 44fpkt"];
3814--11187[label="1;44pkt 44fpkt"];
7203--9341[label="1;44pkt 44fpkt"];
7203--11187[label="1;44pkt 44fpkt"];
9341--11187[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter src_ip="128.81.165.100" src_port="25"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.23.101"/>
    </slice>
    <from sec="1229058181" usec="0"/>
    <to sec="1229058894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.67.101"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.13.106.101"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.195.157.101"/>
    </slice>
    <from sec="1229058845" usec="0"/>
    <to sec="1229058858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.177.101"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.218.170.102"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
2117[label="214.49.20.219;d;15pkt 15fpkt", shape=diamond, color=yellow];
2291[label="192.22.11.178;s;2pkt 2fpkt", shape=diamond, color=yellow];
2544[label="192.22.12.103;s;9pkt 9fpkt", shape=diamond, color=yellow];
3648[label="32.131.7.3;s;4pkt 4fpkt", shape=diamond, color=yellow];
5610[label="214.49.20.219;d;14pkt 14fpkt", shape=hexagon, color=black];
7052[label="32.131.7.3;s;4pkt 4fpkt", shape=hexagon, color=black];
9370[label="192.22.12.103;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10043[label="192.22.11.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.12.103:80, 214.49.20.219:*}[33.3333%]&lt;BR/&gt;{32.131.7.3:80, 214.49.20.219:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50584: (3.38983%)&lt;BR/&gt; 50583: (3.38983%)&lt;BR/&gt; 50582: (3.38983%)&lt;BR/&gt; 50581: (3.38983%)&gt;];
}
2117--2291[label="1;2pkt 2fpkt"];
2117--2544[label="0.666667;6pkt 6fpkt"];
2117--3648[label="1;4pkt 4fpkt"];
2117--5610[label="1;14pkt 14fpkt"];
2117--7052[label="1;4pkt 4fpkt"];
2117--9370[label="0.666667;6pkt 6fpkt"];
2117--10043[label="1;2pkt 2fpkt"];
2291--5610[label="1;2pkt 2fpkt"];
2291--10043[label="1;2pkt 2fpkt"];
2544--5610[label="0.666667;6pkt 6fpkt"];
2544--9370[label="1;9pkt 9fpkt"];
3648--5610[label="1;4pkt 4fpkt"];
3648--7052[label="1;4pkt 4fpkt"];
5610--7052[label="1;4pkt 4fpkt"];
5610--9370[label="0.666667;6pkt 6fpkt"];
5610--10043[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.20.219" src_ip="192.22.12.103" src_port="80"/>
      <filter dst_ip="214.49.20.219" src_ip="32.131.7.3" src_port="80"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.130.112.104"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.0.7.105"/>
    </slice>
    <from sec="1229058518" usec="0"/>
    <to sec="1229058532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.116.95.105"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.122.105"/>
    </slice>
    <from sec="1229058061" usec="0"/>
    <to sec="1229058886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.169.163.105"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.119.26.106"/>
    </slice>
    <from sec="1229058500" usec="0"/>
    <to sec="1229058514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.194.33.106"/>
    </slice>
    <from sec="1229058295" usec="0"/>
    <to sec="1229058302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.38.98.106"/>
    </slice>
    <from sec="1229058787" usec="0"/>
    <to sec="1229058885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.79.53.107"/>
    </slice>
    <from sec="1229058082" usec="0"/>
    <to sec="1229058205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.26.58.107"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.234.228.107"/>
    </slice>
    <from sec="1229058510" usec="0"/>
    <to sec="1229058521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.196.120.109"/>
    </slice>
    <from sec="1229058020" usec="0"/>
    <to sec="1229058316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.141.109"/>
    </slice>
    <from sec="1229058601" usec="0"/>
    <to sec="1229058603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.4.144.109"/>
    </slice>
    <from sec="1229058120" usec="0"/>
    <to sec="1229058443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.199.197.109"/>
    </slice>
    <from sec="1229058305" usec="0"/>
    <to sec="1229058420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.60.110"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.55.72.111"/>
    </slice>
    <from sec="1229058524" usec="0"/>
    <to sec="1229058533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.73.7.112"/>
    </slice>
    <from sec="1229058086" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.190.128.112"/>
    </slice>
    <from sec="1229058575" usec="0"/>
    <to sec="1229058580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.21.218.112"/>
    </slice>
    <from sec="1229058377" usec="0"/>
    <to sec="1229058722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.79.27.114"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
1834[label="172.45.245.114;s;526pkt 526fpkt", shape=diamond, color=yellow];
6013[label="172.45.245.114;s;447pkt 447fpkt", shape=hexagon, color=black];
9488[label="172.45.245.114;530pkt 530fpkt", shape=pentagon, color=darkviolet];
11252[label="172.45.245.114;530pkt 530fpkt", shape=invtriangle, color=brown];
12070[label="172.45.245.114;530pkt 530fpkt", shape=invhouse, color=bisque];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.45.245.114:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1834--3265[label="0.00255754;1pkt 1fpkt"];
1834--3274[label="0.0027933;1pkt 1fpkt"];
1834--3277[label="0.00261097;1pkt 1fpkt"];
1834--3285[label="0.00265252;1pkt 1fpkt"];
1834--3288[label="0.00246305;1pkt 1fpkt"];
1834--3319[label="0.0026455;1pkt 1fpkt"];
1834--3699[label="0.00318471;1pkt 1fpkt"];
1834--3703[label="0.00304878;1pkt 1fpkt"];
1834--3704[label="0.00310559;1pkt 1fpkt"];
1834--3712[label="0.00322581;1pkt 1fpkt"];
1834--4481[label="0.00371747;1pkt 1fpkt"];
1834--4484[label="0.00369004;1pkt 1fpkt"];
1834--6013[label="1;447pkt 447fpkt"];
1834--6351[label="0.00403226;1pkt 1fpkt"];
1834--6786[label="0.00246305;1pkt 1fpkt"];
1834--6823[label="0.00333333;1pkt 1fpkt"];
1834--7124[label="0.00310559;1pkt 1fpkt"];
1834--7130[label="0.00353357;1pkt 1fpkt"];
1834--8065[label="0.00310559;1pkt 1fpkt"];
1834--9488[label="1;526pkt 526fpkt"];
1834--11252[label="1;526pkt 526fpkt"];
1834--12070[label="1;526pkt 526fpkt"];
6013--6351[label="0.00403226;1pkt 1fpkt"];
6013--6786[label="0.00246305;1pkt 1fpkt"];
6013--6823[label="0.00333333;1pkt 1fpkt"];
6013--7124[label="0.00310559;1pkt 1fpkt"];
6013--7130[label="0.00353357;1pkt 1fpkt"];
6013--8065[label="0.00310559;1pkt 1fpkt"];
6013--9488[label="1;447pkt 447fpkt"];
6013--11252[label="1;447pkt 447fpkt"];
6013--12070[label="1;447pkt 447fpkt"];
9488--11252[label="1;530pkt 530fpkt"];
9488--12070[label="1;530pkt 530fpkt"];
11252--12070[label="1;530pkt 530fpkt"];
</description>
    <slice>
      <filter src_ip="172.45.245.114"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.154.42.116"/>
    </slice>
    <from sec="1229058691" usec="0"/>
    <to sec="1229058773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.16.50.116"/>
    </slice>
    <from sec="1229058226" usec="0"/>
    <to sec="1229058268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.65.233.117"/>
    </slice>
    <from sec="1229058481" usec="0"/>
    <to sec="1229058487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.22.11.118"/>
    </slice>
    <from sec="1229058239" usec="0"/>
    <to sec="1229058292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.74.56.118"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.154.73.119"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.167.202.119"/>
    </slice>
    <from sec="1229058272" usec="0"/>
    <to sec="1229058286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.108.120"/>
    </slice>
    <from sec="1229058388" usec="0"/>
    <to sec="1229058405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.60.40.124"/>
    </slice>
    <from sec="1229058722" usec="0"/>
    <to sec="1229058734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.59.74.127"/>
    </slice>
    <from sec="1229058528" usec="0"/>
    <to sec="1229058880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.81.201.129"/>
    </slice>
    <from sec="1229058604" usec="0"/>
    <to sec="1229058753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.146.53.130"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.130.87.130"/>
    </slice>
    <from sec="1229058506" usec="0"/>
    <to sec="1229058543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.228.240.130"/>
    </slice>
    <from sec="1229058081" usec="0"/>
    <to sec="1229058708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.82.35.131"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.194.21.132"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.153.184.132"/>
    </slice>
    <from sec="1229058355" usec="0"/>
    <to sec="1229058382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.172.240.132"/>
    </slice>
    <from sec="1229058494" usec="0"/>
    <to sec="1229058523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.175.150.133"/>
    </slice>
    <from sec="1229058508" usec="0"/>
    <to sec="1229058524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
2782[label="174.194.135.64;d;149pkt 149fpkt", shape=diamond, color=yellow];
3624[label="32.227.84.155;s;213pkt 213fpkt", shape=diamond, color=yellow];
3626[label="45.178.96.144;s;65pkt 65fpkt", shape=diamond, color=yellow];
3650[label="197.30.228.76;s;2pkt 2fpkt", shape=diamond, color=yellow];
4037[label="32.227.84.134;s;6pkt 6fpkt", shape=diamond, color=yellow];
4178[label="174.194.232.69;d;243pkt 243fpkt", shape=diamond, color=yellow];
7040[label="174.194.135.64;d;149pkt 149fpkt", shape=hexagon, color=black];
7650[label="45.178.96.144;s;65pkt 65fpkt", shape=hexagon, color=black];
7673[label="32.227.84.134;s;6pkt 6fpkt", shape=hexagon, color=black];
9639[label="32.227.84.134;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9745[label="45.178.96.144;65pkt 65fpkt", shape=pentagon, color=darkviolet];
11321[label="32.227.84.134;6pkt 6fpkt", shape=invtriangle, color=brown];
11373[label="45.178.96.144;65pkt 65fpkt", shape=invtriangle, color=brown];
12104[label="32.227.84.134;6pkt 6fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.227.84.155:80, 174.194.135.64:*}[27.8061%]&lt;BR/&gt;{32.227.84.155:80, 174.194.232.69:*}[26.5306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7132%)&lt;BR/&gt; 38599: (0.334608%)&lt;BR/&gt; 38598: (0.334608%)&lt;BR/&gt; 38596: (0.334608%)&lt;BR/&gt; 38589: (0.286807%)&gt;];
}
2782--3624[label="0.731544;109pkt 109fpkt"];
2782--3626[label="0.0923077;6pkt 6fpkt"];
2782--3650[label="1;2pkt 2fpkt"];
2782--4037[label="0.5;3pkt 3fpkt"];
2782--4296[label="0.341772;27pkt 27fpkt"];
2782--7040[label="1;149pkt 149fpkt"];
2782--7293[label="0.341772;27pkt 27fpkt"];
2782--7650[label="0.0923077;6pkt 6fpkt"];
2782--7673[label="0.5;3pkt 3fpkt"];
2782--9639[label="0.5;3pkt 3fpkt"];
2782--9745[label="0.0923077;6pkt 6fpkt"];
2782--11321[label="0.5;3pkt 3fpkt"];
2782--11373[label="0.0923077;6pkt 6fpkt"];
2782--12104[label="0.5;3pkt 3fpkt"];
3624--4178[label="0.488263;104pkt 104fpkt"];
3624--7040[label="0.731544;109pkt 109fpkt"];
3626--4178[label="0.907692;59pkt 59fpkt"];
3626--7040[label="0.0923077;6pkt 6fpkt"];
3626--7650[label="1;65pkt 65fpkt"];
3626--9745[label="1;65pkt 65fpkt"];
3626--11373[label="1;65pkt 65fpkt"];
3650--7040[label="1;2pkt 2fpkt"];
4037--4178[label="0.5;3pkt 3fpkt"];
4037--7040[label="0.5;3pkt 3fpkt"];
4037--7673[label="1;6pkt 6fpkt"];
4037--9639[label="1;6pkt 6fpkt"];
4037--11321[label="1;6pkt 6fpkt"];
4037--12104[label="1;6pkt 6fpkt"];
4178--4296[label="0.594937;47pkt 47fpkt"];
4178--7293[label="0.594937;47pkt 47fpkt"];
4178--7650[label="0.907692;59pkt 59fpkt"];
4178--7673[label="0.5;3pkt 3fpkt"];
4178--9639[label="0.5;3pkt 3fpkt"];
4178--9744[label="0.862069;25pkt 25fpkt"];
4178--9745[label="0.907692;59pkt 59fpkt"];
4178--11321[label="0.5;3pkt 3fpkt"];
4178--11372[label="0.862069;25pkt 25fpkt"];
4178--11373[label="0.907692;59pkt 59fpkt"];
4178--12104[label="0.5;3pkt 3fpkt"];
4178--12133[label="0.862069;25pkt 25fpkt"];
7040--7293[label="0.341772;27pkt 27fpkt"];
7040--7650[label="0.0923077;6pkt 6fpkt"];
7040--7673[label="0.5;3pkt 3fpkt"];
7040--9639[label="0.5;3pkt 3fpkt"];
7040--9745[label="0.0923077;6pkt 6fpkt"];
7040--11321[label="0.5;3pkt 3fpkt"];
7040--11373[label="0.0923077;6pkt 6fpkt"];
7040--12104[label="0.5;3pkt 3fpkt"];
7650--9745[label="1;65pkt 65fpkt"];
7650--11373[label="1;65pkt 65fpkt"];
7673--9639[label="1;6pkt 6fpkt"];
7673--11321[label="1;6pkt 6fpkt"];
7673--12104[label="1;6pkt 6fpkt"];
9639--11321[label="1;6pkt 6fpkt"];
9639--12104[label="1;6pkt 6fpkt"];
9745--11373[label="1;65pkt 65fpkt"];
11321--12104[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.232.69" src_ip="32.227.84.155" src_port="80"/>
      <filter dst_ip="174.194.135.64" src_ip="32.227.84.155" src_port="80"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.235.173.134"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.178.135"/>
    </slice>
    <from sec="1229058038" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.142.77.136"/>
    </slice>
    <from sec="1229058018" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.16.85.136"/>
    </slice>
    <from sec="1229058143" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.52.138.136"/>
    </slice>
    <from sec="1229058534" usec="0"/>
    <to sec="1229058548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.49.6.137"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.44.18.137"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.80.29.137"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.219.103.137"/>
    </slice>
    <from sec="1229058054" usec="0"/>
    <to sec="1229058894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.73.13.138"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.69.69.139"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.116.13.140"/>
    </slice>
    <from sec="1229058584" usec="0"/>
    <to sec="1229058589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.163.192.141"/>
    </slice>
    <from sec="1229058417" usec="0"/>
    <to sec="1229058419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.213.113.144"/>
    </slice>
    <from sec="1229058669" usec="0"/>
    <to sec="1229058732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.165.111.145"/>
    </slice>
    <from sec="1229058714" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.175.174.145"/>
    </slice>
    <from sec="1229058029" usec="0"/>
    <to sec="1229058088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.241.1.146"/>
    </slice>
    <from sec="1229058683" usec="0"/>
    <to sec="1229058693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.185.149.146"/>
    </slice>
    <from sec="1229058223" usec="0"/>
    <to sec="1229058265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.109.147"/>
    </slice>
    <from sec="1229058226" usec="0"/>
    <to sec="1229058260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
2153[label="174.194.122.147;s;93pkt 93fpkt", shape=diamond, color=yellow];
9782[label="174.194.122.147;93pkt 93fpkt", shape=pentagon, color=darkviolet];
11390[label="174.194.122.147;93pkt 93fpkt", shape=invtriangle, color=brown];
12138[label="174.194.122.147;93pkt 93fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.122.147:*, 196.32.223.38:80}[37.6344%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2050: (0.537634%)&lt;BR/&gt; 2049: (0.537634%)&lt;BR/&gt; 2048: (0.537634%)&lt;BR/&gt; 2047: (0.537634%)&gt;];
}
2153--9782[label="1;93pkt 93fpkt"];
2153--11390[label="1;93pkt 93fpkt"];
2153--12138[label="1;93pkt 93fpkt"];
9782--11390[label="1;93pkt 93fpkt"];
9782--12138[label="1;93pkt 93fpkt"];
11390--12138[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="196.32.223.38" dst_port="80" src_ip="174.194.122.147"/>
    </slice>
    <from sec="1229058087" usec="0"/>
    <to sec="1229058457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.225.20.148"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.0.103.148"/>
    </slice>
    <from sec="1229058049" usec="0"/>
    <to sec="1229058388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.137.113.148"/>
    </slice>
    <from sec="1229058078" usec="0"/>
    <to sec="1229058193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.109.206.148"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.137.118.149"/>
    </slice>
    <from sec="1229058474" usec="0"/>
    <to sec="1229058722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.151.133.150"/>
    </slice>
    <from sec="1229058294" usec="0"/>
    <to sec="1229058324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.49.29.152"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.195.141.152"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.198.34.153"/>
    </slice>
    <from sec="1229058749" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.4.75.153"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.99.232.154"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.4.141.155"/>
    </slice>
    <from sec="1229058704" usec="0"/>
    <to sec="1229058861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
3694[label="206.43.212.155;s;12pkt 12fpkt", shape=diamond, color=yellow];
3985[label="215.51.37.32;s;130pkt 130fpkt", shape=diamond, color=yellow];
6567[label="128.208.178.103;d;194pkt 194fpkt", shape=hexagon, color=black];
9852[label="206.43.212.155;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11427[label="206.43.212.155;12pkt 12fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.51.37.32:80, 128.208.178.103:*}[67.0103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5833%)&lt;BR/&gt; 4693: (0.555556%)&lt;BR/&gt; 4692: (0.555556%)&lt;BR/&gt; 4691: (0.555556%)&lt;BR/&gt; 4690: (0.555556%)&gt;];
}
3694--6567[label="1;12pkt 12fpkt"];
3694--9852[label="1;12pkt 12fpkt"];
3694--11427[label="1;12pkt 12fpkt"];
3985--6567[label="1;130pkt 130fpkt"];
6567--8132[label="0.00515464;1pkt 1fpkt"];
6567--8181[label="0.00515464;1pkt 1fpkt"];
6567--8220[label="0.00515464;1pkt 1fpkt"];
6567--9852[label="1;12pkt 12fpkt"];
6567--11427[label="1;12pkt 12fpkt"];
9852--11427[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.178.103" src_ip="215.51.37.32" src_port="80"/>
    </slice>
    <from sec="1229058027" usec="0"/>
    <to sec="1229058645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.194.66.157"/>
    </slice>
    <from sec="1229058436" usec="0"/>
    <to sec="1229058497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.132.24.158"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.135.158"/>
    </slice>
    <from sec="1229058016" usec="0"/>
    <to sec="1229058882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
2990[label="133.72.155.217;d;116pkt 116fpkt", shape=diamond, color=yellow];
6519[label="133.72.155.217;d;113pkt 113fpkt", shape=hexagon, color=black];
7579[label="32.228.150.73;s;56pkt 56fpkt", shape=hexagon, color=black];
8918[label="205.222.128.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9879[label="218.250.34.160;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10478[label="200.37.173.232;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11441[label="218.250.34.160;7pkt 7fpkt", shape=invtriangle, color=brown];
12155[label="218.250.34.160;7pkt 7fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.228.150.73:*, *:80}[32.1839%]&lt;BR/&gt;{101.200.110.65:53, 133.72.155.217:*}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.3718%)&lt;BR/&gt; 80: (17.4679%)&lt;BR/&gt; 1685: (0.801282%)&lt;BR/&gt; 53155: (0.641026%)&lt;BR/&gt; 58583: (0.480769%)&gt;];
}
2990--3092[label="0.00862069;1pkt 1fpkt"];
2990--3093[label="0.00862069;1pkt 1fpkt"];
2990--5210[label="0.00862069;1pkt 1fpkt"];
2990--6224[label="0.010989;1pkt 1fpkt"];
2990--6225[label="0.00862069;1pkt 1fpkt"];
2990--6519[label="1;113pkt 113fpkt"];
2990--7579[label="0.0714286;4pkt 4fpkt"];
2990--8119[label="0.0603448;7pkt 7fpkt"];
2990--8165[label="0.0172414;2pkt 2fpkt"];
2990--8208[label="0.0172414;2pkt 2fpkt"];
2990--8241[label="0.0172414;2pkt 2fpkt"];
2990--8918[label="1;2pkt 2fpkt"];
2990--9811[label="0.00862069;1pkt 1fpkt"];
2990--9879[label="0.142857;1pkt 1fpkt"];
2990--10478[label="1;4pkt 4fpkt"];
2990--11441[label="0.142857;1pkt 1fpkt"];
2990--12155[label="0.142857;1pkt 1fpkt"];
6519--7579[label="0.0357143;2pkt 2fpkt"];
6519--8119[label="0.0619469;7pkt 7fpkt"];
6519--8918[label="1;2pkt 2fpkt"];
6519--9879[label="0.142857;1pkt 1fpkt"];
6519--10478[label="1;4pkt 4fpkt"];
6519--11441[label="0.142857;1pkt 1fpkt"];
6519--12155[label="0.142857;1pkt 1fpkt"];
7579--7883[label="0.0714286;4pkt 4fpkt"];
7579--8119[label="0.0714286;4pkt 4fpkt"];
7579--8134[label="0.0892857;5pkt 5fpkt"];
7579--8165[label="0.0357143;2pkt 2fpkt"];
7579--8208[label="0.0357143;2pkt 2fpkt"];
7579--8241[label="0.0357143;2pkt 2fpkt"];
9879--11441[label="1;7pkt 7fpkt"];
9879--12155[label="1;7pkt 7fpkt"];
11441--12155[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="32.228.150.73"/>
      <filter dst_ip="133.72.155.217" src_ip="101.200.110.65" src_port="53"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.7.79.160"/>
    </slice>
    <from sec="1229058029" usec="0"/>
    <to sec="1229058528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.150.49.161"/>
    </slice>
    <from sec="1229058863" usec="0"/>
    <to sec="1229058886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.164.130.161"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.144.188.161"/>
    </slice>
    <from sec="1229058832" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.78.255.162"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.67.158.165"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
4305[label="205.138.21.103;d;33pkt 33fpkt", shape=diamond, color=yellow];
9927[label="214.56.229.165;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11471[label="214.56.229.165;4pkt 4fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.229.66:80, 205.138.21.103:*}[42.4242%]&lt;BR/&gt;{214.56.229.118:80, 205.138.21.103:*}[24.2424%]&lt;BR/&gt;{214.56.229.160:443, 205.138.21.103:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.4878%)&lt;BR/&gt; 443: (19.5122%)&lt;BR/&gt; 49246: (3.65854%)&lt;BR/&gt; 49245: (3.65854%)&lt;BR/&gt; 49244: (3.65854%)&gt;];
}
4305--9927[label="1;4pkt 4fpkt"];
4305--11471[label="1;4pkt 4fpkt"];
9927--11471[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.138.21.103" src_ip="214.56.229.66" src_port="80"/>
      <filter dst_ip="205.138.21.103" src_ip="214.56.229.118" src_port="80"/>
      <filter dst_ip="205.138.21.103" src_ip="214.56.229.160" src_port="443"/>
    </slice>
    <from sec="1229058546" usec="0"/>
    <to sec="1229058818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.64.242.165"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.131.13.166"/>
    </slice>
    <from sec="1229058294" usec="0"/>
    <to sec="1229058312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.194.111.166"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
4041[label="215.40.232.166;s;105pkt 105fpkt", shape=diamond, color=yellow];
9942[label="215.40.232.166;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.232.166:80, 223.214.250.5:*}[47.3214%]&lt;BR/&gt;{215.40.232.166:80, 42.189.140.182:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60985: (0.460829%)&lt;BR/&gt; 50094: (0.460829%)&lt;BR/&gt; 48655: (0.460829%)&lt;BR/&gt; 47984: (0.460829%)&gt;];
}
4041--6975[label="0.00952381;1pkt 1fpkt"];
4041--9942[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="223.214.250.5" src_ip="215.40.232.166" src_port="80"/>
      <filter dst_ip="42.189.140.182" src_ip="215.40.232.166" src_port="80"/>
    </slice>
    <from sec="1229058048" usec="0"/>
    <to sec="1229058839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.210.200.167"/>
    </slice>
    <from sec="1229058472" usec="0"/>
    <to sec="1229058817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.21.105.168"/>
    </slice>
    <from sec="1229058853" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.12.90.171"/>
    </slice>
    <from sec="1229058395" usec="0"/>
    <to sec="1229058551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.187.181.172"/>
    </slice>
    <from sec="1229058548" usec="0"/>
    <to sec="1229058732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.148.127.173"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.187.137.173"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.57.33.174"/>
    </slice>
    <from sec="1229058486" usec="0"/>
    <to sec="1229058816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.197.81.174"/>
    </slice>
    <from sec="1229058447" usec="0"/>
    <to sec="1229058595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.20.162.177"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.84.220.177"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.20.162.178"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.153.236.178"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
4400[label="0.95.111.179;s;20pkt 20fpkt", shape=diamond, color=yellow];
10057[label="0.95.111.179;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11534[label="0.95.111.179;20pkt 20fpkt", shape=invtriangle, color=brown];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.95.111.179:80, 133.72.2.38:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1953: (2.5%)&lt;BR/&gt; 1940: (2.5%)&lt;BR/&gt; 1937: (2.5%)&lt;BR/&gt; 1934: (2.5%)&gt;];
}
4400--5390[label="1;20pkt 20fpkt"];
4400--10057[label="1;20pkt 20fpkt"];
4400--11534[label="1;20pkt 20fpkt"];
10057--11534[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.2.38" src_ip="0.95.111.179" src_port="80"/>
    </slice>
    <from sec="1229058670" usec="0"/>
    <to sec="1229058781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
1138[label="174.194.104.170;d;150pkt 150fpkt", shape=diamond, color=yellow];
1252[label="205.176.128.21;s;85pkt 85fpkt", shape=diamond, color=yellow];
5113[label="205.176.128.21;s;85pkt 85fpkt", shape=hexagon, color=black];
8489[label="205.176.128.21;85pkt 85fpkt", shape=pentagon, color=darkviolet];
10059[label="5.247.223.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10318[label="5.247.223.212;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11536[label="5.247.223.179;1pkt 1fpkt", shape=invtriangle, color=brown];
11688[label="5.247.223.212;20pkt 20fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.176.128.21:80, 174.194.104.170:*}[56.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9933%)&lt;BR/&gt; 8080: (1.00671%)&lt;BR/&gt; 3046: (0.447427%)&lt;BR/&gt; 3024: (0.447427%)&lt;BR/&gt; 3022: (0.447427%)&gt;];
}
1138--1252[label="1;85pkt 85fpkt"];
1138--5113[label="1;85pkt 85fpkt"];
1138--6005[label="0.0266667;4pkt 4fpkt"];
1138--8489[label="1;85pkt 85fpkt"];
1138--10059[label="1;1pkt 1fpkt"];
1138--10318[label="1;20pkt 20fpkt"];
1138--11536[label="1;1pkt 1fpkt"];
1138--11688[label="1;20pkt 20fpkt"];
1252--5113[label="1;85pkt 85fpkt"];
1252--8489[label="1;85pkt 85fpkt"];
5113--8489[label="1;85pkt 85fpkt"];
10059--11536[label="1;1pkt 1fpkt"];
10318--11688[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.104.170" src_ip="205.176.128.21" src_port="80"/>
    </slice>
    <from sec="1229058018" usec="0"/>
    <to sec="1229058211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.89.143.180"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.20.162.180"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.80.13.182"/>
    </slice>
    <from sec="1229058858" usec="0"/>
    <to sec="1229058888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.197.128.182"/>
    </slice>
    <from sec="1229058296" usec="0"/>
    <to sec="1229058314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.234.218.182"/>
    </slice>
    <from sec="1229058065" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.5.101.183"/>
    </slice>
    <from sec="1229058346" usec="0"/>
    <to sec="1229058426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.198.48.185"/>
    </slice>
    <from sec="1229058259" usec="0"/>
    <to sec="1229058292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.39.117.185"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.29.74.187"/>
    </slice>
    <from sec="1229058424" usec="0"/>
    <to sec="1229058443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.141.191"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.148.22.192"/>
    </slice>
    <from sec="1229058591" usec="0"/>
    <to sec="1229058599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.161.26.192"/>
    </slice>
    <from sec="1229058047" usec="0"/>
    <to sec="1229058188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
728[label="216.55.169.192;s;609pkt 609fpkt", shape=diamond, color=yellow];
5770[label="216.55.169.192;s;517pkt 517fpkt", shape=hexagon, color=black];
10150[label="216.55.169.192;617pkt 617fpkt", shape=pentagon, color=darkviolet];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.55.169.192:6667, *:*}[20.9076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (11.0729%)&lt;BR/&gt; 6660: (4.3603%)&lt;BR/&gt; 6665: (4.13081%)&lt;BR/&gt; 6666: (3.55709%)&lt;BR/&gt; 6663: (3.5284%)&gt;];
}
728--1975[label="0.004;1pkt 1fpkt"];
728--5770[label="1;517pkt 517fpkt"];
728--5835[label="0.004;1pkt 1fpkt"];
728--8119[label="0.00492611;3pkt 3fpkt"];
728--8125[label="0.00164204;1pkt 1fpkt"];
728--8157[label="0.00164204;1pkt 1fpkt"];
728--8165[label="0.00164204;1pkt 1fpkt"];
728--8167[label="0.00603622;3pkt 3fpkt"];
728--8201[label="0.00164204;1pkt 1fpkt"];
728--8208[label="0.00164204;1pkt 1fpkt"];
728--8234[label="0.00164204;1pkt 1fpkt"];
728--8241[label="0.00164204;1pkt 1fpkt"];
728--10150[label="1;609pkt 609fpkt"];
5770--5835[label="0.004;1pkt 1fpkt"];
5770--8119[label="0.00580271;3pkt 3fpkt"];
5770--8125[label="0.00193424;1pkt 1fpkt"];
5770--8157[label="0.00193424;1pkt 1fpkt"];
5770--8201[label="0.00193424;1pkt 1fpkt"];
5770--8234[label="0.00193424;1pkt 1fpkt"];
5770--10150[label="1;517pkt 517fpkt"];
</description>
    <slice>
      <filter src_ip="216.55.169.192" src_port="6667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.192.61.193"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.168.24.194"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.97.89.194"/>
    </slice>
    <from sec="1229058188" usec="0"/>
    <to sec="1229058205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
3040[label="133.72.158.233;d;59pkt 59fpkt", shape=diamond, color=yellow];
3189[label="100.196.218.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
6934[label="133.72.158.233;d;59pkt 59fpkt", shape=hexagon, color=black];
10453[label="100.196.218.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11759[label="100.196.218.228;1pkt 1fpkt", shape=invtriangle, color=brown];
12287[label="100.196.218.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.158.233:*}[96.6102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3607%)&lt;BR/&gt; 3831: (2.45902%)&lt;BR/&gt; 443: (1.63934%)&lt;BR/&gt; 3851: (0.819672%)&lt;BR/&gt; 3849: (0.819672%)&gt;];
}
3040--3189[label="1;1pkt 1fpkt"];
3040--5991[label="0.0169492;1pkt 1fpkt"];
3040--6934[label="1;59pkt 59fpkt"];
3040--10183[label="0.714286;5pkt 5fpkt"];
3040--10453[label="1;1pkt 1fpkt"];
3040--11759[label="1;1pkt 1fpkt"];
3040--12287[label="1;1pkt 1fpkt"];
3189--6934[label="1;1pkt 1fpkt"];
3189--10453[label="1;1pkt 1fpkt"];
3189--11759[label="1;1pkt 1fpkt"];
3189--12287[label="1;1pkt 1fpkt"];
6934--10183[label="0.714286;5pkt 5fpkt"];
6934--10453[label="1;1pkt 1fpkt"];
6934--11759[label="1;1pkt 1fpkt"];
6934--12287[label="1;1pkt 1fpkt"];
10453--11759[label="1;1pkt 1fpkt"];
10453--12287[label="1;1pkt 1fpkt"];
11759--12287[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.158.233" src_port="80"/>
    </slice>
    <from sec="1229058034" usec="0"/>
    <to sec="1229058507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.79.238.196"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
4764[label="193.195.149.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
10191[label="193.195.149.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11616[label="193.195.149.197;1pkt 1fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.195.149.197:80, 174.194.98.217:56722}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56722: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4764--10191[label="1;1pkt 1fpkt"];
4764--11616[label="1;1pkt 1fpkt"];
10191--11616[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.98.217" dst_port="56722" src_ip="193.195.149.197" src_port="80"/>
    </slice>
    <from sec="1229058780" usec="0"/>
    <to sec="1229058809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
431[label="216.55.169.197;s;1026pkt 1026fpkt", shape=diamond, color=yellow];
6305[label="216.55.169.197;s;975pkt 975fpkt", shape=hexagon, color=black];
10194[label="216.55.169.197;1026pkt 1026fpkt", shape=pentagon, color=darkviolet];
11619[label="216.55.169.197;1026pkt 1026fpkt", shape=invtriangle, color=brown];
12225[label="216.55.169.197;1026pkt 1026fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.55.169.197:6667, *:*}[39.2788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.8169%)&lt;BR/&gt; 6666: (3.39634%)&lt;BR/&gt; 6664: (3.19945%)&lt;BR/&gt; 6665: (2.99272%)&lt;BR/&gt; 6660: (2.99272%)&gt;];
}
431--6305[label="1;975pkt 975fpkt"];
431--8134[label="0.00194932;2pkt 2fpkt"];
431--8156[label="0.000974659;1pkt 1fpkt"];
431--8200[label="0.000974659;1pkt 1fpkt"];
431--8233[label="0.000974659;1pkt 1fpkt"];
431--10194[label="1;1026pkt 1026fpkt"];
431--11619[label="1;1026pkt 1026fpkt"];
431--12225[label="1;1026pkt 1026fpkt"];
6305--8134[label="0.00205128;2pkt 2fpkt"];
6305--8156[label="0.00102564;1pkt 1fpkt"];
6305--8200[label="0.00102564;1pkt 1fpkt"];
6305--8233[label="0.00102564;1pkt 1fpkt"];
6305--10194[label="1;975pkt 975fpkt"];
6305--11619[label="1;975pkt 975fpkt"];
6305--12225[label="1;975pkt 975fpkt"];
10194--11619[label="1;1026pkt 1026fpkt"];
10194--12225[label="1;1026pkt 1026fpkt"];
11619--12225[label="1;1026pkt 1026fpkt"];
</description>
    <slice>
      <filter src_ip="216.55.169.197" src_port="6667"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.45.208.203"/>
    </slice>
    <from sec="1229058835" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.184.220.203"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
3737[label="174.194.232.252;d;85pkt 85fpkt", shape=diamond, color=yellow];
4084[label="214.241.1.204;s;20pkt 20fpkt", shape=diamond, color=yellow];
7144[label="174.194.232.252;d;39pkt 39fpkt", shape=hexagon, color=black];
7336[label="214.241.1.204;s;20pkt 20fpkt", shape=hexagon, color=black];
8102[label="214.241.1.204;s;20pkt 20fpkt", shape=polygon, color=gold];
9446[label="214.241.3.110;23pkt 23fpkt", shape=pentagon, color=darkviolet];
10250[label="214.241.1.204;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11229[label="214.241.3.110;23pkt 23fpkt", shape=invtriangle, color=brown];
11587[label="214.241.2.192;1pkt 1fpkt", shape=invtriangle, color=brown];
11649[label="214.241.1.204;20pkt 20fpkt", shape=invtriangle, color=brown];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.3.110:80, 174.194.232.252:*}[27.0588%]&lt;BR/&gt;{214.241.1.204:80, 174.194.232.252:*}[23.5294%]&lt;BR/&gt;{*:*, 174.194.232.252:32433}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6974%)&lt;BR/&gt; 32433: (7.38007%)&lt;BR/&gt; 52116: (1.29151%)&lt;BR/&gt; 52108: (1.29151%)&lt;BR/&gt; 52107: (1.29151%)&gt;];
}
3737--4084[label="1;20pkt 20fpkt"];
3737--4766[label="1;4pkt 4fpkt"];
3737--5807[label="0.0588235;5pkt 5fpkt"];
3737--6766[label="0.0117647;1pkt 1fpkt"];
3737--7144[label="1;39pkt 39fpkt"];
3737--7336[label="1;20pkt 20fpkt"];
3737--7758[label="1;4pkt 4fpkt"];
3737--8102[label="1;20pkt 20fpkt"];
3737--9435[label="1;4pkt 4fpkt"];
3737--9446[label="1;23pkt 23fpkt"];
3737--9604[label="0.0117647;1pkt 1fpkt"];
3737--10250[label="1;20pkt 20fpkt"];
3737--10500[label="0.25;1pkt 1fpkt"];
3737--11229[label="1;23pkt 23fpkt"];
3737--11303[label="0.0117647;1pkt 1fpkt"];
3737--11587[label="1;1pkt 1fpkt"];
3737--11649[label="1;20pkt 20fpkt"];
3737--11783[label="0.25;1pkt 1fpkt"];
3737--12096[label="0.0117647;1pkt 1fpkt"];
4084--7144[label="0.3;6pkt 6fpkt"];
4084--7336[label="1;20pkt 20fpkt"];
4084--8102[label="1;20pkt 20fpkt"];
4084--10250[label="1;20pkt 20fpkt"];
4084--11649[label="1;20pkt 20fpkt"];
7144--7336[label="0.3;6pkt 6fpkt"];
7144--8102[label="0.3;6pkt 6fpkt"];
7144--10250[label="0.3;6pkt 6fpkt"];
7144--10500[label="0.25;1pkt 1fpkt"];
7144--11587[label="1;1pkt 1fpkt"];
7144--11649[label="0.3;6pkt 6fpkt"];
7144--11783[label="0.25;1pkt 1fpkt"];
7336--8102[label="1;20pkt 20fpkt"];
7336--10250[label="1;20pkt 20fpkt"];
7336--11649[label="1;20pkt 20fpkt"];
8102--10250[label="1;20pkt 20fpkt"];
8102--11649[label="1;20pkt 20fpkt"];
9446--11229[label="1;23pkt 23fpkt"];
10250--11649[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.232.252" dst_port="32433"/>
      <filter dst_ip="174.194.232.252" src_ip="214.241.3.110" src_port="80"/>
      <filter dst_ip="174.194.232.252" src_ip="214.241.1.204" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.74.95.206"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.81.178.206"/>
    </slice>
    <from sec="1229058052" usec="0"/>
    <to sec="1229058270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.219.29.207"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.129.76.207"/>
    </slice>
    <from sec="1229058178" usec="0"/>
    <to sec="1229058412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.89.170.207"/>
    </slice>
    <from sec="1229058635" usec="0"/>
    <to sec="1229058655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.39.142.208"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.154.158.208"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.151.103.209"/>
    </slice>
    <from sec="1229058330" usec="0"/>
    <to sec="1229058384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.28.195.209"/>
    </slice>
    <from sec="1229058373" usec="0"/>
    <to sec="1229058875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.32.101.210"/>
    </slice>
    <from sec="1229058209" usec="0"/>
    <to sec="1229058884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.210.178.211"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.72.171.215"/>
    </slice>
    <from sec="1229058113" usec="0"/>
    <to sec="1229058849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.196.18.216"/>
    </slice>
    <from sec="1229058587" usec="0"/>
    <to sec="1229058617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.252.82.216"/>
    </slice>
    <from sec="1229058280" usec="0"/>
    <to sec="1229058441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
2443[label="214.56.222.216;s;528pkt 528fpkt", shape=diamond, color=yellow];
6071[label="214.56.222.216;s;518pkt 518fpkt", shape=hexagon, color=black];
10345[label="214.56.222.216;543pkt 543fpkt", shape=pentagon, color=darkviolet];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.56.222.216:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2443--3265[label="0.00255754;1pkt 1fpkt"];
2443--3274[label="0.0027933;1pkt 1fpkt"];
2443--3277[label="0.00261097;1pkt 1fpkt"];
2443--3285[label="0.00265252;1pkt 1fpkt"];
2443--3288[label="0.00246305;1pkt 1fpkt"];
2443--3319[label="0.0026455;1pkt 1fpkt"];
2443--3699[label="0.00318471;1pkt 1fpkt"];
2443--3703[label="0.00304878;1pkt 1fpkt"];
2443--3704[label="0.00310559;1pkt 1fpkt"];
2443--3712[label="0.00322581;1pkt 1fpkt"];
2443--4481[label="0.00371747;1pkt 1fpkt"];
2443--6071[label="1;518pkt 518fpkt"];
2443--6786[label="0.00246305;1pkt 1fpkt"];
2443--6823[label="0.00333333;1pkt 1fpkt"];
2443--7124[label="0.00310559;1pkt 1fpkt"];
2443--7130[label="0.00353357;1pkt 1fpkt"];
2443--8065[label="0.00310559;1pkt 1fpkt"];
2443--10345[label="1;528pkt 528fpkt"];
6071--6786[label="0.00246305;1pkt 1fpkt"];
6071--6823[label="0.00333333;1pkt 1fpkt"];
6071--7124[label="0.00310559;1pkt 1fpkt"];
6071--7130[label="0.00353357;1pkt 1fpkt"];
6071--8065[label="0.00310559;1pkt 1fpkt"];
6071--10345[label="1;518pkt 518fpkt"];
</description>
    <slice>
      <filter src_ip="214.56.222.216"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.40.233.217"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.71.218"/>
    </slice>
    <from sec="1229058319" usec="0"/>
    <to sec="1229058378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.190.237.218"/>
    </slice>
    <from sec="1229058133" usec="0"/>
    <to sec="1229058173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
2016[label="133.72.61.49;d;1531pkt 1531fpkt", shape=diamond, color=yellow];
2059[label="200.89.70.219;s;1450pkt 1450fpkt", shape=diamond, color=yellow];
6124[label="133.72.61.49;d;1388pkt 1388fpkt", shape=hexagon, color=black];
6143[label="200.89.70.219;s;1450pkt 1450fpkt", shape=hexagon, color=black];
10376[label="200.89.70.219;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11716[label="200.89.70.219;2pkt 2fpkt", shape=invtriangle, color=brown];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.89.70.219:*, 133.72.61.49:57140}[94.7128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57140: (49.9828%)&lt;BR/&gt; 4961: (0.0515198%)&lt;BR/&gt; 4807: (0.0515198%)&lt;BR/&gt; 4795: (0.0515198%)&lt;BR/&gt; 4296: (0.0515198%)&gt;];
}
2016--2059[label="1;1450pkt 1450fpkt"];
2016--6124[label="1;1388pkt 1388fpkt"];
2016--6143[label="1;1450pkt 1450fpkt"];
2016--10376[label="0.5;1pkt 1fpkt"];
2016--11716[label="0.5;1pkt 1fpkt"];
2059--6124[label="0.947406;1315pkt 1315fpkt"];
2059--6143[label="1;1450pkt 1450fpkt"];
2059--10376[label="0.5;1pkt 1fpkt"];
2059--11716[label="0.5;1pkt 1fpkt"];
6124--6143[label="0.947406;1315pkt 1315fpkt"];
6124--10376[label="0.5;1pkt 1fpkt"];
6124--11716[label="0.5;1pkt 1fpkt"];
6143--10376[label="0.5;1pkt 1fpkt"];
6143--11716[label="0.5;1pkt 1fpkt"];
10376--11716[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.61.49" dst_port="57140" src_ip="200.89.70.219"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.194.139.219"/>
    </slice>
    <from sec="1229058721" usec="0"/>
    <to sec="1229058846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.84.16.220"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.88.177.221"/>
    </slice>
    <from sec="1229058667" usec="0"/>
    <to sec="1229058675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
2216[label="44.156.38.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
10403[label="44.156.38.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.156.38.223:56437, 215.40.224.8:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56437: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
2216--10403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.8" dst_port="8080" src_ip="44.156.38.223" src_port="56437"/>
    </slice>
    <from sec="1229058182" usec="0"/>
    <to sec="1229058252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
2752[label="6.27.215.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
10405[label="6.27.215.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11731[label="6.27.215.223;1pkt 1fpkt", shape=invtriangle, color=brown];
12277[label="6.27.215.223;1pkt 1fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.27.215.223:1052, 215.40.224.8:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1052: (50%)&gt;];
}
2752--10405[label="1;1pkt 1fpkt"];
2752--11731[label="1;1pkt 1fpkt"];
2752--12277[label="1;1pkt 1fpkt"];
10405--11731[label="1;1pkt 1fpkt"];
10405--12277[label="1;1pkt 1fpkt"];
11731--12277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.224.8" dst_port="8080" src_ip="6.27.215.223" src_port="1052"/>
    </slice>
    <from sec="1229058293" usec="0"/>
    <to sec="1229058312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.33.12.224"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.81.37.224"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.17.152.224"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.55.4.225"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
2108[label="133.72.150.80;d;163pkt 163fpkt", shape=diamond, color=yellow];
3099[label="100.143.114.182;s;10pkt 10fpkt", shape=diamond, color=yellow];
5605[label="133.72.150.80;d;88pkt 88fpkt", shape=hexagon, color=black];
6229[label="100.143.114.182;s;10pkt 10fpkt", shape=hexagon, color=black];
9761[label="7.214.226.145;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10163[label="100.143.96.194;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10443[label="195.204.129.227;21pkt 21fpkt", shape=pentagon, color=darkviolet];
10458[label="195.204.129.229;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11599[label="100.143.96.194;4pkt 4fpkt", shape=invtriangle, color=brown];
11753[label="195.204.129.227;21pkt 21fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.72.150.80:*}[82.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5015%)&lt;BR/&gt; 39000: (1.89504%)&lt;BR/&gt; 843: (1.6035%)&lt;BR/&gt; 4708: (0.58309%)&lt;BR/&gt; 4701: (0.58309%)&gt;];
}
2108--3099[label="1;10pkt 10fpkt"];
2108--5605[label="1;88pkt 88fpkt"];
2108--6229[label="1;10pkt 10fpkt"];
2108--9761[label="0.928571;13pkt 13fpkt"];
2108--10163[label="1;4pkt 4fpkt"];
2108--10443[label="0.761905;16pkt 16fpkt"];
2108--10458[label="0.25;2pkt 2fpkt"];
2108--11599[label="1;4pkt 4fpkt"];
2108--11753[label="0.761905;16pkt 16fpkt"];
3099--5605[label="0.6;6pkt 6fpkt"];
3099--6229[label="1;10pkt 10fpkt"];
5605--6229[label="0.6;6pkt 6fpkt"];
5605--9761[label="0.428571;6pkt 6fpkt"];
5605--10163[label="1;4pkt 4fpkt"];
5605--10443[label="0.380952;8pkt 8fpkt"];
5605--10458[label="0.25;2pkt 2fpkt"];
5605--11599[label="1;4pkt 4fpkt"];
5605--11753[label="0.380952;8pkt 8fpkt"];
10163--11599[label="1;4pkt 4fpkt"];
10443--11753[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.150.80" src_port="80"/>
    </slice>
    <from sec="1229058023" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
2637[label="133.72.158.85;d;6pkt 6fpkt", shape=diamond, color=yellow];
2775[label="135.74.181.227;s;6pkt 6fpkt", shape=diamond, color=yellow];
10444[label="135.74.181.227;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11754[label="135.74.181.227;6pkt 6fpkt", shape=invtriangle, color=brown];
12285[label="135.74.181.227;6pkt 6fpkt", shape=invhouse, color=bisque];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.74.181.227:80, 133.72.158.85:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1599: (8.33333%)&lt;BR/&gt; 1597: (8.33333%)&lt;BR/&gt; 1593: (8.33333%)&lt;BR/&gt; 1591: (8.33333%)&gt;];
}
2637--2775[label="1;6pkt 6fpkt"];
2637--10444[label="1;6pkt 6fpkt"];
2637--11754[label="1;6pkt 6fpkt"];
2637--12285[label="1;6pkt 6fpkt"];
2775--10444[label="1;6pkt 6fpkt"];
2775--11754[label="1;6pkt 6fpkt"];
2775--12285[label="1;6pkt 6fpkt"];
10444--11754[label="1;6pkt 6fpkt"];
10444--12285[label="1;6pkt 6fpkt"];
11754--12285[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.158.85" src_ip="135.74.181.227" src_port="80"/>
    </slice>
    <from sec="1229058085" usec="0"/>
    <to sec="1229058426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.62063,1.76908,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
855[label="128.64.245.148;d;46pkt 46fpkt", shape=diamond, color=yellow];
856[label="100.45.73.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
2206[label="204.25.65.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
5511[label="128.64.245.148;d;44pkt 44fpkt", shape=hexagon, color=black];
5672[label="204.25.65.175;s;1pkt 1fpkt", shape=hexagon, color=black];
10448[label="100.45.73.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.245.148:13145}[36.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13145: (18.0851%)&lt;BR/&gt; 13135: (9.04255%)&lt;BR/&gt; 8000: (9.04255%)&lt;BR/&gt; 29919: (7.44681%)&lt;BR/&gt; 4807: (7.44681%)&gt;];
}
855--856[label="1;1pkt 1fpkt"];
855--2206[label="1;1pkt 1fpkt"];
855--5511[label="1;44pkt 44fpkt"];
855--5672[label="1;1pkt 1fpkt"];
855--10448[label="1;1pkt 1fpkt"];
856--5511[label="1;1pkt 1fpkt"];
856--10448[label="1;1pkt 1fpkt"];
2206--5511[label="1;1pkt 1fpkt"];
2206--5672[label="1;1pkt 1fpkt"];
5511--5672[label="1;1pkt 1fpkt"];
5511--10448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.245.148" dst_port="13145"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.119.142.228"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.244.180.228"/>
    </slice>
    <from sec="1229058290" usec="0"/>
    <to sec="1229058712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.236.134.229"/>
    </slice>
    <from sec="1229058614" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
1346[label="133.72.133.44;d;19pkt 19fpkt", shape=diamond, color=yellow];
3344[label="45.167.205.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
5453[label="133.72.133.44;d;16pkt 16fpkt", shape=hexagon, color=black];
6454[label="45.167.205.231;s;1pkt 1fpkt", shape=hexagon, color=black];
10470[label="45.167.205.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11767[label="45.167.205.231;1pkt 1fpkt", shape=invtriangle, color=brown];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.91.147.180:80, 133.72.133.44:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.9487%)&lt;BR/&gt; 60002: (7.69231%)&lt;BR/&gt; 45825: (7.69231%)&lt;BR/&gt; 0: (5.12821%)&lt;BR/&gt; 65255: (2.5641%)&gt;];
}
1346--1765[label="1;4pkt 4fpkt"];
1346--3344[label="1;1pkt 1fpkt"];
1346--4857[label="0.157895;3pkt 3fpkt"];
1346--4910[label="0.0526316;1pkt 1fpkt"];
1346--5453[label="1;16pkt 16fpkt"];
1346--5661[label="1;4pkt 4fpkt"];
1346--6454[label="1;1pkt 1fpkt"];
1346--8063[label="0.0526316;1pkt 1fpkt"];
1346--8131[label="0.210526;4pkt 4fpkt"];
1346--8180[label="0.210526;4pkt 4fpkt"];
1346--8219[label="0.210526;4pkt 4fpkt"];
1346--10470[label="1;1pkt 1fpkt"];
1346--11767[label="1;1pkt 1fpkt"];
3344--5453[label="1;1pkt 1fpkt"];
3344--6454[label="1;1pkt 1fpkt"];
3344--10470[label="1;1pkt 1fpkt"];
3344--11767[label="1;1pkt 1fpkt"];
5453--5661[label="1;4pkt 4fpkt"];
5453--6454[label="1;1pkt 1fpkt"];
5453--8063[label="0.0625;1pkt 1fpkt"];
5453--8131[label="0.25;4pkt 4fpkt"];
5453--8180[label="0.25;4pkt 4fpkt"];
5453--8219[label="0.25;4pkt 4fpkt"];
5453--10470[label="1;1pkt 1fpkt"];
5453--11767[label="1;1pkt 1fpkt"];
6454--10470[label="1;1pkt 1fpkt"];
6454--11767[label="1;1pkt 1fpkt"];
10470--11767[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.133.44" src_ip="203.91.147.180" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
3262[label="128.64.203.73;d;32pkt 32fpkt", shape=diamond, color=yellow];
7115[label="128.64.203.73;d;31pkt 31fpkt", shape=hexagon, color=black];
10472[label="204.64.49.232;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11768[label="204.64.49.232;4pkt 4fpkt", shape=invtriangle, color=brown];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.203.73:993}[50%]&lt;BR/&gt;{204.19.173.121:*, 128.64.203.73:443}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (27.4648%)&lt;BR/&gt; 443: (19.7183%)&lt;BR/&gt; 35405: (2.8169%)&lt;BR/&gt; 35340: (2.8169%)&lt;BR/&gt; 35336: (2.8169%)&gt;];
}
3262--7115[label="1;31pkt 31fpkt"];
3262--10472[label="1;4pkt 4fpkt"];
3262--11768[label="1;4pkt 4fpkt"];
7115--10472[label="0.75;3pkt 3fpkt"];
7115--11768[label="0.75;3pkt 3fpkt"];
10472--11768[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.203.73" dst_port="993"/>
      <filter dst_ip="128.64.203.73" dst_port="443" src_ip="204.19.173.121"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
10488[label="85.166.214.233;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.166.214.233:123, 169.18.228.164:*}[34.0909%]&lt;BR/&gt;{85.166.214.233:123, 169.18.155.13:*}[33.5227%]&lt;BR/&gt;{85.166.214.233:123, 169.18.163.199:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (50%)&lt;BR/&gt; 1976: (0.568182%)&lt;BR/&gt; 1945: (0.568182%)&lt;BR/&gt; 1765: (0.568182%)&lt;BR/&gt; 1521: (0.568182%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="169.18.228.164" src_ip="85.166.214.233" src_port="123"/>
      <filter dst_ip="169.18.155.13" src_ip="85.166.214.233" src_port="123"/>
      <filter dst_ip="169.18.163.199" src_ip="85.166.214.233" src_port="123"/>
    </slice>
    <from sec="1229058012" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.172.17.234"/>
    </slice>
    <from sec="1229058339" usec="0"/>
    <to sec="1229058352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.87.19.234"/>
    </slice>
    <from sec="1229058585" usec="0"/>
    <to sec="1229058597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.87.112.235"/>
    </slice>
    <from sec="1229058016" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07882,1.73633,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
490[label="214.49.187.109;d;195pkt 195fpkt", shape=diamond, color=yellow];
915[label="42.236.42.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
2214[label="193.195.153.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
2297[label="42.236.34.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
3686[label="42.236.42.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
5432[label="214.49.187.109;d;140pkt 140fpkt", shape=hexagon, color=black];
7062[label="42.236.42.1;s;1pkt 1fpkt", shape=hexagon, color=black];
7980[label="214.49.187.109;d;140pkt 140fpkt", shape=polygon, color=gold];
8830[label="208.14.155.52;63pkt 63fpkt", shape=pentagon, color=darkviolet];
10116[label="42.236.42.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10164[label="193.195.153.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10512[label="42.236.34.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11600[label="193.195.153.194;1pkt 1fpkt", shape=invtriangle, color=brown];
11791[label="42.236.34.237;1pkt 1fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.49.187.109:*}[75%]&lt;BR/&gt;{208.14.155.52:80, *:*}[24.6094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5438%)&lt;BR/&gt; 38967: (0.547445%)&lt;BR/&gt; 38938: (0.547445%)&lt;BR/&gt; 39271: (0.456204%)&lt;BR/&gt; 38396: (0.456204%)&gt;];
}
490--492[label="0.112821;22pkt 22fpkt"];
490--846[label="0.102564;20pkt 20fpkt"];
490--915[label="1;1pkt 1fpkt"];
490--969[label="0.025641;1pkt 1fpkt"];
490--1023[label="0.00512821;1pkt 1fpkt"];
490--1323[label="0.0422535;6pkt 6fpkt"];
490--1457[label="0.0153846;3pkt 3fpkt"];
490--2214[label="1;1pkt 1fpkt"];
490--2297[label="1;1pkt 1fpkt"];
490--2482[label="0.0153846;3pkt 3fpkt"];
490--2978[label="0.207547;22pkt 22fpkt"];
490--3237[label="0.428571;3pkt 3fpkt"];
490--3544[label="0.0769231;1pkt 1fpkt"];
490--3686[label="1;1pkt 1fpkt"];
490--4042[label="0.0238095;2pkt 2fpkt"];
490--4156[label="0.125;4pkt 4fpkt"];
490--4189[label="0.0849057;9pkt 9fpkt"];
490--4216[label="0.00854701;1pkt 1fpkt"];
490--4470[label="1;1pkt 1fpkt"];
490--4646[label="0.2;1pkt 1fpkt"];
490--5033[label="0.0384615;1pkt 1fpkt"];
490--5432[label="1;140pkt 140fpkt"];
490--5795[label="0.102564;20pkt 20fpkt"];
490--6005[label="0.107692;21pkt 21fpkt"];
490--6739[label="0.0105263;1pkt 1fpkt"];
490--6997[label="0.0769231;1pkt 1fpkt"];
490--7026[label="0.428571;3pkt 3fpkt"];
490--7062[label="1;1pkt 1fpkt"];
490--7184[label="0.129032;4pkt 4fpkt"];
490--7194[label="0.207547;22pkt 22fpkt"];
490--7426[label="0.0153846;3pkt 3fpkt"];
490--7466[label="0.00512821;1pkt 1fpkt"];
490--7664[label="0.2;1pkt 1fpkt"];
490--7677[label="0.0238095;2pkt 2fpkt"];
490--7732[label="1;1pkt 1fpkt"];
490--7980[label="1;140pkt 140fpkt"];
490--8034[label="0.129032;4pkt 4fpkt"];
490--8131[label="0.102564;20pkt 20fpkt"];
490--8180[label="0.102564;20pkt 20fpkt"];
490--8219[label="0.102564;20pkt 20fpkt"];
490--8830[label="0.031746;2pkt 2fpkt"];
490--8987[label="0.201835;22pkt 22fpkt"];
490--9143[label="0.0909091;1pkt 1fpkt"];
490--9810[label="0.00943396;1pkt 1fpkt"];
490--9886[label="0.2;1pkt 1fpkt"];
490--9907[label="0.04;2pkt 2fpkt"];
490--10116[label="1;1pkt 1fpkt"];
490--10164[label="1;1pkt 1fpkt"];
490--10512[label="1;1pkt 1fpkt"];
490--11015[label="0.201835;22pkt 22fpkt"];
490--11447[label="0.2;1pkt 1fpkt"];
490--11457[label="0.04;2pkt 2fpkt"];
490--11600[label="1;1pkt 1fpkt"];
490--11791[label="1;1pkt 1fpkt"];
490--12158[label="0.2;1pkt 1fpkt"];
490--12162[label="0.04;2pkt 2fpkt"];
915--5432[label="1;1pkt 1fpkt"];
915--7980[label="1;1pkt 1fpkt"];
915--10116[label="1;1pkt 1fpkt"];
2214--5432[label="1;1pkt 1fpkt"];
2214--7980[label="1;1pkt 1fpkt"];
2214--8131[label="1;1pkt 1fpkt"];
2214--8180[label="1;1pkt 1fpkt"];
2214--8219[label="1;1pkt 1fpkt"];
2214--10164[label="1;1pkt 1fpkt"];
2214--11600[label="1;1pkt 1fpkt"];
2297--5432[label="1;1pkt 1fpkt"];
2297--7980[label="1;1pkt 1fpkt"];
2297--10512[label="1;1pkt 1fpkt"];
2297--11791[label="1;1pkt 1fpkt"];
3686--5432[label="1;1pkt 1fpkt"];
3686--7062[label="1;1pkt 1fpkt"];
3686--7980[label="1;1pkt 1fpkt"];
5432--5795[label="0.142857;20pkt 20fpkt"];
5432--6005[label="0.121429;17pkt 17fpkt"];
5432--6739[label="0.0105263;1pkt 1fpkt"];
5432--7062[label="1;1pkt 1fpkt"];
5432--7184[label="0.129032;4pkt 4fpkt"];
5432--7194[label="0.207547;22pkt 22fpkt"];
5432--7426[label="0.0214286;3pkt 3fpkt"];
5432--7677[label="0.0119048;1pkt 1fpkt"];
5432--7980[label="1;140pkt 140fpkt"];
5432--8034[label="0.129032;4pkt 4fpkt"];
5432--8131[label="0.142857;20pkt 20fpkt"];
5432--8180[label="0.142857;20pkt 20fpkt"];
5432--8219[label="0.142857;20pkt 20fpkt"];
5432--8830[label="0.031746;2pkt 2fpkt"];
5432--8987[label="0.201835;22pkt 22fpkt"];
5432--9810[label="0.00943396;1pkt 1fpkt"];
5432--10116[label="1;1pkt 1fpkt"];
5432--10164[label="1;1pkt 1fpkt"];
5432--10512[label="1;1pkt 1fpkt"];
5432--11015[label="0.201835;22pkt 22fpkt"];
5432--11600[label="1;1pkt 1fpkt"];
5432--11791[label="1;1pkt 1fpkt"];
7062--7980[label="1;1pkt 1fpkt"];
7980--8034[label="0.129032;4pkt 4fpkt"];
7980--8131[label="0.142857;20pkt 20fpkt"];
7980--8180[label="0.142857;20pkt 20fpkt"];
7980--8219[label="0.142857;20pkt 20fpkt"];
7980--8830[label="0.031746;2pkt 2fpkt"];
7980--8987[label="0.201835;22pkt 22fpkt"];
7980--9810[label="0.00943396;1pkt 1fpkt"];
7980--10116[label="1;1pkt 1fpkt"];
7980--10164[label="1;1pkt 1fpkt"];
7980--10512[label="1;1pkt 1fpkt"];
7980--11015[label="0.201835;22pkt 22fpkt"];
7980--11600[label="1;1pkt 1fpkt"];
7980--11791[label="1;1pkt 1fpkt"];
10164--11600[label="1;1pkt 1fpkt"];
10512--11791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.14.155.52" src_port="80"/>
      <filter dst_ip="214.49.187.109" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.0.0.238"/>
    </slice>
    <from sec="1229058491" usec="0"/>
    <to sec="1229058656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
575[label="44.129.147.238;s;724pkt 724fpkt", shape=diamond, color=yellow];
10524[label="44.129.147.238;724pkt 724fpkt", shape=pentagon, color=darkviolet];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.129.147.238:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
575--1976[label="0.00361011;1pkt 1fpkt"];
575--5556[label="0.00361011;1pkt 1fpkt"];
575--10524[label="1;724pkt 724fpkt"];
</description>
    <slice>
      <filter src_ip="44.129.147.238"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.14.148.238"/>
    </slice>
    <from sec="1229058273" usec="0"/>
    <to sec="1229058334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.131.49.239"/>
    </slice>
    <from sec="1229058057" usec="0"/>
    <to sec="1229058062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.14.148.239"/>
    </slice>
    <from sec="1229058247" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
1382[label="214.49.0.241;s;3150pkt 3150fpkt", shape=diamond, color=yellow];
7401[label="214.49.0.241;s;3150pkt 3150fpkt", shape=hexagon, color=black];
10542[label="214.49.0.241;3208pkt 3208fpkt", shape=pentagon, color=darkviolet];
11803[label="214.49.0.241;3208pkt 3208fpkt", shape=invtriangle, color=brown];
12301[label="214.49.0.241;3208pkt 3208fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.0.241:22047, *:*}[93.6097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22047: (46.8004%)&lt;BR/&gt; 46832: (0.408189%)&lt;BR/&gt; 6881: (0.36109%)&lt;BR/&gt; 16001: (0.292012%)&lt;BR/&gt; 24962: (0.0784979%)&gt;];
}
1382--7401[label="1;3150pkt 3150fpkt"];
1382--8122[label="0.00178253;1pkt 1fpkt"];
1382--10542[label="1;3150pkt 3150fpkt"];
1382--11803[label="1;3150pkt 3150fpkt"];
1382--12301[label="1;3150pkt 3150fpkt"];
7401--8122[label="0.00178253;1pkt 1fpkt"];
7401--10542[label="1;3150pkt 3150fpkt"];
7401--11803[label="1;3150pkt 3150fpkt"];
7401--12301[label="1;3150pkt 3150fpkt"];
10542--11803[label="1;3208pkt 3208fpkt"];
10542--12301[label="1;3208pkt 3208fpkt"];
11803--12301[label="1;3208pkt 3208fpkt"];
</description>
    <slice>
      <filter src_ip="214.49.0.241" src_port="22047"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09206,1.92934,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
94[label="133.72.154.241s;1pkt 1fpkt", shape=rectangle, color=red];
10544[label="133.72.154.241;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.154.241:*, *:80}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 2314: (4.34783%)&lt;BR/&gt; 8080: (2.17391%)&lt;BR/&gt; 2411: (2.17391%)&lt;BR/&gt; 2399: (2.17391%)&gt;];
}
94--10544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.154.241"/>
    </slice>
    <from sec="1229058015" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.157.43.243"/>
    </slice>
    <from sec="1229058300" usec="0"/>
    <to sec="1229058317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.210.68.243"/>
    </slice>
    <from sec="1229058822" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.162.1.245"/>
    </slice>
    <from sec="1229058619" usec="0"/>
    <to sec="1229058872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.145.8.245"/>
    </slice>
    <from sec="1229058145" usec="0"/>
    <to sec="1229058166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.249.136.245"/>
    </slice>
    <from sec="1229058427" usec="0"/>
    <to sec="1229058438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.145.139.245"/>
    </slice>
    <from sec="1229058528" usec="0"/>
    <to sec="1229058846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.222.146.247"/>
    </slice>
    <from sec="1229058360" usec="0"/>
    <to sec="1229058418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.15.176.247"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.73.52.248"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.138.128.248"/>
    </slice>
    <from sec="1229058833" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.532856,1.82864,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
2409[label="128.64.181.248;s;43pkt 43fpkt", shape=diamond, color=yellow];
10597[label="128.64.181.248;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.181.248:9124, *:*}[60.4167%]&lt;BR/&gt;{128.64.181.248:443, 215.80.162.6:*}[22.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9124: (29.1209%)&lt;BR/&gt; 443: (20.8791%)&lt;BR/&gt; 64874: (1.0989%)&lt;BR/&gt; 62657: (1.0989%)&lt;BR/&gt; 62653: (1.0989%)&gt;];
}
2409--10597[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.181.248" src_port="9124"/>
      <filter dst_ip="215.80.162.6" src_ip="128.64.181.248" src_port="443"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
214[label="128.64.203.59;d;116pkt 116fpkt", shape=diamond, color=yellow];
489[label="100.38.8.243;s;7pkt 7fpkt", shape=diamond, color=yellow];
7370[label="128.64.203.59;d;116pkt 116fpkt", shape=hexagon, color=black];
10393[label="1.83.235.221;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10604[label="41.214.48.249;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11724[label="1.83.235.221;13pkt 13fpkt", shape=invtriangle, color=brown];
12271[label="1.83.235.221;13pkt 13fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.203.59:80}[92.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9547%)&lt;BR/&gt; 17640: (0.87108%)&lt;BR/&gt; 17639: (0.87108%)&lt;BR/&gt; 17634: (0.87108%)&lt;BR/&gt; 17631: (0.87108%)&gt;];
}
214--489[label="0.142857;1pkt 1fpkt"];
214--3092[label="0.00862069;1pkt 1fpkt"];
214--3093[label="0.00862069;1pkt 1fpkt"];
214--3795[label="0.142857;9pkt 9fpkt"];
214--3863[label="0.12766;6pkt 6fpkt"];
214--6225[label="0.00862069;1pkt 1fpkt"];
214--7370[label="1;116pkt 116fpkt"];
214--8119[label="0.163793;19pkt 19fpkt"];
214--8134[label="0.0431034;5pkt 5fpkt"];
214--8165[label="0.0172414;2pkt 2fpkt"];
214--8208[label="0.0172414;2pkt 2fpkt"];
214--8241[label="0.0172414;2pkt 2fpkt"];
214--9715[label="0.179487;7pkt 7fpkt"];
214--10393[label="1;13pkt 13fpkt"];
214--10604[label="0.666667;6pkt 6fpkt"];
214--11724[label="1;13pkt 13fpkt"];
214--12271[label="1;13pkt 13fpkt"];
489--4800[label="0.857143;6pkt 6fpkt"];
489--7370[label="0.142857;1pkt 1fpkt"];
7370--8119[label="0.163793;19pkt 19fpkt"];
7370--8134[label="0.0431034;5pkt 5fpkt"];
7370--8165[label="0.0172414;2pkt 2fpkt"];
7370--8208[label="0.0172414;2pkt 2fpkt"];
7370--8241[label="0.0172414;2pkt 2fpkt"];
7370--9715[label="0.179487;7pkt 7fpkt"];
7370--10393[label="1;13pkt 13fpkt"];
7370--10604[label="0.666667;6pkt 6fpkt"];
7370--11724[label="1;13pkt 13fpkt"];
7370--12271[label="1;13pkt 13fpkt"];
10393--11724[label="1;13pkt 13fpkt"];
10393--12271[label="1;13pkt 13fpkt"];
11724--12271[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.203.59" dst_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
284[label="128.64.235.244;d;3646pkt 3646fpkt", shape=diamond, color=yellow];
10605[label="148.44.60.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11828[label="148.44.60.249;2pkt 2fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.64.235.244:49763}[97.7784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49763: (48.8904%)&lt;BR/&gt; 0: (0.712329%)&lt;BR/&gt; 443: (0.657534%)&lt;BR/&gt; 26950: (0.136986%)&lt;BR/&gt; 80: (0.0684932%)&gt;];
}
284--608[label="0.0136986;1pkt 1fpkt"];
284--2505[label="0.181818;2pkt 2fpkt"];
284--4910[label="0.0136986;1pkt 1fpkt"];
284--6117[label="0.181818;2pkt 2fpkt"];
284--8063[label="0.0136986;1pkt 1fpkt"];
284--8119[label="0.00082282;3pkt 3fpkt"];
284--8122[label="0.0499109;28pkt 28fpkt"];
284--8134[label="0.00082282;3pkt 3fpkt"];
284--8154[label="0.0613208;39pkt 39fpkt"];
284--8165[label="0.00082282;3pkt 3fpkt"];
284--8198[label="0.0613208;39pkt 39fpkt"];
284--8208[label="0.00082282;3pkt 3fpkt"];
284--8231[label="0.0613208;39pkt 39fpkt"];
284--8241[label="0.00082282;3pkt 3fpkt"];
284--9170[label="1;1pkt 1fpkt"];
284--10605[label="1;2pkt 2fpkt"];
284--10769[label="1;1pkt 1fpkt"];
284--11828[label="1;2pkt 2fpkt"];
10605--11828[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.235.244" dst_port="49763"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.107.172.250"/>
    </slice>
    <from sec="1229058347" usec="0"/>
    <to sec="1229058399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.481048,1.89341,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.48.247.255"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.208.53.0"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.1.67.1"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
8259[label="102.158.75.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10647[label="102.158.75.1;3pkt 3fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.158.75.1:80, 174.194.106.9:2185}[33.3333%]&lt;BR/&gt;{102.158.75.1:80, 174.194.106.9:2187}[33.3333%]&lt;BR/&gt;{102.158.75.1:80, 174.194.106.9:2188}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2188: (16.6667%)&lt;BR/&gt; 2187: (16.6667%)&lt;BR/&gt; 2185: (16.6667%)&gt;];
}
8259--10647[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.106.9" dst_port="2188" src_ip="102.158.75.1" src_port="80"/>
      <filter dst_ip="174.194.106.9" dst_port="2187" src_ip="102.158.75.1" src_port="80"/>
      <filter dst_ip="174.194.106.9" dst_port="2185" src_ip="102.158.75.1" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.148.187.1"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
8271[label="38.164.251.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10656[label="38.164.251.1;5pkt 5fpkt", shape=invtriangle, color=brown];
11848[label="38.164.251.1;5pkt 5fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.164.251.1:53, 174.194.132.143:32490}[20%]&lt;BR/&gt;{38.164.251.1:80, 174.194.18.4:50253}[20%]&lt;BR/&gt;{38.164.251.1:80, 174.194.18.4:50254}[20%]&lt;BR/&gt;{38.164.251.1:80, 174.194.18.4:50278}[20%]&lt;BR/&gt;{38.164.251.1:80, 174.194.18.4:50279}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 50279: (10%)&lt;BR/&gt; 50278: (10%)&lt;BR/&gt; 50254: (10%)&lt;BR/&gt; 50253: (10%)&gt;];
}
8271--10656[label="1;5pkt 5fpkt"];
8271--11848[label="1;5pkt 5fpkt"];
10656--11848[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.4" dst_port="50279" src_ip="38.164.251.1" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50278" src_ip="38.164.251.1" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50254" src_ip="38.164.251.1" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50253" src_ip="38.164.251.1" src_port="80"/>
      <filter dst_ip="174.194.132.143" dst_port="32490" src_ip="38.164.251.1" src_port="53"/>
    </slice>
    <from sec="1229058834" usec="0"/>
    <to sec="1229058859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
4510[label="34.249.55.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
8278[label="133.72.219.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10660[label="133.72.219.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.219.2:2793, 34.249.55.84:6667}[50%]&lt;BR/&gt;{133.72.137.78:1034, 34.249.55.84:6669}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (37.5%)&lt;BR/&gt; 2793: (37.5%)&lt;BR/&gt; 6669: (12.5%)&lt;BR/&gt; 1034: (12.5%)&gt;];
}
4510--6778[label="0.5;1pkt 1fpkt"];
4510--8278[label="1;1pkt 1fpkt"];
4510--10660[label="1;1pkt 1fpkt"];
8278--10660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.249.55.84" dst_port="6669" src_ip="133.72.137.78" src_port="1034"/>
      <filter dst_ip="34.249.55.84" dst_port="6667" src_ip="133.72.219.2" src_port="2793"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.72.242.3"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
8297[label="1.149.53.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10668[label="1.149.53.4;4pkt 4fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.149.53.4:443, 128.208.242.170:2358}[25%]&lt;BR/&gt;{1.149.53.4:443, 128.208.242.170:2359}[25%]&lt;BR/&gt;{1.149.53.4:443, 128.208.242.170:2360}[25%]&lt;BR/&gt;{1.149.53.4:443, 128.208.242.170:2361}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2361: (12.5%)&lt;BR/&gt; 2360: (12.5%)&lt;BR/&gt; 2359: (12.5%)&lt;BR/&gt; 2358: (12.5%)&gt;];
}
8297--10668[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.242.170" dst_port="2361" src_ip="1.149.53.4" src_port="443"/>
      <filter dst_ip="128.208.242.170" dst_port="2360" src_ip="1.149.53.4" src_port="443"/>
      <filter dst_ip="128.208.242.170" dst_port="2359" src_ip="1.149.53.4" src_port="443"/>
      <filter dst_ip="128.208.242.170" dst_port="2358" src_ip="1.149.53.4" src_port="443"/>
    </slice>
    <from sec="1229058884" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.106.56.6"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.72.246.6"/>
    </slice>
    <from sec="1229058883" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.208.196.7"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.220.5.8"/>
    </slice>
    <from sec="1229058347" usec="0"/>
    <to sec="1229058354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.86.117.9"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
2139[label="206.168.145.9;s;7pkt 7fpkt", shape=diamond, color=yellow];
8355[label="206.168.145.9;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10700[label="206.168.145.9;14pkt 14fpkt", shape=invtriangle, color=brown];
11866[label="206.168.145.9;14pkt 14fpkt", shape=invhouse, color=bisque];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.168.145.9:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 972: (4.16667%)&lt;BR/&gt; 935: (4.16667%)&lt;BR/&gt; 871: (4.16667%)&lt;BR/&gt; 780: (4.16667%)&gt;];
}
2139--8355[label="1;7pkt 7fpkt"];
2139--10700[label="1;7pkt 7fpkt"];
2139--11866[label="1;7pkt 7fpkt"];
8355--10700[label="1;13pkt 13fpkt"];
8355--11866[label="1;13pkt 13fpkt"];
10700--11866[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="206.168.145.9" src_port="80"/>
    </slice>
    <from sec="1229058057" usec="0"/>
    <to sec="1229058838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.3.166.10"/>
    </slice>
    <from sec="1229058759" usec="0"/>
    <to sec="1229058863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
8377[label="128.208.236.11;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10716[label="128.208.236.11;6pkt 6fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.236.11:*, 208.208.21.11:80}[33.3333%]&lt;BR/&gt;{128.208.236.11:*, 100.174.93.166:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1835: (8.33333%)&lt;BR/&gt; 1834: (8.33333%)&lt;BR/&gt; 1833: (8.33333%)&lt;BR/&gt; 1823: (8.33333%)&gt;];
}
8377--10716[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="100.174.93.166" dst_port="80" src_ip="128.208.236.11"/>
      <filter dst_ip="208.208.21.11" dst_port="80" src_ip="128.208.236.11"/>
    </slice>
    <from sec="1229058362" usec="0"/>
    <to sec="1229058462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.105.65.12"/>
    </slice>
    <from sec="1229058361" usec="0"/>
    <to sec="1229058370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
8382[label="174.194.98.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10719[label="174.194.98.12;1pkt 1fpkt", shape=invtriangle, color=brown];
11873[label="174.194.98.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.98.12:50974, 211.222.169.237:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50974: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8382--10719[label="1;1pkt 1fpkt"];
8382--11873[label="1;1pkt 1fpkt"];
10719--11873[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.222.169.237" dst_port="80" src_ip="174.194.98.12" src_port="50974"/>
    </slice>
    <from sec="1229058306" usec="0"/>
    <to sec="1229058490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.66.218.12"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.195.0.13"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.131.31.14"/>
    </slice>
    <from sec="1229058077" usec="0"/>
    <to sec="1229058092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.156.80.16"/>
    </slice>
    <from sec="1229058284" usec="0"/>
    <to sec="1229058893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="154.11.220.16"/>
    </slice>
    <from sec="1229058022" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
8432[label="208.89.246.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10745[label="208.89.246.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.89.246.16:80, 174.194.19.214:2072}[50%]&lt;BR/&gt;{208.89.246.16:80, 174.194.19.214:2073}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2073: (25%)&lt;BR/&gt; 2072: (25%)&gt;];
}
8432--10745[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.214" dst_port="2073" src_ip="208.89.246.16" src_port="80"/>
      <filter dst_ip="174.194.19.214" dst_port="2072" src_ip="208.89.246.16" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.242.4.17"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.187.72.17"/>
    </slice>
    <from sec="1229058428" usec="0"/>
    <to sec="1229058675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
4395[label="201.190.65.18;s;14pkt 14fpkt", shape=diamond, color=yellow];
4396[label="174.194.146.42;d;22pkt 22fpkt", shape=diamond, color=yellow];
7346[label="201.190.65.18;s;14pkt 14fpkt", shape=hexagon, color=black];
8448[label="201.190.65.18;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10755[label="201.190.65.18;19pkt 19fpkt", shape=invtriangle, color=brown];
11888[label="201.190.65.18;20pkt 20fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.190.65.18:80, 174.194.146.42:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54584: (2.75229%)&lt;BR/&gt; 54583: (2.75229%)&lt;BR/&gt; 54582: (2.75229%)&lt;BR/&gt; 54581: (2.75229%)&gt;];
}
4395--4396[label="1;14pkt 14fpkt"];
4395--7346[label="1;14pkt 14fpkt"];
4395--8448[label="1;14pkt 14fpkt"];
4395--10755[label="0.928571;13pkt 13fpkt"];
4395--11888[label="1;14pkt 14fpkt"];
4396--7346[label="1;14pkt 14fpkt"];
4396--8448[label="1;20pkt 20fpkt"];
4396--10755[label="1;19pkt 19fpkt"];
4396--11888[label="1;20pkt 20fpkt"];
7346--8448[label="1;14pkt 14fpkt"];
7346--10755[label="0.928571;13pkt 13fpkt"];
7346--11888[label="1;14pkt 14fpkt"];
8448--10755[label="1;19pkt 19fpkt"];
8448--11888[label="1;20pkt 20fpkt"];
10755--11888[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.146.42" src_ip="201.190.65.18" src_port="80"/>
    </slice>
    <from sec="1229058668" usec="0"/>
    <to sec="1229058800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.197.74.19"/>
    </slice>
    <from sec="1229058328" usec="0"/>
    <to sec="1229058355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.215.31.20"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.190.155.20"/>
    </slice>
    <from sec="1229058279" usec="0"/>
    <to sec="1229058282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.75.75.22"/>
    </slice>
    <from sec="1229058025" usec="0"/>
    <to sec="1229058136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
8524[label="5.1.67.24;32pkt 32fpkt", shape=pentagon, color=darkviolet];
10782[label="5.1.67.24;32pkt 32fpkt", shape=invtriangle, color=brown];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.1.67.24:80, 172.45.115.52:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1543: (1.5625%)&lt;BR/&gt; 1541: (1.5625%)&lt;BR/&gt; 1539: (1.5625%)&lt;BR/&gt; 1538: (1.5625%)&gt;];
}
8524--10782[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.115.52" src_ip="5.1.67.24" src_port="80"/>
    </slice>
    <from sec="1229058259" usec="0"/>
    <to sec="1229058356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.29.79.24"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
8548[label="4.250.162.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10795[label="4.250.162.26;4pkt 4fpkt", shape=invtriangle, color=brown];
11904[label="4.250.162.26;4pkt 4fpkt", shape=invhouse, color=bisque];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.250.162.26:80, 128.87.90.182:64093}[25%]&lt;BR/&gt;{4.250.162.26:80, 128.87.90.182:64121}[25%]&lt;BR/&gt;{4.250.162.26:80, 128.87.90.182:64122}[25%]&lt;BR/&gt;{4.250.162.26:80, 128.87.90.182:64123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64123: (12.5%)&lt;BR/&gt; 64122: (12.5%)&lt;BR/&gt; 64121: (12.5%)&lt;BR/&gt; 64093: (12.5%)&gt;];
}
8548--10795[label="1;4pkt 4fpkt"];
8548--11904[label="1;4pkt 4fpkt"];
10795--11904[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.182" dst_port="64123" src_ip="4.250.162.26" src_port="80"/>
      <filter dst_ip="128.87.90.182" dst_port="64122" src_ip="4.250.162.26" src_port="80"/>
      <filter dst_ip="128.87.90.182" dst_port="64121" src_ip="4.250.162.26" src_port="80"/>
      <filter dst_ip="128.87.90.182" dst_port="64093" src_ip="4.250.162.26" src_port="80"/>
    </slice>
    <from sec="1229058740" usec="0"/>
    <to sec="1229058787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.129.212.26"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
8557[label="133.72.55.27;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10800[label="133.72.55.27;15pkt 15fpkt", shape=invtriangle, color=brown];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.55.27:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 58802: (3.33333%)&lt;BR/&gt; 50719: (3.33333%)&lt;BR/&gt; 19968: (3.33333%)&lt;BR/&gt; 4443: (3.33333%)&gt;];
}
8557--10800[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.55.27" src_port="25"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.195.131.34"/>
    </slice>
    <from sec="1229058607" usec="0"/>
    <to sec="1229058671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
8655[label="45.213.67.36;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10847[label="45.213.67.36;3pkt 3fpkt", shape=invtriangle, color=brown];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.213.67.36:80, 128.208.173.132:55964}[25%]&lt;BR/&gt;{45.213.67.36:80, 128.208.173.132:55965}[25%]&lt;BR/&gt;{45.213.67.36:80, 128.208.173.132:55966}[25%]&lt;BR/&gt;{45.213.67.36:80, 128.208.173.132:55967}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55967: (14.2857%)&lt;BR/&gt; 55965: (14.2857%)&lt;BR/&gt; 55964: (14.2857%)&lt;BR/&gt; 55966: (7.14286%)&gt;];
}
8655--10847[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.173.132" dst_port="55967" src_ip="45.213.67.36" src_port="80"/>
      <filter dst_ip="128.208.173.132" dst_port="55966" src_ip="45.213.67.36" src_port="80"/>
      <filter dst_ip="128.208.173.132" dst_port="55965" src_ip="45.213.67.36" src_port="80"/>
      <filter dst_ip="128.208.173.132" dst_port="55964" src_ip="45.213.67.36" src_port="80"/>
    </slice>
    <from sec="1229058364" usec="0"/>
    <to sec="1229058370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
573[label="101.157.207.163;d;15pkt 15fpkt", shape=diamond, color=yellow];
576[label="128.64.244.166;s;27pkt 27fpkt", shape=diamond, color=yellow];
3299[label="128.64.36.158;s;8pkt 8fpkt", shape=diamond, color=yellow];
4899[label="101.157.207.163;d;15pkt 15fpkt", shape=hexagon, color=black];
5189[label="128.64.244.166;s;12pkt 12fpkt", shape=hexagon, color=black];
6401[label="128.64.36.158;s;8pkt 8fpkt", shape=hexagon, color=black];
9872[label="128.64.36.158;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9944[label="128.64.244.166;29pkt 29fpkt", shape=pentagon, color=darkviolet];
11477[label="128.64.244.166;29pkt 29fpkt", shape=invtriangle, color=brown];
12174[label="128.64.244.166;29pkt 29fpkt", shape=invhouse, color=bisque];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.244.166:6453, *:*}[56.25%]&lt;BR/&gt;{133.72.152.36:*, 101.157.207.163:443}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6453: (33.0556%)&lt;BR/&gt; 443: (6.94444%)&lt;BR/&gt; 49549: (6.66667%)&lt;BR/&gt; 27977: (5.55556%)&lt;BR/&gt; 49737: (1.94444%)&gt;];
}
573--576[label="0.133333;2pkt 2fpkt"];
573--3299[label="0.25;2pkt 2fpkt"];
573--4899[label="1;15pkt 15fpkt"];
573--5189[label="0.166667;2pkt 2fpkt"];
573--6401[label="0.25;2pkt 2fpkt"];
573--8122[label="0.466667;7pkt 7fpkt"];
573--8154[label="0.466667;7pkt 7fpkt"];
573--8198[label="0.466667;7pkt 7fpkt"];
573--8231[label="0.466667;7pkt 7fpkt"];
573--8658[label="0.666667;10pkt 10fpkt"];
573--9872[label="0.25;2pkt 2fpkt"];
573--9944[label="0.133333;2pkt 2fpkt"];
573--10849[label="0.666667;10pkt 10fpkt"];
573--11477[label="0.133333;2pkt 2fpkt"];
573--11925[label="0.666667;10pkt 10fpkt"];
573--12174[label="0.133333;2pkt 2fpkt"];
576--4899[label="0.133333;2pkt 2fpkt"];
576--5189[label="1;12pkt 12fpkt"];
576--9944[label="1;27pkt 27fpkt"];
576--11477[label="1;27pkt 27fpkt"];
576--12174[label="1;27pkt 27fpkt"];
3299--4899[label="0.25;2pkt 2fpkt"];
3299--6401[label="1;8pkt 8fpkt"];
3299--9872[label="1;8pkt 8fpkt"];
4899--5189[label="0.166667;2pkt 2fpkt"];
4899--6401[label="0.25;2pkt 2fpkt"];
4899--8122[label="0.466667;7pkt 7fpkt"];
4899--8154[label="0.466667;7pkt 7fpkt"];
4899--8198[label="0.466667;7pkt 7fpkt"];
4899--8231[label="0.466667;7pkt 7fpkt"];
4899--8658[label="0.666667;10pkt 10fpkt"];
4899--9872[label="0.25;2pkt 2fpkt"];
4899--9944[label="0.133333;2pkt 2fpkt"];
4899--10849[label="0.666667;10pkt 10fpkt"];
4899--11477[label="0.133333;2pkt 2fpkt"];
4899--11925[label="0.666667;10pkt 10fpkt"];
4899--12174[label="0.133333;2pkt 2fpkt"];
5189--9944[label="1;12pkt 12fpkt"];
5189--11477[label="1;12pkt 12fpkt"];
5189--12174[label="1;12pkt 12fpkt"];
6401--9872[label="1;8pkt 8fpkt"];
9944--11477[label="1;29pkt 29fpkt"];
9944--12174[label="1;29pkt 29fpkt"];
11477--12174[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.244.166" src_port="6453"/>
      <filter dst_ip="101.157.207.163" dst_port="443" src_ip="133.72.152.36"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
8665[label="203.34.214.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10851[label="203.34.214.36;1pkt 1fpkt", shape=invtriangle, color=brown];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.34.214.36:80, 214.49.190.11:46183}[50%]&lt;BR/&gt;{203.34.214.36:80, 214.49.190.11:46184}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46184: (33.3333%)&lt;BR/&gt; 46183: (16.6667%)&gt;];
}
8665--10851[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.190.11" dst_port="46184" src_ip="203.34.214.36" src_port="80"/>
      <filter dst_ip="214.49.190.11" dst_port="46183" src_ip="203.34.214.36" src_port="80"/>
    </slice>
    <from sec="1229058872" usec="0"/>
    <to sec="1229058874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
8671[label="214.7.37.37;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10854[label="214.7.37.37;14pkt 14fpkt", shape=invtriangle, color=brown];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.37.37:110, 133.72.202.194:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 1488: (3.44828%)&lt;BR/&gt; 1297: (3.44828%)&lt;BR/&gt; 1216: (3.44828%)&lt;BR/&gt; 1167: (3.44828%)&gt;];
}
8671--10854[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.202.194" src_ip="214.7.37.37" src_port="110"/>
    </slice>
    <from sec="1229058055" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.64.82.37"/>
    </slice>
    <from sec="1229058448" usec="0"/>
    <to sec="1229058480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
8682[label="195.8.210.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10859[label="195.8.210.37;2pkt 2fpkt", shape=invtriangle, color=brown];
11928[label="195.8.210.37;3pkt 3fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.8.210.37:80, 133.72.75.145:2376}[33.3333%]&lt;BR/&gt;{195.8.210.37:80, 133.72.75.145:2378}[33.3333%]&lt;BR/&gt;{195.8.210.37:80, 133.72.75.145:2382}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2382: (18.75%)&lt;BR/&gt; 2378: (18.75%)&lt;BR/&gt; 2376: (12.5%)&gt;];
}
8682--10859[label="1;2pkt 2fpkt"];
8682--11928[label="1;3pkt 3fpkt"];
10859--11928[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.75.145" dst_port="2382" src_ip="195.8.210.37" src_port="80"/>
      <filter dst_ip="133.72.75.145" dst_port="2378" src_ip="195.8.210.37" src_port="80"/>
      <filter dst_ip="133.72.75.145" dst_port="2376" src_ip="195.8.210.37" src_port="80"/>
    </slice>
    <from sec="1229058457" usec="0"/>
    <to sec="1229058522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.54.24.38"/>
    </slice>
    <from sec="1229058264" usec="0"/>
    <to sec="1229058268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.57.0.40"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
8693[label="128.64.26.40;30pkt 30fpkt", shape=pentagon, color=darkviolet];
10866[label="128.64.26.40;29pkt 29fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.26.40:25, 7.107.124.220:*}[30%]&lt;BR/&gt;{128.64.26.40:110, *:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.2881%)&lt;BR/&gt; 110: (12.7119%)&lt;BR/&gt; 41308: (1.69492%)&lt;BR/&gt; 23974: (1.69492%)&lt;BR/&gt; 23631: (1.69492%)&gt;];
}
8693--10866[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.26.40" src_port="110"/>
      <filter dst_ip="7.107.124.220" src_ip="128.64.26.40" src_port="25"/>
    </slice>
    <from sec="1229058045" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.10.129.40"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.130.145.40"/>
    </slice>
    <from sec="1229058671" usec="0"/>
    <to sec="1229058694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
8703[label="133.72.197.40;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10872[label="133.72.197.40;9pkt 9fpkt", shape=invtriangle, color=brown];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.197.40:110, 37.3.194.242:*}[55.5556%]&lt;BR/&gt;{133.72.197.40:25, *:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (27.7778%)&lt;BR/&gt; 25: (22.2222%)&lt;BR/&gt; 59560: (5.55556%)&lt;BR/&gt; 59409: (5.55556%)&lt;BR/&gt; 59394: (5.55556%)&gt;];
}
8703--10872[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="133.72.197.40" src_port="25"/>
      <filter dst_ip="37.3.194.242" src_ip="133.72.197.40" src_port="110"/>
    </slice>
    <from sec="1229058033" usec="0"/>
    <to sec="1229058874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.11.36.41"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
8717[label="205.78.224.41;475pkt 475fpkt", shape=pentagon, color=darkviolet];
10879[label="205.78.224.41;475pkt 475fpkt", shape=invtriangle, color=brown];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.78.224.41:*, 128.64.26.76:52685}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52685: (50%)&lt;BR/&gt; 4976: (0.105263%)&lt;BR/&gt; 4974: (0.105263%)&lt;BR/&gt; 4971: (0.105263%)&lt;BR/&gt; 4969: (0.105263%)&gt;];
}
8717--10879[label="1;475pkt 475fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.26.76" dst_port="52685" src_ip="205.78.224.41"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.131.112.42"/>
    </slice>
    <from sec="1229058184" usec="0"/>
    <to sec="1229058274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.186.165.42"/>
    </slice>
    <from sec="1229058283" usec="0"/>
    <to sec="1229058300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
8739[label="128.81.180.43;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10892[label="128.81.180.43;2pkt 2fpkt", shape=invtriangle, color=brown];
11939[label="128.81.180.43;2pkt 2fpkt", shape=invhouse, color=bisque];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.180.43:80, 41.207.122.124:57400}[50%]&lt;BR/&gt;{128.81.180.43:80, 41.207.122.126:54935}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57400: (25%)&lt;BR/&gt; 54935: (25%)&gt;];
}
8739--10892[label="1;2pkt 2fpkt"];
8739--11939[label="1;2pkt 2fpkt"];
10892--11939[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.122.126" dst_port="54935" src_ip="128.81.180.43" src_port="80"/>
      <filter dst_ip="41.207.122.124" dst_port="57400" src_ip="128.81.180.43" src_port="80"/>
    </slice>
    <from sec="1229058718" usec="0"/>
    <to sec="1229058736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
8764[label="101.19.71.46;38pkt 38fpkt", shape=pentagon, color=darkviolet];
10903[label="101.19.71.46;37pkt 37fpkt", shape=invtriangle, color=brown];
11944[label="101.19.71.46;38pkt 38fpkt", shape=invhouse, color=bisque];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.19.71.46:80, 214.49.185.51:*}[92.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6726%)&lt;BR/&gt; 60912: (1.32743%)&lt;BR/&gt; 60837: (1.32743%)&lt;BR/&gt; 44985: (1.32743%)&lt;BR/&gt; 44984: (1.32743%)&gt;];
}
8764--10903[label="1;37pkt 37fpkt"];
8764--11944[label="1;38pkt 38fpkt"];
10903--11944[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.51" src_ip="101.19.71.46" src_port="80"/>
    </slice>
    <from sec="1229058883" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.207.145.46"/>
    </slice>
    <from sec="1229058283" usec="0"/>
    <to sec="1229058714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
2643[label="215.40.227.98;d;390pkt 390fpkt", shape=diamond, color=yellow];
3132[label="101.89.198.91;s;12pkt 12fpkt", shape=diamond, color=yellow];
3207[label="193.147.0.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
3607[label="193.147.0.2;s;15pkt 15fpkt", shape=diamond, color=yellow];
3671[label="193.147.21.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
6727[label="193.147.21.247;s;1pkt 1fpkt", shape=hexagon, color=black];
6991[label="101.89.198.91;s;12pkt 12fpkt", shape=hexagon, color=black];
7015[label="193.147.0.91;s;1pkt 1fpkt", shape=hexagon, color=black];
7034[label="193.147.0.2;s;15pkt 15fpkt", shape=hexagon, color=black];
8272[label="193.147.0.2;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8455[label="55.54.170.18;35pkt 35fpkt", shape=pentagon, color=darkviolet];
9242[label="193.147.0.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9754[label="192.140.140.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10586[label="193.147.21.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10657[label="193.147.0.2;15pkt 15fpkt", shape=invtriangle, color=brown];
11849[label="193.147.0.2;14pkt 14fpkt", shape=invhouse, color=bisque];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.40.227.98:*}[89.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7105%)&lt;BR/&gt; 15510: (1.78571%)&lt;BR/&gt; 2121: (0.56391%)&lt;BR/&gt; 2119: (0.56391%)&lt;BR/&gt; 2117: (0.56391%)&gt;];
}
2643--2890[label="0.871795;34pkt 34fpkt"];
2643--2987[label="0.01;1pkt 1fpkt"];
2643--3132[label="1;12pkt 12fpkt"];
2643--3207[label="1;1pkt 1fpkt"];
2643--3607[label="1;15pkt 15fpkt"];
2643--3671[label="1;1pkt 1fpkt"];
2643--4752[label="0.0153846;6pkt 6fpkt"];
2643--4953[label="0.0025641;1pkt 1fpkt"];
2643--5423[label="0.0025641;1pkt 1fpkt"];
2643--5992[label="0.0108696;1pkt 1fpkt"];
2643--6128[label="0.0775194;10pkt 10fpkt"];
2643--6727[label="1;1pkt 1fpkt"];
2643--6991[label="1;12pkt 12fpkt"];
2643--7015[label="1;1pkt 1fpkt"];
2643--7034[label="1;15pkt 15fpkt"];
2643--7128[label="0.0175439;1pkt 1fpkt"];
2643--7201[label="0.01;1pkt 1fpkt"];
2643--7424[label="0.871795;34pkt 34fpkt"];
2643--7426[label="0.0410256;16pkt 16fpkt"];
2643--7751[label="0.0153846;6pkt 6fpkt"];
2643--7870[label="0.0108696;1pkt 1fpkt"];
2643--8109[label="0.0153846;6pkt 6fpkt"];
2643--8160[label="0.0025641;1pkt 1fpkt"];
2643--8161[label="0.00769231;3pkt 3fpkt"];
2643--8162[label="0.0025641;1pkt 1fpkt"];
2643--8165[label="0.0025641;1pkt 1fpkt"];
2643--8203[label="0.0025641;1pkt 1fpkt"];
2643--8204[label="0.00769231;3pkt 3fpkt"];
2643--8205[label="0.0025641;1pkt 1fpkt"];
2643--8208[label="0.0025641;1pkt 1fpkt"];
2643--8236[label="0.0025641;1pkt 1fpkt"];
2643--8237[label="0.00769231;3pkt 3fpkt"];
2643--8238[label="0.0025641;1pkt 1fpkt"];
2643--8241[label="0.0025641;1pkt 1fpkt"];
2643--8272[label="1;15pkt 15fpkt"];
2643--8455[label="1;35pkt 35fpkt"];
2643--8509[label="0.0025641;1pkt 1fpkt"];
2643--8601[label="0.047619;1pkt 1fpkt"];
2643--8770[label="0.0719424;10pkt 10fpkt"];
2643--9225[label="0.871795;34pkt 34fpkt"];
2643--9242[label="1;1pkt 1fpkt"];
2643--9754[label="0.333333;1pkt 1fpkt"];
2643--10274[label="0.0102041;1pkt 1fpkt"];
2643--10370[label="0.230769;3pkt 3fpkt"];
2643--10573[label="0.666667;2pkt 2fpkt"];
2643--10586[label="1;1pkt 1fpkt"];
2643--10657[label="1;15pkt 15fpkt"];
2643--10906[label="0.0724638;10pkt 10fpkt"];
2643--11717[label="0.0153846;6pkt 6fpkt"];
2643--11816[label="0.666667;2pkt 2fpkt"];
2643--11849[label="1;14pkt 14fpkt"];
2643--12267[label="0.0153846;6pkt 6fpkt"];
3132--6991[label="1;12pkt 12fpkt"];
3207--7015[label="1;1pkt 1fpkt"];
3207--9242[label="1;1pkt 1fpkt"];
3607--7034[label="1;15pkt 15fpkt"];
3607--8272[label="1;15pkt 15fpkt"];
3607--10657[label="1;15pkt 15fpkt"];
3607--11849[label="1;14pkt 14fpkt"];
3671--6727[label="1;1pkt 1fpkt"];
3671--10586[label="1;1pkt 1fpkt"];
6727--10586[label="1;1pkt 1fpkt"];
7015--9242[label="1;1pkt 1fpkt"];
7034--8272[label="1;15pkt 15fpkt"];
7034--10657[label="1;15pkt 15fpkt"];
7034--11849[label="1;14pkt 14fpkt"];
8272--10657[label="1;15pkt 15fpkt"];
8272--11849[label="1;14pkt 14fpkt"];
10657--11849[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.227.98" src_port="80"/>
    </slice>
    <from sec="1229058078" usec="0"/>
    <to sec="1229058871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.193.43.47"/>
    </slice>
    <from sec="1229058521" usec="0"/>
    <to sec="1229058534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.201.81.47"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
8778[label="6.30.208.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10911[label="6.30.208.47;1pkt 1fpkt", shape=invtriangle, color=brown];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.30.208.47:80, 174.194.104.170:3104}[50%]&lt;BR/&gt;{6.30.208.47:80, 174.194.104.170:3106}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3106: (33.3333%)&lt;BR/&gt; 3104: (16.6667%)&gt;];
}
8778--10911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.104.170" dst_port="3106" src_ip="6.30.208.47" src_port="80"/>
      <filter dst_ip="174.194.104.170" dst_port="3104" src_ip="6.30.208.47" src_port="80"/>
    </slice>
    <from sec="1229058821" usec="0"/>
    <to sec="1229058828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.171.21.48"/>
    </slice>
    <from sec="1229058155" usec="0"/>
    <to sec="1229058162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.137.116.48"/>
    </slice>
    <from sec="1229058597" usec="0"/>
    <to sec="1229058618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.97.138.48"/>
    </slice>
    <from sec="1229058796" usec="0"/>
    <to sec="1229058839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
8785[label="132.5.3.49;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10918[label="132.5.3.49;24pkt 24fpkt", shape=invtriangle, color=brown];
11949[label="132.5.3.49;24pkt 24fpkt", shape=invhouse, color=bisque];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.5.3.49:25, 46.120.33.123:*}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 38244: (2.05479%)&lt;BR/&gt; 12469: (2.05479%)&lt;BR/&gt; 12468: (2.05479%)&lt;BR/&gt; 4954: (2.05479%)&gt;];
}
8785--10918[label="1;24pkt 24fpkt"];
8785--11949[label="1;24pkt 24fpkt"];
10918--11949[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="46.120.33.123" src_ip="132.5.3.49" src_port="25"/>
    </slice>
    <from sec="1229058201" usec="0"/>
    <to sec="1229058799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.26.140.49"/>
    </slice>
    <from sec="1229058396" usec="0"/>
    <to sec="1229058472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.29.48.50"/>
    </slice>
    <from sec="1229058809" usec="0"/>
    <to sec="1229058833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
8800[label="96.170.55.50;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10925[label="96.170.55.50;3pkt 3fpkt", shape=invtriangle, color=brown];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.170.55.50:1075, 172.45.36.2:62997}[33.3333%]&lt;BR/&gt;{96.170.55.50:4946, 172.45.36.2:62997}[33.3333%]&lt;BR/&gt;{96.170.55.50:4969, 172.45.36.2:62997}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62997: (50%)&lt;BR/&gt; 4969: (16.6667%)&lt;BR/&gt; 4946: (16.6667%)&lt;BR/&gt; 1075: (16.6667%)&gt;];
}
8800--10925[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.36.2" dst_port="62997" src_ip="96.170.55.50" src_port="4969"/>
      <filter dst_ip="172.45.36.2" dst_port="62997" src_ip="96.170.55.50" src_port="4946"/>
      <filter dst_ip="172.45.36.2" dst_port="62997" src_ip="96.170.55.50" src_port="1075"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.147.1.51"/>
    </slice>
    <from sec="1229058561" usec="0"/>
    <to sec="1229058581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.216.51.51"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.38.140.51"/>
    </slice>
    <from sec="1229058639" usec="0"/>
    <to sec="1229058649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
8817[label="215.40.236.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10934[label="215.40.236.51;2pkt 2fpkt", shape=invtriangle, color=brown];
11954[label="215.40.236.51;2pkt 2fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.236.51:14743, 194.181.6.66:53}[50%]&lt;BR/&gt;{215.40.236.51:29922, 194.181.6.66:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 29922: (25%)&lt;BR/&gt; 14743: (25%)&gt;];
}
8817--10934[label="1;2pkt 2fpkt"];
8817--11954[label="1;2pkt 2fpkt"];
10934--11954[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.181.6.66" dst_port="53" src_ip="215.40.236.51" src_port="29922"/>
      <filter dst_ip="194.181.6.66" dst_port="53" src_ip="215.40.236.51" src_port="14743"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.140.37.52"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
8827[label="42.192.119.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10941[label="42.192.119.52;4pkt 4fpkt", shape=invtriangle, color=brown];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.192.119.52:80, 174.194.98.22:52004}[25%]&lt;BR/&gt;{42.192.119.52:80, 133.72.69.98:27450}[25%]&lt;BR/&gt;{42.192.119.52:80, 174.194.235.229:51765}[25%]&lt;BR/&gt;{42.192.119.52:80, 174.194.235.229:51893}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52004: (12.5%)&lt;BR/&gt; 51893: (12.5%)&lt;BR/&gt; 51765: (12.5%)&lt;BR/&gt; 27450: (12.5%)&gt;];
}
8827--10941[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.235.229" dst_port="51893" src_ip="42.192.119.52" src_port="80"/>
      <filter dst_ip="174.194.235.229" dst_port="51765" src_ip="42.192.119.52" src_port="80"/>
      <filter dst_ip="133.72.69.98" dst_port="27450" src_ip="42.192.119.52" src_port="80"/>
      <filter dst_ip="174.194.98.22" dst_port="52004" src_ip="42.192.119.52" src_port="80"/>
    </slice>
    <from sec="1229058091" usec="0"/>
    <to sec="1229058703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
8829[label="195.42.154.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10943[label="195.42.154.52;4pkt 4fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.42.154.52:80, 128.87.90.183:56011}[25%]&lt;BR/&gt;{195.42.154.52:80, 128.87.90.183:56012}[25%]&lt;BR/&gt;{195.42.154.52:80, 128.87.90.183:56013}[25%]&lt;BR/&gt;{195.42.154.52:80, 128.87.90.183:56014}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56014: (12.5%)&lt;BR/&gt; 56013: (12.5%)&lt;BR/&gt; 56012: (12.5%)&lt;BR/&gt; 56011: (12.5%)&gt;];
}
8829--10943[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.183" dst_port="56014" src_ip="195.42.154.52" src_port="80"/>
      <filter dst_ip="128.87.90.183" dst_port="56013" src_ip="195.42.154.52" src_port="80"/>
      <filter dst_ip="128.87.90.183" dst_port="56012" src_ip="195.42.154.52" src_port="80"/>
      <filter dst_ip="128.87.90.183" dst_port="56011" src_ip="195.42.154.52" src_port="80"/>
    </slice>
    <from sec="1229058760" usec="0"/>
    <to sec="1229058883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
8835[label="45.73.41.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10946[label="45.73.41.53;6pkt 6fpkt", shape=invtriangle, color=brown];
11960[label="45.73.41.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.73.41.53:*, 169.18.177.1:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 34869: (8.82353%)&lt;BR/&gt; 34868: (8.82353%)&lt;BR/&gt; 34867: (8.82353%)&lt;BR/&gt; 34866: (8.82353%)&gt;];
}
8835--10946[label="1;6pkt 6fpkt"];
8835--11960[label="1;5pkt 5fpkt"];
10946--11960[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.177.1" dst_port="25" src_ip="45.73.41.53"/>
    </slice>
    <from sec="1229058426" usec="0"/>
    <to sec="1229058439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.246.154.53"/>
    </slice>
    <from sec="1229058201" usec="0"/>
    <to sec="1229058209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.238.45.55"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.80.161.57"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
8880[label="133.72.158.58;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10968[label="133.72.158.58;3pkt 3fpkt", shape=invtriangle, color=brown];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.58:1836, 203.6.59.126:443}[33.3333%]&lt;BR/&gt;{133.72.158.58:1832, 222.231.4.147:80}[33.3333%]&lt;BR/&gt;{133.72.158.58:1842, 203.6.59.149:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (33.3333%)&lt;BR/&gt; 1842: (16.6667%)&lt;BR/&gt; 1836: (16.6667%)&lt;BR/&gt; 1832: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
8880--10968[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="203.6.59.149" dst_port="443" src_ip="133.72.158.58" src_port="1842"/>
      <filter dst_ip="222.231.4.147" dst_port="80" src_ip="133.72.158.58" src_port="1832"/>
      <filter dst_ip="203.6.59.126" dst_port="443" src_ip="133.72.158.58" src_port="1836"/>
    </slice>
    <from sec="1229058885" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_996{
style=filled;
color=gray75;
8882[label="214.49.185.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10970[label="214.49.185.58;2pkt 2fpkt", shape=invtriangle, color=brown];
stat996[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.185.58:56967, 195.197.14.94:53}[50%]&lt;BR/&gt;{214.49.185.58:46748, 203.210.178.211:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 56967: (25%)&lt;BR/&gt; 46748: (25%)&gt;];
}
8882--10970[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.210.178.211" dst_port="53" src_ip="214.49.185.58" src_port="46748"/>
      <filter dst_ip="195.197.14.94" dst_port="53" src_ip="214.49.185.58" src_port="56967"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
8908[label="42.156.30.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10981[label="42.156.30.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.156.30.61:53, 128.208.54.97:23474}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23474: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
8908--10981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.54.97" dst_port="23474" src_ip="42.156.30.61" src_port="53"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
8921[label="174.194.146.62;93pkt 93fpkt", shape=pentagon, color=darkviolet];
10986[label="174.194.146.62;93pkt 93fpkt", shape=invtriangle, color=brown];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.146.62:53373, *:*}[95.6989%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53373: (47.8495%)&lt;BR/&gt; 47856: (1.07527%)&lt;BR/&gt; 46689: (1.07527%)&lt;BR/&gt; 80: (1.07527%)&lt;BR/&gt; 63655: (0.537634%)&gt;];
}
8921--10986[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.146.62" src_port="53373"/>
    </slice>
    <from sec="1229058198" usec="0"/>
    <to sec="1229058831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.197.30.64"/>
    </slice>
    <from sec="1229058561" usec="0"/>
    <to sec="1229058612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
8936[label="97.171.32.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10994[label="97.171.32.64;1pkt 1fpkt", shape=invtriangle, color=brown];
11980[label="97.171.32.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.171.32.64:1054, 133.72.197.17:1027}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1054: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
8936--10994[label="1;1pkt 1fpkt"];
8936--11980[label="1;1pkt 1fpkt"];
10994--11980[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.197.17" dst_port="1027" src_ip="97.171.32.64" src_port="1054"/>
    </slice>
    <from sec="1229058897" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.56.220.65"/>
    </slice>
    <from sec="1229058750" usec="0"/>
    <to sec="1229058758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
4183[label="41.207.116.212;d;72pkt 72fpkt", shape=diamond, color=yellow];
8963[label="132.5.230.65;41pkt 41fpkt", shape=pentagon, color=darkviolet];
11006[label="132.5.230.65;41pkt 41fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.5.230.65:80, 41.207.116.212:*}[50.6494%]&lt;BR/&gt;{128.64.203.161:80, 41.207.116.212:*}[46.7532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65190: (0.974026%)&lt;BR/&gt; 64559: (0.974026%)&lt;BR/&gt; 60585: (0.974026%)&lt;BR/&gt; 60045: (0.974026%)&gt;];
}
4183--5793[label="0.458333;33pkt 33fpkt"];
4183--8131[label="0.0694444;5pkt 5fpkt"];
4183--8180[label="0.0694444;5pkt 5fpkt"];
4183--8219[label="0.0694444;5pkt 5fpkt"];
4183--8963[label="0.878049;36pkt 36fpkt"];
4183--11006[label="0.878049;36pkt 36fpkt"];
8963--11006[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.212" src_ip="132.5.230.65" src_port="80"/>
      <filter dst_ip="41.207.116.212" src_ip="128.64.203.161" src_port="80"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.134.42.67"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
8999[label="210.196.120.69;45pkt 45fpkt", shape=pentagon, color=darkviolet];
11020[label="210.196.120.69;45pkt 45fpkt", shape=invtriangle, color=brown];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.196.120.69:21, 169.18.152.94:*}[20%]&lt;BR/&gt;{210.196.120.69:21, 169.18.155.239:*}[20%]&lt;BR/&gt;{210.196.120.69:21, 169.18.206.243:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 50140: (1.11111%)&lt;BR/&gt; 50136: (1.11111%)&lt;BR/&gt; 50134: (1.11111%)&lt;BR/&gt; 50130: (1.11111%)&gt;];
}
8999--11020[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.206.243" src_ip="210.196.120.69" src_port="21"/>
      <filter dst_ip="169.18.155.239" src_ip="210.196.120.69" src_port="21"/>
      <filter dst_ip="169.18.152.94" src_ip="210.196.120.69" src_port="21"/>
    </slice>
    <from sec="1229058012" usec="0"/>
    <to sec="1229058861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
9017[label="174.194.207.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11029[label="174.194.207.70;1pkt 1fpkt", shape=invtriangle, color=brown];
11988[label="174.194.207.70;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.207.70:25, 0.209.25.53:62738}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62738: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9017--11029[label="1;1pkt 1fpkt"];
9017--11988[label="1;1pkt 1fpkt"];
11029--11988[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.209.25.53" dst_port="62738" src_ip="174.194.207.70" src_port="25"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.96.131.71"/>
    </slice>
    <from sec="1229058461" usec="0"/>
    <to sec="1229058481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.21.229.71"/>
    </slice>
    <from sec="1229058592" usec="0"/>
    <to sec="1229058596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
9032[label="203.32.242.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11036[label="203.32.242.71;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.32.242.71:80, 174.194.18.4:50261}[50%]&lt;BR/&gt;{203.32.242.71:80, 174.194.18.4:50262}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50262: (25%)&lt;BR/&gt; 50261: (25%)&gt;];
}
9032--11036[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.4" dst_port="50262" src_ip="203.32.242.71" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50261" src_ip="203.32.242.71" src_port="80"/>
    </slice>
    <from sec="1229058838" usec="0"/>
    <to sec="1229058858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.131.112.72"/>
    </slice>
    <from sec="1229058235" usec="0"/>
    <to sec="1229058265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
9086[label="41.142.7.76;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11065[label="41.142.7.76;6pkt 6fpkt", shape=invtriangle, color=brown];
12000[label="41.142.7.76;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.142.7.76:*, 169.18.177.1:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39615: (8.33333%)&lt;BR/&gt; 39614: (8.33333%)&lt;BR/&gt; 39601: (8.33333%)&lt;BR/&gt; 39600: (8.33333%)&gt;];
}
9086--11065[label="1;6pkt 6fpkt"];
9086--12000[label="1;6pkt 6fpkt"];
11065--12000[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.177.1" dst_port="25" src_ip="41.142.7.76"/>
    </slice>
    <from sec="1229058609" usec="0"/>
    <to sec="1229058620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.166.115.77"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
9113[label="116.33.65.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11079[label="116.33.65.78;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.33.65.78:80, 174.194.18.218:59718}[50%]&lt;BR/&gt;{116.33.65.78:80, 174.194.18.218:59719}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59719: (25%)&lt;BR/&gt; 59718: (25%)&gt;];
}
9113--11079[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.218" dst_port="59719" src_ip="116.33.65.78" src_port="80"/>
      <filter dst_ip="174.194.18.218" dst_port="59718" src_ip="116.33.65.78" src_port="80"/>
    </slice>
    <from sec="1229058832" usec="0"/>
    <to sec="1229058859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
4211[label="133.72.58.43;d;50pkt 50fpkt", shape=diamond, color=yellow];
4212[label="215.9.69.79;s;49pkt 49fpkt", shape=diamond, color=yellow];
9123[label="215.9.69.79;53pkt 53fpkt", shape=pentagon, color=darkviolet];
11081[label="215.9.69.79;53pkt 53fpkt", shape=invtriangle, color=brown];
12008[label="215.9.69.79;53pkt 53fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.69.79:*, 133.72.58.43:80}[94.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6124%)&lt;BR/&gt; 55906: (0.968992%)&lt;BR/&gt; 55848: (0.968992%)&lt;BR/&gt; 55792: (0.968992%)&lt;BR/&gt; 55737: (0.968992%)&gt;];
}
4211--4212[label="0.979592;48pkt 48fpkt"];
4211--8119[label="0.06;3pkt 3fpkt"];
4211--8134[label="0.06;3pkt 3fpkt"];
4211--8165[label="0.02;1pkt 1fpkt"];
4211--8208[label="0.02;1pkt 1fpkt"];
4211--8241[label="0.02;1pkt 1fpkt"];
4211--9123[label="0.96;48pkt 48fpkt"];
4211--11081[label="0.96;48pkt 48fpkt"];
4211--12008[label="0.96;48pkt 48fpkt"];
4212--8119[label="0.0612245;3pkt 3fpkt"];
4212--8134[label="0.0612245;3pkt 3fpkt"];
4212--8165[label="0.0204082;1pkt 1fpkt"];
4212--8208[label="0.0204082;1pkt 1fpkt"];
4212--8241[label="0.0204082;1pkt 1fpkt"];
4212--9123[label="1;49pkt 49fpkt"];
4212--11081[label="1;49pkt 49fpkt"];
4212--12008[label="1;49pkt 49fpkt"];
9123--11081[label="1;53pkt 53fpkt"];
9123--12008[label="1;53pkt 53fpkt"];
11081--12008[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.58.43" dst_port="80" src_ip="215.9.69.79"/>
    </slice>
    <from sec="1229058010" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
9129[label="128.208.192.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11083[label="128.208.192.79;1pkt 1fpkt", shape=invtriangle, color=brown];
12009[label="128.208.192.79;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.79:80, 41.207.125.155:45531}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45531: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9129--11083[label="1;1pkt 1fpkt"];
9129--12009[label="1;1pkt 1fpkt"];
11083--12009[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.125.155" dst_port="45531" src_ip="128.208.192.79" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
2604[label="133.72.150.80;s;164pkt 164fpkt", shape=diamond, color=yellow];
9137[label="133.72.150.80;164pkt 164fpkt", shape=pentagon, color=darkviolet];
11086[label="133.72.150.80;164pkt 164fpkt", shape=invtriangle, color=brown];
12011[label="133.72.150.80;164pkt 164fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.150.80:*, *:80}[88.4146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2073%)&lt;BR/&gt; 39000: (3.04878%)&lt;BR/&gt; 843: (2.7439%)&lt;BR/&gt; 4890: (0.304878%)&lt;BR/&gt; 4889: (0.304878%)&gt;];
}
2604--8119[label="0.20122;33pkt 33fpkt"];
2604--9137[label="1;164pkt 164fpkt"];
2604--11086[label="1;164pkt 164fpkt"];
2604--12011[label="1;164pkt 164fpkt"];
9137--11086[label="1;164pkt 164fpkt"];
9137--12011[label="1;164pkt 164fpkt"];
11086--12011[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.72.150.80"/>
    </slice>
    <from sec="1229058023" usec="0"/>
    <to sec="1229058892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.49.2.81"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
861[label="215.40.233.81;s;843pkt 843fpkt", shape=diamond, color=yellow];
9147[label="215.40.233.81;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11090[label="215.40.233.81;3pkt 3fpkt", shape=invtriangle, color=brown];
12015[label="215.40.233.81;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.233.81:*, *:53}[80.1183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.9648%)&lt;BR/&gt; 0: (19.9531%)&lt;BR/&gt; 60223: (0.234742%)&lt;BR/&gt; 51580: (0.176056%)&lt;BR/&gt; 65442: (0.117371%)&gt;];
}
861--4751[label="0.00118624;1pkt 1fpkt"];
861--7750[label="0.00118624;1pkt 1fpkt"];
861--8108[label="0.00118624;1pkt 1fpkt"];
861--8153[label="0.0177936;15pkt 15fpkt"];
861--8164[label="0.00355872;3pkt 3fpkt"];
861--8196[label="0.0177936;15pkt 15fpkt"];
861--8207[label="0.00355872;3pkt 3fpkt"];
861--8229[label="0.0177936;15pkt 15fpkt"];
861--8240[label="0.00355872;3pkt 3fpkt"];
861--9147[label="0.333333;1pkt 1fpkt"];
861--11090[label="0.333333;1pkt 1fpkt"];
861--12015[label="0.333333;1pkt 1fpkt"];
9147--11090[label="1;3pkt 3fpkt"];
9147--12015[label="1;3pkt 3fpkt"];
11090--12015[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.40.233.81"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.199.0.82"/>
    </slice>
    <from sec="1229058487" usec="0"/>
    <to sec="1229058491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.43.49.82"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
9165[label="206.96.90.83;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11098[label="206.96.90.83;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.96.90.83:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64121: (3.84615%)&lt;BR/&gt; 58144: (3.84615%)&lt;BR/&gt; 56636: (3.84615%)&lt;BR/&gt; 36938: (3.84615%)&gt;];
}
9165--11098[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="206.96.90.83" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.67.98.87"/>
    </slice>
    <from sec="1229058579" usec="0"/>
    <to sec="1229058608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
9217[label="133.72.21.88;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11125[label="133.72.21.88;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.21.88:*, 216.186.176.137:53}[33.3333%]&lt;BR/&gt;{133.72.21.88:*, 203.114.108.69:53}[22.2222%]&lt;BR/&gt;{133.72.21.88:*, 46.33.41.243:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 57213: (5.55556%)&lt;BR/&gt; 53857: (5.55556%)&lt;BR/&gt; 47750: (5.55556%)&lt;BR/&gt; 37486: (5.55556%)&gt;];
}
9217--11125[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.186.176.137" dst_port="53" src_ip="133.72.21.88"/>
      <filter dst_ip="46.33.41.243" dst_port="53" src_ip="133.72.21.88"/>
      <filter dst_ip="203.114.108.69" dst_port="53" src_ip="133.72.21.88"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
1917[label="85.214.105.78;s;298pkt 298fpkt", shape=diamond, color=yellow];
2092[label="174.194.232.10;d;32pkt 32fpkt", shape=diamond, color=yellow];
2714[label="52.152.12.92;s;23pkt 23fpkt", shape=diamond, color=yellow];
5600[label="174.194.232.10;d;32pkt 32fpkt", shape=hexagon, color=black];
5807[label="85.214.105.78;s;247pkt 247fpkt", shape=hexagon, color=black];
9255[label="52.152.12.92;22pkt 22fpkt", shape=pentagon, color=darkviolet];
11143[label="52.152.12.92;22pkt 22fpkt", shape=invtriangle, color=brown];
12032[label="52.152.12.92;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.214.105.78:80, 214.56.229.59:*}[63.2219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8567%)&lt;BR/&gt; 50355: (0.429799%)&lt;BR/&gt; 50354: (0.429799%)&lt;BR/&gt; 50353: (0.429799%)&lt;BR/&gt; 50352: (0.429799%)&gt;];
}
1917--2092[label="0.03125;1pkt 1fpkt"];
1917--2103[label="0.0338983;2pkt 2fpkt"];
1917--3470[label="0.010989;1pkt 1fpkt"];
1917--3737[label="0.0588235;5pkt 5fpkt"];
1917--5175[label="0.536913;160pkt 160fpkt"];
1917--5600[label="0.03125;1pkt 1fpkt"];
1917--5807[label="1;247pkt 247fpkt"];
1917--6575[label="0.0120482;1pkt 1fpkt"];
1917--7144[label="0.128205;5pkt 5fpkt"];
1917--8131[label="0.0704698;21pkt 21fpkt"];
1917--8180[label="0.0704698;21pkt 21fpkt"];
1917--8219[label="0.0704698;21pkt 21fpkt"];
2092--2714[label="1;23pkt 23fpkt"];
2092--5600[label="1;32pkt 32fpkt"];
2092--5807[label="0.03125;1pkt 1fpkt"];
2092--6739[label="0.0625;2pkt 2fpkt"];
2092--8131[label="0.09375;3pkt 3fpkt"];
2092--8180[label="0.09375;3pkt 3fpkt"];
2092--8219[label="0.09375;3pkt 3fpkt"];
2092--9255[label="1;22pkt 22fpkt"];
2092--9810[label="0.0625;2pkt 2fpkt"];
2092--11143[label="1;22pkt 22fpkt"];
2092--12032[label="1;22pkt 22fpkt"];
2714--5600[label="1;23pkt 23fpkt"];
2714--9255[label="1;22pkt 22fpkt"];
2714--11143[label="1;22pkt 22fpkt"];
2714--12032[label="1;22pkt 22fpkt"];
5600--5807[label="0.03125;1pkt 1fpkt"];
5600--6739[label="0.0625;2pkt 2fpkt"];
5600--8131[label="0.09375;3pkt 3fpkt"];
5600--8180[label="0.09375;3pkt 3fpkt"];
5600--8219[label="0.09375;3pkt 3fpkt"];
5600--9255[label="1;22pkt 22fpkt"];
5600--9810[label="0.0625;2pkt 2fpkt"];
5600--11143[label="1;22pkt 22fpkt"];
5600--12032[label="1;22pkt 22fpkt"];
5807--6575[label="0.0120482;1pkt 1fpkt"];
5807--7144[label="0.128205;5pkt 5fpkt"];
5807--8131[label="0.0850202;21pkt 21fpkt"];
5807--8180[label="0.0850202;21pkt 21fpkt"];
5807--8219[label="0.0850202;21pkt 21fpkt"];
9255--11143[label="1;22pkt 22fpkt"];
9255--12032[label="1;22pkt 22fpkt"];
11143--12032[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.229.59" src_ip="85.214.105.78" src_port="80"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
9267[label="133.72.37.93;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11150[label="133.72.37.93;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.37.93:80, 195.78.199.43:51343}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51343: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9267--11150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.78.199.43" dst_port="51343" src_ip="133.72.37.93" src_port="80"/>
    </slice>
    <from sec="1229058428" usec="0"/>
    <to sec="1229058444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
9273[label="133.72.125.93;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11155[label="133.72.125.93;1pkt 1fpkt", shape=invtriangle, color=brown];
12038[label="133.72.125.93;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.125.93:80, 61.162.36.132:38189}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38189: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9273--11155[label="1;1pkt 1fpkt"];
9273--12038[label="1;1pkt 1fpkt"];
11155--12038[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.162.36.132" dst_port="38189" src_ip="133.72.125.93" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
9290[label="200.106.60.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11164[label="200.106.60.96;2pkt 2fpkt", shape=invtriangle, color=brown];
12041[label="200.106.60.96;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.106.60.96:80, 133.72.97.101:62987}[50%]&lt;BR/&gt;{200.106.60.96:80, 133.72.252.197:56149}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62987: (25%)&lt;BR/&gt; 56149: (25%)&gt;];
}
9290--11164[label="1;2pkt 2fpkt"];
9290--12041[label="1;2pkt 2fpkt"];
11164--12041[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.252.197" dst_port="56149" src_ip="200.106.60.96" src_port="80"/>
      <filter dst_ip="133.72.97.101" dst_port="62987" src_ip="200.106.60.96" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
9303[label="133.72.217.97;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11169[label="133.72.217.97;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.217.97:*, 209.144.156.218:80}[30.7692%]&lt;BR/&gt;{133.72.217.97:*, 69.4.55.82:80}[23.0769%]&lt;BR/&gt;{133.72.217.97:*, 194.3.9.188:80}[23.0769%]&lt;BR/&gt;{133.72.217.97:*, 195.36.38.239:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1827: (3.84615%)&lt;BR/&gt; 1815: (3.84615%)&lt;BR/&gt; 1812: (3.84615%)&lt;BR/&gt; 1808: (3.84615%)&gt;];
}
9303--11169[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.144.156.218" dst_port="80" src_ip="133.72.217.97"/>
      <filter dst_ip="195.36.38.239" dst_port="80" src_ip="133.72.217.97"/>
      <filter dst_ip="194.3.9.188" dst_port="80" src_ip="133.72.217.97"/>
      <filter dst_ip="69.4.55.82" dst_port="80" src_ip="133.72.217.97"/>
    </slice>
    <from sec="1229058198" usec="0"/>
    <to sec="1229058555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
9307[label="37.146.68.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11172[label="37.146.68.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.146.68.98:3949, 215.40.227.25:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3949: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9307--11172[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.227.25" dst_port="80" src_ip="37.146.68.98" src_port="3949"/>
    </slice>
    <from sec="1229058252" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1031{
style=filled;
color=gray75;
9316[label="144.203.201.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11177[label="144.203.201.98;1pkt 1fpkt", shape=invtriangle, color=brown];
12045[label="144.203.201.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1031[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.201.98:28915, 206.219.59.106:7910}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28915: (50%)&lt;BR/&gt; 7910: (50%)&gt;];
}
9316--11177[label="1;1pkt 1fpkt"];
9316--12045[label="1;1pkt 1fpkt"];
11177--12045[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.219.59.106" dst_port="7910" src_ip="144.203.201.98" src_port="28915"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
9320[label="133.72.41.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11178[label="133.72.41.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.41.99:25, 100.140.160.190:3332}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3332: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9320--11178[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="100.140.160.190" dst_port="3332" src_ip="133.72.41.99" src_port="25"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
9346[label="216.93.12.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11189[label="216.93.12.101;2pkt 2fpkt", shape=invtriangle, color=brown];
12049[label="216.93.12.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.93.12.101:80, 128.64.244.82:49348}[50%]&lt;BR/&gt;{216.93.12.101:80, 128.64.244.82:49349}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49349: (30%)&lt;BR/&gt; 49348: (20%)&gt;];
}
9346--11189[label="1;2pkt 2fpkt"];
9346--12049[label="1;1pkt 1fpkt"];
11189--12049[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.244.82" dst_port="49349" src_ip="216.93.12.101" src_port="80"/>
      <filter dst_ip="128.64.244.82" dst_port="49348" src_ip="216.93.12.101" src_port="80"/>
    </slice>
    <from sec="1229058024" usec="0"/>
    <to sec="1229058040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.193.67.101"/>
    </slice>
    <from sec="1229058005" usec="0"/>
    <to sec="1229058018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.72.177.101"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
9355[label="128.208.192.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11193[label="128.208.192.101;1pkt 1fpkt", shape=invtriangle, color=brown];
12052[label="128.208.192.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.192.101:80, 100.204.89.34:5012}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5012: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9355--11193[label="1;1pkt 1fpkt"];
9355--12052[label="1;1pkt 1fpkt"];
11193--12052[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="100.204.89.34" dst_port="5012" src_ip="128.208.192.101" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.218.170.102"/>
    </slice>
    <from sec="1229058013" usec="0"/>
    <to sec="1229058693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
9373[label="40.190.66.103;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11203[label="40.190.66.103;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.190.66.103:80, 172.45.83.245:62815}[33.3333%]&lt;BR/&gt;{40.190.66.103:80, 172.45.83.245:62817}[33.3333%]&lt;BR/&gt;{40.190.66.103:80, 172.45.83.245:62819}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62819: (16.6667%)&lt;BR/&gt; 62817: (16.6667%)&lt;BR/&gt; 62815: (16.6667%)&gt;];
}
9373--11203[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.83.245" dst_port="62819" src_ip="40.190.66.103" src_port="80"/>
      <filter dst_ip="172.45.83.245" dst_port="62817" src_ip="40.190.66.103" src_port="80"/>
      <filter dst_ip="172.45.83.245" dst_port="62815" src_ip="40.190.66.103" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
9383[label="1.18.69.104;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11206[label="1.18.69.104;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.18.69.104:443, 133.72.220.122:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 53492: (5%)&lt;BR/&gt; 53491: (5%)&lt;BR/&gt; 53490: (5%)&lt;BR/&gt; 53489: (5%)&gt;];
}
9383--11206[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.220.122" src_ip="1.18.69.104" src_port="443"/>
    </slice>
    <from sec="1229058237" usec="0"/>
    <to sec="1229058239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.119.26.106"/>
    </slice>
    <from sec="1229058500" usec="0"/>
    <to sec="1229058514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.194.33.106"/>
    </slice>
    <from sec="1229058295" usec="0"/>
    <to sec="1229058302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
9418[label="172.137.130.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11218[label="172.137.130.107;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.137.130.107:80, 172.45.94.10:51081}[50%]&lt;BR/&gt;{172.137.130.107:80, 172.45.94.10:51085}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51085: (25%)&lt;BR/&gt; 51081: (25%)&gt;];
}
9418--11218[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.94.10" dst_port="51085" src_ip="172.137.130.107" src_port="80"/>
      <filter dst_ip="172.45.94.10" dst_port="51081" src_ip="172.137.130.107" src_port="80"/>
    </slice>
    <from sec="1229058480" usec="0"/>
    <to sec="1229058538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
2642[label="214.57.103.48;d;173pkt 173fpkt", shape=diamond, color=yellow];
9420[label="133.72.167.107;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11220[label="133.72.167.107;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.133.44:*, 214.57.103.48:443}[23.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4536: (0.672646%)&lt;BR/&gt; 4534: (0.672646%)&lt;BR/&gt; 4532: (0.672646%)&lt;BR/&gt; 4530: (0.672646%)&gt;];
}
2642--3575[label="0.18254;23pkt 23fpkt"];
2642--4014[label="0.27907;24pkt 24fpkt"];
2642--4908[label="0.254335;44pkt 44fpkt"];
2642--5225[label="0.196532;34pkt 34fpkt"];
2642--9420[label="0.56;14pkt 14fpkt"];
2642--11220[label="0.56;14pkt 14fpkt"];
9420--11220[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.103.48" dst_port="443" src_ip="133.72.133.44"/>
    </slice>
    <from sec="1229058096" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.55.72.111"/>
    </slice>
    <from sec="1229058524" usec="0"/>
    <to sec="1229058533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
9466[label="45.219.232.111;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11241[label="45.219.232.111;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.219.232.111:80, 174.194.18.4:50272}[25%]&lt;BR/&gt;{45.219.232.111:80, 174.194.18.4:50273}[25%]&lt;BR/&gt;{45.219.232.111:80, 174.194.18.4:50275}[25%]&lt;BR/&gt;{45.219.232.111:80, 174.194.18.4:50276}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50276: (12.5%)&lt;BR/&gt; 50275: (12.5%)&lt;BR/&gt; 50273: (12.5%)&lt;BR/&gt; 50272: (12.5%)&gt;];
}
9466--11241[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.4" dst_port="50276" src_ip="45.219.232.111" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50275" src_ip="45.219.232.111" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50273" src_ip="45.219.232.111" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50272" src_ip="45.219.232.111" src_port="80"/>
    </slice>
    <from sec="1229058842" usec="0"/>
    <to sec="1229058853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
1249[label="133.72.144.1;d;121pkt 121fpkt", shape=diamond, color=yellow];
4427[label="192.140.141.115;s;121pkt 121fpkt", shape=diamond, color=yellow];
9493[label="192.140.141.115;121pkt 121fpkt", shape=pentagon, color=darkviolet];
11253[label="192.140.141.115;121pkt 121fpkt", shape=invtriangle, color=brown];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.140.141.115:80, 133.72.144.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2492: (0.413223%)&lt;BR/&gt; 2490: (0.413223%)&lt;BR/&gt; 2488: (0.413223%)&lt;BR/&gt; 2486: (0.413223%)&gt;];
}
1249--4427[label="1;121pkt 121fpkt"];
1249--9493[label="1;121pkt 121fpkt"];
1249--11253[label="1;121pkt 121fpkt"];
4427--9493[label="1;121pkt 121fpkt"];
4427--11253[label="1;121pkt 121fpkt"];
9493--11253[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.144.1" src_ip="192.140.141.115" src_port="80"/>
    </slice>
    <from sec="1229058583" usec="0"/>
    <to sec="1229058800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
9505[label="0.169.169.116;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11258[label="0.169.169.116;7pkt 7fpkt", shape=invtriangle, color=brown];
12075[label="0.169.169.116;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.169.169.116:80, 128.87.90.181:*}[57.1429%]&lt;BR/&gt;{0.169.169.116:80, 128.87.90.180:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58455: (7.14286%)&lt;BR/&gt; 51886: (7.14286%)&lt;BR/&gt; 51586: (7.14286%)&lt;BR/&gt; 51538: (7.14286%)&gt;];
}
9505--11258[label="1;7pkt 7fpkt"];
9505--12075[label="1;7pkt 7fpkt"];
11258--12075[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="128.87.90.181" src_ip="0.169.169.116" src_port="80"/>
      <filter dst_ip="128.87.90.180" src_ip="0.169.169.116" src_port="80"/>
    </slice>
    <from sec="1229058870" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.65.233.117"/>
    </slice>
    <from sec="1229058481" usec="0"/>
    <to sec="1229058487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.22.11.118"/>
    </slice>
    <from sec="1229058239" usec="0"/>
    <to sec="1229058292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.74.56.118"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
9536[label="59.131.16.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11270[label="59.131.16.121;1pkt 1fpkt", shape=invtriangle, color=brown];
12081[label="59.131.16.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.131.16.121:13478, 214.56.220.165:35978}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35978: (50%)&lt;BR/&gt; 13478: (50%)&gt;];
}
9536--11270[label="1;1pkt 1fpkt"];
9536--12081[label="1;1pkt 1fpkt"];
11270--12081[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.165" dst_port="35978" src_ip="59.131.16.121" src_port="13478"/>
    </slice>
    <from sec="1229058829" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
9546[label="174.194.58.122;93pkt 93fpkt", shape=pentagon, color=darkviolet];
11275[label="174.194.58.122;93pkt 93fpkt", shape=invtriangle, color=brown];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.58.122:54881, *:*}[30.1075%]&lt;BR/&gt;{174.194.58.122:42733, *:*}[27.957%]&lt;BR/&gt;{174.194.58.122:56078, *:*}[23.6559%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54881: (15.0538%)&lt;BR/&gt; 42733: (13.9785%)&lt;BR/&gt; 56078: (11.828%)&lt;BR/&gt; 53: (4.83871%)&lt;BR/&gt; 110: (1.6129%)&gt;];
}
9546--11275[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="174.194.58.122" src_port="54881"/>
      <filter src_ip="174.194.58.122" src_port="42733"/>
      <filter src_ip="174.194.58.122" src_port="56078"/>
    </slice>
    <from sec="1229058018" usec="0"/>
    <to sec="1229058890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.60.40.124"/>
    </slice>
    <from sec="1229058722" usec="0"/>
    <to sec="1229058734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.59.74.127"/>
    </slice>
    <from sec="1229058528" usec="0"/>
    <to sec="1229058880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
9585[label="128.64.245.128;91pkt 91fpkt", shape=pentagon, color=darkviolet];
11295[label="128.64.245.128;91pkt 91fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.245.128:30781, *:*}[94.5055%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30781: (47.2527%)&lt;BR/&gt; 443: (1.0989%)&lt;BR/&gt; 80: (1.0989%)&lt;BR/&gt; 64939: (0.549451%)&lt;BR/&gt; 63121: (0.549451%)&gt;];
}
9585--11295[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="128.64.245.128" src_port="30781"/>
    </slice>
    <from sec="1229058058" usec="0"/>
    <to sec="1229058869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.146.53.130"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.153.184.132"/>
    </slice>
    <from sec="1229058355" usec="0"/>
    <to sec="1229058382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
9630[label="42.253.92.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11319[label="42.253.92.133;2pkt 2fpkt", shape=invtriangle, color=brown];
12103[label="42.253.92.133;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.253.92.133:10391, 128.64.246.16:33437}[50%]&lt;BR/&gt;{42.253.92.133:10391, 128.64.246.16:33438}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10391: (50%)&lt;BR/&gt; 33438: (25%)&lt;BR/&gt; 33437: (25%)&gt;];
}
9630--11319[label="1;2pkt 2fpkt"];
9630--12103[label="1;2pkt 2fpkt"];
11319--12103[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.246.16" dst_port="33438" src_ip="42.253.92.133" src_port="10391"/>
      <filter dst_ip="128.64.246.16" dst_port="33437" src_ip="42.253.92.133" src_port="10391"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.49.6.137"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.80.29.137"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.73.13.138"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950327,1.74691,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
1494[label="215.40.237.138;s;384pkt 384fpkt", shape=diamond, color=yellow];
1495[label="102.85.101.73;d;421pkt 421fpkt", shape=diamond, color=yellow];
1540[label="128.208.192.79;s;53pkt 53fpkt", shape=diamond, color=yellow];
2481[label="215.40.237.50;s;281pkt 281fpkt", shape=diamond, color=yellow];
2968[label="48.48.13.234;d;262pkt 262fpkt", shape=diamond, color=yellow];
3454[label="215.40.238.240;s;664pkt 664fpkt", shape=diamond, color=yellow];
3471[label="215.40.237.58;s;87pkt 87fpkt", shape=diamond, color=yellow];
3677[label="212.19.132.3;d;62pkt 62fpkt", shape=diamond, color=yellow];
3899[label="41.207.116.26;d;15pkt 15fpkt", shape=diamond, color=yellow];
6125[label="48.48.13.234;d;232pkt 232fpkt", shape=hexagon, color=black];
6560[label="215.40.238.240;s;564pkt 564fpkt", shape=hexagon, color=black];
6730[label="212.19.132.3;d;62pkt 62fpkt", shape=hexagon, color=black];
7234[label="34.227.54.67;d;34pkt 34fpkt", shape=hexagon, color=black];
7458[label="215.40.237.50;s;281pkt 281fpkt", shape=hexagon, color=black];
7485[label="216.160.64.210;d;830pkt 830fpkt", shape=hexagon, color=black];
9687[label="215.40.237.138;466pkt 466fpkt", shape=pentagon, color=darkviolet];
11345[label="215.40.237.138;466pkt 466fpkt", shape=invtriangle, color=brown];
12114[label="215.40.237.138;466pkt 466fpkt", shape=invhouse, color=bisque];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.238.240:*, *:53}[22.9023%]&lt;BR/&gt;{174.194.132.143:*, 216.160.64.210:53}[20.7134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (17.7531%)&lt;BR/&gt; 139: (14.1652%)&lt;BR/&gt; 445: (14.1297%)&lt;BR/&gt; 80: (1.92718%)&lt;BR/&gt; 22: (1.39432%)&gt;];
}
1494--1495[label="0.984375;378pkt 378fpkt"];
1494--2392[label="0.00260417;1pkt 1fpkt"];
1494--3677[label="0.016129;1pkt 1fpkt"];
1494--4426[label="0.0125;1pkt 1fpkt"];
1494--5730[label="0.00260417;1pkt 1fpkt"];
1494--6730[label="0.016129;1pkt 1fpkt"];
1494--7719[label="0.0125;1pkt 1fpkt"];
1494--9687[label="1;384pkt 384fpkt"];
1494--11345[label="1;384pkt 384fpkt"];
1494--12114[label="1;384pkt 384fpkt"];
1495--9687[label="0.997625;420pkt 420fpkt"];
1495--11345[label="0.997625;420pkt 420fpkt"];
1495--12114[label="0.997625;420pkt 420fpkt"];
1540--2110[label="0.113208;6pkt 6fpkt"];
1540--3443[label="0.097561;4pkt 4fpkt"];
1540--3508[label="0.0188679;1pkt 1fpkt"];
1540--3777[label="0.320755;17pkt 17fpkt"];
1540--4139[label="0.0754717;4pkt 4fpkt"];
1540--6180[label="0.113208;6pkt 6fpkt"];
1540--6975[label="0.0188679;1pkt 1fpkt"];
1540--7176[label="1;46pkt 46fpkt"];
1540--7234[label="0.0882353;3pkt 3fpkt"];
1540--8131[label="0.0188679;1pkt 1fpkt"];
1540--8180[label="0.0188679;1pkt 1fpkt"];
1540--8219[label="0.0188679;1pkt 1fpkt"];
2481--2968[label="1;262pkt 262fpkt"];
2481--3677[label="0.016129;1pkt 1fpkt"];
2481--4426[label="0.0125;1pkt 1fpkt"];
2481--4751[label="0.0213523;6pkt 6fpkt"];
2481--5428[label="0.0106762;3pkt 3fpkt"];
2481--5730[label="0.00355872;1pkt 1fpkt"];
2481--5772[label="0.00355872;1pkt 1fpkt"];
2481--6125[label="1;232pkt 232fpkt"];
2481--6730[label="0.016129;1pkt 1fpkt"];
2481--7458[label="1;281pkt 281fpkt"];
2481--7719[label="0.0125;1pkt 1fpkt"];
2481--7750[label="0.0213523;6pkt 6fpkt"];
2481--8108[label="0.0213523;6pkt 6fpkt"];
2481--8119[label="0.00355872;1pkt 1fpkt"];
2968--6125[label="1;232pkt 232fpkt"];
2968--7458[label="1;262pkt 262fpkt"];
3454--3677[label="0.016129;1pkt 1fpkt"];
3454--3714[label="0.0128824;8pkt 8fpkt"];
3454--3721[label="0.00768049;5pkt 5fpkt"];
3454--3735[label="0.016;10pkt 10fpkt"];
3454--3745[label="0.0121029;8pkt 8fpkt"];
3454--3746[label="0.0112903;7pkt 7fpkt"];
3454--3899[label="0.133333;2pkt 2fpkt"];
3454--4099[label="0.0185529;10pkt 10fpkt"];
3454--4121[label="0.0231405;14pkt 14fpkt"];
3454--4143[label="0.00511945;3pkt 3fpkt"];
3454--4201[label="0.0209059;12pkt 12fpkt"];
3454--4426[label="0.0125;1pkt 1fpkt"];
3454--4751[label="0.00903614;6pkt 6fpkt"];
3454--5428[label="0.00301205;2pkt 2fpkt"];
3454--5730[label="0.00150602;1pkt 1fpkt"];
3454--6035[label="0.00245098;1pkt 1fpkt"];
3454--6284[label="0.0361446;24pkt 24fpkt"];
3454--6405[label="0.0060241;4pkt 4fpkt"];
3454--6560[label="1;564pkt 564fpkt"];
3454--6730[label="0.016129;1pkt 1fpkt"];
3454--6831[label="0.0122164;7pkt 7fpkt"];
3454--7129[label="0.0204499;10pkt 10fpkt"];
3454--7166[label="0.0210843;14pkt 14fpkt"];
3454--7234[label="0.235294;8pkt 8fpkt"];
3454--7443[label="0.0121029;8pkt 8fpkt"];
3454--7454[label="0.00903614;6pkt 6fpkt"];
3454--7485[label="0.0135542;9pkt 9fpkt"];
3454--7540[label="0.0209059;12pkt 12fpkt"];
3454--7719[label="0.0125;1pkt 1fpkt"];
3454--7750[label="0.00903614;6pkt 6fpkt"];
3454--8056[label="0.0361446;24pkt 24fpkt"];
3454--8108[label="0.00903614;6pkt 6fpkt"];
3454--8131[label="0.00150602;1pkt 1fpkt"];
3454--8153[label="0.0828313;55pkt 55fpkt"];
3454--8180[label="0.00150602;1pkt 1fpkt"];
3454--8196[label="0.0828313;55pkt 55fpkt"];
3454--8219[label="0.00150602;1pkt 1fpkt"];
3454--8229[label="0.0828313;55pkt 55fpkt"];
3471--3677[label="0.016129;1pkt 1fpkt"];
3471--4426[label="0.0125;1pkt 1fpkt"];
3471--5253[label="0.0114943;1pkt 1fpkt"];
3471--5428[label="0.0229885;2pkt 2fpkt"];
3471--5569[label="0.137931;12pkt 12fpkt"];
3471--5730[label="0.0114943;1pkt 1fpkt"];
3471--5772[label="0.0114943;1pkt 1fpkt"];
3471--6730[label="0.016129;1pkt 1fpkt"];
3471--7719[label="0.0125;1pkt 1fpkt"];
3471--8119[label="0.37931;33pkt 33fpkt"];
3471--8134[label="0.0114943;1pkt 1fpkt"];
3471--8885[label="1;87pkt 87fpkt"];
3677--4157[label="0.0263158;1pkt 1fpkt"];
3677--5624[label="0.0185185;1pkt 1fpkt"];
3677--6560[label="0.016129;1pkt 1fpkt"];
3677--6730[label="1;62pkt 62fpkt"];
3677--7458[label="0.016129;1pkt 1fpkt"];
3677--8360[label="0.0175439;1pkt 1fpkt"];
3677--8885[label="0.016129;1pkt 1fpkt"];
3677--9586[label="0.016129;1pkt 1fpkt"];
3677--9687[label="0.016129;1pkt 1fpkt"];
3677--10248[label="0.0416667;1pkt 1fpkt"];
3677--10421[label="0.0434783;1pkt 1fpkt"];
3677--11345[label="0.016129;1pkt 1fpkt"];
3677--11647[label="0.0416667;1pkt 1fpkt"];
3677--12114[label="0.016129;1pkt 1fpkt"];
3899--4085[label="1;1pkt 1fpkt"];
3899--6560[label="0.0666667;1pkt 1fpkt"];
3899--7337[label="1;1pkt 1fpkt"];
3899--8103[label="1;1pkt 1fpkt"];
3899--8131[label="0.0666667;1pkt 1fpkt"];
3899--8180[label="0.0666667;1pkt 1fpkt"];
3899--8219[label="0.0666667;1pkt 1fpkt"];
6125--7458[label="1;232pkt 232fpkt"];
6560--6730[label="0.016129;1pkt 1fpkt"];
6560--6831[label="0.0124113;7pkt 7fpkt"];
6560--7129[label="0.0204499;10pkt 10fpkt"];
6560--7166[label="0.0248227;14pkt 14fpkt"];
6560--7234[label="0.205882;7pkt 7fpkt"];
6560--7443[label="0.0141844;8pkt 8fpkt"];
6560--7454[label="0.0106383;6pkt 6fpkt"];
6560--7485[label="0.0159574;9pkt 9fpkt"];
6560--7540[label="0.0212766;12pkt 12fpkt"];
6560--8056[label="0.035461;20pkt 20fpkt"];
6560--8131[label="0.00177305;1pkt 1fpkt"];
6560--8180[label="0.00177305;1pkt 1fpkt"];
6560--8219[label="0.00177305;1pkt 1fpkt"];
6730--7458[label="0.016129;1pkt 1fpkt"];
6730--8360[label="0.0175439;1pkt 1fpkt"];
6730--8885[label="0.016129;1pkt 1fpkt"];
6730--9586[label="0.016129;1pkt 1fpkt"];
6730--9687[label="0.016129;1pkt 1fpkt"];
6730--10248[label="0.0416667;1pkt 1fpkt"];
6730--10421[label="0.0434783;1pkt 1fpkt"];
6730--11345[label="0.016129;1pkt 1fpkt"];
6730--11647[label="0.0416667;1pkt 1fpkt"];
6730--12114[label="0.016129;1pkt 1fpkt"];
7234--7795[label="0.0294118;1pkt 1fpkt"];
7234--7992[label="0.0294118;1pkt 1fpkt"];
7234--8131[label="0.0588235;2pkt 2fpkt"];
7234--8180[label="0.0588235;2pkt 2fpkt"];
7234--8219[label="0.0588235;2pkt 2fpkt"];
7234--8596[label="0.03125;1pkt 1fpkt"];
7234--9130[label="0.0294118;1pkt 1fpkt"];
7234--10190[label="0.0882353;3pkt 3fpkt"];
7234--10819[label="0.03125;1pkt 1fpkt"];
7234--11615[label="0.0882353;3pkt 3fpkt"];
7234--11913[label="0.03125;1pkt 1fpkt"];
7234--12222[label="0.0882353;3pkt 3fpkt"];
7458--7719[label="0.0125;1pkt 1fpkt"];
7458--7750[label="0.0213523;6pkt 6fpkt"];
7458--8108[label="0.0213523;6pkt 6fpkt"];
7458--8119[label="0.00355872;1pkt 1fpkt"];
7485--7871[label="0.00900901;1pkt 1fpkt"];
7485--7947[label="0.00843373;7pkt 7fpkt"];
7485--8023[label="0.00361446;3pkt 3fpkt"];
7485--8127[label="0.0060241;5pkt 5fpkt"];
7485--8138[label="0.0373494;31pkt 31fpkt"];
7485--8153[label="0.0638554;53pkt 53fpkt"];
7485--8164[label="0.0253012;21pkt 21fpkt"];
7485--8168[label="0.0060241;5pkt 5fpkt"];
7485--8178[label="0.0373494;31pkt 31fpkt"];
7485--8196[label="0.0638554;53pkt 53fpkt"];
7485--8207[label="0.0253012;21pkt 21fpkt"];
7485--8209[label="0.0060241;5pkt 5fpkt"];
7485--8229[label="0.0638554;53pkt 53fpkt"];
7485--8240[label="0.0253012;21pkt 21fpkt"];
7485--8268[label="0.00843373;7pkt 7fpkt"];
7485--8784[label="0.00722022;4pkt 4fpkt"];
7485--8919[label="0.0168675;14pkt 14fpkt"];
7485--8983[label="0.00236407;1pkt 1fpkt"];
7485--9033[label="0.00153374;1pkt 1fpkt"];
7485--9117[label="0.0106525;8pkt 8fpkt"];
7485--9182[label="0.0060241;5pkt 5fpkt"];
7485--9733[label="0.0108434;9pkt 9fpkt"];
7485--9742[label="0.00639659;3pkt 3fpkt"];
7485--9912[label="0.00278552;1pkt 1fpkt"];
7485--9923[label="0.00843373;7pkt 7fpkt"];
7485--10011[label="0.0078534;6pkt 6fpkt"];
7485--10026[label="0.0192308;1pkt 1fpkt"];
7485--10455[label="0.00699301;1pkt 1fpkt"];
7485--10654[label="0.00843373;7pkt 7fpkt"];
7485--10917[label="0.00723327;4pkt 4fpkt"];
7485--10985[label="0.0168675;14pkt 14fpkt"];
7485--11037[label="0.00153374;1pkt 1fpkt"];
7485--11068[label="0.00854701;3pkt 3fpkt"];
7485--11105[label="0.0060241;5pkt 5fpkt"];
7485--11367[label="0.0108434;9pkt 9fpkt"];
7485--11371[label="0.00639659;3pkt 3fpkt"];
7485--11467[label="0.00843373;7pkt 7fpkt"];
7485--11511[label="0.0078534;6pkt 6fpkt"];
7485--11515[label="0.0192308;1pkt 1fpkt"];
7485--11847[label="0.00843373;7pkt 7fpkt"];
7485--12003[label="0.00854701;3pkt 3fpkt"];
7485--12127[label="0.0108434;9pkt 9fpkt"];
7485--12131[label="0.00639659;3pkt 3fpkt"];
7485--12169[label="0.00843373;7pkt 7fpkt"];
7485--12183[label="0.0078534;6pkt 6fpkt"];
9687--11345[label="1;466pkt 466fpkt"];
9687--12114[label="1;466pkt 466fpkt"];
11345--12114[label="1;466pkt 466fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.40.238.240"/>
      <filter dst_ip="216.160.64.210" dst_port="53" src_ip="174.194.132.143"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
9688[label="133.72.61.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11346[label="133.72.61.139;1pkt 1fpkt", shape=invtriangle, color=brown];
12115[label="133.72.61.139;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.61.139:55614, 203.10.129.79:23078}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55614: (50%)&lt;BR/&gt; 23078: (50%)&gt;];
}
9688--11346[label="1;1pkt 1fpkt"];
9688--12115[label="1;1pkt 1fpkt"];
11346--12115[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.10.129.79" dst_port="23078" src_ip="133.72.61.139" src_port="55614"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.163.192.141"/>
    </slice>
    <from sec="1229058417" usec="0"/>
    <to sec="1229058419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
9739[label="206.168.25.144;19pkt 19fpkt", shape=pentagon, color=darkviolet];
11370[label="206.168.25.144;19pkt 19fpkt", shape=invtriangle, color=brown];
12130[label="206.168.25.144;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.168.25.144:80, 133.72.163.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3119: (2.63158%)&lt;BR/&gt; 3117: (2.63158%)&lt;BR/&gt; 3115: (2.63158%)&lt;BR/&gt; 3113: (2.63158%)&gt;];
}
9739--11370[label="1;19pkt 19fpkt"];
9739--12130[label="1;19pkt 19fpkt"];
11370--12130[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.163.197" src_ip="206.168.25.144" src_port="80"/>
    </slice>
    <from sec="1229058858" usec="0"/>
    <to sec="1229058865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.165.111.145"/>
    </slice>
    <from sec="1229058714" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.175.174.145"/>
    </slice>
    <from sec="1229058029" usec="0"/>
    <to sec="1229058088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
953[label="196.87.232.145;s;5pkt 5fpkt", shape=diamond, color=yellow];
1475[label="169.18.152.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
1484[label="169.18.185.117;d;8pkt 8fpkt", shape=diamond, color=yellow];
6424[label="196.87.232.145;s;5pkt 5fpkt", shape=hexagon, color=black];
7434[label="169.18.152.221;d;1pkt 1fpkt", shape=hexagon, color=black];
9762[label="196.87.232.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11379[label="196.87.232.145;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.20.18.150:*, 169.18.185.117:25}[33.3333%]&lt;BR/&gt;{196.87.232.145:*, 169.18.185.117:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (34.0909%)&lt;BR/&gt; 24895: (11.3636%)&lt;BR/&gt; 10509: (9.09091%)&lt;BR/&gt; 25: (9.09091%)&lt;BR/&gt; 24291: (6.81818%)&gt;];
}
953--1475[label="1;1pkt 1fpkt"];
953--1484[label="0.8;4pkt 4fpkt"];
953--6424[label="1;5pkt 5fpkt"];
953--7434[label="1;1pkt 1fpkt"];
953--9762[label="1;1pkt 1fpkt"];
953--11379[label="1;1pkt 1fpkt"];
1475--6424[label="1;1pkt 1fpkt"];
1475--7434[label="1;1pkt 1fpkt"];
1484--6424[label="0.8;4pkt 4fpkt"];
1484--9762[label="1;1pkt 1fpkt"];
1484--11379[label="1;1pkt 1fpkt"];
6424--7434[label="1;1pkt 1fpkt"];
6424--9762[label="1;1pkt 1fpkt"];
6424--11379[label="1;1pkt 1fpkt"];
9762--11379[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.185.117" dst_port="20" src_ip="196.87.232.145"/>
      <filter dst_ip="169.18.185.117" dst_port="25" src_ip="213.20.18.150"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.185.149.146"/>
    </slice>
    <from sec="1229058223" usec="0"/>
    <to sec="1229058265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.106.109.147"/>
    </slice>
    <from sec="1229058226" usec="0"/>
    <to sec="1229058260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.225.20.148"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
9795[label="208.14.137.148;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11398[label="208.14.137.148;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.14.137.148:80, 128.208.172.116:36838}[33.3333%]&lt;BR/&gt;{208.14.137.148:80, 128.208.172.116:37981}[33.3333%]&lt;BR/&gt;{208.14.137.148:80, 128.208.172.116:45841}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45841: (16.6667%)&lt;BR/&gt; 37981: (16.6667%)&lt;BR/&gt; 36838: (16.6667%)&gt;];
}
9795--11398[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.208.172.116" dst_port="45841" src_ip="208.14.137.148" src_port="80"/>
      <filter dst_ip="128.208.172.116" dst_port="37981" src_ip="208.14.137.148" src_port="80"/>
      <filter dst_ip="128.208.172.116" dst_port="36838" src_ip="208.14.137.148" src_port="80"/>
    </slice>
    <from sec="1229058487" usec="0"/>
    <to sec="1229058860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.109.206.148"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.137.118.149"/>
    </slice>
    <from sec="1229058474" usec="0"/>
    <to sec="1229058722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
9816[label="174.194.172.151;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11408[label="174.194.172.151;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.172.151:3124, 215.32.26.17:62939}[20%]&lt;BR/&gt;{174.194.172.151:0, 53.157.4.42:0}[20%]&lt;BR/&gt;{174.194.172.151:3124, 96.180.85.77:4912}[20%]&lt;BR/&gt;{174.194.172.151:80, 38.158.12.18:16884}[20%]&lt;BR/&gt;{174.194.172.151:80, 38.158.12.18:31086}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 62939: (10%)&lt;BR/&gt; 31086: (10%)&gt;];
}
9816--11408[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="38.158.12.18" dst_port="31086" src_ip="174.194.172.151" src_port="80"/>
      <filter dst_ip="38.158.12.18" dst_port="16884" src_ip="174.194.172.151" src_port="80"/>
      <filter dst_ip="96.180.85.77" dst_port="4912" src_ip="174.194.172.151" src_port="3124"/>
      <filter dst_ip="53.157.4.42" src_ip="174.194.172.151"/>
      <filter dst_ip="215.32.26.17" dst_port="62939" src_ip="174.194.172.151" src_port="3124"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
9817[label="1.165.176.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11409[label="1.165.176.151;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.165.176.151:38616, 128.64.4.100:52655}[33.3333%]&lt;BR/&gt;{1.165.176.151:38616, 128.64.4.100:53601}[33.3333%]&lt;BR/&gt;{1.165.176.151:38616, 128.64.4.100:53621}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38616: (50%)&lt;BR/&gt; 53621: (16.6667%)&lt;BR/&gt; 53601: (16.6667%)&lt;BR/&gt; 52655: (16.6667%)&gt;];
}
9817--11409[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.64.4.100" dst_port="53621" src_ip="1.165.176.151" src_port="38616"/>
      <filter dst_ip="128.64.4.100" dst_port="53601" src_ip="1.165.176.151" src_port="38616"/>
      <filter dst_ip="128.64.4.100" dst_port="52655" src_ip="1.165.176.151" src_port="38616"/>
    </slice>
    <from sec="1229058011" usec="0"/>
    <to sec="1229058882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.49.29.152"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.198.34.153"/>
    </slice>
    <from sec="1229058749" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
9843[label="45.105.2.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11421[label="45.105.2.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.105.2.155:45864, 214.56.220.165:36853}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45864: (50%)&lt;BR/&gt; 36853: (50%)&gt;];
}
9843--11421[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.56.220.165" dst_port="36853" src_ip="45.105.2.155" src_port="45864"/>
    </slice>
    <from sec="1229058867" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.4.141.155"/>
    </slice>
    <from sec="1229058704" usec="0"/>
    <to sec="1229058861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.7.79.160"/>
    </slice>
    <from sec="1229058029" usec="0"/>
    <to sec="1229058528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
9884[label="174.194.130.160;38pkt 38fpkt", shape=pentagon, color=darkviolet];
11445[label="174.194.130.160;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.194.130.160:80, 41.207.126.241:*}[26.3158%]&lt;BR/&gt;{174.194.130.160:80, 32.203.140.200:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62921: (1.31579%)&lt;BR/&gt; 56636: (1.31579%)&lt;BR/&gt; 56052: (1.31579%)&lt;BR/&gt; 54668: (1.31579%)&gt;];
}
9884--11445[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.241" src_ip="174.194.130.160" src_port="80"/>
      <filter dst_ip="32.203.140.200" src_ip="174.194.130.160" src_port="80"/>
    </slice>
    <from sec="1229058019" usec="0"/>
    <to sec="1229058897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.164.130.161"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.78.255.162"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
9911[label="192.22.2.164;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11460[label="192.22.2.164;4pkt 4fpkt", shape=invtriangle, color=brown];
12164[label="192.22.2.164;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.2.164:80, 174.194.36.18:60506}[25%]&lt;BR/&gt;{192.22.2.164:80, 174.194.2.81:58229}[25%]&lt;BR/&gt;{192.22.2.164:80, 174.194.107.101:49398}[25%]&lt;BR/&gt;{192.22.2.164:80, 174.194.232.219:49658}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60506: (12.5%)&lt;BR/&gt; 58229: (12.5%)&lt;BR/&gt; 49658: (12.5%)&lt;BR/&gt; 49398: (12.5%)&gt;];
}
9911--11460[label="1;4pkt 4fpkt"];
9911--12164[label="1;4pkt 4fpkt"];
11460--12164[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.232.219" dst_port="49658" src_ip="192.22.2.164" src_port="80"/>
      <filter dst_ip="174.194.107.101" dst_port="49398" src_ip="192.22.2.164" src_port="80"/>
      <filter dst_ip="174.194.2.81" dst_port="58229" src_ip="192.22.2.164" src_port="80"/>
      <filter dst_ip="174.194.36.18" dst_port="60506" src_ip="192.22.2.164" src_port="80"/>
    </slice>
    <from sec="1229058204" usec="0"/>
    <to sec="1229058335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
9913[label="101.193.58.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11461[label="101.193.58.164;1pkt 1fpkt", shape=invtriangle, color=brown];
12165[label="101.193.58.164;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.193.58.164:14197, 174.194.19.12:12015}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14197: (50%)&lt;BR/&gt; 12015: (50%)&gt;];
}
9913--11461[label="1;1pkt 1fpkt"];
9913--12165[label="1;1pkt 1fpkt"];
11461--12165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.19.12" dst_port="12015" src_ip="101.193.58.164" src_port="14197"/>
    </slice>
    <from sec="1229058833" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733043,1.78799,504,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
4441[label="133.72.158.164;s;125pkt 125fpkt", shape=diamond, color=yellow];
7720[label="133.72.158.164;s;125pkt 125fpkt", shape=hexagon, color=black];
11463[label="133.72.158.164;130pkt 130fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.158.164:*, 214.57.43.184:443}[99.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.6053%)&lt;BR/&gt; 2323: (0.394737%)&lt;BR/&gt; 2317: (0.394737%)&lt;BR/&gt; 2315: (0.394737%)&lt;BR/&gt; 2313: (0.394737%)&gt;];
}
4441--7720[label="1;125pkt 125fpkt"];
4441--8154[label="0.024;3pkt 3fpkt"];
4441--8198[label="0.024;3pkt 3fpkt"];
4441--8231[label="0.024;3pkt 3fpkt"];
4441--9916[label="1;125pkt 125fpkt"];
4441--11463[label="1;125pkt 125fpkt"];
7720--8154[label="0.024;3pkt 3fpkt"];
7720--8198[label="0.024;3pkt 3fpkt"];
7720--8231[label="0.024;3pkt 3fpkt"];
7720--9916[label="1;125pkt 125fpkt"];
7720--11463[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.43.184" dst_port="443" src_ip="133.72.158.164"/>
    </slice>
    <from sec="1229058692" usec="0"/>
    <to sec="1229058877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.67.158.165"/>
    </slice>
    <from sec="1229058008" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
9934[label="96.23.24.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11474[label="96.23.24.166;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.23.24.166:1271, 169.18.172.199:80}[50%]&lt;BR/&gt;{96.23.24.166:1278, 169.18.172.199:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1278: (25%)&lt;BR/&gt; 1271: (25%)&gt;];
}
9934--11474[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.172.199" dst_port="80" src_ip="96.23.24.166" src_port="1278"/>
      <filter dst_ip="169.18.172.199" dst_port="80" src_ip="96.23.24.166" src_port="1271"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.210.200.167"/>
    </slice>
    <from sec="1229058472" usec="0"/>
    <to sec="1229058817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
9952[label="196.15.10.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11482[label="196.15.10.168;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.15.10.168:80, 174.194.58.213:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2427: (5%)&lt;BR/&gt; 2426: (5%)&lt;BR/&gt; 2425: (5%)&lt;BR/&gt; 2424: (5%)&gt;];
}
9952--11482[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.58.213" src_ip="196.15.10.168" src_port="80"/>
    </slice>
    <from sec="1229058822" usec="0"/>
    <to sec="1229058826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
9966[label="101.184.79.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11490[label="101.184.79.169;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.184.79.169:80, 172.45.39.117:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9966--11490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.45.39.117" dst_port="3124" src_ip="101.184.79.169" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
9979[label="214.184.97.170;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11497[label="214.184.97.170;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.184.97.170:80, 133.72.116.41:52138}[33.3333%]&lt;BR/&gt;{214.184.97.170:80, 133.72.116.41:52144}[33.3333%]&lt;BR/&gt;{214.184.97.170:80, 133.72.116.41:52248}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52248: (16.6667%)&lt;BR/&gt; 52144: (16.6667%)&lt;BR/&gt; 52138: (16.6667%)&gt;];
}
9979--11497[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.116.41" dst_port="52248" src_ip="214.184.97.170" src_port="80"/>
      <filter dst_ip="133.72.116.41" dst_port="52144" src_ip="214.184.97.170" src_port="80"/>
      <filter dst_ip="133.72.116.41" dst_port="52138" src_ip="214.184.97.170" src_port="80"/>
    </slice>
    <from sec="1229058370" usec="0"/>
    <to sec="1229058394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1094{
style=filled;
color=gray75;
9993[label="215.40.232.171;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11502[label="215.40.232.171;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1094[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.40.232.171:25, 194.181.169.238:3843}[25%]&lt;BR/&gt;{215.40.232.171:25, 56.107.67.66:1096}[25%]&lt;BR/&gt;{215.40.232.171:25, 56.107.67.66:1103}[25%]&lt;BR/&gt;{215.40.232.171:25, 56.107.67.66:1113}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3843: (12.5%)&lt;BR/&gt; 1113: (12.5%)&lt;BR/&gt; 1103: (12.5%)&lt;BR/&gt; 1096: (12.5%)&gt;];
}
9993--11502[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="56.107.67.66" dst_port="1113" src_ip="215.40.232.171" src_port="25"/>
      <filter dst_ip="56.107.67.66" dst_port="1103" src_ip="215.40.232.171" src_port="25"/>
      <filter dst_ip="56.107.67.66" dst_port="1096" src_ip="215.40.232.171" src_port="25"/>
      <filter dst_ip="194.181.169.238" dst_port="3843" src_ip="215.40.232.171" src_port="25"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="163.187.181.172"/>
    </slice>
    <from sec="1229058548" usec="0"/>
    <to sec="1229058732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.148.127.173"/>
    </slice>
    <from sec="1229058001" usec="0"/>
    <to sec="1229058674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.187.137.173"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
10024[label="214.241.0.176;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11514[label="214.241.0.176;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.0.176:80, 133.72.219.53:56658}[20%]&lt;BR/&gt;{214.241.0.176:80, 133.72.152.43:31435}[20%]&lt;BR/&gt;{214.241.0.176:80, 133.72.152.43:31436}[20%]&lt;BR/&gt;{214.241.0.176:80, 133.72.152.43:31440}[20%]&lt;BR/&gt;{214.241.0.176:80, 133.72.152.43:31441}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56658: (10%)&lt;BR/&gt; 31441: (10%)&lt;BR/&gt; 31440: (10%)&lt;BR/&gt; 31436: (10%)&gt;];
}
10024--11514[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.152.43" dst_port="31441" src_ip="214.241.0.176" src_port="80"/>
      <filter dst_ip="133.72.152.43" dst_port="31440" src_ip="214.241.0.176" src_port="80"/>
      <filter dst_ip="133.72.152.43" dst_port="31436" src_ip="214.241.0.176" src_port="80"/>
      <filter dst_ip="133.72.152.43" dst_port="31435" src_ip="214.241.0.176" src_port="80"/>
      <filter dst_ip="133.72.219.53" dst_port="56658" src_ip="214.241.0.176" src_port="80"/>
    </slice>
    <from sec="1229058286" usec="0"/>
    <to sec="1229058782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.20.162.177"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.84.220.177"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1101{
style=filled;
color=gray75;
10046[label="203.174.149.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11527[label="203.174.149.178;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1101[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.174.149.178:80, 174.194.18.4:50255}[50%]&lt;BR/&gt;{203.174.149.178:80, 174.194.18.4:50256}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50256: (25%)&lt;BR/&gt; 50255: (25%)&gt;];
}
10046--11527[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.18.4" dst_port="50256" src_ip="203.174.149.178" src_port="80"/>
      <filter dst_ip="174.194.18.4" dst_port="50255" src_ip="203.174.149.178" src_port="80"/>
    </slice>
    <from sec="1229058835" usec="0"/>
    <to sec="1229058838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.20.162.180"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.24.147.181"/>
    </slice>
    <from sec="1229058608" usec="0"/>
    <to sec="1229058717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
10079[label="214.184.106.182;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11545[label="214.184.106.182;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.184.106.182:80, 174.194.231.40:1553}[50%]&lt;BR/&gt;{214.184.106.182:80, 174.194.231.40:1564}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1564: (25%)&lt;BR/&gt; 1553: (25%)&gt;];
}
10079--11545[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.231.40" dst_port="1564" src_ip="214.184.106.182" src_port="80"/>
      <filter dst_ip="174.194.231.40" dst_port="1553" src_ip="214.184.106.182" src_port="80"/>
    </slice>
    <from sec="1229058594" usec="0"/>
    <to sec="1229058653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.197.128.182"/>
    </slice>
    <from sec="1229058296" usec="0"/>
    <to sec="1229058314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.234.218.182"/>
    </slice>
    <from sec="1229058065" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
10082[label="133.72.225.182;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11548[label="133.72.225.182;3pkt 3fpkt", shape=invtriangle, color=brown];
12199[label="133.72.225.182;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.225.182:25, 100.57.141.91:62185}[33.3333%]&lt;BR/&gt;{133.72.225.182:25, 36.210.29.117:3335}[33.3333%]&lt;BR/&gt;{133.72.225.182:25, 213.61.193.134:33589}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62185: (16.6667%)&lt;BR/&gt; 33589: (16.6667%)&lt;BR/&gt; 3335: (16.6667%)&gt;];
}
10082--11548[label="1;3pkt 3fpkt"];
10082--12199[label="1;3pkt 3fpkt"];
11548--12199[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.193.134" dst_port="33589" src_ip="133.72.225.182" src_port="25"/>
      <filter dst_ip="36.210.29.117" dst_port="3335" src_ip="133.72.225.182" src_port="25"/>
      <filter dst_ip="100.57.141.91" dst_port="62185" src_ip="133.72.225.182" src_port="25"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
10092[label="144.203.74.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11554[label="144.203.74.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.203.74.184:80, 41.207.126.180:46585}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46585: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10092--11554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.126.180" dst_port="46585" src_ip="144.203.74.184" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.39.117.185"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
10110[label="133.72.32.186;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11565[label="133.72.32.186;25pkt 25fpkt", shape=invtriangle, color=brown];
12203[label="133.72.32.186;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.32.186:25, 217.81.95.82:*}[44%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61301: (2%)&lt;BR/&gt; 59737: (2%)&lt;BR/&gt; 57101: (2%)&lt;BR/&gt; 54111: (2%)&gt;];
}
10110--11565[label="1;25pkt 25fpkt"];
10110--12203[label="1;25pkt 25fpkt"];
11565--12203[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="217.81.95.82" src_ip="133.72.32.186" src_port="25"/>
    </slice>
    <from sec="1229058025" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.2.16.187"/>
    </slice>
    <from sec="1229058226" usec="0"/>
    <to sec="1229058253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.29.74.187"/>
    </slice>
    <from sec="1229058424" usec="0"/>
    <to sec="1229058443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.117.56.188"/>
    </slice>
    <from sec="1229058032" usec="0"/>
    <to sec="1229058359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660383,1.84695,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
4587[label="128.208.225.188;s;24pkt 24fpkt", shape=diamond, color=yellow];
11578[label="128.208.225.188;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.208.225.188:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2079: (2.12766%)&lt;BR/&gt; 2078: (2.12766%)&lt;BR/&gt; 2077: (2.12766%)&lt;BR/&gt; 2076: (2.12766%)&gt;];
}
4587--8134[label="0.166667;4pkt 4fpkt"];
4587--11578[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.208.225.188"/>
    </slice>
    <from sec="1229058087" usec="0"/>
    <to sec="1229058769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
10126[label="6.110.111.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11579[label="6.110.111.189;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.110.111.189:2718, 133.72.3.31:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2718: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10126--11579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.3.31" dst_port="25" src_ip="6.110.111.189" src_port="2718"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.72.141.191"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.148.22.192"/>
    </slice>
    <from sec="1229058591" usec="0"/>
    <to sec="1229058599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
10160[label="46.35.212.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11598[label="46.35.212.193;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.35.212.193:80, 174.194.120.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3422: (8.33333%)&lt;BR/&gt; 3421: (8.33333%)&lt;BR/&gt; 3420: (8.33333%)&lt;BR/&gt; 3419: (8.33333%)&gt;];
}
10160--11598[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.120.30" src_ip="46.35.212.193" src_port="80"/>
    </slice>
    <from sec="1229058356" usec="0"/>
    <to sec="1229058379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
10181[label="205.208.84.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11610[label="205.208.84.196;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.208.84.196:1197, 154.79.242.186:62997}[25%]&lt;BR/&gt;{205.208.84.196:1199, 154.79.242.186:62997}[25%]&lt;BR/&gt;{205.208.84.196:1200, 154.79.242.186:62997}[25%]&lt;BR/&gt;{205.208.84.196:1201, 154.79.242.186:62997}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62997: (50%)&lt;BR/&gt; 1201: (12.5%)&lt;BR/&gt; 1200: (12.5%)&lt;BR/&gt; 1199: (12.5%)&lt;BR/&gt; 1197: (12.5%)&gt;];
}
10181--11610[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="154.79.242.186" dst_port="62997" src_ip="205.208.84.196" src_port="1201"/>
      <filter dst_ip="154.79.242.186" dst_port="62997" src_ip="205.208.84.196" src_port="1200"/>
      <filter dst_ip="154.79.242.186" dst_port="62997" src_ip="205.208.84.196" src_port="1199"/>
      <filter dst_ip="154.79.242.186" dst_port="62997" src_ip="205.208.84.196" src_port="1197"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895475,1.80721,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
2539[label="128.64.2.197;s;90pkt 90fpkt", shape=diamond, color=yellow];
10190[label="128.64.2.197;95pkt 95fpkt", shape=pentagon, color=darkviolet];
11615[label="128.64.2.197;95pkt 95fpkt", shape=invtriangle, color=brown];
12222[label="128.64.2.197;95pkt 95fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.2.197:80, 41.207.116.37:*}[33.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65121: (0.533333%)&lt;BR/&gt; 63590: (0.533333%)&lt;BR/&gt; 62837: (0.533333%)&lt;BR/&gt; 62670: (0.533333%)&gt;];
}
2539--3443[label="0.146341;6pkt 6fpkt"];
2539--3508[label="0.0111111;1pkt 1fpkt"];
2539--3802[label="0.05;1pkt 1fpkt"];
2539--6877[label="0.0714286;1pkt 1fpkt"];
2539--6975[label="0.0111111;1pkt 1fpkt"];
2539--7234[label="0.0882353;3pkt 3fpkt"];
2539--8131[label="0.0555556;5pkt 5fpkt"];
2539--8180[label="0.0555556;5pkt 5fpkt"];
2539--8219[label="0.0555556;5pkt 5fpkt"];
2539--10190[label="1;90pkt 90fpkt"];
2539--11615[label="1;90pkt 90fpkt"];
2539--12222[label="1;90pkt 90fpkt"];
10190--11615[label="1;95pkt 95fpkt"];
10190--12222[label="1;95pkt 95fpkt"];
11615--12222[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="41.207.116.37" src_ip="128.64.2.197" src_port="80"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
10195[label="128.64.213.197;23pkt 23fpkt", shape=pentagon, color=darkviolet];
11620[label="128.64.213.197;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.213.197:80, 214.57.202.19:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26262: (2.17391%)&lt;BR/&gt; 26261: (2.17391%)&lt;BR/&gt; 26260: (2.17391%)&lt;BR/&gt; 26219: (2.17391%)&gt;];
}
10195--11620[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="214.57.202.19" src_ip="128.64.213.197" src_port="80"/>
    </slice>
    <from sec="1229058281" usec="0"/>
    <to sec="1229058364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
10206[label="46.34.232.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11626[label="46.34.232.198;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.34.232.198:80, 214.49.185.51:44235}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44235: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10206--11626[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.185.51" dst_port="44235" src_ip="46.34.232.198" src_port="80"/>
    </slice>
    <from sec="1229058857" usec="0"/>
    <to sec="1229058861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1123{
style=filled;
color=gray75;
10212[label="206.27.178.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11629[label="206.27.178.199;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1123[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.27.178.199:80, 133.72.48.5:2862}[50%]&lt;BR/&gt;{206.27.178.199:80, 133.72.48.5:2864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2864: (25%)&lt;BR/&gt; 2862: (25%)&gt;];
}
10212--11629[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.48.5" dst_port="2864" src_ip="206.27.178.199" src_port="80"/>
      <filter dst_ip="133.72.48.5" dst_port="2862" src_ip="206.27.178.199" src_port="80"/>
    </slice>
    <from sec="1229058663" usec="0"/>
    <to sec="1229058682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
10226[label="128.81.165.200;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11636[label="128.81.165.200;12pkt 12fpkt", shape=invtriangle, color=brown];
12231[label="128.81.165.200;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.81.165.200:*, 215.173.19.71:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57860: (4.16667%)&lt;BR/&gt; 57859: (4.16667%)&lt;BR/&gt; 57858: (4.16667%)&lt;BR/&gt; 57857: (4.16667%)&gt;];
}
10226--11636[label="1;12pkt 12fpkt"];
10226--12231[label="1;12pkt 12fpkt"];
11636--12231[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="215.173.19.71" dst_port="80" src_ip="128.81.165.200"/>
    </slice>
    <from sec="1229058858" usec="0"/>
    <to sec="1229058876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.184.220.203"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
10261[label="42.240.118.205;56pkt 56fpkt", shape=pentagon, color=darkviolet];
11655[label="42.240.118.205;56pkt 56fpkt", shape=invtriangle, color=brown];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.240.118.205:6667, *:1024}[57.1429%]&lt;BR/&gt;{42.240.118.205:6667, *:3072}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1024: (28.5714%)&lt;BR/&gt; 3072: (21.4286%)&gt;];
}
10261--11655[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="1024" src_ip="42.240.118.205" src_port="6667"/>
      <filter dst_port="3072" src_ip="42.240.118.205" src_port="6667"/>
    </slice>
    <from sec="1229058353" usec="0"/>
    <to sec="1229058841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.74.95.206"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.219.29.207"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.129.76.207"/>
    </slice>
    <from sec="1229058178" usec="0"/>
    <to sec="1229058412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.89.170.207"/>
    </slice>
    <from sec="1229058635" usec="0"/>
    <to sec="1229058655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.39.142.208"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.151.103.209"/>
    </slice>
    <from sec="1229058330" usec="0"/>
    <to sec="1229058384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.28.195.209"/>
    </slice>
    <from sec="1229058373" usec="0"/>
    <to sec="1229058875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.32.101.210"/>
    </slice>
    <from sec="1229058209" usec="0"/>
    <to sec="1229058884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
10302[label="193.233.72.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11681[label="193.233.72.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.233.72.211:80, 174.194.120.45:1338}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1338: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10302--11681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.120.45" dst_port="1338" src_ip="193.233.72.211" src_port="80"/>
    </slice>
    <from sec="1229058607" usec="0"/>
    <to sec="1229058616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
10328[label="133.72.202.213;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11691[label="133.72.202.213;8pkt 8fpkt", shape=invtriangle, color=brown];
12254[label="133.72.202.213;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.72.202.213:*, 216.186.176.137:53}[37.5%]&lt;BR/&gt;{133.72.202.213:*, 166.238.34.224:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 59095: (6.25%)&lt;BR/&gt; 59080: (6.25%)&lt;BR/&gt; 52969: (6.25%)&lt;BR/&gt; 51760: (6.25%)&gt;];
}
10328--11691[label="1;8pkt 8fpkt"];
10328--12254[label="1;8pkt 8fpkt"];
11691--12254[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="216.186.176.137" dst_port="53" src_ip="133.72.202.213"/>
      <filter dst_ip="166.238.34.224" dst_port="53" src_ip="133.72.202.213"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
10332[label="214.241.3.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11693[label="214.241.3.215;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.3.215:80, 214.49.23.148:1942}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1942: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10332--11693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.23.148" dst_port="1942" src_ip="214.241.3.215" src_port="80"/>
    </slice>
    <from sec="1229058687" usec="0"/>
    <to sec="1229058700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.72.171.215"/>
    </slice>
    <from sec="1229058113" usec="0"/>
    <to sec="1229058849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.196.18.216"/>
    </slice>
    <from sec="1229058587" usec="0"/>
    <to sec="1229058617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
10340[label="206.168.25.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11699[label="206.168.25.216;1pkt 1fpkt", shape=invtriangle, color=brown];
12258[label="206.168.25.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.168.25.216:80, 133.72.163.197:3137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3137: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10340--11699[label="1;1pkt 1fpkt"];
10340--12258[label="1;1pkt 1fpkt"];
11699--12258[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.163.197" dst_port="3137" src_ip="206.168.25.216" src_port="80"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.40.233.217"/>
    </slice>
    <from sec="1229058004" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
10357[label="200.43.0.218;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11709[label="200.43.0.218;4pkt 4fpkt", shape=invtriangle, color=brown];
12261[label="200.43.0.218;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.43.0.218:1879, 214.49.29.42:1434}[25%]&lt;BR/&gt;{200.43.0.218:1879, 128.224.149.73:1434}[25%]&lt;BR/&gt;{200.43.0.218:1879, 154.79.190.153:1434}[25%]&lt;BR/&gt;{200.43.0.218:1879, 215.40.211.237:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1879: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
10357--11709[label="1;4pkt 4fpkt"];
10357--12261[label="1;4pkt 4fpkt"];
11709--12261[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.211.237" dst_port="1434" src_ip="200.43.0.218" src_port="1879"/>
      <filter dst_ip="154.79.190.153" dst_port="1434" src_ip="200.43.0.218" src_port="1879"/>
      <filter dst_ip="128.224.149.73" dst_port="1434" src_ip="200.43.0.218" src_port="1879"/>
      <filter dst_ip="214.49.29.42" dst_port="1434" src_ip="200.43.0.218" src_port="1879"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
10358[label="154.11.3.218;77pkt 77fpkt", shape=pentagon, color=darkviolet];
11710[label="154.11.3.218;77pkt 77fpkt", shape=invtriangle, color=brown];
12262[label="154.11.3.218;77pkt 77fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.11.3.218:41281, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41281: (50%)&lt;BR/&gt; 65042: (0.649351%)&lt;BR/&gt; 63103: (0.649351%)&lt;BR/&gt; 62959: (0.649351%)&lt;BR/&gt; 62903: (0.649351%)&gt;];
}
10358--11710[label="1;77pkt 77fpkt"];
10358--12262[label="1;77pkt 77fpkt"];
11710--12262[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="154.11.3.218" src_port="41281"/>
    </slice>
    <from sec="1229058006" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.190.237.218"/>
    </slice>
    <from sec="1229058133" usec="0"/>
    <to sec="1229058173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
10371[label="216.170.2.219;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11713[label="216.170.2.219;4pkt 4fpkt", shape=invtriangle, color=brown];
12264[label="216.170.2.219;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.170.2.219:53, 214.56.229.59:59845}[25%]&lt;BR/&gt;{216.170.2.219:53, 214.56.229.59:59847}[25%]&lt;BR/&gt;{216.170.2.219:53, 174.194.132.143:14739}[25%]&lt;BR/&gt;{216.170.2.219:53, 174.194.132.143:47950}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 59847: (12.5%)&lt;BR/&gt; 59845: (12.5%)&lt;BR/&gt; 47950: (12.5%)&lt;BR/&gt; 14739: (12.5%)&gt;];
}
10371--11713[label="1;4pkt 4fpkt"];
10371--12264[label="1;4pkt 4fpkt"];
11713--12264[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.132.143" dst_port="47950" src_ip="216.170.2.219" src_port="53"/>
      <filter dst_ip="174.194.132.143" dst_port="14739" src_ip="216.170.2.219" src_port="53"/>
      <filter dst_ip="214.56.229.59" dst_port="59847" src_ip="216.170.2.219" src_port="53"/>
      <filter dst_ip="214.56.229.59" dst_port="59845" src_ip="216.170.2.219" src_port="53"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
10381[label="128.64.2.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11719[label="128.64.2.220;1pkt 1fpkt", shape=invtriangle, color=brown];
12268[label="128.64.2.220;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.64.2.220:25, 34.227.43.215:57531}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57531: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10381--11719[label="1;1pkt 1fpkt"];
10381--12268[label="1;1pkt 1fpkt"];
11719--12268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.227.43.215" dst_port="57531" src_ip="128.64.2.220" src_port="25"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.84.16.220"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
10402[label="34.227.17.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11729[label="34.227.17.223;1pkt 1fpkt", shape=invtriangle, color=brown];
12275[label="34.227.17.223;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.227.17.223:56817, 174.194.204.73:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56817: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
10402--11729[label="1;1pkt 1fpkt"];
10402--12275[label="1;1pkt 1fpkt"];
11729--12275[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.204.73" dst_port="995" src_ip="34.227.17.223" src_port="56817"/>
    </slice>
    <from sec="1229058555" usec="0"/>
    <to sec="1229058558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
10422[label="214.49.0.225;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11741[label="214.49.0.225;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.49.0.225:*, 100.173.160.39:6135}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6135: (9.25926%)&lt;BR/&gt; 28002: (7.40741%)&lt;BR/&gt; 19800: (7.40741%)&lt;BR/&gt; 7743: (7.40741%)&lt;BR/&gt; 7052: (7.40741%)&gt;];
}
10422--11741[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="100.173.160.39" dst_port="6135" src_ip="214.49.0.225"/>
    </slice>
    <from sec="1229058062" usec="0"/>
    <to sec="1229058896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636774,1.80412,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1150{
style=filled;
color=gray75;
4513[label="133.72.62.32;d;57pkt 57fpkt", shape=diamond, color=yellow];
10439[label="192.133.234.226;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11749[label="192.133.234.226;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1150[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.173.19.118:80, 133.72.62.32:*}[82.4561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2754%)&lt;BR/&gt; 9068: (2.17391%)&lt;BR/&gt; 9060: (2.17391%)&lt;BR/&gt; 9052: (2.17391%)&lt;BR/&gt; 9044: (2.17391%)&gt;];
}
4513--6145[label="0.0175439;1pkt 1fpkt"];
4513--6867[label="0.824561;47pkt 47fpkt"];
4513--7201[label="0.0350877;2pkt 2fpkt"];
4513--10439[label="1;6pkt 6fpkt"];
4513--11749[label="1;6pkt 6fpkt"];
10439--11749[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.72.62.32" src_ip="215.173.19.118" src_port="80"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.244.180.228"/>
    </slice>
    <from sec="1229058290" usec="0"/>
    <to sec="1229058712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.236.134.229"/>
    </slice>
    <from sec="1229058614" usec="0"/>
    <to sec="1229058891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
10490[label="48.48.13.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11774[label="48.48.13.234;2pkt 2fpkt", shape=invtriangle, color=brown];
12292[label="48.48.13.234;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.48.13.234:2294, 215.40.237.50:445}[50%]&lt;BR/&gt;{48.48.13.234:3421, 215.40.237.50:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3421: (25%)&lt;BR/&gt; 2294: (25%)&gt;];
}
10490--11774[label="1;2pkt 2fpkt"];
10490--12292[label="1;2pkt 2fpkt"];
11774--12292[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.237.50" dst_port="445" src_ip="48.48.13.234" src_port="3421"/>
      <filter dst_ip="215.40.237.50" dst_port="445" src_ip="48.48.13.234" src_port="2294"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.172.17.234"/>
    </slice>
    <from sec="1229058339" usec="0"/>
    <to sec="1229058352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.87.112.235"/>
    </slice>
    <from sec="1229058016" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
10501[label="214.241.1.236;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11784[label="214.241.1.236;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.241.1.236:80, 214.49.185.51:*}[50%]&lt;BR/&gt;{214.241.1.236:80, 214.49.184.145:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50715: (6.25%)&lt;BR/&gt; 50714: (6.25%)&lt;BR/&gt; 50655: (6.25%)&lt;BR/&gt; 50650: (6.25%)&gt;];
}
10501--11784[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="214.49.184.145" src_ip="214.241.1.236" src_port="80"/>
      <filter dst_ip="214.49.185.51" src_ip="214.241.1.236" src_port="80"/>
    </slice>
    <from sec="1229058858" usec="0"/>
    <to sec="1229058882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1157{
style=filled;
color=gray75;
10507[label="56.147.136.236;26pkt 26fpkt", shape=pentagon, color=darkviolet];
11788[label="56.147.136.236;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1157[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.147.136.236:*, 169.18.228.82:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1920: (1.92308%)&lt;BR/&gt; 1896: (1.92308%)&lt;BR/&gt; 1870: (1.92308%)&lt;BR/&gt; 1847: (1.92308%)&gt;];
}
10507--11788[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.228.82" dst_port="80" src_ip="56.147.136.236"/>
    </slice>
    <from sec="1229058421" usec="0"/>
    <to sec="1229058495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
10516[label="211.222.169.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11793[label="211.222.169.237;3pkt 3fpkt", shape=invtriangle, color=brown];
12298[label="211.222.169.237;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.222.169.237:80, 174.194.98.12:50974}[33.3333%]&lt;BR/&gt;{211.222.169.237:80, 174.194.94.34:1273}[33.3333%]&lt;BR/&gt;{211.222.169.237:80, 174.194.94.34:1286}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50974: (16.6667%)&lt;BR/&gt; 1286: (16.6667%)&lt;BR/&gt; 1273: (16.6667%)&gt;];
}
10516--11793[label="1;3pkt 3fpkt"];
10516--12298[label="1;3pkt 3fpkt"];
11793--12298[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.94.34" dst_port="1286" src_ip="211.222.169.237" src_port="80"/>
      <filter dst_ip="174.194.94.34" dst_port="1273" src_ip="211.222.169.237" src_port="80"/>
      <filter dst_ip="174.194.98.12" dst_port="50974" src_ip="211.222.169.237" src_port="80"/>
    </slice>
    <from sec="1229058183" usec="0"/>
    <to sec="1229058792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594098,1.86974,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1159{
style=filled;
color=gray75;
10552[label="62.146.229.242;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11808[label="62.146.229.242;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1159[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.146.229.242:80, 215.40.229.19:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51920: (8.33333%)&lt;BR/&gt; 51919: (8.33333%)&lt;BR/&gt; 51918: (8.33333%)&lt;BR/&gt; 51917: (8.33333%)&gt;];
}
10552--11808[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.229.19" src_ip="62.146.229.242" src_port="80"/>
    </slice>
    <from sec="1229058850" usec="0"/>
    <to sec="1229058895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865648,1.87272,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1160{
style=filled;
color=gray75;
10558[label="193.222.65.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11812[label="193.222.65.243;1pkt 1fpkt", shape=invtriangle, color=brown];
12303[label="193.222.65.243;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1160[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.222.65.243:6667, 169.18.179.176:1257}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1257: (50%)&gt;];
}
10558--11812[label="1;1pkt 1fpkt"];
10558--12303[label="1;1pkt 1fpkt"];
11812--12303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.18.179.176" dst_port="1257" src_ip="193.222.65.243" src_port="6667"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.249.136.245"/>
    </slice>
    <from sec="1229058427" usec="0"/>
    <to sec="1229058438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711848,1.74372,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
766[label="174.194.13.41;d;8pkt 8fpkt", shape=diamond, color=yellow];
767[label="203.49.127.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
5215[label="174.194.13.41;d;1pkt 1fpkt", shape=hexagon, color=black];
5484[label="203.49.127.73;s;1pkt 1fpkt", shape=hexagon, color=black];
9061[label="203.49.127.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11052[label="203.49.127.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.194.13.41:18797}[50%]&lt;BR/&gt;{*:80, 174.194.13.41:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49407: (23.0769%)&lt;BR/&gt; 554: (23.0769%)&lt;BR/&gt; 18797: (15.3846%)&lt;BR/&gt; 80: (11.5385%)&lt;BR/&gt; 51064: (3.84615%)&gt;];
}
766--767[label="1;1pkt 1fpkt"];
766--5215[label="1;1pkt 1fpkt"];
766--5484[label="1;1pkt 1fpkt"];
766--9061[label="1;1pkt 1fpkt"];
766--10580[label="0.125;1pkt 1fpkt"];
766--11052[label="1;1pkt 1fpkt"];
766--11818[label="0.125;1pkt 1fpkt"];
767--5215[label="1;1pkt 1fpkt"];
767--5484[label="1;1pkt 1fpkt"];
767--9061[label="1;1pkt 1fpkt"];
767--11052[label="1;1pkt 1fpkt"];
5215--5484[label="1;1pkt 1fpkt"];
5215--9061[label="1;1pkt 1fpkt"];
5215--11052[label="1;1pkt 1fpkt"];
5484--9061[label="1;1pkt 1fpkt"];
5484--11052[label="1;1pkt 1fpkt"];
9061--11052[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.194.13.41" src_port="80"/>
      <filter dst_ip="174.194.13.41" dst_port="18797"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.15.176.247"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.73.52.248"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="122.107.172.250"/>
    </slice>
    <from sec="1229058347" usec="0"/>
    <to sec="1229058399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619336,1.9111,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.48.247.255"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.208.53.0"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.210.32.5"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.72.246.6"/>
    </slice>
    <from sec="1229058883" usec="0"/>
    <to sec="1229058889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.220.5.8"/>
    </slice>
    <from sec="1229058347" usec="0"/>
    <to sec="1229058354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.2.114.15"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.187.72.17"/>
    </slice>
    <from sec="1229058428" usec="0"/>
    <to sec="1229058675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.10.129.40"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.171.21.48"/>
    </slice>
    <from sec="1229058155" usec="0"/>
    <to sec="1229058162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.147.1.51"/>
    </slice>
    <from sec="1229058561" usec="0"/>
    <to sec="1229058581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.238.45.55"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.80.161.57"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.38.121.58"/>
    </slice>
    <from sec="1229058000" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.134.42.67"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.21.229.71"/>
    </slice>
    <from sec="1229058592" usec="0"/>
    <to sec="1229058596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.0.68.76"/>
    </slice>
    <from sec="1229058234" usec="0"/>
    <to sec="1229058240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.5.254.82"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.72.177.101"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.194.33.106"/>
    </slice>
    <from sec="1229058295" usec="0"/>
    <to sec="1229058302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.55.72.111"/>
    </slice>
    <from sec="1229058524" usec="0"/>
    <to sec="1229058533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.74.56.118"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.60.40.124"/>
    </slice>
    <from sec="1229058731" usec="0"/>
    <to sec="1229058734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.59.74.127"/>
    </slice>
    <from sec="1229058528" usec="0"/>
    <to sec="1229058880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.146.53.130"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.153.184.132"/>
    </slice>
    <from sec="1229058355" usec="0"/>
    <to sec="1229058382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.49.6.137"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.144.73.144"/>
    </slice>
    <from sec="1229058148" usec="0"/>
    <to sec="1229058900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.165.111.145"/>
    </slice>
    <from sec="1229058714" usec="0"/>
    <to sec="1229058823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.185.149.146"/>
    </slice>
    <from sec="1229058223" usec="0"/>
    <to sec="1229058265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.106.109.147"/>
    </slice>
    <from sec="1229058226" usec="0"/>
    <to sec="1229058260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.225.20.148"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.49.29.152"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.78.255.162"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="163.187.181.172"/>
    </slice>
    <from sec="1229058548" usec="0"/>
    <to sec="1229058732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.187.137.173"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.20.162.177"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.20.162.180"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.234.218.182"/>
    </slice>
    <from sec="1229058065" usec="0"/>
    <to sec="1229058899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.2.16.187"/>
    </slice>
    <from sec="1229058231" usec="0"/>
    <to sec="1229058252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.72.141.191"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.51.248.195"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.184.220.203"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.74.95.206"/>
    </slice>
    <from sec="1229058002" usec="0"/>
    <to sec="1229058389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.219.29.207"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.39.142.208"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.28.195.209"/>
    </slice>
    <from sec="1229058373" usec="0"/>
    <to sec="1229058875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.84.16.220"/>
    </slice>
    <from sec="1229058900" usec="0"/>
    <to sec="1229058901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.180.219.234"/>
    </slice>
    <from sec="1229058003" usec="0"/>
    <to sec="1229058372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.811435,1.93714,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.249.136.245"/>
    </slice>
    <from sec="1229058427" usec="0"/>
    <to sec="1229058438" usec="0"/>
  </anomaly>

</admd:annotation>
