<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.32119,2.25902,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.170.71.231" dst_port="25" proto="tcp" src_ip="136.90.117.52" src_port="49856"/>
      <filter dst_ip="218.170.71.231" dst_port="25" proto="udp" src_ip="136.90.117.52" src_port="49856"/>
      <from sec="1246943650" usec="0"/>
      <to sec="1246943652" usec="0"/>
    </slice>
    <from sec="1246943650" usec="0"/>
    <to sec="1246943652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.235.67.113" dst_port="80" proto="tcp" src_ip="136.90.252.56" src_port="2187"/>
      <filter dst_ip="196.235.67.113" dst_port="80" proto="udp" src_ip="136.90.252.56" src_port="2187"/>
      <filter dst_ip="196.235.67.113" dst_port="53" proto="tcp" src_ip="136.90.252.56" src_port="2187"/>
      <filter dst_ip="196.235.67.113" dst_port="53" proto="udp" src_ip="136.90.252.56" src_port="2187"/>
      <from sec="1246943642" usec="0"/>
      <to sec="1246943651" usec="0"/>
    </slice>
    <from sec="1246943642" usec="0"/>
    <to sec="1246943651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.74.82" dst_port="80" proto="tcp" src_ip="43.217.17.75" src_port="49596"/>
      <filter dst_ip="169.185.74.82" dst_port="80" proto="tcp" src_ip="43.217.17.75" src_port="49604"/>
      <filter dst_ip="169.185.74.82" dst_port="80" proto="tcp" src_ip="43.217.17.75" src_port="49601"/>
      <from sec="1246943636" usec="0"/>
      <to sec="1246943640" usec="0"/>
    </slice>
    <from sec="1246943636" usec="0"/>
    <to sec="1246943640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.173.11.152" dst_port="80" proto="tcp" src_ip="136.90.74.105" src_port="4986"/>
      <filter dst_ip="26.173.11.152" dst_port="80" proto="udp" src_ip="136.90.74.105" src_port="4986"/>
      <filter dst_ip="26.173.11.152" dst_port="80" proto="tcp" src_ip="136.90.74.105" src_port="4988"/>
      <filter dst_ip="26.173.11.152" dst_port="80" proto="udp" src_ip="136.90.74.105" src_port="4988"/>
      <from sec="1246943644" usec="0"/>
      <to sec="1246943648" usec="0"/>
    </slice>
    <from sec="1246943644" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.170.81.177" dst_port="80" proto="tcp" src_ip="136.90.218.107" src_port="57535"/>
      <filter dst_ip="218.170.81.177" dst_port="25" proto="tcp" src_ip="136.90.218.107" src_port="57535"/>
      <from sec="1246943576" usec="0"/>
      <to sec="1246943578" usec="0"/>
    </slice>
    <from sec="1246943576" usec="0"/>
    <to sec="1246943578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.81.58.180" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1708"/>
      <filter dst_ip="204.81.58.180" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1712"/>
      <filter dst_ip="204.81.58.151" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1708"/>
      <filter dst_ip="204.81.58.151" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1712"/>
      <filter dst_ip="204.81.58.173" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1708"/>
      <filter dst_ip="204.81.58.173" dst_port="80" proto="tcp" src_ip="136.90.65.130" src_port="1712"/>
      <from sec="1246943653" usec="0"/>
      <to sec="1246943659" usec="0"/>
    </slice>
    <from sec="1246943652" usec="0"/>
    <to sec="1246943659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="169.185.0.24"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="80" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="136.90.107.219"/>
      <filter dst_ip="169.185.0.24" dst_port="22" proto="tcp" src_ip="136.90.107.219"/>
      <from sec="1246943572" usec="0"/>
      <to sec="1246943627" usec="0"/>
    </slice>
    <from sec="1246943572" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.253.30" dst_port="80" proto="tcp" src_ip="205.100.253.30"/>
      <filter dst_ip="205.100.253.30" dst_port="80" proto="tcp" src_ip="205.100.253.30"/>
      <filter dst_ip="205.100.253.30" dst_port="80" proto="tcp" src_ip="205.100.253.30"/>
      <filter dst_ip="205.100.253.30" dst_port="80" proto="tcp" src_ip="205.100.253.30"/>
      <from sec="1246943561" usec="0"/>
      <to sec="1246943699" usec="0"/>
    </slice>
    <from sec="1246943561" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="37709"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="37709"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="37709"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="37709"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="54926"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="54926"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="54926"/>
      <filter dst_ip="205.100.253.31" dst_port="80" proto="tcp" src_ip="205.100.253.31" src_port="54926"/>
      <from sec="1246943561" usec="0"/>
      <to sec="1246943699" usec="0"/>
    </slice>
    <from sec="1246943561" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="1062" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.48" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <from sec="1246943569" usec="0"/>
      <to sec="1246943619" usec="0"/>
    </slice>
    <from sec="1246943569" usec="0"/>
    <to sec="1246943619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.251.56" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.251.56" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <from sec="1246942811" usec="0"/>
      <to sec="1246943694" usec="0"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.17.13.60" dst_port="554" proto="tcp" src_ip="16.17.13.60" src_port="2566"/>
      <filter dst_ip="16.17.13.60" dst_port="554" proto="tcp" src_ip="16.17.13.60" src_port="2566"/>
      <filter dst_ip="16.17.13.60" dst_port="554" proto="tcp" src_ip="16.17.13.60" src_port="2566"/>
      <filter dst_ip="16.17.13.60" dst_port="554" proto="tcp" src_ip="16.17.13.60" src_port="2566"/>
      <from sec="1246943324" usec="0"/>
      <to sec="1246943698" usec="0"/>
    </slice>
    <from sec="1246943324" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="80"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="tcp" src_ip="205.100.250.68" src_port="19101"/>
      <filter dst_ip="205.100.250.68" proto="udp" src_ip="205.100.250.68" src_port="19101"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943701" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.74.94" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="169.185.74.94" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <from sec="1246943585" usec="0"/>
      <to sec="1246943656" usec="0"/>
    </slice>
    <from sec="1246943585" usec="0"/>
    <to sec="1246943656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="204.91.0.153"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="205.100.240.132" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <from sec="1246943642" usec="0"/>
      <to sec="1246943699" usec="0"/>
    </slice>
    <from sec="1246943642" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.18.120.222" dst_port="80" proto="tcp" src_ip="219.18.120.222"/>
      <filter dst_ip="219.18.120.222" dst_port="80" proto="tcp" src_ip="219.18.120.222"/>
      <filter dst_ip="219.18.120.222" dst_port="80" proto="tcp" src_ip="219.18.120.222"/>
      <filter dst_ip="219.18.120.222" dst_port="80" proto="tcp" src_ip="219.18.120.222"/>
      <from sec="1246943564" usec="0"/>
      <to sec="1246943699" usec="0"/>
    </slice>
    <from sec="1246943564" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.124.141.175" dst_port="80" proto="tcp" src_ip="169.185.154.13"/>
      <from sec="1246943621" usec="0"/>
      <to sec="1246943623" usec="0"/>
    </slice>
    <from sec="1246943621" usec="0"/>
    <to sec="1246943623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.81.58.173" dst_port="80" proto="tcp" src_ip="136.90.118.33" src_port="4769"/>
      <filter dst_ip="204.81.58.173" dst_port="80" proto="tcp" src_ip="136.90.118.33" src_port="4768"/>
      <filter dst_ip="204.81.58.178" dst_port="80" proto="tcp" src_ip="136.90.118.33" src_port="4769"/>
      <filter dst_ip="204.81.58.178" dst_port="80" proto="tcp" src_ip="136.90.118.33" src_port="4768"/>
      <from sec="1246943622" usec="0"/>
      <to sec="1246943636" usec="0"/>
    </slice>
    <from sec="1246943622" usec="0"/>
    <to sec="1246943636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.228.210.238" dst_port="80" proto="tcp" src_ip="136.90.167.39"/>
      <filter dst_ip="217.228.210.238" dst_port="80" proto="udp" src_ip="136.90.167.39"/>
      <filter dst_ip="20.68.42.221" dst_port="80" proto="tcp" src_ip="136.90.167.39"/>
      <filter dst_ip="20.68.42.221" dst_port="80" proto="udp" src_ip="136.90.167.39"/>
      <from sec="1246943672" usec="0"/>
      <to sec="1246943691" usec="0"/>
    </slice>
    <from sec="1246943669" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.74.20" dst_port="80" proto="tcp" src_ip="93.40.88.153"/>
      <filter dst_ip="169.185.74.20" dst_port="80" proto="udp" src_ip="93.40.88.153"/>
      <from sec="1246943696" usec="0"/>
      <to sec="1246943698" usec="0"/>
    </slice>
    <from sec="1246943696" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1224" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="80" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="udp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="tcp" src_ip="38.58.55.250"/>
      <filter dst_ip="169.185.201.61" dst_port="1062" proto="udp" src_ip="38.58.55.250"/>
      <from sec="1246943569" usec="0"/>
      <to sec="1246943699" usec="0"/>
    </slice>
    <from sec="1246943569" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="90.23.6.160"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="90.23.6.160" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <from sec="1246943556" usec="0"/>
      <to sec="1246943674" usec="0"/>
    </slice>
    <from sec="1246943556" usec="0"/>
    <to sec="1246943674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32119,2.25902,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="216.232.25.79"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="443" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="22" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="80" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="tcp" src_ip="136.90.45.76"/>
      <filter dst_ip="139.170.101.168" dst_port="53" proto="udp" src_ip="136.90.45.76"/>
      <from sec="1246943638" usec="0"/>
      <to sec="1246943640" usec="0"/>
    </slice>
    <from sec="1246943638" usec="0"/>
    <to sec="1246943640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.113.228.200"/>
      <from sec="1246943334" usec="0"/>
      <to sec="1246943556" usec="0"/>
    </slice>
    <from sec="1246943334" usec="0"/>
    <to sec="1246943556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.113.228.200"/>
      <from sec="1246943334" usec="0"/>
      <to sec="1246943556" usec="0"/>
    </slice>
    <from sec="1246943334" usec="0"/>
    <to sec="1246943556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
388[label="204.91.181.78;s;375pkt 375fpkt", shape=diamond, color=yellow];
440[label="60.34.27.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
585[label="50.84.216.196;d;4pkt 4fpkt", shape=diamond, color=yellow];
1277[label="50.96.171.37;d;7pkt 7fpkt", shape=diamond, color=yellow];
1510[label="177.180.3.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
1564[label="37.56.150.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
1929[label="63.85.0.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
2901[label="182.200.169.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
3534[label="41.15.10.206;d;2pkt 2fpkt", shape=diamond, color=yellow];
3539[label="91.53.169.211;d;2pkt 2fpkt", shape=diamond, color=yellow];
3541[label="26.184.147.210;d;3pkt 3fpkt", shape=diamond, color=yellow];
3563[label="44.51.160.155;d;4pkt 4fpkt", shape=diamond, color=yellow];
4036[label="93.34.36.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
4224[label="36.27.105.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
5388[label="52.217.33.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
5873[label="36.39.69.107;d;3pkt 3fpkt", shape=diamond, color=yellow];
5893[label="3.76.16.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
5948[label="27.211.87.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
6010[label="88.51.152.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
6347[label="29.180.74.14;d;4pkt 4fpkt", shape=diamond, color=yellow];
6433[label="49.64.82.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
6712[label="177.180.3.73;d;1pkt 1fpkt", shape=hexagon, color=black];
6726[label="37.56.150.62;d;1pkt 1fpkt", shape=hexagon, color=black];
7357[label="26.184.147.210;d;3pkt 3fpkt", shape=hexagon, color=black];
7781[label="50.96.171.37;d;7pkt 7fpkt", shape=hexagon, color=black];
7846[label="44.51.160.155;d;4pkt 4fpkt", shape=hexagon, color=black];
8124[label="204.91.181.78;s;324pkt 324fpkt", shape=hexagon, color=black];
10443[label="204.91.181.78;413pkt 413fpkt", shape=pentagon, color=darkviolet];
14454[label="204.91.181.78;413pkt 413fpkt", shape=invtriangle, color=brown];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.181.78:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6969: (4.79798%)&lt;BR/&gt; 17199: (4.73485%)&lt;BR/&gt; 50611: (2.43056%)&lt;BR/&gt; 8080: (1.45202%)&lt;BR/&gt; 40520: (1.32576%)&gt;];
}
388--440[label="1;1pkt 1fpkt"];
388--585[label="1;4pkt 4fpkt"];
388--1277[label="1;7pkt 7fpkt"];
388--1510[label="1;2pkt 2fpkt"];
388--1564[label="1;1pkt 1fpkt"];
388--1819[label="0.5;1pkt 1fpkt"];
388--1929[label="1;1pkt 1fpkt"];
388--2901[label="1;1pkt 1fpkt"];
388--3534[label="1;2pkt 2fpkt"];
388--3539[label="1;2pkt 2fpkt"];
388--3541[label="1;3pkt 3fpkt"];
388--3563[label="1;4pkt 4fpkt"];
388--4036[label="1;1pkt 1fpkt"];
388--4224[label="1;1pkt 1fpkt"];
388--5388[label="1;1pkt 1fpkt"];
388--5570[label="0.00980392;1pkt 1fpkt"];
388--5873[label="1;3pkt 3fpkt"];
388--5893[label="1;1pkt 1fpkt"];
388--5948[label="1;1pkt 1fpkt"];
388--6010[label="1;1pkt 1fpkt"];
388--6347[label="1;4pkt 4fpkt"];
388--6433[label="1;2pkt 2fpkt"];
388--6712[label="1;1pkt 1fpkt"];
388--6726[label="1;1pkt 1fpkt"];
388--7357[label="1;3pkt 3fpkt"];
388--7781[label="1;7pkt 7fpkt"];
388--7846[label="1;4pkt 4fpkt"];
388--8124[label="1;324pkt 324fpkt"];
388--10443[label="1;375pkt 375fpkt"];
388--14454[label="1;375pkt 375fpkt"];
440--8124[label="1;1pkt 1fpkt"];
440--10443[label="1;1pkt 1fpkt"];
440--14454[label="1;1pkt 1fpkt"];
585--8124[label="1;4pkt 4fpkt"];
585--10443[label="1;4pkt 4fpkt"];
585--14454[label="1;4pkt 4fpkt"];
1277--7781[label="1;7pkt 7fpkt"];
1277--8124[label="1;7pkt 7fpkt"];
1277--10443[label="1;7pkt 7fpkt"];
1277--14454[label="1;7pkt 7fpkt"];
1510--6712[label="1;1pkt 1fpkt"];
1510--8124[label="0.5;1pkt 1fpkt"];
1510--10443[label="1;2pkt 2fpkt"];
1510--14454[label="1;2pkt 2fpkt"];
1564--6726[label="1;1pkt 1fpkt"];
1564--8124[label="1;1pkt 1fpkt"];
1564--10443[label="1;1pkt 1fpkt"];
1564--14454[label="1;1pkt 1fpkt"];
1929--8124[label="1;1pkt 1fpkt"];
1929--10443[label="1;1pkt 1fpkt"];
1929--14454[label="1;1pkt 1fpkt"];
2901--8124[label="1;1pkt 1fpkt"];
2901--10443[label="1;1pkt 1fpkt"];
2901--14454[label="1;1pkt 1fpkt"];
3534--8124[label="1;2pkt 2fpkt"];
3534--10443[label="1;2pkt 2fpkt"];
3534--14454[label="1;2pkt 2fpkt"];
3539--8124[label="1;2pkt 2fpkt"];
3539--10443[label="1;2pkt 2fpkt"];
3539--14454[label="1;2pkt 2fpkt"];
3541--7357[label="1;3pkt 3fpkt"];
3541--8124[label="1;3pkt 3fpkt"];
3541--10443[label="1;3pkt 3fpkt"];
3541--14454[label="1;3pkt 3fpkt"];
3563--7846[label="1;4pkt 4fpkt"];
3563--8124[label="0.75;3pkt 3fpkt"];
3563--10443[label="1;4pkt 4fpkt"];
3563--14454[label="1;4pkt 4fpkt"];
4036--8124[label="1;1pkt 1fpkt"];
4036--10443[label="1;1pkt 1fpkt"];
4036--14454[label="1;1pkt 1fpkt"];
4224--8124[label="1;1pkt 1fpkt"];
4224--10443[label="1;1pkt 1fpkt"];
4224--14454[label="1;1pkt 1fpkt"];
5388--8124[label="1;1pkt 1fpkt"];
5388--10443[label="1;1pkt 1fpkt"];
5388--14454[label="1;1pkt 1fpkt"];
5873--8124[label="1;3pkt 3fpkt"];
5873--10443[label="1;3pkt 3fpkt"];
5873--14454[label="1;3pkt 3fpkt"];
5893--8124[label="1;1pkt 1fpkt"];
5893--10443[label="1;1pkt 1fpkt"];
5893--14454[label="1;1pkt 1fpkt"];
5948--8124[label="1;1pkt 1fpkt"];
5948--10443[label="1;1pkt 1fpkt"];
5948--14454[label="1;1pkt 1fpkt"];
6010--8124[label="1;1pkt 1fpkt"];
6010--10443[label="1;1pkt 1fpkt"];
6010--14454[label="1;1pkt 1fpkt"];
6347--8124[label="1;4pkt 4fpkt"];
6347--10443[label="1;4pkt 4fpkt"];
6347--14454[label="1;4pkt 4fpkt"];
6433--8124[label="1;2pkt 2fpkt"];
6433--10443[label="1;2pkt 2fpkt"];
6433--14454[label="1;2pkt 2fpkt"];
6712--8124[label="1;1pkt 1fpkt"];
6712--10443[label="1;1pkt 1fpkt"];
6712--14454[label="1;1pkt 1fpkt"];
6726--8124[label="1;1pkt 1fpkt"];
6726--10443[label="1;1pkt 1fpkt"];
6726--14454[label="1;1pkt 1fpkt"];
7357--8124[label="1;3pkt 3fpkt"];
7357--10443[label="1;3pkt 3fpkt"];
7357--14454[label="1;3pkt 3fpkt"];
7781--8124[label="1;7pkt 7fpkt"];
7781--10443[label="1;7pkt 7fpkt"];
7781--14454[label="1;7pkt 7fpkt"];
7846--8124[label="0.75;3pkt 3fpkt"];
7846--10443[label="1;4pkt 4fpkt"];
7846--14454[label="1;4pkt 4fpkt"];
8124--10443[label="1;324pkt 324fpkt"];
8124--14454[label="1;324pkt 324fpkt"];
10443--14454[label="1;413pkt 413fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.181.78"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43867,2.20508,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
23[label="136.90.194.33s;1pkt 1fpkt", shape=rectangle, color=red];
529[label="136.90.194.33;s;14pkt 14fpkt", shape=diamond, color=yellow];
6104[label="194.13.250.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.194.33:*, 194.13.251.94:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33468: (9.375%)&lt;BR/&gt; 33470: (3.125%)&lt;BR/&gt; 33469: (3.125%)&lt;BR/&gt; 33467: (3.125%)&gt;];
}
23--529[label="1;1pkt 1fpkt"];
23--6104[label="1;1pkt 1fpkt"];
529--6104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.13.251.94" dst_port="80" src_ip="136.90.194.33"/>
    </slice>
    <from sec="1246943497" usec="0"/>
    <to sec="1246943568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
543[label="28.110.99.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
545[label="204.91.174.108;s;1235pkt 1235fpkt", shape=diamond, color=yellow];
564[label="26.180.122.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
680[label="91.170.35.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
994[label="46.101.81.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
1055[label="26.180.112.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1174[label="28.111.78.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
1209[label="63.154.143.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
1245[label="28.110.18.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1284[label="28.110.96.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1627[label="93.141.125.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2132[label="93.128.8.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
2212[label="3.135.25.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
3082[label="28.110.80.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
3312[label="20.30.174.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
3875[label="27.20.23.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
4033[label="26.180.155.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
4050[label="61.138.43.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
4109[label="3.89.40.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
4496[label="26.180.21.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
5613[label="93.134.131.67;d;101pkt 101fpkt", shape=diamond, color=yellow];
5860[label="91.132.224.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
5920[label="17.54.65.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
6216[label="216.176.113.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
6376[label="91.26.106.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
7157[label="93.141.125.98;d;1pkt 1fpkt", shape=hexagon, color=black];
7336[label="93.128.8.45;d;1pkt 1fpkt", shape=hexagon, color=black];
7535[label="26.180.155.105;d;1pkt 1fpkt", shape=hexagon, color=black];
7563[label="3.89.40.195;d;1pkt 1fpkt", shape=hexagon, color=black];
7677[label="91.170.35.42;d;1pkt 1fpkt", shape=hexagon, color=black];
7838[label="3.135.25.53;d;1pkt 1fpkt", shape=hexagon, color=black];
8343[label="91.132.224.42;d;1pkt 1fpkt", shape=hexagon, color=black];
11044[label="204.91.174.108;1341pkt 1341fpkt", shape=pentagon, color=darkviolet];
14742[label="204.91.174.108;1341pkt 1341fpkt", shape=invtriangle, color=brown];
16403[label="204.91.174.108;1341pkt 1341fpkt", shape=invhouse, color=bisque];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.174.108:15000, *:*}[72.5037%]&lt;BR/&gt;{204.91.174.108:*, *:80}[23.7705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (38.6085%)&lt;BR/&gt; 80: (12.7737%)&lt;BR/&gt; 20460: (0.844156%)&lt;BR/&gt; 8000: (0.825603%)&lt;BR/&gt; 12000: (0.343228%)&gt;];
}
543--545[label="1;1pkt 1fpkt"];
543--11044[label="1;1pkt 1fpkt"];
543--14742[label="1;1pkt 1fpkt"];
543--16403[label="1;1pkt 1fpkt"];
545--564[label="1;1pkt 1fpkt"];
545--680[label="1;1pkt 1fpkt"];
545--994[label="1;1pkt 1fpkt"];
545--1055[label="1;1pkt 1fpkt"];
545--1174[label="1;1pkt 1fpkt"];
545--1209[label="1;1pkt 1fpkt"];
545--1245[label="1;1pkt 1fpkt"];
545--1284[label="1;1pkt 1fpkt"];
545--1627[label="1;1pkt 1fpkt"];
545--2132[label="0.5;1pkt 1fpkt"];
545--2212[label="1;1pkt 1fpkt"];
545--3082[label="1;1pkt 1fpkt"];
545--3312[label="1;1pkt 1fpkt"];
545--3875[label="1;1pkt 1fpkt"];
545--3972[label="0.391566;65pkt 65fpkt"];
545--4033[label="1;1pkt 1fpkt"];
545--4050[label="1;1pkt 1fpkt"];
545--4109[label="1;1pkt 1fpkt"];
545--4496[label="1;1pkt 1fpkt"];
545--5613[label="1;101pkt 101fpkt"];
545--5860[label="1;1pkt 1fpkt"];
545--5920[label="1;1pkt 1fpkt"];
545--6216[label="1;1pkt 1fpkt"];
545--6376[label="1;1pkt 1fpkt"];
545--7157[label="1;1pkt 1fpkt"];
545--7336[label="1;1pkt 1fpkt"];
545--7535[label="1;1pkt 1fpkt"];
545--7563[label="1;1pkt 1fpkt"];
545--7677[label="1;1pkt 1fpkt"];
545--7838[label="1;1pkt 1fpkt"];
545--8343[label="1;1pkt 1fpkt"];
545--8484[label="0.000809717;1pkt 1fpkt"];
545--8496[label="0.000809717;1pkt 1fpkt"];
545--8514[label="0.017004;21pkt 21fpkt"];
545--8574[label="0.000809717;1pkt 1fpkt"];
545--8586[label="0.000809717;1pkt 1fpkt"];
545--8603[label="0.017004;21pkt 21fpkt"];
545--8656[label="0.000809717;1pkt 1fpkt"];
545--8680[label="0.017004;21pkt 21fpkt"];
545--8681[label="0.000809717;1pkt 1fpkt"];
545--11044[label="1;1235pkt 1235fpkt"];
545--14742[label="1;1235pkt 1235fpkt"];
545--16403[label="1;1235pkt 1235fpkt"];
564--11044[label="1;1pkt 1fpkt"];
564--14742[label="1;1pkt 1fpkt"];
564--16403[label="1;1pkt 1fpkt"];
680--7677[label="1;1pkt 1fpkt"];
680--11044[label="1;1pkt 1fpkt"];
680--14742[label="1;1pkt 1fpkt"];
680--16403[label="1;1pkt 1fpkt"];
994--11044[label="1;1pkt 1fpkt"];
994--14742[label="1;1pkt 1fpkt"];
994--16403[label="1;1pkt 1fpkt"];
1055--11044[label="1;1pkt 1fpkt"];
1055--14742[label="1;1pkt 1fpkt"];
1055--16403[label="1;1pkt 1fpkt"];
1174--11044[label="1;1pkt 1fpkt"];
1174--14742[label="1;1pkt 1fpkt"];
1174--16403[label="1;1pkt 1fpkt"];
1209--11044[label="1;1pkt 1fpkt"];
1209--14742[label="1;1pkt 1fpkt"];
1209--16403[label="1;1pkt 1fpkt"];
1245--11044[label="1;1pkt 1fpkt"];
1245--14742[label="1;1pkt 1fpkt"];
1245--16403[label="1;1pkt 1fpkt"];
1284--11044[label="1;1pkt 1fpkt"];
1284--14742[label="1;1pkt 1fpkt"];
1284--16403[label="1;1pkt 1fpkt"];
1627--7157[label="1;1pkt 1fpkt"];
1627--11044[label="1;1pkt 1fpkt"];
1627--14742[label="1;1pkt 1fpkt"];
1627--16403[label="1;1pkt 1fpkt"];
2132--6598[label="0.5;1pkt 1fpkt"];
2132--7336[label="1;1pkt 1fpkt"];
2132--10243[label="0.5;1pkt 1fpkt"];
2132--11044[label="0.5;1pkt 1fpkt"];
2132--14365[label="0.5;1pkt 1fpkt"];
2132--14742[label="0.5;1pkt 1fpkt"];
2132--16245[label="0.5;1pkt 1fpkt"];
2132--16403[label="0.5;1pkt 1fpkt"];
2212--7838[label="1;1pkt 1fpkt"];
2212--11044[label="1;1pkt 1fpkt"];
2212--14742[label="1;1pkt 1fpkt"];
2212--16403[label="1;1pkt 1fpkt"];
3082--11044[label="1;1pkt 1fpkt"];
3082--14742[label="1;1pkt 1fpkt"];
3082--16403[label="1;1pkt 1fpkt"];
3312--11044[label="1;1pkt 1fpkt"];
3312--14742[label="1;1pkt 1fpkt"];
3312--16403[label="1;1pkt 1fpkt"];
3875--11044[label="1;1pkt 1fpkt"];
3875--14742[label="1;1pkt 1fpkt"];
3875--16403[label="1;1pkt 1fpkt"];
4033--7535[label="1;1pkt 1fpkt"];
4033--11044[label="1;1pkt 1fpkt"];
4033--14742[label="1;1pkt 1fpkt"];
4033--16403[label="1;1pkt 1fpkt"];
4050--11044[label="1;1pkt 1fpkt"];
4050--14742[label="1;1pkt 1fpkt"];
4050--16403[label="1;1pkt 1fpkt"];
4109--7563[label="1;1pkt 1fpkt"];
4109--11044[label="1;1pkt 1fpkt"];
4109--14742[label="1;1pkt 1fpkt"];
4109--16403[label="1;1pkt 1fpkt"];
4496--11044[label="1;1pkt 1fpkt"];
4496--14742[label="1;1pkt 1fpkt"];
4496--16403[label="1;1pkt 1fpkt"];
5613--8514[label="0.0792079;8pkt 8fpkt"];
5613--8603[label="0.0792079;8pkt 8fpkt"];
5613--8680[label="0.0792079;8pkt 8fpkt"];
5613--11044[label="1;101pkt 101fpkt"];
5613--14742[label="1;101pkt 101fpkt"];
5613--16403[label="1;101pkt 101fpkt"];
5860--8343[label="1;1pkt 1fpkt"];
5860--11044[label="1;1pkt 1fpkt"];
5860--14742[label="1;1pkt 1fpkt"];
5860--16403[label="1;1pkt 1fpkt"];
5920--11044[label="1;1pkt 1fpkt"];
5920--14742[label="1;1pkt 1fpkt"];
5920--16403[label="1;1pkt 1fpkt"];
6216--11044[label="1;1pkt 1fpkt"];
6216--14742[label="1;1pkt 1fpkt"];
6216--16403[label="1;1pkt 1fpkt"];
6376--11044[label="1;1pkt 1fpkt"];
6376--14742[label="1;1pkt 1fpkt"];
6376--16403[label="1;1pkt 1fpkt"];
7157--11044[label="1;1pkt 1fpkt"];
7157--14742[label="1;1pkt 1fpkt"];
7157--16403[label="1;1pkt 1fpkt"];
7336--11044[label="1;1pkt 1fpkt"];
7336--14742[label="1;1pkt 1fpkt"];
7336--16403[label="1;1pkt 1fpkt"];
7535--11044[label="1;1pkt 1fpkt"];
7535--14742[label="1;1pkt 1fpkt"];
7535--16403[label="1;1pkt 1fpkt"];
7563--11044[label="1;1pkt 1fpkt"];
7563--14742[label="1;1pkt 1fpkt"];
7563--16403[label="1;1pkt 1fpkt"];
7677--11044[label="1;1pkt 1fpkt"];
7677--14742[label="1;1pkt 1fpkt"];
7677--16403[label="1;1pkt 1fpkt"];
7838--11044[label="1;1pkt 1fpkt"];
7838--14742[label="1;1pkt 1fpkt"];
7838--16403[label="1;1pkt 1fpkt"];
8343--11044[label="1;1pkt 1fpkt"];
8343--14742[label="1;1pkt 1fpkt"];
8343--16403[label="1;1pkt 1fpkt"];
11044--14742[label="1;1341pkt 1341fpkt"];
11044--16403[label="1;1341pkt 1341fpkt"];
14742--16403[label="1;1341pkt 1341fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.174.108" src_port="15000"/>
      <filter dst_port="80" src_ip="204.91.174.108"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
580[label="169.185.200.31;s;41pkt 41fpkt", shape=diamond, color=yellow];
581[label="93.89.149.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
2081[label="212.3.185.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
3344[label="92.154.9.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
6621[label="169.185.200.31;s;41pkt 41fpkt", shape=hexagon, color=black];
7044[label="212.3.185.33;d;1pkt 1fpkt", shape=hexagon, color=black];
7275[label="92.154.9.247;d;1pkt 1fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.200.31:9742, *:17788}[48.7805%]&lt;BR/&gt;{169.185.200.31:*, 91.74.161.76:80}[21.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9742: (31.0345%)&lt;BR/&gt; 17788: (22.9885%)&lt;BR/&gt; 80: (17.2414%)&lt;BR/&gt; 8655: (2.29885%)&lt;BR/&gt; 2025: (2.29885%)&gt;];
}
580--581[label="1;1pkt 1fpkt"];
580--2081[label="1;1pkt 1fpkt"];
580--3344[label="1;1pkt 1fpkt"];
580--6621[label="1;41pkt 41fpkt"];
580--7044[label="1;1pkt 1fpkt"];
580--7275[label="1;1pkt 1fpkt"];
581--6621[label="1;1pkt 1fpkt"];
2081--6621[label="1;1pkt 1fpkt"];
2081--7044[label="1;1pkt 1fpkt"];
3344--6621[label="1;1pkt 1fpkt"];
3344--7275[label="1;1pkt 1fpkt"];
6621--7044[label="1;1pkt 1fpkt"];
6621--7275[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.74.161.76" dst_port="80" src_ip="169.185.200.31"/>
      <filter dst_port="17788" src_ip="169.185.200.31" src_port="9742"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.81.104.28"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943612" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
688[label="53.138.52.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
689[label="169.185.182.195;s;32pkt 32fpkt", shape=diamond, color=yellow];
12671[label="169.185.182.195;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.182.195:61296, *:*}[30%]&lt;BR/&gt;{169.185.182.195:*, *:80}[25%]&lt;BR/&gt;{169.185.182.195:61590, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61296: (16.4384%)&lt;BR/&gt; 80: (13.6986%)&lt;BR/&gt; 61590: (5.47945%)&lt;BR/&gt; 61383: (5.47945%)&lt;BR/&gt; 0: (2.73973%)&gt;];
}
688--689[label="1;1pkt 1fpkt"];
688--12671[label="1;1pkt 1fpkt"];
689--8514[label="0.03125;1pkt 1fpkt"];
689--8603[label="0.03125;1pkt 1fpkt"];
689--8680[label="0.03125;1pkt 1fpkt"];
689--12671[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="169.185.182.195" src_port="61296"/>
      <filter src_ip="169.185.182.195" src_port="61590"/>
      <filter dst_port="80" src_ip="169.185.182.195"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
695[label="169.185.47.196;s;6pkt 6fpkt", shape=diamond, color=yellow];
696[label="38.187.184.236;d;3pkt 3fpkt", shape=diamond, color=yellow];
12680[label="169.185.47.196;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15513[label="169.185.47.196;6pkt 6fpkt", shape=invtriangle, color=brown];
16731[label="169.185.47.196;6pkt 6fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.47.196:*, 38.187.184.236:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50183: (9.25926%)&lt;BR/&gt; 50182: (9.25926%)&lt;BR/&gt; 50181: (9.25926%)&lt;BR/&gt; 50185: (7.40741%)&gt;];
}
695--696[label="1;3pkt 3fpkt"];
695--1271[label="0.166667;1pkt 1fpkt"];
695--12680[label="1;6pkt 6fpkt"];
695--15513[label="1;6pkt 6fpkt"];
695--16731[label="1;6pkt 6fpkt"];
696--12680[label="1;3pkt 3fpkt"];
696--15513[label="1;3pkt 3fpkt"];
696--16731[label="1;3pkt 3fpkt"];
12680--15513[label="1;6pkt 6fpkt"];
12680--16731[label="1;6pkt 6fpkt"];
15513--16731[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="38.187.184.236" dst_port="80" src_ip="169.185.47.196"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
733[label="136.90.18.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
734[label="164.80.230.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
12380[label="136.90.18.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15377[label="136.90.18.178;1pkt 1fpkt", shape=invtriangle, color=brown];
16660[label="136.90.18.178;1pkt 1fpkt", shape=invhouse, color=bisque];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.18.178:2328, 164.80.230.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2328: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
733--734[label="1;1pkt 1fpkt"];
733--12380[label="1;1pkt 1fpkt"];
733--15377[label="1;1pkt 1fpkt"];
733--16660[label="1;1pkt 1fpkt"];
734--12380[label="1;1pkt 1fpkt"];
734--15377[label="1;1pkt 1fpkt"];
734--16660[label="1;1pkt 1fpkt"];
12380--15377[label="1;1pkt 1fpkt"];
12380--16660[label="1;1pkt 1fpkt"];
15377--16660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.80.230.165" dst_port="80" src_ip="136.90.18.178" src_port="2328"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40341,2.15432,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
193[label="202.238.25.74s;1pkt 1fpkt", shape=rectangle, color=red];
742[label="42.249.128.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
839[label="136.90.240.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
10477[label="42.249.128.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.132.69.124:55185, 136.90.240.233:25165}[33.3333%]&lt;BR/&gt;{42.249.128.80:14210, 169.185.138.60:49331}[33.3333%]&lt;BR/&gt;{42.249.128.80:12110, 136.90.240.233:49178}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49178: (28.5714%)&lt;BR/&gt; 12110: (28.5714%)&lt;BR/&gt; 49331: (14.2857%)&lt;BR/&gt; 14210: (14.2857%)&lt;BR/&gt; 55185: (7.14286%)&gt;];
}
193--742[label="1;1pkt 1fpkt"];
193--839[label="1;1pkt 1fpkt"];
193--10477[label="1;1pkt 1fpkt"];
742--839[label="0.5;1pkt 1fpkt"];
742--10477[label="1;2pkt 2fpkt"];
839--10477[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.240.233" dst_port="49178" src_ip="42.249.128.80" src_port="12110"/>
      <filter dst_ip="169.185.138.60" dst_port="49331" src_ip="42.249.128.80" src_port="14210"/>
      <filter dst_ip="136.90.240.233" dst_port="25165" src_ip="93.132.69.124" src_port="55185"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
884[label="136.90.129.133;d;2pkt 2fpkt", shape=diamond, color=yellow];
885[label="210.65.161.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
6650[label="210.65.161.149;s;1pkt 1fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.65.161.149:8024, 136.90.129.133:56185}[50%]&lt;BR/&gt;{37.144.182.162:80, 136.90.129.133:4318}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56185: (37.5%)&lt;BR/&gt; 8024: (37.5%)&lt;BR/&gt; 4318: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
884--885[label="1;1pkt 1fpkt"];
884--6650[label="1;1pkt 1fpkt"];
884--12074[label="0.5;1pkt 1fpkt"];
885--6650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.129.133" dst_port="4318" src_ip="37.144.182.162" src_port="80"/>
      <filter dst_ip="136.90.129.133" dst_port="56185" src_ip="210.65.161.149" src_port="8024"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
902[label="205.100.253.164;s;30pkt 30fpkt", shape=diamond, color=yellow];
903[label="192.38.146.9;d;5pkt 5fpkt", shape=diamond, color=yellow];
12123[label="205.100.253.164;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.253.164:*, *:53}[77.4194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.8788%)&lt;BR/&gt; 62243: (2.27273%)&lt;BR/&gt; 57547: (2.27273%)&lt;BR/&gt; 57038: (2.27273%)&lt;BR/&gt; 54900: (2.27273%)&gt;];
}
902--903[label="1;5pkt 5fpkt"];
902--12123[label="1;30pkt 30fpkt"];
903--12123[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="205.100.253.164"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.19.134.134"/>
      <from sec="1246943505" usec="0"/>
      <to sec="1246943624" usec="0"/>
    </slice>
    <from sec="1246943505" usec="0"/>
    <to sec="1246943624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="20.19.134.134"/>
      <from sec="1246943505" usec="0"/>
      <to sec="1246943624" usec="0"/>
    </slice>
    <from sec="1246943505" usec="0"/>
    <to sec="1246943624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1123[label="46.134.180.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
1124[label="136.90.76.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
13425[label="136.90.76.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15829[label="136.90.76.239;1pkt 1fpkt", shape=invtriangle, color=brown];
16857[label="136.90.76.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.76.239:1107, 46.134.180.155:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1107: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1123--1124[label="1;1pkt 1fpkt"];
1123--13425[label="1;1pkt 1fpkt"];
1123--15829[label="1;1pkt 1fpkt"];
1123--16857[label="1;1pkt 1fpkt"];
1124--13425[label="1;1pkt 1fpkt"];
1124--15829[label="1;1pkt 1fpkt"];
1124--16857[label="1;1pkt 1fpkt"];
13425--15829[label="1;1pkt 1fpkt"];
13425--16857[label="1;1pkt 1fpkt"];
15829--16857[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="46.134.180.155" dst_port="554" src_ip="136.90.76.239" src_port="1107"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
1239[label="91.172.130.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
1240[label="141.161.131.202;s;2pkt 2fpkt", shape=diamond, color=yellow];
6834[label="141.161.131.202;s;1pkt 1fpkt", shape=hexagon, color=black];
12801[label="141.161.131.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.131.202:14924, 91.172.130.118:9271}[50%]&lt;BR/&gt;{141.161.131.202:58779, 30.64.252.149:16741}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14924: (33.3333%)&lt;BR/&gt; 9271: (33.3333%)&lt;BR/&gt; 58779: (16.6667%)&lt;BR/&gt; 16741: (16.6667%)&gt;];
}
1239--1240[label="1;1pkt 1fpkt"];
1239--6834[label="1;1pkt 1fpkt"];
1239--12801[label="1;1pkt 1fpkt"];
1240--6834[label="1;1pkt 1fpkt"];
1240--12801[label="1;2pkt 2fpkt"];
6834--12801[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="30.64.252.149" dst_port="16741" src_ip="141.161.131.202" src_port="58779"/>
      <filter dst_ip="91.172.130.118" dst_port="9271" src_ip="141.161.131.202" src_port="14924"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
937[label="169.185.202.103;s;30pkt 30fpkt", shape=diamond, color=yellow];
1258[label="32.154.100.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
1390[label="16.37.91.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
2122[label="22.88.229.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
2256[label="21.143.100.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
2751[label="214.22.39.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
3077[label="3.92.48.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
6782[label="169.185.202.103;s;30pkt 30fpkt", shape=hexagon, color=black];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.202.103:9038, *:17788}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9038: (46.9697%)&lt;BR/&gt; 17788: (12.1212%)&lt;BR/&gt; 16720: (2.27273%)&lt;BR/&gt; 15516: (2.27273%)&lt;BR/&gt; 14135: (2.27273%)&gt;];
}
937--1258[label="1;1pkt 1fpkt"];
937--1390[label="1;1pkt 1fpkt"];
937--2122[label="1;1pkt 1fpkt"];
937--2256[label="1;1pkt 1fpkt"];
937--2751[label="1;1pkt 1fpkt"];
937--3077[label="1;1pkt 1fpkt"];
937--6782[label="1;30pkt 30fpkt"];
1258--6782[label="1;1pkt 1fpkt"];
1390--6782[label="1;1pkt 1fpkt"];
2122--6782[label="1;1pkt 1fpkt"];
2256--6782[label="1;1pkt 1fpkt"];
2751--6782[label="1;1pkt 1fpkt"];
3077--6782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="169.185.202.103" src_port="9038"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
1339[label="217.89.151.234;d;91pkt 91fpkt", shape=diamond, color=yellow];
1340[label="136.90.112.111;s;92pkt 92fpkt", shape=diamond, color=yellow];
11108[label="136.90.112.111;95pkt 95fpkt", shape=pentagon, color=darkviolet];
14769[label="136.90.112.111;95pkt 95fpkt", shape=invtriangle, color=brown];
16415[label="136.90.112.111;95pkt 95fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.112.111:*, 217.89.151.234:443}[95.7895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.6111%)&lt;BR/&gt; 80: (1.38889%)&lt;BR/&gt; 2982: (0.534188%)&lt;BR/&gt; 2980: (0.534188%)&lt;BR/&gt; 2978: (0.534188%)&gt;];
}
1339--1340[label="1;91pkt 91fpkt"];
1339--11108[label="1;91pkt 91fpkt"];
1339--14769[label="1;91pkt 91fpkt"];
1339--16415[label="1;91pkt 91fpkt"];
1340--7302[label="0.0108696;1pkt 1fpkt"];
1340--11108[label="1;92pkt 92fpkt"];
1340--14769[label="1;92pkt 92fpkt"];
1340--16415[label="1;92pkt 92fpkt"];
11108--14769[label="1;95pkt 95fpkt"];
11108--16415[label="1;95pkt 95fpkt"];
14769--16415[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="217.89.151.234" dst_port="443" src_ip="136.90.112.111"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
9401[label="141.179.130.30;81pkt 81fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.130.30:46849, *:*}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46849: (46.2963%)&lt;BR/&gt; 18386: (2.46914%)&lt;BR/&gt; 63907: (0.617284%)&lt;BR/&gt; 63635: (0.617284%)&lt;BR/&gt; 63211: (0.617284%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.179.130.30" src_port="46849"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.90.18.139"/>
      <from sec="1246942846" usec="0"/>
      <to sec="1246942941" usec="0"/>
    </slice>
    <from sec="1246942846" usec="0"/>
    <to sec="1246942941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1490[label="44.194.50.25;d;12pkt 12fpkt", shape=diamond, color=yellow];
1491[label="136.90.110.20;s;12pkt 12fpkt", shape=diamond, color=yellow];
7085[label="44.194.50.25;d;12pkt 12fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.110.20:*, 44.194.50.25:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2929: (4.16667%)&lt;BR/&gt; 2927: (4.16667%)&lt;BR/&gt; 2925: (4.16667%)&lt;BR/&gt; 2924: (4.16667%)&gt;];
}
1490--1491[label="1;12pkt 12fpkt"];
1490--7085[label="1;12pkt 12fpkt"];
1491--7085[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="44.194.50.25" dst_port="80" src_ip="136.90.110.20"/>
    </slice>
    <from sec="1246942855" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.185.156.149"/>
      <from sec="1246942861" usec="0"/>
      <to sec="1246943599" usec="0"/>
    </slice>
    <from sec="1246942861" usec="0"/>
    <to sec="1246943599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1678[label="205.100.225.211;d;590pkt 590fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.100.225.211:59079}[98.3051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59079: (49.1525%)&lt;BR/&gt; 443: (0.59322%)&lt;BR/&gt; 80: (0.338983%)&lt;BR/&gt; 59888: (0.169492%)&lt;BR/&gt; 55006: (0.169492%)&gt;];
}
1678--8514[label="0.00169492;1pkt 1fpkt"];
1678--8603[label="0.00169492;1pkt 1fpkt"];
1678--8680[label="0.00169492;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.225.211" dst_port="59079"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
858[label="56.212.245.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
1718[label="169.185.128.164;d;5pkt 5fpkt", shape=diamond, color=yellow];
12872[label="56.212.245.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.53.235.63:80, 169.185.128.164:64377}[20%]&lt;BR/&gt;{56.212.245.206:64888, 169.185.128.164:63170}[20%]&lt;BR/&gt;{47.40.248.216:51231, 169.185.128.164:63170}[20%]&lt;BR/&gt;{113.251.80.73:8102, 169.185.128.164:63170}[20%]&lt;BR/&gt;{113.251.80.73:80, 169.185.128.164:64379}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63170: (35.7143%)&lt;BR/&gt; 64888: (21.4286%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 64379: (7.14286%)&lt;BR/&gt; 64377: (7.14286%)&gt;];
}
858--1718[label="1;1pkt 1fpkt"];
858--12872[label="1;1pkt 1fpkt"];
1718--5593[label="0.2;1pkt 1fpkt"];
1718--12872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.128.164" dst_port="64379" src_ip="113.251.80.73" src_port="80"/>
      <filter dst_ip="169.185.128.164" dst_port="63170" src_ip="113.251.80.73" src_port="8102"/>
      <filter dst_ip="169.185.128.164" dst_port="63170" src_ip="47.40.248.216" src_port="51231"/>
      <filter dst_ip="169.185.128.164" dst_port="63170" src_ip="56.212.245.206" src_port="64888"/>
      <filter dst_ip="169.185.128.164" dst_port="64377" src_ip="46.53.235.63" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
883[label="204.91.2.85;d;120pkt 120fpkt", shape=diamond, color=yellow];
1730[label="204.100.230.16;s;72pkt 72fpkt", shape=diamond, color=yellow];
12101[label="204.100.225.163;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.100.230.16:80, 204.91.2.85:*}[47.3684%]&lt;BR/&gt;{204.100.225.163:443, 204.91.2.85:*}[30.9211%]&lt;BR/&gt;{204.100.225.163:443, 136.90.25.96:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.7528%)&lt;BR/&gt; 443: (23.2472%)&lt;BR/&gt; 18683: (0.369004%)&lt;BR/&gt; 18682: (0.369004%)&lt;BR/&gt; 18681: (0.369004%)&gt;];
}
883--1730[label="1;72pkt 72fpkt"];
883--12101[label="0.594937;47pkt 47fpkt"];
883--13234[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.2.85" src_ip="204.100.225.163" src_port="443"/>
      <filter dst_ip="136.90.25.96" src_ip="204.100.225.163" src_port="443"/>
      <filter dst_ip="204.91.2.85" src_ip="204.100.230.16" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
1741[label="141.179.129.13;d;718pkt 718fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.129.13:39692}[95.5432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39692: (47.7716%)&lt;BR/&gt; 443: (1.4624%)&lt;BR/&gt; 80: (0.766017%)&lt;BR/&gt; 2798: (0.208914%)&lt;BR/&gt; 1054: (0.208914%)&gt;];
}
1741--8451[label="0.00139276;1pkt 1fpkt"];
1741--8541[label="0.00139276;1pkt 1fpkt"];
1741--8626[label="0.00139276;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.129.13" dst_port="39692"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1769[label="55.178.230.117;d;4pkt 4fpkt", shape=diamond, color=yellow];
1770[label="141.179.148.62;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.148.62:*, 55.178.230.117:80}[37.5%]&lt;BR/&gt;{141.179.148.62:*, 49.6.131.170:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2414: (9.09091%)&lt;BR/&gt; 2413: (9.09091%)&lt;BR/&gt; 2050: (9.09091%)&lt;BR/&gt; 2418: (4.54545%)&gt;];
}
1769--1770[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="55.178.230.117" dst_port="80" src_ip="141.179.148.62"/>
      <filter dst_ip="49.6.131.170" dst_port="80" src_ip="141.179.148.62"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1774[label="170.81.5.16;d;801pkt 801fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 170.81.5.16:0}[48.814%]&lt;BR/&gt;{*:445, 170.81.5.16:*}[40.6991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (48.814%)&lt;BR/&gt; 445: (20.412%)&lt;BR/&gt; 139: (1.81024%)&lt;BR/&gt; 33435: (0.561798%)&lt;BR/&gt; 33438: (0.499376%)&gt;];
}
1774--8451[label="0.00124844;1pkt 1fpkt"];
1774--8541[label="0.00124844;1pkt 1fpkt"];
1774--8626[label="0.00124844;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.5.16" src_port="445"/>
      <filter dst_ip="170.81.5.16"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
985[label="40.74.137.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1778[label="170.81.138.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.81.138.180:2083, 40.74.137.158:9020}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9020: (50%)&lt;BR/&gt; 2083: (50%)&gt;];
}
985--1778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.74.137.158" dst_port="9020" src_ip="170.81.138.180" src_port="2083"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
1853[label="24.203.219.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
1854[label="141.161.226.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
11815[label="141.161.226.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.226.148:11422, 24.203.219.53:14558}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14558: (50%)&lt;BR/&gt; 11422: (50%)&gt;];
}
1853--1854[label="1;1pkt 1fpkt"];
1853--11815[label="1;1pkt 1fpkt"];
1854--11815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.203.219.53" dst_port="14558" src_ip="141.161.226.148" src_port="11422"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
1884[label="204.91.186.7;s;1086pkt 1086fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.186.7:10508, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10508: (50%)&lt;BR/&gt; 16001: (0.782689%)&lt;BR/&gt; 6881: (0.322284%)&lt;BR/&gt; 16881: (0.230203%)&lt;BR/&gt; 4041: (0.184162%)&gt;];
}
1884--8498[label="0.00092081;1pkt 1fpkt"];
1884--8588[label="0.00092081;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.186.7" src_port="10508"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
1346[label="216.5.20.167;d;97pkt 97fpkt", shape=diamond, color=yellow];
2121[label="141.161.41.136;s;96pkt 96fpkt", shape=diamond, color=yellow];
8036[label="141.161.41.136;s;96pkt 96fpkt", shape=hexagon, color=black];
11549[label="141.161.41.136;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.41.136:*, 216.5.20.167:80}[98.9691%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1885: (0.519481%)&lt;BR/&gt; 1884: (0.519481%)&lt;BR/&gt; 1881: (0.519481%)&lt;BR/&gt; 1880: (0.519481%)&gt;];
}
1346--2121[label="1;96pkt 96fpkt"];
1346--8036[label="1;96pkt 96fpkt"];
1346--11549[label="1;96pkt 96fpkt"];
1346--13050[label="0.0103093;1pkt 1fpkt"];
1346--15668[label="0.0103093;1pkt 1fpkt"];
1346--16797[label="0.0103093;1pkt 1fpkt"];
2121--8036[label="1;96pkt 96fpkt"];
2121--11549[label="1;96pkt 96fpkt"];
8036--11549[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="216.5.20.167" dst_port="80" src_ip="141.161.41.136"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
2130[label="42.252.91.51;d;24pkt 24fpkt", shape=diamond, color=yellow];
2131[label="136.90.19.166;s;24pkt 24fpkt", shape=diamond, color=yellow];
7335[label="42.252.91.51;d;24pkt 24fpkt", shape=hexagon, color=black];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.19.166:*, 42.252.91.51:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50316: (2.08333%)&lt;BR/&gt; 50315: (2.08333%)&lt;BR/&gt; 50314: (2.08333%)&lt;BR/&gt; 50313: (2.08333%)&gt;];
}
2130--2131[label="1;24pkt 24fpkt"];
2130--7335[label="1;24pkt 24fpkt"];
2131--7335[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="42.252.91.51" dst_port="80" src_ip="136.90.19.166"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
2298[label="204.18.27.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
2299[label="155.192.164.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
13212[label="155.192.164.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.164.226:1222, 204.18.27.129:8844}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8844: (50%)&lt;BR/&gt; 1222: (50%)&gt;];
}
2298--2299[label="1;1pkt 1fpkt"];
2298--13212[label="1;1pkt 1fpkt"];
2299--13212[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.18.27.129" dst_port="8844" src_ip="155.192.164.226" src_port="1222"/>
    </slice>
    <from sec="1246942898" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
2179[label="170.81.194.136;d;35pkt 35fpkt", shape=diamond, color=yellow];
2350[label="216.109.118.171;s;26pkt 26fpkt", shape=diamond, color=yellow];
8210[label="170.81.194.136;d;35pkt 35fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.109.118.171:*, 170.81.194.136:80}[74.2857%]&lt;BR/&gt;{43.129.49.65:*, 170.81.194.136:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4470: (1.5625%)&lt;BR/&gt; 4469: (1.5625%)&lt;BR/&gt; 4468: (1.5625%)&lt;BR/&gt; 4467: (1.5625%)&gt;];
}
2179--2350[label="1;26pkt 26fpkt"];
2179--8210[label="1;35pkt 35fpkt"];
2179--8514[label="0.0285714;1pkt 1fpkt"];
2179--8603[label="0.0285714;1pkt 1fpkt"];
2179--8680[label="0.0285714;1pkt 1fpkt"];
2350--8210[label="1;26pkt 26fpkt"];
8210--8514[label="0.0285714;1pkt 1fpkt"];
8210--8603[label="0.0285714;1pkt 1fpkt"];
8210--8680[label="0.0285714;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.194.136" dst_port="80" src_ip="216.109.118.171"/>
      <filter dst_ip="170.81.194.136" dst_port="80" src_ip="43.129.49.65"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
2125[label="136.90.89.57;d;112pkt 112fpkt", shape=diamond, color=yellow];
2354[label="23.6.128.12;s;120pkt 120fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.6.128.12:*, 136.90.89.57:443}[55.8333%]&lt;BR/&gt;{23.6.128.12:*, 136.90.89.57:2048}[35.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (29.7414%)&lt;BR/&gt; 2048: (18.5345%)&lt;BR/&gt; 2443: (0.862069%)&lt;BR/&gt; 80: (0.862069%)&lt;BR/&gt; 65186: (0.431034%)&gt;];
}
2125--2354[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.89.57" dst_port="443" src_ip="23.6.128.12"/>
      <filter dst_ip="136.90.89.57" dst_port="2048" src_ip="23.6.128.12"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
2481[label="167.4.96.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
2482[label="141.179.215.149;s;744pkt 744fpkt", shape=diamond, color=yellow];
2497[label="99.162.73.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
2580[label="167.8.188.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
2587[label="46.105.249.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
3271[label="50.119.56.213;d;2pkt 2fpkt", shape=diamond, color=yellow];
3909[label="45.82.63.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
4555[label="44.48.155.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
5132[label="2.89.59.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
5148[label="32.82.174.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
5859[label="43.24.246.174;d;2pkt 2fpkt", shape=diamond, color=yellow];
7241[label="167.8.188.208;d;2pkt 2fpkt", shape=hexagon, color=black];
7247[label="46.105.249.55;d;1pkt 1fpkt", shape=hexagon, color=black];
8153[label="45.82.63.238;d;1pkt 1fpkt", shape=hexagon, color=black];
11830[label="141.179.215.149;785pkt 785fpkt", shape=pentagon, color=darkviolet];
15122[label="141.179.215.149;785pkt 785fpkt", shape=invtriangle, color=brown];
16561[label="141.179.215.149;785pkt 785fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.215.149:7508, *:*}[96.9427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7508: (48.2515%)&lt;BR/&gt; 6346: (0.577478%)&lt;BR/&gt; 22968: (0.192493%)&lt;BR/&gt; 20295: (0.192493%)&lt;BR/&gt; 40202: (0.160411%)&gt;];
}
2481--2482[label="1;1pkt 1fpkt"];
2481--11830[label="1;1pkt 1fpkt"];
2481--15122[label="1;1pkt 1fpkt"];
2481--16561[label="1;1pkt 1fpkt"];
2482--2497[label="1;2pkt 2fpkt"];
2482--2499[label="0.5;1pkt 1fpkt"];
2482--2580[label="1;2pkt 2fpkt"];
2482--2587[label="1;1pkt 1fpkt"];
2482--3271[label="1;2pkt 2fpkt"];
2482--3909[label="1;1pkt 1fpkt"];
2482--4555[label="1;1pkt 1fpkt"];
2482--5132[label="1;1pkt 1fpkt"];
2482--5148[label="1;1pkt 1fpkt"];
2482--5859[label="1;2pkt 2fpkt"];
2482--7241[label="1;2pkt 2fpkt"];
2482--7247[label="1;1pkt 1fpkt"];
2482--7469[label="0.5;1pkt 1fpkt"];
2482--8153[label="1;1pkt 1fpkt"];
2482--11830[label="1;744pkt 744fpkt"];
2482--15122[label="1;744pkt 744fpkt"];
2482--16561[label="1;744pkt 744fpkt"];
2497--11830[label="1;2pkt 2fpkt"];
2497--15122[label="1;2pkt 2fpkt"];
2497--16561[label="1;2pkt 2fpkt"];
2580--7241[label="1;2pkt 2fpkt"];
2580--11830[label="1;2pkt 2fpkt"];
2580--15122[label="1;2pkt 2fpkt"];
2580--16561[label="1;2pkt 2fpkt"];
2587--7247[label="1;1pkt 1fpkt"];
2587--11830[label="1;1pkt 1fpkt"];
2587--15122[label="1;1pkt 1fpkt"];
2587--16561[label="1;1pkt 1fpkt"];
3271--11830[label="1;2pkt 2fpkt"];
3271--15122[label="1;2pkt 2fpkt"];
3271--16561[label="1;2pkt 2fpkt"];
3909--8153[label="1;1pkt 1fpkt"];
3909--11830[label="1;1pkt 1fpkt"];
3909--15122[label="1;1pkt 1fpkt"];
3909--16561[label="1;1pkt 1fpkt"];
4555--11830[label="1;1pkt 1fpkt"];
4555--15122[label="1;1pkt 1fpkt"];
4555--16561[label="1;1pkt 1fpkt"];
5132--11830[label="1;1pkt 1fpkt"];
5132--15122[label="1;1pkt 1fpkt"];
5132--16561[label="1;1pkt 1fpkt"];
5148--11830[label="1;1pkt 1fpkt"];
5148--15122[label="1;1pkt 1fpkt"];
5148--16561[label="1;1pkt 1fpkt"];
5859--11830[label="1;2pkt 2fpkt"];
5859--15122[label="1;2pkt 2fpkt"];
5859--16561[label="1;2pkt 2fpkt"];
7241--11830[label="1;2pkt 2fpkt"];
7241--15122[label="1;2pkt 2fpkt"];
7241--16561[label="1;2pkt 2fpkt"];
7247--11830[label="1;1pkt 1fpkt"];
7247--15122[label="1;1pkt 1fpkt"];
7247--16561[label="1;1pkt 1fpkt"];
8153--11830[label="1;1pkt 1fpkt"];
8153--15122[label="1;1pkt 1fpkt"];
8153--16561[label="1;1pkt 1fpkt"];
11830--15122[label="1;785pkt 785fpkt"];
11830--16561[label="1;785pkt 785fpkt"];
15122--16561[label="1;785pkt 785fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.215.149" src_port="7508"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
860[label="205.75.106.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
2484[label="204.80.30.143;d;2pkt 2fpkt", shape=diamond, color=yellow];
13558[label="205.75.106.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.22.40.148:43328, 204.80.30.143:40780}[50%]&lt;BR/&gt;{205.75.106.248:0, 204.80.30.143:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 43328: (12.5%)&lt;BR/&gt; 40780: (12.5%)&gt;];
}
860--2484[label="1;1pkt 1fpkt"];
860--13558[label="1;1pkt 1fpkt"];
2484--13558[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.143" src_ip="205.75.106.248"/>
      <filter dst_ip="204.80.30.143" dst_port="40780" src_ip="20.22.40.148" src_port="43328"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
2524[label="141.179.130.29;d;448pkt 448fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.130.29:12389}[95.5357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12389: (47.7679%)&lt;BR/&gt; 443: (2.00893%)&lt;BR/&gt; 61313: (0.223214%)&lt;BR/&gt; 43760: (0.223214%)&lt;BR/&gt; 18432: (0.223214%)&gt;];
}
2524--8458[label="0.00223214;1pkt 1fpkt"];
2524--8492[label="0.00223214;1pkt 1fpkt"];
2524--8548[label="0.00223214;1pkt 1fpkt"];
2524--8582[label="0.00223214;1pkt 1fpkt"];
2524--8633[label="0.00223214;1pkt 1fpkt"];
2524--8663[label="0.00223214;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.130.29" dst_port="12389"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.91.186.7"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943628" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
2647[label="201.247.8.81;d;3pkt 3fpkt", shape=diamond, color=yellow];
2672[label="136.90.84.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
8008[label="136.90.84.166;s;1pkt 1fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.84.166:8200, 201.247.8.81:8195}[33.3333%]&lt;BR/&gt;{141.179.230.152:8204, 201.247.8.81:8195}[33.3333%]&lt;BR/&gt;{141.179.230.152:8207, 201.247.8.81:8194}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8195: (40%)&lt;BR/&gt; 8200: (30%)&lt;BR/&gt; 8207: (10%)&lt;BR/&gt; 8204: (10%)&lt;BR/&gt; 8194: (10%)&gt;];
}
2647--2672[label="1;1pkt 1fpkt"];
2647--8008[label="1;1pkt 1fpkt"];
2672--8008[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.247.8.81" dst_port="8194" src_ip="141.179.230.152" src_port="8207"/>
      <filter dst_ip="201.247.8.81" dst_port="8195" src_ip="141.179.230.152" src_port="8204"/>
      <filter dst_ip="201.247.8.81" dst_port="8195" src_ip="136.90.84.166" src_port="8200"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
1555[label="141.179.209.166;d;45pkt 45fpkt", shape=diamond, color=yellow];
2680[label="37.88.17.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
10192[label="44.57.214.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13501[label="37.88.17.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.209.166:6346}[91.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (42.7083%)&lt;BR/&gt; 61802: (3.125%)&lt;BR/&gt; 51782: (3.125%)&lt;BR/&gt; 61787: (2.08333%)&lt;BR/&gt; 48373: (2.08333%)&gt;];
}
1555--2680[label="1;1pkt 1fpkt"];
1555--10192[label="1;1pkt 1fpkt"];
1555--13501[label="1;1pkt 1fpkt"];
2680--13501[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.209.166" dst_port="6346"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
2126[label="136.90.89.57;s;160pkt 160fpkt", shape=diamond, color=yellow];
2817[label="213.51.171.115;d;167pkt 167fpkt", shape=diamond, color=yellow];
8037[label="136.90.89.57;s;156pkt 156fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.89.57:2048, 213.51.171.115:*}[91.018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2048: (46.7909%)&lt;BR/&gt; 443: (2.17391%)&lt;BR/&gt; 80: (0.724638%)&lt;BR/&gt; 59459: (0.310559%)&lt;BR/&gt; 59412: (0.310559%)&gt;];
}
2126--2817[label="1;160pkt 160fpkt"];
2126--8037[label="1;156pkt 156fpkt"];
2817--8037[label="1;156pkt 156fpkt"];
2817--8451[label="0.0239521;4pkt 4fpkt"];
2817--8458[label="0.011976;2pkt 2fpkt"];
2817--8541[label="0.0239521;4pkt 4fpkt"];
2817--8548[label="0.011976;2pkt 2fpkt"];
2817--8626[label="0.0239521;4pkt 4fpkt"];
2817--8633[label="0.011976;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.171.115" src_ip="136.90.89.57" src_port="2048"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
2872[label="204.80.42.53;d;23pkt 23fpkt", shape=diamond, color=yellow];
2873[label="27.209.114.59;s;23pkt 23fpkt", shape=diamond, color=yellow];
7070[label="27.209.114.59;s;22pkt 22fpkt", shape=hexagon, color=black];
10024[label="27.209.114.59;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.209.114.59:*, 204.80.42.53:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49342: (2.17391%)&lt;BR/&gt; 49338: (2.17391%)&lt;BR/&gt; 49330: (2.17391%)&lt;BR/&gt; 49326: (2.17391%)&gt;];
}
2872--2873[label="1;23pkt 23fpkt"];
2872--7070[label="1;22pkt 22fpkt"];
2872--10024[label="1;23pkt 23fpkt"];
2873--7070[label="1;22pkt 22fpkt"];
2873--10024[label="1;23pkt 23fpkt"];
7070--10024[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.42.53" dst_port="80" src_ip="27.209.114.59"/>
    </slice>
    <from sec="1246942824" usec="0"/>
    <to sec="1246943413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
2928[label="136.90.35.146;d;4pkt 4fpkt", shape=diamond, color=yellow];
2955[label="92.173.5.51;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.173.5.51:*, 136.90.35.146:443}[57.1429%]&lt;BR/&gt;{92.173.5.51:*, 136.90.35.15:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.4545%)&lt;BR/&gt; 49845: (9.09091%)&lt;BR/&gt; 49495: (9.09091%)&lt;BR/&gt; 49337: (9.09091%)&lt;BR/&gt; 49285: (9.09091%)&gt;];
}
2928--2955[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.35.146" dst_port="443" src_ip="92.173.5.51"/>
      <filter dst_ip="136.90.35.15" dst_port="443" src_ip="92.173.5.51"/>
    </slice>
    <from sec="1246942865" usec="0"/>
    <to sec="1246943123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.25.152.57"/>
      <from sec="1246943267" usec="0"/>
      <to sec="1246943449" usec="0"/>
    </slice>
    <from sec="1246943267" usec="0"/>
    <to sec="1246943449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.25.152.57"/>
      <from sec="1246943267" usec="0"/>
      <to sec="1246943449" usec="0"/>
    </slice>
    <from sec="1246943267" usec="0"/>
    <to sec="1246943449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.100.245.37"/>
      <from sec="1246942925" usec="0"/>
      <to sec="1246943070" usec="0"/>
    </slice>
    <from sec="1246942925" usec="0"/>
    <to sec="1246943070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.81.106.9"/>
      <from sec="1246943020" usec="0"/>
      <to sec="1246943094" usec="0"/>
    </slice>
    <from sec="1246943020" usec="0"/>
    <to sec="1246943094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
3069[label="136.90.104.201;s;51pkt 51fpkt", shape=diamond, color=yellow];
3109[label="20.144.158.205;d;6pkt 6fpkt", shape=diamond, color=yellow];
7118[label="136.90.104.201;s;17pkt 17fpkt", shape=hexagon, color=black];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.104.201:*, 209.91.109.82:80}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3005: (2.02703%)&lt;BR/&gt; 3003: (2.02703%)&lt;BR/&gt; 2983: (2.02703%)&lt;BR/&gt; 2982: (2.02703%)&gt;];
}
3069--3109[label="1;6pkt 6fpkt"];
3069--4750[label="0.215686;11pkt 11fpkt"];
3069--7118[label="1;17pkt 17fpkt"];
3109--7118[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.91.109.82" dst_port="80" src_ip="136.90.104.201"/>
    </slice>
    <from sec="1246943017" usec="0"/>
    <to sec="1246943258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.179.213.167"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943538" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
1905[label="155.192.23.243;s;3pkt 3fpkt", shape=diamond, color=yellow];
3297[label="214.195.189.216;d;3pkt 3fpkt", shape=diamond, color=yellow];
8158[label="214.195.189.216;d;3pkt 3fpkt", shape=hexagon, color=black];
13478[label="155.192.23.243;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15855[label="155.192.23.243;3pkt 3fpkt", shape=invtriangle, color=brown];
16871[label="155.192.23.243;3pkt 3fpkt", shape=invhouse, color=bisque];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.23.243:2033, 214.195.189.216:46272}[33.3333%]&lt;BR/&gt;{155.192.23.243:2034, 214.195.189.216:46271}[33.3333%]&lt;BR/&gt;{155.192.23.243:2036, 214.195.189.216:46270}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46272: (16.6667%)&lt;BR/&gt; 46271: (16.6667%)&lt;BR/&gt; 46270: (16.6667%)&lt;BR/&gt; 2036: (16.6667%)&lt;BR/&gt; 2034: (16.6667%)&gt;];
}
1905--3297[label="1;3pkt 3fpkt"];
1905--8158[label="1;3pkt 3fpkt"];
1905--13478[label="1;3pkt 3fpkt"];
1905--15855[label="1;3pkt 3fpkt"];
1905--16871[label="1;3pkt 3fpkt"];
3297--8158[label="1;3pkt 3fpkt"];
3297--13478[label="1;3pkt 3fpkt"];
3297--15855[label="1;3pkt 3fpkt"];
3297--16871[label="1;3pkt 3fpkt"];
8158--13478[label="1;3pkt 3fpkt"];
8158--15855[label="1;3pkt 3fpkt"];
8158--16871[label="1;3pkt 3fpkt"];
13478--15855[label="1;3pkt 3fpkt"];
13478--16871[label="1;3pkt 3fpkt"];
15855--16871[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.195.189.216" dst_port="46270" src_ip="155.192.23.243" src_port="2036"/>
      <filter dst_ip="214.195.189.216" dst_port="46271" src_ip="155.192.23.243" src_port="2034"/>
      <filter dst_ip="214.195.189.216" dst_port="46272" src_ip="155.192.23.243" src_port="2033"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
929[label="172.133.126.172;d;13pkt 13fpkt", shape=diamond, color=yellow];
930[label="59.138.236.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
3462[label="205.54.10.123;s;2pkt 2fpkt", shape=diamond, color=yellow];
5272[label="33.120.230.196;s;3pkt 3fpkt", shape=diamond, color=yellow];
8139[label="172.133.126.172;d;13pkt 13fpkt", shape=hexagon, color=black];
8977[label="59.138.236.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12695[label="33.120.230.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.120.230.196:*, 172.133.126.172:21}[23.0769%]&lt;BR/&gt;{176.200.19.237:*, 172.133.126.172:21}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 51482: (5.55556%)&lt;BR/&gt; 51398: (5.55556%)&lt;BR/&gt; 51259: (5.55556%)&lt;BR/&gt; 49422: (5.55556%)&gt;];
}
929--930[label="1;1pkt 1fpkt"];
929--3462[label="1;2pkt 2fpkt"];
929--5272[label="1;3pkt 3fpkt"];
929--8139[label="1;13pkt 13fpkt"];
929--8977[label="1;1pkt 1fpkt"];
929--12695[label="1;3pkt 3fpkt"];
930--8139[label="1;1pkt 1fpkt"];
930--8977[label="1;1pkt 1fpkt"];
3462--8139[label="1;2pkt 2fpkt"];
5272--8139[label="1;3pkt 3fpkt"];
5272--12695[label="1;3pkt 3fpkt"];
8139--8977[label="1;1pkt 1fpkt"];
8139--12695[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.126.172" dst_port="21" src_ip="176.200.19.237"/>
      <filter dst_ip="172.133.126.172" dst_port="21" src_ip="33.120.230.196"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
1989[label="155.192.180.72;s;38pkt 38fpkt", shape=diamond, color=yellow];
3519[label="214.69.193.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
10314[label="155.192.180.72;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.180.72:48100, *:*}[82.9268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48100: (40.625%)&lt;BR/&gt; 53357: (6.25%)&lt;BR/&gt; 54245: (1.875%)&lt;BR/&gt; 44193: (1.875%)&lt;BR/&gt; 63428: (1.25%)&gt;];
}
1989--3519[label="1;1pkt 1fpkt"];
1989--10314[label="1;38pkt 38fpkt"];
3519--10314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="155.192.180.72" src_port="48100"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
2925[label="169.185.154.141;s;7pkt 7fpkt", shape=diamond, color=yellow];
3568[label="203.71.83.237;d;7pkt 7fpkt", shape=diamond, color=yellow];
7374[label="169.185.154.141;s;7pkt 7fpkt", shape=hexagon, color=black];
11663[label="169.185.154.141;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15030[label="169.185.154.141;6pkt 6fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.154.141:*, 203.71.83.237:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.4242%)&lt;BR/&gt; 1810: (7.57576%)&lt;BR/&gt; 1808: (7.57576%)&lt;BR/&gt; 1798: (7.57576%)&lt;BR/&gt; 1796: (7.57576%)&gt;];
}
2925--3568[label="1;7pkt 7fpkt"];
2925--7374[label="1;7pkt 7fpkt"];
2925--11663[label="1;6pkt 6fpkt"];
2925--15030[label="1;6pkt 6fpkt"];
3568--7374[label="1;7pkt 7fpkt"];
3568--11663[label="1;6pkt 6fpkt"];
3568--15030[label="1;6pkt 6fpkt"];
7374--11663[label="1;6pkt 6fpkt"];
7374--15030[label="1;6pkt 6fpkt"];
11663--15030[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="203.71.83.237" dst_port="80" src_ip="169.185.154.141"/>
    </slice>
    <from sec="1246942863" usec="0"/>
    <to sec="1246943098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
3770[label="192.91.87.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
3771[label="169.185.154.35;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.154.35:*, 192.91.87.139:80}[66.6667%]&lt;BR/&gt;{169.185.154.35:*, 192.91.87.135:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3793: (12.5%)&lt;BR/&gt; 3792: (12.5%)&lt;BR/&gt; 3797: (6.25%)&lt;BR/&gt; 3796: (6.25%)&gt;];
}
3770--3771[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.91.87.139" dst_port="80" src_ip="169.185.154.35"/>
      <filter dst_ip="192.91.87.135" dst_port="80" src_ip="169.185.154.35"/>
    </slice>
    <from sec="1246943122" usec="0"/>
    <to sec="1246943228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
3823[label="205.100.240.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
3824[label="194.137.117.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
7938[label="205.100.240.84;s;1pkt 1fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.240.84:0, 194.137.117.166:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3823--3824[label="1;1pkt 1fpkt"];
3823--7938[label="1;1pkt 1fpkt"];
3824--7938[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.137.117.166" src_ip="205.100.240.84"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
3822[label="205.100.240.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
3825[label="194.137.117.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.137.117.166:0, 205.100.240.84:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3822--3825[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.84" src_ip="194.137.117.166"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.81.96.180"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943627" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
3912[label="170.81.72.99;d;3pkt 3fpkt", shape=diamond, color=yellow];
3913[label="40.103.41.24;s;3pkt 3fpkt", shape=diamond, color=yellow];
7502[label="40.103.41.24;s;3pkt 3fpkt", shape=hexagon, color=black];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.103.41.24:843, 170.81.72.99:2337}[33.3333%]&lt;BR/&gt;{40.103.41.24:443, 170.81.72.99:2222}[33.3333%]&lt;BR/&gt;{40.103.41.24:443, 170.81.72.99:2338}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (33.3333%)&lt;BR/&gt; 2338: (16.6667%)&lt;BR/&gt; 2337: (16.6667%)&lt;BR/&gt; 2222: (16.6667%)&lt;BR/&gt; 843: (16.6667%)&gt;];
}
3912--3913[label="1;3pkt 3fpkt"];
3912--7502[label="1;3pkt 3fpkt"];
3913--7502[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.72.99" dst_port="2338" src_ip="40.103.41.24" src_port="443"/>
      <filter dst_ip="170.81.72.99" dst_port="2222" src_ip="40.103.41.24" src_port="443"/>
      <filter dst_ip="170.81.72.99" dst_port="2337" src_ip="40.103.41.24" src_port="843"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
411[label="27.9.179.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
1165[label="141.42.50.42;s;1788pkt 1788fpkt", shape=diamond, color=yellow];
1609[label="141.42.50.40;s;1788pkt 1788fpkt", shape=diamond, color=yellow];
2055[label="27.10.8.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
4014[label="208.116.69.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
4044[label="23.175.102.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
4057[label="31.71.58.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
4632[label="23.137.103.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
4664[label="23.90.141.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
5168[label="16.206.11.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
5198[label="28.154.146.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
6225[label="28.145.14.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
6677[label="141.42.50.42;s;996pkt 996fpkt", shape=hexagon, color=black];
6921[label="141.42.50.40;s;1445pkt 1445fpkt", shape=hexagon, color=black];
7783[label="23.175.102.126;d;1pkt 1fpkt", shape=hexagon, color=black];
7801[label="23.90.141.31;d;2pkt 2fpkt", shape=hexagon, color=black];
9608[label="141.42.50.40;1935pkt 1935fpkt", shape=pentagon, color=darkviolet];
9644[label="141.42.50.42;1956pkt 1956fpkt", shape=pentagon, color=darkviolet];
14070[label="141.42.50.40;1935pkt 1935fpkt", shape=invtriangle, color=brown];
16128[label="141.42.50.40;1935pkt 1935fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.42.50.42:0, *:0}[50.2699%]&lt;BR/&gt;{141.42.50.40:0, *:0}[49.7301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
411--1609[label="1;1pkt 1fpkt"];
411--6921[label="1;1pkt 1fpkt"];
411--9608[label="1;1pkt 1fpkt"];
411--14070[label="1;1pkt 1fpkt"];
411--16128[label="1;1pkt 1fpkt"];
1165--4014[label="1;1pkt 1fpkt"];
1165--4543[label="0.0030303;1pkt 1fpkt"];
1165--4545[label="0.0031746;1pkt 1fpkt"];
1165--4664[label="0.5;1pkt 1fpkt"];
1165--6677[label="1;996pkt 996fpkt"];
1165--7801[label="0.5;1pkt 1fpkt"];
1165--9644[label="1;1788pkt 1788fpkt"];
1609--2055[label="1;1pkt 1fpkt"];
1609--3233[label="0.00251256;1pkt 1fpkt"];
1609--3264[label="0.00282486;1pkt 1fpkt"];
1609--3446[label="0.000942507;1pkt 1fpkt"];
1609--3890[label="0.00361011;1pkt 1fpkt"];
1609--4044[label="1;1pkt 1fpkt"];
1609--4057[label="1;1pkt 1fpkt"];
1609--4500[label="0.00289017;1pkt 1fpkt"];
1609--4545[label="0.0031746;1pkt 1fpkt"];
1609--4632[label="1;1pkt 1fpkt"];
1609--4664[label="0.5;1pkt 1fpkt"];
1609--5168[label="1;1pkt 1fpkt"];
1609--5198[label="1;1pkt 1fpkt"];
1609--5516[label="0.00373134;1pkt 1fpkt"];
1609--6225[label="1;1pkt 1fpkt"];
1609--6921[label="1;1445pkt 1445fpkt"];
1609--7222[label="0.0028169;1pkt 1fpkt"];
1609--7316[label="0.00229358;1pkt 1fpkt"];
1609--7706[label="0.00361011;1pkt 1fpkt"];
1609--7783[label="1;1pkt 1fpkt"];
1609--7801[label="0.5;1pkt 1fpkt"];
1609--8288[label="0.00289017;1pkt 1fpkt"];
1609--9608[label="1;1788pkt 1788fpkt"];
1609--14070[label="1;1788pkt 1788fpkt"];
1609--16128[label="1;1788pkt 1788fpkt"];
2055--6921[label="1;1pkt 1fpkt"];
2055--9608[label="1;1pkt 1fpkt"];
2055--14070[label="1;1pkt 1fpkt"];
2055--16128[label="1;1pkt 1fpkt"];
4014--6677[label="1;1pkt 1fpkt"];
4014--9644[label="1;1pkt 1fpkt"];
4044--6921[label="1;1pkt 1fpkt"];
4044--7783[label="1;1pkt 1fpkt"];
4044--9608[label="1;1pkt 1fpkt"];
4044--14070[label="1;1pkt 1fpkt"];
4044--16128[label="1;1pkt 1fpkt"];
4057--6921[label="1;1pkt 1fpkt"];
4057--9608[label="1;1pkt 1fpkt"];
4057--14070[label="1;1pkt 1fpkt"];
4057--16128[label="1;1pkt 1fpkt"];
4632--6921[label="1;1pkt 1fpkt"];
4632--9608[label="1;1pkt 1fpkt"];
4632--14070[label="1;1pkt 1fpkt"];
4632--16128[label="1;1pkt 1fpkt"];
4664--6677[label="0.5;1pkt 1fpkt"];
4664--6921[label="0.5;1pkt 1fpkt"];
4664--7801[label="1;2pkt 2fpkt"];
4664--9608[label="0.5;1pkt 1fpkt"];
4664--9644[label="0.5;1pkt 1fpkt"];
4664--14070[label="0.5;1pkt 1fpkt"];
4664--16128[label="0.5;1pkt 1fpkt"];
5168--6921[label="1;1pkt 1fpkt"];
5168--9608[label="1;1pkt 1fpkt"];
5168--14070[label="1;1pkt 1fpkt"];
5168--16128[label="1;1pkt 1fpkt"];
5198--6921[label="1;1pkt 1fpkt"];
5198--9608[label="1;1pkt 1fpkt"];
5198--14070[label="1;1pkt 1fpkt"];
5198--16128[label="1;1pkt 1fpkt"];
6225--6921[label="1;1pkt 1fpkt"];
6225--9608[label="1;1pkt 1fpkt"];
6225--14070[label="1;1pkt 1fpkt"];
6225--16128[label="1;1pkt 1fpkt"];
6677--7801[label="0.5;1pkt 1fpkt"];
6677--9644[label="1;996pkt 996fpkt"];
6921--7222[label="0.0028169;1pkt 1fpkt"];
6921--7316[label="0.00229358;1pkt 1fpkt"];
6921--7706[label="0.00361011;1pkt 1fpkt"];
6921--7783[label="1;1pkt 1fpkt"];
6921--7801[label="0.5;1pkt 1fpkt"];
6921--8288[label="0.00289017;1pkt 1fpkt"];
6921--9608[label="1;1445pkt 1445fpkt"];
6921--14070[label="1;1445pkt 1445fpkt"];
6921--16128[label="1;1445pkt 1445fpkt"];
7783--9608[label="1;1pkt 1fpkt"];
7783--14070[label="1;1pkt 1fpkt"];
7783--16128[label="1;1pkt 1fpkt"];
7801--9608[label="0.5;1pkt 1fpkt"];
7801--9644[label="0.5;1pkt 1fpkt"];
7801--14070[label="0.5;1pkt 1fpkt"];
7801--16128[label="0.5;1pkt 1fpkt"];
9608--14070[label="1;1935pkt 1935fpkt"];
9608--16128[label="1;1935pkt 1935fpkt"];
14070--16128[label="1;1935pkt 1935fpkt"];
</description>
    <slice>
      <filter src_ip="141.42.50.42"/>
      <filter src_ip="141.42.50.40"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1075[label="40.144.192.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1851[label="169.185.200.136;s;4pkt 4fpkt", shape=diamond, color=yellow];
6667[label="40.144.192.196;d;1pkt 1fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.200.136:4057, 194.83.135.133:80}[25%]&lt;BR/&gt;{169.185.200.136:4058, 88.153.43.159:80}[25%]&lt;BR/&gt;{169.185.200.136:4059, 89.38.196.159:80}[25%]&lt;BR/&gt;{169.185.200.136:4049, 40.144.192.196:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4049: (25%)&lt;BR/&gt; 4059: (8.33333%)&lt;BR/&gt; 4058: (8.33333%)&lt;BR/&gt; 4057: (8.33333%)&gt;];
}
1075--1851[label="1;1pkt 1fpkt"];
1075--6667[label="1;1pkt 1fpkt"];
1851--3337[label="0.25;1pkt 1fpkt"];
1851--6667[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.144.192.196" dst_port="80" src_ip="169.185.200.136" src_port="4049"/>
      <filter dst_ip="89.38.196.159" dst_port="80" src_ip="169.185.200.136" src_port="4059"/>
      <filter dst_ip="88.153.43.159" dst_port="80" src_ip="169.185.200.136" src_port="4058"/>
      <filter dst_ip="194.83.135.133" dst_port="80" src_ip="169.185.200.136" src_port="4057"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
2847[label="141.179.215.5;s;103pkt 103fpkt", shape=diamond, color=yellow];
4122[label="59.76.130.132;d;102pkt 102fpkt", shape=diamond, color=yellow];
8850[label="141.179.215.5;103pkt 103fpkt", shape=pentagon, color=darkviolet];
13734[label="141.179.215.5;104pkt 104fpkt", shape=invtriangle, color=brown];
15981[label="141.179.215.5;103pkt 103fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.215.5:*, 59.76.130.132:80}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5146%)&lt;BR/&gt; 52191: (0.485437%)&lt;BR/&gt; 52188: (0.485437%)&lt;BR/&gt; 52186: (0.485437%)&lt;BR/&gt; 52183: (0.485437%)&gt;];
}
2847--4122[label="1;102pkt 102fpkt"];
2847--8514[label="0.00970874;1pkt 1fpkt"];
2847--8603[label="0.00970874;1pkt 1fpkt"];
2847--8680[label="0.00970874;1pkt 1fpkt"];
2847--8850[label="1;103pkt 103fpkt"];
2847--13734[label="1;103pkt 103fpkt"];
2847--15981[label="1;103pkt 103fpkt"];
4122--8514[label="0.00980392;1pkt 1fpkt"];
4122--8603[label="0.00980392;1pkt 1fpkt"];
4122--8680[label="0.00980392;1pkt 1fpkt"];
4122--8850[label="1;102pkt 102fpkt"];
4122--13734[label="1;102pkt 102fpkt"];
4122--15981[label="1;102pkt 102fpkt"];
8850--13734[label="1;103pkt 103fpkt"];
8850--15981[label="1;103pkt 103fpkt"];
13734--15981[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="59.76.130.132" dst_port="80" src_ip="141.179.215.5"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.45.209.51"/>
      <from sec="1246943480" usec="0"/>
      <to sec="1246943616" usec="0"/>
    </slice>
    <from sec="1246943480" usec="0"/>
    <to sec="1246943616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.45.209.51"/>
      <from sec="1246943480" usec="0"/>
      <to sec="1246943616" usec="0"/>
    </slice>
    <from sec="1246943480" usec="0"/>
    <to sec="1246943616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
1060[label="205.100.245.146;s;164pkt 164fpkt", shape=diamond, color=yellow];
4281[label="16.20.152.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
11779[label="205.100.245.146;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.245.146:0, *:0}[40.1163%]&lt;BR/&gt;{205.100.245.146:2000, *:*}[22.093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.645%)&lt;BR/&gt; 137: (19.5266%)&lt;BR/&gt; 2000: (11.0947%)&lt;BR/&gt; 7743: (0.591716%)&lt;BR/&gt; 7736: (0.591716%)&gt;];
}
1060--4281[label="1;2pkt 2fpkt"];
1060--11779[label="1;164pkt 164fpkt"];
4281--11779[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="205.100.245.146" src_port="2000"/>
      <filter src_ip="205.100.245.146"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.16.160.34"/>
      <from sec="1246943093" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943093" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.16.160.34"/>
      <from sec="1246943093" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943093" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
3758[label="169.185.29.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
4297[label="138.2.232.135;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.2.232.135:26632, 169.185.29.204:80}[25%]&lt;BR/&gt;{138.2.232.135:25288, 136.90.242.203:80}[25%]&lt;BR/&gt;{138.2.232.135:34015, 136.90.242.203:80}[25%]&lt;BR/&gt;{138.2.232.135:58939, 136.90.242.203:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26632: (20%)&lt;BR/&gt; 58939: (10%)&lt;BR/&gt; 34015: (10%)&lt;BR/&gt; 25288: (10%)&gt;];
}
3758--4297[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.242.203" dst_port="80" src_ip="138.2.232.135" src_port="58939"/>
      <filter dst_ip="136.90.242.203" dst_port="80" src_ip="138.2.232.135" src_port="34015"/>
      <filter dst_ip="136.90.242.203" dst_port="80" src_ip="138.2.232.135" src_port="25288"/>
      <filter dst_ip="169.185.29.204" dst_port="80" src_ip="138.2.232.135" src_port="26632"/>
    </slice>
    <from sec="1246943103" usec="0"/>
    <to sec="1246943129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
4350[label="136.90.110.81;s;27pkt 27fpkt", shape=diamond, color=yellow];
4373[label="194.13.250.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
10500[label="136.90.110.81;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.110.81:*, 32.152.136.10:80}[25.8065%]&lt;BR/&gt;{136.90.110.81:*, 194.13.251.95:80}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2320: (2.54237%)&lt;BR/&gt; 2326: (1.69492%)&lt;BR/&gt; 2324: (1.69492%)&lt;BR/&gt; 2322: (1.69492%)&gt;];
}
4350--4373[label="1;1pkt 1fpkt"];
4350--10500[label="1;27pkt 27fpkt"];
4373--10500[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.13.251.95" dst_port="80" src_ip="136.90.110.81"/>
      <filter dst_ip="32.152.136.10" dst_port="80" src_ip="136.90.110.81"/>
    </slice>
    <from sec="1246943170" usec="0"/>
    <to sec="1246943490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
4376[label="42.30.220.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
4377[label="141.161.180.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.180.24:80, 42.30.220.90:62005}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62005: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4376--4377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.220.90" dst_port="62005" src_ip="141.161.180.24" src_port="80"/>
    </slice>
    <from sec="1246943194" usec="0"/>
    <to sec="1246943207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
4238[label="136.90.76.200;d;12pkt 12fpkt", shape=diamond, color=yellow];
4427[label="203.240.43.87;s;8pkt 8fpkt", shape=diamond, color=yellow];
7619[label="136.90.76.200;d;8pkt 8fpkt", shape=hexagon, color=black];
7649[label="203.240.43.87;s;8pkt 8fpkt", shape=hexagon, color=black];
10618[label="203.240.43.87;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.240.43.87:80, 136.90.76.200:*}[66.6667%]&lt;BR/&gt;{197.239.62.224:80, 136.90.76.200:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1371: (5.68182%)&lt;BR/&gt; 1370: (5.68182%)&lt;BR/&gt; 1369: (5.68182%)&lt;BR/&gt; 1368: (5.68182%)&gt;];
}
4238--4427[label="1;8pkt 8fpkt"];
4238--7619[label="1;8pkt 8fpkt"];
4238--7649[label="1;8pkt 8fpkt"];
4238--10618[label="1;8pkt 8fpkt"];
4427--7619[label="1;8pkt 8fpkt"];
4427--7649[label="1;8pkt 8fpkt"];
4427--10618[label="1;8pkt 8fpkt"];
7619--7649[label="1;8pkt 8fpkt"];
7619--10618[label="1;8pkt 8fpkt"];
7649--10618[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.76.200" src_ip="203.240.43.87" src_port="80"/>
      <filter dst_ip="136.90.76.200" src_ip="197.239.62.224" src_port="80"/>
    </slice>
    <from sec="1246943023" usec="0"/>
    <to sec="1246943551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.44.175.81"/>
      <from sec="1246943222" usec="0"/>
      <to sec="1246943359" usec="0"/>
    </slice>
    <from sec="1246943222" usec="0"/>
    <to sec="1246943359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.44.175.81"/>
      <from sec="1246943222" usec="0"/>
      <to sec="1246943359" usec="0"/>
    </slice>
    <from sec="1246943222" usec="0"/>
    <to sec="1246943359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.181.122.130"/>
      <from sec="1246943241" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943241" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
4882[label="141.179.107.129;s;148pkt 148fpkt", shape=diamond, color=yellow];
4957[label="217.238.12.32;d;78pkt 78fpkt", shape=diamond, color=yellow];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.107.129:*, 217.238.12.32:80}[52.7027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7788%)&lt;BR/&gt; 3159: (0.442478%)&lt;BR/&gt; 3153: (0.442478%)&lt;BR/&gt; 3150: (0.442478%)&lt;BR/&gt; 3147: (0.442478%)&gt;];
}
4882--4957[label="1;78pkt 78fpkt"];
4882--8514[label="0.0135135;2pkt 2fpkt"];
4882--8603[label="0.0135135;2pkt 2fpkt"];
4882--8680[label="0.0135135;2pkt 2fpkt"];
4957--8514[label="0.025641;2pkt 2fpkt"];
4957--8603[label="0.025641;2pkt 2fpkt"];
4957--8680[label="0.025641;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.238.12.32" dst_port="80" src_ip="141.179.107.129"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
2439[label="59.164.85.232;s;3pkt 3fpkt", shape=diamond, color=yellow];
4999[label="172.133.122.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
5098[label="172.133.105.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.164.85.232:6664, 172.133.105.119:1322}[33.3333%]&lt;BR/&gt;{59.164.85.232:6666, 172.133.122.211:1992}[33.3333%]&lt;BR/&gt;{59.164.85.232:6667, 172.133.21.240:1031}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (20%)&lt;BR/&gt; 6664: (20%)&lt;BR/&gt; 1992: (20%)&lt;BR/&gt; 1322: (20%)&lt;BR/&gt; 6667: (10%)&gt;];
}
2439--4999[label="1;1pkt 1fpkt"];
2439--5098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.21.240" dst_port="1031" src_ip="59.164.85.232" src_port="6667"/>
      <filter dst_ip="172.133.122.211" dst_port="1992" src_ip="59.164.85.232" src_port="6666"/>
      <filter dst_ip="172.133.105.119" dst_port="1322" src_ip="59.164.85.232" src_port="6664"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
3851[label="141.179.215.149;d;85pkt 85fpkt", shape=diamond, color=yellow];
5068[label="44.48.155.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
8138[label="141.179.215.149;d;80pkt 80fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.215.149:7508}[87.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7508: (43.0723%)&lt;BR/&gt; 4232: (4.21687%)&lt;BR/&gt; 4244: (1.80723%)&lt;BR/&gt; 6346: (1.20482%)&lt;BR/&gt; 11516: (0.903614%)&gt;];
}
3851--5068[label="1;1pkt 1fpkt"];
3851--8138[label="1;80pkt 80fpkt"];
5068--8138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.215.149" dst_port="7508"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.0.202.26"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="155.192.26.176"/>
      <from sec="1246942802" usec="0"/>
      <to sec="1246943626" usec="0"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.81.12.63"/>
      <from sec="1246942803" usec="0"/>
      <to sec="1246943622" usec="0"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
4669[label="214.100.113.153;d;4pkt 4fpkt", shape=diamond, color=yellow];
5174[label="136.90.88.3;s;3pkt 3fpkt", shape=diamond, color=yellow];
8324[label="214.100.113.153;d;4pkt 4fpkt", shape=hexagon, color=black];
8786[label="136.90.88.3;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.68.45:123, 214.100.113.153:123}[25%]&lt;BR/&gt;{136.90.88.3:3735, 214.100.113.153:554}[25%]&lt;BR/&gt;{136.90.88.3:3962, 214.100.113.153:993}[25%]&lt;BR/&gt;{136.90.88.3:3965, 214.100.113.153:993}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (28.5714%)&lt;BR/&gt; 3965: (14.2857%)&lt;BR/&gt; 3962: (14.2857%)&lt;BR/&gt; 3735: (14.2857%)&lt;BR/&gt; 554: (14.2857%)&gt;];
}
4669--5174[label="1;3pkt 3fpkt"];
4669--8324[label="1;4pkt 4fpkt"];
4669--8786[label="1;3pkt 3fpkt"];
5174--8324[label="1;3pkt 3fpkt"];
5174--8786[label="1;3pkt 3fpkt"];
8324--8786[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.100.113.153" dst_port="993" src_ip="136.90.88.3" src_port="3965"/>
      <filter dst_ip="214.100.113.153" dst_port="993" src_ip="136.90.88.3" src_port="3962"/>
      <filter dst_ip="214.100.113.153" dst_port="554" src_ip="136.90.88.3" src_port="3735"/>
      <filter dst_ip="214.100.113.153" dst_port="123" src_ip="136.90.68.45" src_port="123"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="27.10.43.139"/>
      <from sec="1246943219" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943219" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="24.97.186.133"/>
      <from sec="1246943335" usec="0"/>
      <to sec="1246943438" usec="0"/>
    </slice>
    <from sec="1246943335" usec="0"/>
    <to sec="1246943438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
5413[label="141.5.109.112;s;9pkt 9fpkt", shape=diamond, color=yellow];
5435[label="218.170.96.106;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.5.109.112:80, 218.170.96.106:*}[44.4444%]&lt;BR/&gt;{141.5.109.112:80, 213.108.104.54:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52084: (7.69231%)&lt;BR/&gt; 41515: (7.69231%)&lt;BR/&gt; 38311: (7.69231%)&lt;BR/&gt; 36446: (7.69231%)&gt;];
}
5413--5435[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="218.170.96.106" src_ip="141.5.109.112" src_port="80"/>
      <filter dst_ip="213.108.104.54" src_ip="141.5.109.112" src_port="80"/>
    </slice>
    <from sec="1246943345" usec="0"/>
    <to sec="1246943541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
3009[label="42.30.222.5;d;5pkt 5fpkt", shape=diamond, color=yellow];
5468[label="141.161.69.54;s;5pkt 5fpkt", shape=diamond, color=yellow];
9915[label="141.161.69.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14209[label="141.161.69.54;6pkt 6fpkt", shape=invtriangle, color=brown];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.69.54:80, 42.30.222.5:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64340: (9.09091%)&lt;BR/&gt; 61883: (9.09091%)&lt;BR/&gt; 60964: (9.09091%)&lt;BR/&gt; 52899: (9.09091%)&gt;];
}
3009--5468[label="1;5pkt 5fpkt"];
3009--9915[label="1;5pkt 5fpkt"];
3009--14209[label="1;5pkt 5fpkt"];
5468--9915[label="1;5pkt 5fpkt"];
5468--14209[label="1;5pkt 5fpkt"];
9915--14209[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.222.5" src_ip="141.161.69.54" src_port="80"/>
    </slice>
    <from sec="1246942983" usec="0"/>
    <to sec="1246943415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
5472[label="170.81.21.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
5473[label="204.100.231.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.100.231.42:25, 141.166.108.50:38082}[50%]&lt;BR/&gt;{204.100.231.42:110, 170.81.21.242:1141}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1141: (33.3333%)&lt;BR/&gt; 110: (33.3333%)&lt;BR/&gt; 38082: (16.6667%)&lt;BR/&gt; 25: (16.6667%)&gt;];
}
5472--5473[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.21.242" dst_port="1141" src_ip="204.100.231.42" src_port="110"/>
      <filter dst_ip="141.166.108.50" dst_port="38082" src_ip="204.100.231.42" src_port="25"/>
    </slice>
    <from sec="1246943407" usec="0"/>
    <to sec="1246943526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
5460[label="169.185.202.97;d;3pkt 3fpkt", shape=diamond, color=yellow];
5504[label="36.5.36.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.5.36.26:80, 169.185.202.97:1929}[33.3333%]&lt;BR/&gt;{47.149.43.53:80, 169.185.202.97:1923}[33.3333%]&lt;BR/&gt;{200.192.109.196:80, 169.185.202.97:1917}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1929: (25%)&lt;BR/&gt; 1923: (12.5%)&lt;BR/&gt; 1917: (12.5%)&gt;];
}
5460--5504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.202.97" dst_port="1917" src_ip="200.192.109.196" src_port="80"/>
      <filter dst_ip="169.185.202.97" dst_port="1923" src_ip="47.149.43.53" src_port="80"/>
      <filter dst_ip="169.185.202.97" dst_port="1929" src_ip="36.5.36.26" src_port="80"/>
    </slice>
    <from sec="1246943390" usec="0"/>
    <to sec="1246943539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.81.25.101"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943627" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
1947[label="155.192.164.40;s;439pkt 439fpkt", shape=diamond, color=yellow];
5605[label="16.82.238.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
8000[label="155.192.164.40;s;411pkt 411fpkt", shape=hexagon, color=black];
9619[label="155.192.164.40;516pkt 516fpkt", shape=pentagon, color=darkviolet];
14076[label="155.192.164.40;516pkt 516fpkt", shape=invtriangle, color=brown];
16133[label="155.192.164.40;516pkt 516fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.164.40:32573, *:*}[96.7054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32573: (48.291%)&lt;BR/&gt; 443: (1.22968%)&lt;BR/&gt; 80: (0.479366%)&lt;BR/&gt; 55822: (0.20842%)&lt;BR/&gt; 50669: (0.20842%)&gt;];
}
1947--5605[label="1;1pkt 1fpkt"];
1947--8000[label="1;411pkt 411fpkt"];
1947--8451[label="0.0022779;1pkt 1fpkt"];
1947--8458[label="0.0022779;1pkt 1fpkt"];
1947--8484[label="0.0022779;1pkt 1fpkt"];
1947--8541[label="0.0022779;1pkt 1fpkt"];
1947--8548[label="0.0022779;1pkt 1fpkt"];
1947--8574[label="0.0022779;1pkt 1fpkt"];
1947--8626[label="0.0022779;1pkt 1fpkt"];
1947--8633[label="0.0022779;1pkt 1fpkt"];
1947--8656[label="0.0022779;1pkt 1fpkt"];
1947--9619[label="1;439pkt 439fpkt"];
1947--14076[label="1;439pkt 439fpkt"];
1947--16133[label="1;439pkt 439fpkt"];
5605--8000[label="1;1pkt 1fpkt"];
5605--9619[label="1;1pkt 1fpkt"];
5605--14076[label="1;1pkt 1fpkt"];
5605--16133[label="1;1pkt 1fpkt"];
8000--8451[label="0.00243309;1pkt 1fpkt"];
8000--8458[label="0.00243309;1pkt 1fpkt"];
8000--8484[label="0.00243309;1pkt 1fpkt"];
8000--8541[label="0.00243309;1pkt 1fpkt"];
8000--8548[label="0.00243309;1pkt 1fpkt"];
8000--8574[label="0.00243309;1pkt 1fpkt"];
8000--8626[label="0.00243309;1pkt 1fpkt"];
8000--8633[label="0.00243309;1pkt 1fpkt"];
8000--8656[label="0.00243309;1pkt 1fpkt"];
8000--9619[label="1;411pkt 411fpkt"];
8000--14076[label="1;411pkt 411fpkt"];
8000--16133[label="1;411pkt 411fpkt"];
9619--14076[label="1;516pkt 516fpkt"];
9619--16133[label="1;516pkt 516fpkt"];
14076--16133[label="1;516pkt 516fpkt"];
</description>
    <slice>
      <filter src_ip="155.192.164.40" src_port="32573"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.179.211.24"/>
      <from sec="1246942802" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
5700[label="169.185.202.66;s;538pkt 538fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.202.66:37430, *:*}[99.6283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37430: (49.8141%)&lt;BR/&gt; 4041: (1.20818%)&lt;BR/&gt; 16001: (0.743494%)&lt;BR/&gt; 6881: (0.27881%)&lt;BR/&gt; 55555: (0.185874%)&gt;];
}
5700--8498[label="0.00557621;3pkt 3fpkt"];
5700--8588[label="0.00557621;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="169.185.202.66" src_port="37430"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
5434[label="203.77.0.222;d;2pkt 2fpkt", shape=diamond, color=yellow];
5787[label="141.179.106.121;s;36pkt 36fpkt", shape=diamond, color=yellow];
11257[label="141.179.106.121;37pkt 37fpkt", shape=pentagon, color=darkviolet];
14838[label="141.179.106.121;37pkt 37fpkt", shape=invtriangle, color=brown];
16447[label="141.179.106.121;37pkt 37fpkt", shape=invhouse, color=bisque];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.106.121:48530, *:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48530: (47.3154%)&lt;BR/&gt; 46451: (1.67785%)&lt;BR/&gt; 45903: (1.67785%)&lt;BR/&gt; 64837: (1.34228%)&lt;BR/&gt; 64826: (1.34228%)&gt;];
}
5434--5787[label="1;2pkt 2fpkt"];
5434--11257[label="1;2pkt 2fpkt"];
5434--14838[label="1;2pkt 2fpkt"];
5434--16447[label="1;2pkt 2fpkt"];
5787--11257[label="0.972222;35pkt 35fpkt"];
5787--14838[label="0.972222;35pkt 35fpkt"];
5787--16447[label="0.972222;35pkt 35fpkt"];
11257--14838[label="1;37pkt 37fpkt"];
11257--16447[label="1;37pkt 37fpkt"];
14838--16447[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.106.121" src_port="48530"/>
    </slice>
    <from sec="1246942832" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="38.230.36.166"/>
      <from sec="1246943364" usec="0"/>
      <to sec="1246943450" usec="0"/>
    </slice>
    <from sec="1246943364" usec="0"/>
    <to sec="1246943450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43867,2.20508,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
165[label="43.210.204.28s;96pkt 96fpkt", shape=rectangle, color=red];
5964[label="169.185.146.1;d;163pkt 163fpkt", shape=diamond, color=yellow];
5994[label="43.210.204.28;s;154pkt 154fpkt", shape=diamond, color=yellow];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.210.204.28:*, 169.185.146.1:80}[94.4785%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51706: (0.363196%)&lt;BR/&gt; 51705: (0.363196%)&lt;BR/&gt; 51704: (0.363196%)&lt;BR/&gt; 51703: (0.363196%)&gt;];
}
165--301[label="0.0104167;1pkt 1fpkt"];
165--5964[label="1;96pkt 96fpkt"];
165--5994[label="1;96pkt 96fpkt"];
5964--5994[label="1;154pkt 154fpkt"];
5964--8514[label="0.00613497;1pkt 1fpkt"];
5964--8603[label="0.00613497;1pkt 1fpkt"];
5964--8680[label="0.00613497;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.146.1" dst_port="80" src_ip="43.210.204.28"/>
    </slice>
    <from sec="1246943378" usec="0"/>
    <to sec="1246943599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
5364[label="42.30.222.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
5995[label="155.192.33.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
8256[label="42.30.222.41;d;2pkt 2fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.171.102:80, 42.30.222.41:50815}[50%]&lt;BR/&gt;{155.192.33.204:80, 42.30.222.41:51670}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51670: (30%)&lt;BR/&gt; 50815: (20%)&gt;];
}
5364--5995[label="1;1pkt 1fpkt"];
5364--8256[label="1;2pkt 2fpkt"];
5995--8256[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.222.41" dst_port="51670" src_ip="155.192.33.204" src_port="80"/>
      <filter dst_ip="42.30.222.41" dst_port="50815" src_ip="141.161.171.102" src_port="80"/>
    </slice>
    <from sec="1246943279" usec="0"/>
    <to sec="1246943421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
3578[label="42.30.217.184;d;2pkt 2fpkt", shape=diamond, color=yellow];
6035[label="141.161.69.189;s;2pkt 2fpkt", shape=diamond, color=yellow];
12569[label="141.161.69.189;8pkt 8fpkt", shape=pentagon, color=darkviolet];
15457[label="141.161.69.189;8pkt 8fpkt", shape=invtriangle, color=brown];
16698[label="141.161.69.189;8pkt 8fpkt", shape=invhouse, color=bisque];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.69.189:80, 42.30.217.184:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58845: (8.92857%)&lt;BR/&gt; 40696: (8.92857%)&lt;BR/&gt; 61967: (5.35714%)&lt;BR/&gt; 58364: (5.35714%)&gt;];
}
3578--6035[label="1;2pkt 2fpkt"];
3578--12569[label="1;2pkt 2fpkt"];
3578--15457[label="1;2pkt 2fpkt"];
3578--16698[label="1;2pkt 2fpkt"];
6035--12569[label="1;2pkt 2fpkt"];
6035--15457[label="1;2pkt 2fpkt"];
6035--16698[label="1;2pkt 2fpkt"];
12569--15457[label="1;8pkt 8fpkt"];
12569--16698[label="1;8pkt 8fpkt"];
15457--16698[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.217.184" src_ip="141.161.69.189" src_port="80"/>
    </slice>
    <from sec="1246942874" usec="0"/>
    <to sec="1246943653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.90.213.0"/>
      <from sec="1246943498" usec="0"/>
      <to sec="1246943563" usec="0"/>
    </slice>
    <from sec="1246943498" usec="0"/>
    <to sec="1246943563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
3124[label="136.90.104.170;d;89pkt 89fpkt", shape=diamond, color=yellow];
3125[label="90.48.209.112;s;83pkt 83fpkt", shape=diamond, color=yellow];
6108[label="141.5.43.141;d;83pkt 83fpkt", shape=diamond, color=yellow];
11131[label="90.48.209.112;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.48.209.112:80, 136.90.104.170:*}[51.7442%]&lt;BR/&gt;{90.48.209.112:80, 141.5.43.141:*}[48.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50881: (0.351288%)&lt;BR/&gt; 50880: (0.351288%)&lt;BR/&gt; 50879: (0.351288%)&lt;BR/&gt; 50878: (0.351288%)&gt;];
}
3124--11131[label="1;89pkt 89fpkt"];
3125--6108[label="1;83pkt 83fpkt"];
3125--11131[label="1;83pkt 83fpkt"];
6108--11131[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.104.170" src_ip="90.48.209.112" src_port="80"/>
      <filter dst_ip="141.5.43.141" src_ip="90.48.209.112" src_port="80"/>
    </slice>
    <from sec="1246943057" usec="0"/>
    <to sec="1246943611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.100.252.82"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
5568[label="141.179.214.178;s;2pkt 2fpkt", shape=diamond, color=yellow];
6153[label="40.43.163.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.214.178:50384, 40.43.164.143:5190}[50%]&lt;BR/&gt;{141.179.214.178:50383, 40.43.163.144:5190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 50383: (33.3333%)&lt;BR/&gt; 50384: (16.6667%)&gt;];
}
5568--6153[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.43.163.144" dst_port="5190" src_ip="141.179.214.178" src_port="50383"/>
      <filter dst_ip="40.43.164.143" dst_port="5190" src_ip="141.179.214.178" src_port="50384"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
5579[label="91.30.12.81;s;124pkt 124fpkt", shape=diamond, color=yellow];
6161[label="141.42.193.43;d;125pkt 125fpkt", shape=diamond, color=yellow];
8298[label="141.42.193.43;d;125pkt 125fpkt", shape=hexagon, color=black];
10490[label="91.30.12.81;141pkt 141fpkt", shape=pentagon, color=darkviolet];
14474[label="91.30.12.81;141pkt 141fpkt", shape=invtriangle, color=brown];
16293[label="91.30.12.81;141pkt 141fpkt", shape=invhouse, color=bisque];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.30.12.81:80, 141.42.193.43:*}[99.3007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8745%)&lt;BR/&gt; 65245: (0.376412%)&lt;BR/&gt; 64893: (0.376412%)&lt;BR/&gt; 64399: (0.376412%)&lt;BR/&gt; 64333: (0.376412%)&gt;];
}
5579--6161[label="1;124pkt 124fpkt"];
5579--8298[label="1;124pkt 124fpkt"];
5579--8451[label="0.0564516;7pkt 7fpkt"];
5579--8458[label="0.0403226;5pkt 5fpkt"];
5579--8484[label="0.0483871;6pkt 6fpkt"];
5579--8541[label="0.0564516;7pkt 7fpkt"];
5579--8548[label="0.0403226;5pkt 5fpkt"];
5579--8574[label="0.0483871;6pkt 6fpkt"];
5579--8626[label="0.0564516;7pkt 7fpkt"];
5579--8633[label="0.0403226;5pkt 5fpkt"];
5579--8656[label="0.0483871;6pkt 6fpkt"];
5579--10490[label="0.991935;123pkt 123fpkt"];
5579--14474[label="0.991935;123pkt 123fpkt"];
5579--16293[label="0.991935;123pkt 123fpkt"];
6161--8298[label="1;125pkt 125fpkt"];
6161--8451[label="0.056;7pkt 7fpkt"];
6161--8458[label="0.04;5pkt 5fpkt"];
6161--8484[label="0.048;6pkt 6fpkt"];
6161--8493[label="0.008;1pkt 1fpkt"];
6161--8541[label="0.056;7pkt 7fpkt"];
6161--8548[label="0.04;5pkt 5fpkt"];
6161--8574[label="0.048;6pkt 6fpkt"];
6161--8583[label="0.008;1pkt 1fpkt"];
6161--8626[label="0.056;7pkt 7fpkt"];
6161--8633[label="0.04;5pkt 5fpkt"];
6161--8656[label="0.048;6pkt 6fpkt"];
6161--8664[label="0.008;1pkt 1fpkt"];
6161--10490[label="0.984;123pkt 123fpkt"];
6161--14474[label="0.984;123pkt 123fpkt"];
6161--16293[label="0.984;123pkt 123fpkt"];
8298--8451[label="0.056;7pkt 7fpkt"];
8298--8458[label="0.04;5pkt 5fpkt"];
8298--8484[label="0.048;6pkt 6fpkt"];
8298--8493[label="0.008;1pkt 1fpkt"];
8298--8541[label="0.056;7pkt 7fpkt"];
8298--8548[label="0.04;5pkt 5fpkt"];
8298--8574[label="0.048;6pkt 6fpkt"];
8298--8583[label="0.008;1pkt 1fpkt"];
8298--8626[label="0.056;7pkt 7fpkt"];
8298--8633[label="0.04;5pkt 5fpkt"];
8298--8656[label="0.048;6pkt 6fpkt"];
8298--8664[label="0.008;1pkt 1fpkt"];
8298--10490[label="0.984;123pkt 123fpkt"];
8298--14474[label="0.984;123pkt 123fpkt"];
8298--16293[label="0.984;123pkt 123fpkt"];
10490--14474[label="1;141pkt 141fpkt"];
10490--16293[label="1;141pkt 141fpkt"];
14474--16293[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="141.42.193.43" src_ip="91.30.12.81" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
762[label="193.95.168.208;s;2623pkt 2623fpkt", shape=diamond, color=yellow];
6256[label="34.52.16.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
6948[label="193.95.168.208;s;1476pkt 1476fpkt", shape=hexagon, color=black];
12902[label="193.95.168.208;2786pkt 2786fpkt", shape=pentagon, color=darkviolet];
15602[label="193.95.168.208;2786pkt 2786fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.95.168.208:0, *:0}[99.9282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9276%)&lt;BR/&gt; 445: (0.0361869%)&lt;BR/&gt; 2904: (0.0206782%)&lt;BR/&gt; 4933: (0.0155087%)&gt;];
}
762--6256[label="1;1pkt 1fpkt"];
762--6948[label="1;1476pkt 1476fpkt"];
762--12902[label="1;2623pkt 2623fpkt"];
762--15602[label="1;2623pkt 2623fpkt"];
6256--6948[label="1;1pkt 1fpkt"];
6256--12902[label="1;1pkt 1fpkt"];
6256--15602[label="1;1pkt 1fpkt"];
6948--12902[label="1;1476pkt 1476fpkt"];
6948--15602[label="1;1476pkt 1476fpkt"];
12902--15602[label="1;2786pkt 2786fpkt"];
</description>
    <slice>
      <filter src_ip="193.95.168.208"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.185.200.37"/>
      <from sec="1246942909" usec="0"/>
      <to sec="1246943612" usec="0"/>
    </slice>
    <from sec="1246942909" usec="0"/>
    <to sec="1246943612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.21.81.58"/>
      <from sec="1246943437" usec="0"/>
      <to sec="1246943498" usec="0"/>
    </slice>
    <from sec="1246943437" usec="0"/>
    <to sec="1246943498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.90.213.157"/>
      <from sec="1246943481" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943481" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40341,2.15432,504,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
175[label="22.50.176.101s;44pkt 44fpkt", shape=rectangle, color=red];
6487[label="204.91.6.106;d;65pkt 65fpkt", shape=diamond, color=yellow];
6488[label="22.50.176.101;s;65pkt 65fpkt", shape=diamond, color=yellow];
10907[label="22.50.176.101;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.50.176.101:*, 204.91.6.106:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1848: (0.706714%)&lt;BR/&gt; 1847: (0.706714%)&lt;BR/&gt; 1846: (0.706714%)&lt;BR/&gt; 1845: (0.706714%)&gt;];
}
175--6487[label="1;44pkt 44fpkt"];
175--6488[label="1;44pkt 44fpkt"];
175--10907[label="1;44pkt 44fpkt"];
6487--6488[label="1;65pkt 65fpkt"];
6487--10907[label="1;65pkt 65fpkt"];
6488--10907[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.6.106" dst_port="443" src_ip="22.50.176.101"/>
    </slice>
    <from sec="1246943202" usec="0"/>
    <to sec="1246943625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="27.10.19.31"/>
      <from sec="1246943531" usec="0"/>
      <to sec="1246943625" usec="0"/>
    </slice>
    <from sec="1246943531" usec="0"/>
    <to sec="1246943625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
6412[label="169.185.9.9;s;106pkt 106fpkt", shape=diamond, color=yellow];
6514[label="192.48.18.147;d;71pkt 71fpkt", shape=diamond, color=yellow];
8924[label="169.185.9.9;147pkt 147fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.9.9:*, 192.48.18.147:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9938%)&lt;BR/&gt; 443: (1.85185%)&lt;BR/&gt; 49467: (0.462963%)&lt;BR/&gt; 49466: (0.462963%)&lt;BR/&gt; 49465: (0.462963%)&gt;];
}
6412--6514[label="1;71pkt 71fpkt"];
6412--8514[label="0.00943396;1pkt 1fpkt"];
6412--8603[label="0.00943396;1pkt 1fpkt"];
6412--8680[label="0.00943396;1pkt 1fpkt"];
6412--8924[label="0.990566;105pkt 105fpkt"];
6514--8924[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="192.48.18.147" dst_port="80" src_ip="169.185.9.9"/>
    </slice>
    <from sec="1246943283" usec="0"/>
    <to sec="1246943666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.185.170.128"/>
      <from sec="1246943545" usec="0"/>
      <to sec="1246943629" usec="0"/>
    </slice>
    <from sec="1246943545" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43867,2.20508,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
195[label="54.150.12.39s;492pkt 492fpkt", shape=rectangle, color=red];
6538[label="54.150.12.39;s;951pkt 951fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.150.12.39:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 51063: (0.10395%)&lt;BR/&gt; 51061: (0.10395%)&lt;BR/&gt; 51052: (0.10395%)&lt;BR/&gt; 51031: (0.10395%)&gt;];
}
195--6538[label="0.963415;474pkt 474fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="54.150.12.39"/>
    </slice>
    <from sec="1246943554" usec="0"/>
    <to sec="1246943631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43867,2.20508,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
182[label="169.185.103.248s;359pkt 359fpkt", shape=rectangle, color=red];
6548[label="42.54.188.170;d;331pkt 331fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.103.248:*, 42.54.188.170:80}[91.9444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1981: (0.144928%)&lt;BR/&gt; 1980: (0.144928%)&lt;BR/&gt; 1978: (0.144928%)&lt;BR/&gt; 1976: (0.144928%)&gt;];
}
182--301[label="0.0752089;27pkt 27fpkt"];
182--6548[label="0.996979;330pkt 330fpkt"];
</description>
    <slice>
      <filter dst_ip="42.54.188.170" dst_port="80" src_ip="169.185.103.248"/>
    </slice>
    <from sec="1246943562" usec="0"/>
    <to sec="1246943611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="26.2.210.96"/>
      <from sec="1246943578" usec="0"/>
      <to sec="1246943607" usec="0"/>
    </slice>
    <from sec="1246943578" usec="0"/>
    <to sec="1246943607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.30.222.109"/>
      <from sec="1246943588" usec="0"/>
      <to sec="1246943592" usec="0"/>
    </slice>
    <from sec="1246943588" usec="0"/>
    <to sec="1246943592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.236.24.163"/>
      <from sec="1246943592" usec="0"/>
      <to sec="1246943621" usec="0"/>
    </slice>
    <from sec="1246943592" usec="0"/>
    <to sec="1246943621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
13113[label="141.179.135.220;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.135.220:59406, *:*}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59406: (42.6471%)&lt;BR/&gt; 60428: (2.94118%)&lt;BR/&gt; 34599: (2.94118%)&lt;BR/&gt; 13090: (2.94118%)&lt;BR/&gt; 3544: (2.94118%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.179.135.220" src_port="59406"/>
    </slice>
    <from sec="1246942888" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
694[label="169.185.47.196;d;5pkt 5fpkt", shape=diamond, color=yellow];
697[label="38.187.184.236;s;3pkt 3fpkt", shape=diamond, color=yellow];
6631[label="38.187.184.236;s;3pkt 3fpkt", shape=hexagon, color=black];
13383[label="38.187.184.236;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15813[label="38.187.184.236;3pkt 3fpkt", shape=invtriangle, color=brown];
16849[label="38.187.184.236;3pkt 3fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.121.14:80, 169.185.47.196:50165}[20%]&lt;BR/&gt;{197.10.230.56:80, 169.185.47.196:50184}[20%]&lt;BR/&gt;{38.187.184.236:80, 169.185.47.196:50181}[20%]&lt;BR/&gt;{38.187.184.236:80, 169.185.47.196:50182}[20%]&lt;BR/&gt;{38.187.184.236:80, 169.185.47.196:50183}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50183: (15%)&lt;BR/&gt; 50182: (15%)&lt;BR/&gt; 50181: (15%)&lt;BR/&gt; 50184: (2.5%)&gt;];
}
694--697[label="1;3pkt 3fpkt"];
694--2794[label="0.2;1pkt 1fpkt"];
694--6631[label="1;3pkt 3fpkt"];
694--9964[label="0.2;1pkt 1fpkt"];
694--13383[label="1;3pkt 3fpkt"];
694--14235[label="0.2;1pkt 1fpkt"];
694--15813[label="1;3pkt 3fpkt"];
694--16849[label="1;3pkt 3fpkt"];
697--6631[label="1;3pkt 3fpkt"];
697--13383[label="1;3pkt 3fpkt"];
697--15813[label="1;3pkt 3fpkt"];
697--16849[label="1;3pkt 3fpkt"];
6631--13383[label="1;3pkt 3fpkt"];
6631--15813[label="1;3pkt 3fpkt"];
6631--16849[label="1;3pkt 3fpkt"];
13383--15813[label="1;3pkt 3fpkt"];
13383--16849[label="1;3pkt 3fpkt"];
15813--16849[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.47.196" dst_port="50183" src_ip="38.187.184.236" src_port="80"/>
      <filter dst_ip="169.185.47.196" dst_port="50182" src_ip="38.187.184.236" src_port="80"/>
      <filter dst_ip="169.185.47.196" dst_port="50181" src_ip="38.187.184.236" src_port="80"/>
      <filter dst_ip="169.185.47.196" dst_port="50184" src_ip="197.10.230.56" src_port="80"/>
      <filter dst_ip="169.185.47.196" dst_port="50165" src_ip="219.18.121.14" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
422[label="205.100.240.132;d;2313pkt 2313fpkt", shape=diamond, color=yellow];
851[label="49.208.57.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
913[label="93.135.40.96;s;894pkt 894fpkt", shape=diamond, color=yellow];
1320[label="93.89.0.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1323[label="48.122.145.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
1347[label="93.166.152.239;s;235pkt 235fpkt", shape=diamond, color=yellow];
1439[label="40.150.154.48;s;14pkt 14fpkt", shape=diamond, color=yellow];
1482[label="72.68.179.9;s;5pkt 5fpkt", shape=diamond, color=yellow];
1766[label="208.28.139.169;s;20pkt 20fpkt", shape=diamond, color=yellow];
1773[label="212.27.28.190;s;3pkt 3fpkt", shape=diamond, color=yellow];
2241[label="25.135.8.35;s;5pkt 5fpkt", shape=diamond, color=yellow];
2381[label="209.169.18.17;s;6pkt 6fpkt", shape=diamond, color=yellow];
3132[label="91.145.20.16;s;6pkt 6fpkt", shape=diamond, color=yellow];
3612[label="91.67.72.27;s;8pkt 8fpkt", shape=diamond, color=yellow];
3663[label="25.35.56.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
4361[label="29.135.25.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
6362[label="21.138.102.25;s;85pkt 85fpkt", shape=diamond, color=yellow];
6710[label="72.68.179.9;s;5pkt 5fpkt", shape=hexagon, color=black];
6972[label="208.28.139.169;s;7pkt 7fpkt", shape=hexagon, color=black];
7080[label="25.135.8.35;s;5pkt 5fpkt", shape=hexagon, color=black];
7382[label="91.67.72.27;s;8pkt 8fpkt", shape=hexagon, color=black];
8945[label="72.68.179.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9010[label="216.36.8.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9112[label="91.145.20.16;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9132[label="209.177.5.17;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9319[label="29.135.25.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9505[label="25.135.8.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9782[label="204.253.199.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10789[label="93.135.40.96;957pkt 957fpkt", shape=pentagon, color=darkviolet];
11519[label="27.148.104.134;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11675[label="16.81.37.142;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12475[label="25.35.56.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12580[label="212.27.28.190;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13085[label="214.18.167.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13177[label="205.130.251.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13416[label="197.128.157.238;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13593[label="48.122.145.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13860[label="91.145.20.16;13pkt 13fpkt", shape=invtriangle, color=brown];
13870[label="209.177.5.17;3pkt 3fpkt", shape=invtriangle, color=brown];
14144[label="204.253.199.47;1pkt 1fpkt", shape=invtriangle, color=brown];
15034[label="16.81.37.142;8pkt 8fpkt", shape=invtriangle, color=brown];
15682[label="214.18.167.218;2pkt 2fpkt", shape=invtriangle, color=brown];
15825[label="197.128.157.238;3pkt 3fpkt", shape=invtriangle, color=brown];
15907[label="48.122.145.250;1pkt 1fpkt", shape=invtriangle, color=brown];
16029[label="209.169.18.17;5pkt 5fpkt", shape=invhouse, color=bisque];
16680[label="25.35.56.183;1pkt 1fpkt", shape=invhouse, color=bisque];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.135.40.96:*, 205.100.240.132:80}[40.0922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3951%)&lt;BR/&gt; 21: (2.34642%)&lt;BR/&gt; 0: (0.81058%)&lt;BR/&gt; 1042: (0.106655%)&lt;BR/&gt; 1443: (0.0746587%)&gt;];
}
422--851[label="1;1pkt 1fpkt"];
422--913[label="1;894pkt 894fpkt"];
422--1320[label="1;1pkt 1fpkt"];
422--1323[label="1;1pkt 1fpkt"];
422--1347[label="1;235pkt 235fpkt"];
422--1439[label="0.642857;9pkt 9fpkt"];
422--1482[label="1;5pkt 5fpkt"];
422--1766[label="1;20pkt 20fpkt"];
422--1773[label="1;3pkt 3fpkt"];
422--2241[label="1;5pkt 5fpkt"];
422--2381[label="1;6pkt 6fpkt"];
422--3132[label="1;6pkt 6fpkt"];
422--3612[label="1;8pkt 8fpkt"];
422--3663[label="1;1pkt 1fpkt"];
422--4361[label="1;2pkt 2fpkt"];
422--4790[label="1;3pkt 3fpkt"];
422--6362[label="1;85pkt 85fpkt"];
422--6710[label="1;5pkt 5fpkt"];
422--6972[label="1;7pkt 7fpkt"];
422--7080[label="1;5pkt 5fpkt"];
422--7382[label="1;8pkt 8fpkt"];
422--8514[label="0.0916559;212pkt 212fpkt"];
422--8603[label="0.0916559;212pkt 212fpkt"];
422--8680[label="0.0916559;212pkt 212fpkt"];
422--8945[label="1;5pkt 5fpkt"];
422--9010[label="1;2pkt 2fpkt"];
422--9025[label="0.08;2pkt 2fpkt"];
422--9112[label="0.857143;12pkt 12fpkt"];
422--9132[label="1;3pkt 3fpkt"];
422--9319[label="1;2pkt 2fpkt"];
422--9505[label="1;5pkt 5fpkt"];
422--9782[label="1;1pkt 1fpkt"];
422--10789[label="0.934169;894pkt 894fpkt"];
422--11414[label="0.2;2pkt 2fpkt"];
422--11519[label="1;18pkt 18fpkt"];
422--11675[label="0.5;4pkt 4fpkt"];
422--12475[label="1;1pkt 1fpkt"];
422--12580[label="1;3pkt 3fpkt"];
422--12959[label="0.111111;1pkt 1fpkt"];
422--12991[label="1;1pkt 1fpkt"];
422--13085[label="1;2pkt 2fpkt"];
422--13177[label="1;1pkt 1fpkt"];
422--13334[label="1;3pkt 3fpkt"];
422--13416[label="1;3pkt 3fpkt"];
422--13593[label="1;1pkt 1fpkt"];
422--13860[label="0.846154;11pkt 11fpkt"];
422--13870[label="1;3pkt 3fpkt"];
422--14144[label="1;1pkt 1fpkt"];
422--14917[label="0.2;2pkt 2fpkt"];
422--15034[label="0.5;4pkt 4fpkt"];
422--15641[label="1;1pkt 1fpkt"];
422--15682[label="1;2pkt 2fpkt"];
422--15825[label="1;3pkt 3fpkt"];
422--15907[label="1;1pkt 1fpkt"];
422--16029[label="1;5pkt 5fpkt"];
422--16680[label="1;1pkt 1fpkt"];
913--8514[label="0.129754;116pkt 116fpkt"];
913--8603[label="0.129754;116pkt 116fpkt"];
913--8680[label="0.129754;116pkt 116fpkt"];
913--10789[label="1;894pkt 894fpkt"];
1323--13593[label="1;1pkt 1fpkt"];
1323--15907[label="1;1pkt 1fpkt"];
1347--8514[label="0.0851064;20pkt 20fpkt"];
1347--8603[label="0.0851064;20pkt 20fpkt"];
1347--8680[label="0.0851064;20pkt 20fpkt"];
1439--1888[label="0.0714286;1pkt 1fpkt"];
1439--7133[label="0.214286;3pkt 3fpkt"];
1439--7254[label="0.0714286;1pkt 1fpkt"];
1482--6710[label="1;5pkt 5fpkt"];
1482--8945[label="1;5pkt 5fpkt"];
1766--6972[label="1;7pkt 7fpkt"];
1773--12580[label="1;3pkt 3fpkt"];
2241--7080[label="1;5pkt 5fpkt"];
2241--9505[label="1;5pkt 5fpkt"];
2381--16029[label="1;5pkt 5fpkt"];
3132--8514[label="0.333333;2pkt 2fpkt"];
3132--8603[label="0.333333;2pkt 2fpkt"];
3132--8680[label="0.333333;2pkt 2fpkt"];
3132--9112[label="1;6pkt 6fpkt"];
3132--13860[label="1;6pkt 6fpkt"];
3612--7382[label="1;8pkt 8fpkt"];
3663--12475[label="1;1pkt 1fpkt"];
3663--16680[label="1;1pkt 1fpkt"];
4361--9319[label="1;2pkt 2fpkt"];
6710--8945[label="1;5pkt 5fpkt"];
7080--9505[label="1;5pkt 5fpkt"];
9112--13860[label="1;13pkt 13fpkt"];
9132--13870[label="1;3pkt 3fpkt"];
9782--14144[label="1;1pkt 1fpkt"];
11675--15034[label="1;8pkt 8fpkt"];
12475--16680[label="1;1pkt 1fpkt"];
13085--15682[label="1;2pkt 2fpkt"];
13416--15825[label="1;3pkt 3fpkt"];
13593--15907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.132" dst_port="80" src_ip="93.135.40.96"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
9272[label="205.100.243.23;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.243.23:53, *:*}[44.8718%]&lt;BR/&gt;{205.100.243.23:80, *:*}[24.359%]&lt;BR/&gt;{205.100.243.23:32830, *:53}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.9744%)&lt;BR/&gt; 80: (12.1795%)&lt;BR/&gt; 32830: (11.5385%)&lt;BR/&gt; 25: (3.84615%)&lt;BR/&gt; 64054: (0.641026%)&gt;];
}
</description>
    <slice>
      <filter src_ip="205.100.243.23" src_port="53"/>
      <filter src_ip="205.100.243.23" src_port="80"/>
      <filter dst_port="53" src_ip="205.100.243.23" src_port="32830"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1670[label="169.185.74.84;s;120pkt 120fpkt", shape=diamond, color=yellow];
2142[label="42.30.220.52;d;113pkt 113fpkt", shape=diamond, color=yellow];
6758[label="169.185.74.84;s;77pkt 77fpkt", shape=hexagon, color=black];
10564[label="169.185.74.84;128pkt 128fpkt", shape=pentagon, color=darkviolet];
14517[label="169.185.74.84;128pkt 128fpkt", shape=invtriangle, color=brown];
16311[label="169.185.74.84;128pkt 128fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.74.84:21, 42.30.220.52:*}[51.145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (26.513%)&lt;BR/&gt; 12200: (1.8732%)&lt;BR/&gt; 1080: (1.29683%)&lt;BR/&gt; 80: (1.22478%)&lt;BR/&gt; 8080: (0.576369%)&gt;];
}
1670--2142[label="0.973451;110pkt 110fpkt"];
1670--6758[label="1;77pkt 77fpkt"];
1670--10564[label="1;120pkt 120fpkt"];
1670--14517[label="1;120pkt 120fpkt"];
1670--16311[label="1;120pkt 120fpkt"];
2142--6758[label="0.948052;73pkt 73fpkt"];
2142--10564[label="0.973451;110pkt 110fpkt"];
2142--14517[label="0.973451;110pkt 110fpkt"];
2142--16311[label="0.973451;110pkt 110fpkt"];
6758--10564[label="1;77pkt 77fpkt"];
6758--14517[label="1;77pkt 77fpkt"];
6758--16311[label="1;77pkt 77fpkt"];
10564--14517[label="1;128pkt 128fpkt"];
10564--16311[label="1;128pkt 128fpkt"];
14517--16311[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.220.52" src_ip="169.185.74.84" src_port="21"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
765[label="204.91.186.73;s;5049pkt 5049fpkt", shape=diamond, color=yellow];
6761[label="204.91.186.73;s;2001pkt 2001fpkt", shape=hexagon, color=black];
10341[label="204.91.186.73;5421pkt 5421fpkt", shape=pentagon, color=darkviolet];
14410[label="204.91.186.73;5421pkt 5421fpkt", shape=invtriangle, color=brown];
16267[label="204.91.186.73;5421pkt 5421fpkt", shape=invhouse, color=bisque];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.186.73:20481, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20481: (50.0064%)&lt;BR/&gt; 16001: (0.645563%)&lt;BR/&gt; 6881: (0.5083%)&lt;BR/&gt; 4041: (0.126539%)&lt;BR/&gt; 1501: (0.0943679%)&gt;];
}
765--5681[label="0.0222222;1pkt 1fpkt"];
765--6761[label="1;2001pkt 2001fpkt"];
765--8498[label="0.00596252;7pkt 7fpkt"];
765--8588[label="0.00596252;7pkt 7fpkt"];
765--10341[label="1;5049pkt 5049fpkt"];
765--14410[label="1;5049pkt 5049fpkt"];
765--16267[label="1;5049pkt 5049fpkt"];
6761--8498[label="0.00255537;3pkt 3fpkt"];
6761--8588[label="0.00255537;3pkt 3fpkt"];
6761--10341[label="1;2001pkt 2001fpkt"];
6761--14410[label="1;2001pkt 2001fpkt"];
6761--16267[label="1;2001pkt 2001fpkt"];
10341--14410[label="1;5421pkt 5421fpkt"];
10341--16267[label="1;5421pkt 5421fpkt"];
14410--16267[label="1;5421pkt 5421fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.186.73" src_port="20481"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
544[label="204.91.174.108;d;1488pkt 1488fpkt", shape=diamond, color=yellow];
819[label="93.11.99.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
995[label="46.101.81.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1979[label="63.154.143.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
2213[label="3.135.25.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2820[label="93.128.8.45;s;2pkt 2fpkt", shape=diamond, color=yellow];
3231[label="27.20.23.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
3946[label="20.30.174.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
5614[label="93.134.131.67;s;113pkt 113fpkt", shape=diamond, color=yellow];
6217[label="216.176.113.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
6377[label="91.26.106.18;s;5pkt 5fpkt", shape=diamond, color=yellow];
6767[label="93.11.99.111;s;1pkt 1fpkt", shape=hexagon, color=black];
6829[label="63.154.143.193;s;1pkt 1fpkt", shape=hexagon, color=black];
7076[label="3.135.25.53;s;1pkt 1fpkt", shape=hexagon, color=black];
9165[label="91.26.106.18;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9735[label="93.128.8.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10164[label="93.134.131.66;78pkt 78fpkt", shape=pentagon, color=darkviolet];
10426[label="23.92.197.77;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11105[label="93.11.99.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11613[label="27.20.23.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12442[label="61.138.43.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13372[label="46.101.81.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13884[label="91.26.106.18;5pkt 5fpkt", shape=invtriangle, color=brown];
14326[label="93.134.131.66;78pkt 78fpkt", shape=invtriangle, color=brown];
14766[label="93.11.99.111;1pkt 1fpkt", shape=invtriangle, color=brown];
16236[label="93.134.131.66;78pkt 78fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.174.108:15000}[70.5003%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (31.6578%)&lt;BR/&gt; 80: (18.7701%)&lt;BR/&gt; 0: (0.588235%)&lt;BR/&gt; 20460: (0.374332%)&lt;BR/&gt; 31024: (0.240642%)&gt;];
}
544--819[label="1;1pkt 1fpkt"];
544--995[label="1;1pkt 1fpkt"];
544--1979[label="1;1pkt 1fpkt"];
544--2213[label="1;1pkt 1fpkt"];
544--2820[label="0.5;1pkt 1fpkt"];
544--3231[label="1;1pkt 1fpkt"];
544--3946[label="1;1pkt 1fpkt"];
544--3973[label="0.321212;53pkt 53fpkt"];
544--5614[label="0.787611;89pkt 89fpkt"];
544--6217[label="1;1pkt 1fpkt"];
544--6377[label="0.8;4pkt 4fpkt"];
544--6767[label="1;1pkt 1fpkt"];
544--6829[label="1;1pkt 1fpkt"];
544--7076[label="1;1pkt 1fpkt"];
544--8009[label="0.368056;53pkt 53fpkt"];
544--8451[label="0.015457;23pkt 23fpkt"];
544--8458[label="0.0248656;37pkt 37fpkt"];
544--8484[label="0.0201613;30pkt 30fpkt"];
544--8514[label="0.00604839;9pkt 9fpkt"];
544--8541[label="0.015457;23pkt 23fpkt"];
544--8548[label="0.0248656;37pkt 37fpkt"];
544--8574[label="0.0201613;30pkt 30fpkt"];
544--8603[label="0.00604839;9pkt 9fpkt"];
544--8626[label="0.015457;23pkt 23fpkt"];
544--8633[label="0.0248656;37pkt 37fpkt"];
544--8656[label="0.0201613;30pkt 30fpkt"];
544--8680[label="0.00604839;9pkt 9fpkt"];
544--9165[label="0.75;3pkt 3fpkt"];
544--9735[label="0.5;1pkt 1fpkt"];
544--10164[label="0.692308;54pkt 54fpkt"];
544--10426[label="0.5;1pkt 1fpkt"];
544--11105[label="1;1pkt 1fpkt"];
544--11613[label="1;1pkt 1fpkt"];
544--12031[label="0.5;1pkt 1fpkt"];
544--12442[label="1;1pkt 1fpkt"];
544--13372[label="1;1pkt 1fpkt"];
544--13884[label="0.8;4pkt 4fpkt"];
544--14326[label="0.692308;54pkt 54fpkt"];
544--14766[label="1;1pkt 1fpkt"];
544--16236[label="0.692308;54pkt 54fpkt"];
819--6767[label="1;1pkt 1fpkt"];
819--11105[label="1;1pkt 1fpkt"];
819--14766[label="1;1pkt 1fpkt"];
995--13372[label="1;1pkt 1fpkt"];
1979--6829[label="1;1pkt 1fpkt"];
2213--7076[label="1;1pkt 1fpkt"];
2820--9735[label="1;2pkt 2fpkt"];
3231--11613[label="1;1pkt 1fpkt"];
5614--8451[label="0.0884956;10pkt 10fpkt"];
5614--8458[label="0.106195;12pkt 12fpkt"];
5614--8484[label="0.0973451;11pkt 11fpkt"];
5614--8541[label="0.0884956;10pkt 10fpkt"];
5614--8548[label="0.106195;12pkt 12fpkt"];
5614--8574[label="0.0973451;11pkt 11fpkt"];
5614--8626[label="0.0884956;10pkt 10fpkt"];
5614--8633[label="0.106195;12pkt 12fpkt"];
5614--8656[label="0.0973451;11pkt 11fpkt"];
6377--9165[label="1;4pkt 4fpkt"];
6377--13884[label="1;5pkt 5fpkt"];
6767--11105[label="1;1pkt 1fpkt"];
6767--14766[label="1;1pkt 1fpkt"];
9165--13884[label="1;4pkt 4fpkt"];
10164--14326[label="1;78pkt 78fpkt"];
10164--16236[label="1;78pkt 78fpkt"];
11105--14766[label="1;1pkt 1fpkt"];
14326--16236[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.174.108" dst_port="15000"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947303,2.18132,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1246942801" usec="0"/>
      <to sec="1246942999" usec="0"/>
    </slice>
    <from sec="40072352" usec="0"/>
    <to sec="41491480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1923[label="136.90.176.195;s;528pkt 528fpkt", shape=diamond, color=yellow];
6824[label="136.90.176.195;s;279pkt 279fpkt", shape=hexagon, color=black];
12668[label="136.90.176.195;529pkt 529fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.176.195:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1923--6824[label="1;279pkt 279fpkt"];
1923--12668[label="1;528pkt 528fpkt"];
6824--12668[label="1;279pkt 279fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.176.195"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
936[label="169.185.202.103;d;22pkt 22fpkt", shape=diamond, color=yellow];
1391[label="16.37.91.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
2068[label="214.22.39.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
2123[label="22.88.229.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
2257[label="21.143.100.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
6841[label="214.22.39.0;s;1pkt 1fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.185.202.103:9038}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9038: (44.4444%)&lt;BR/&gt; 17788: (7.40741%)&lt;BR/&gt; 14098: (5.55556%)&lt;BR/&gt; 16720: (3.7037%)&lt;BR/&gt; 8400: (3.7037%)&gt;];
}
936--1391[label="1;1pkt 1fpkt"];
936--2068[label="1;1pkt 1fpkt"];
936--2123[label="1;1pkt 1fpkt"];
936--2257[label="1;1pkt 1fpkt"];
936--6841[label="1;1pkt 1fpkt"];
2068--6841[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.202.103" dst_port="9038"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
579[label="169.185.200.31;d;41pkt 41fpkt", shape=diamond, color=yellow];
582[label="93.89.149.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
2082[label="212.3.185.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
3345[label="92.154.9.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
6622[label="93.89.149.27;s;1pkt 1fpkt", shape=hexagon, color=black];
6848[label="212.3.185.33;s;1pkt 1fpkt", shape=hexagon, color=black];
9474[label="212.3.185.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 169.185.200.31:9742}[48.7805%]&lt;BR/&gt;{91.74.161.76:80, 169.185.200.31:*}[21.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9742: (30.8511%)&lt;BR/&gt; 17788: (21.2766%)&lt;BR/&gt; 80: (15.9574%)&lt;BR/&gt; 8655: (4.25532%)&lt;BR/&gt; 1050: (3.19149%)&gt;];
}
579--582[label="1;1pkt 1fpkt"];
579--2082[label="1;1pkt 1fpkt"];
579--3345[label="1;1pkt 1fpkt"];
579--6622[label="1;1pkt 1fpkt"];
579--6848[label="1;1pkt 1fpkt"];
579--8451[label="0.0243902;1pkt 1fpkt"];
579--8458[label="0.0243902;1pkt 1fpkt"];
579--8541[label="0.0243902;1pkt 1fpkt"];
579--8548[label="0.0243902;1pkt 1fpkt"];
579--8626[label="0.0243902;1pkt 1fpkt"];
579--8633[label="0.0243902;1pkt 1fpkt"];
579--9474[label="1;1pkt 1fpkt"];
582--6622[label="1;1pkt 1fpkt"];
2082--6848[label="1;1pkt 1fpkt"];
2082--9474[label="1;1pkt 1fpkt"];
6848--9474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.200.31" src_ip="91.74.161.76" src_port="80"/>
      <filter dst_ip="169.185.200.31" dst_port="9742" src_port="17788"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2480[label="136.90.133.55;d;65pkt 65fpkt", shape=diamond, color=yellow];
3073[label="17.238.137.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.140.11.229:19101, 136.90.133.55:*}[50.7692%]&lt;BR/&gt;{21.59.47.187:19101, 136.90.133.55:*}[21.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (42.4242%)&lt;BR/&gt; 80: (6.06061%)&lt;BR/&gt; 18495: (1.51515%)&lt;BR/&gt; 1625: (1.51515%)&lt;BR/&gt; 50220: (0.757576%)&gt;];
}
2480--2767[label="0.0615385;4pkt 4fpkt"];
2480--3073[label="1;1pkt 1fpkt"];
2480--8451[label="0.0153846;1pkt 1fpkt"];
2480--8458[label="0.0307692;2pkt 2fpkt"];
2480--8541[label="0.0153846;1pkt 1fpkt"];
2480--8548[label="0.0307692;2pkt 2fpkt"];
2480--8626[label="0.0153846;1pkt 1fpkt"];
2480--8633[label="0.0307692;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.133.55" src_ip="213.140.11.229" src_port="19101"/>
      <filter dst_ip="136.90.133.55" src_ip="21.59.47.187" src_port="19101"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1735[label="141.161.194.158;s;527pkt 527fpkt", shape=diamond, color=yellow];
6963[label="141.161.194.158;s;453pkt 453fpkt", shape=hexagon, color=black];
11986[label="141.161.194.158;549pkt 549fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.194.158:53697, *:*}[97.9964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53697: (48.9209%)&lt;BR/&gt; 443: (0.88293%)&lt;BR/&gt; 50849: (0.196207%)&lt;BR/&gt; 50093: (0.196207%)&lt;BR/&gt; 35422: (0.196207%)&gt;];
}
1735--6963[label="1;453pkt 453fpkt"];
1735--11986[label="1;527pkt 527fpkt"];
6963--11986[label="1;453pkt 453fpkt"];
</description>
    <slice>
      <filter src_ip="141.161.194.158" src_port="53697"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
401[label="205.100.240.56;d;285pkt 285fpkt", shape=diamond, color=yellow];
1568[label="57.99.83.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
1810[label="220.16.246.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
2539[label="220.16.239.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
4492[label="117.5.253.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
4508[label="117.40.9.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
5035[label="117.4.71.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
6802[label="220.16.246.214;s;1pkt 1fpkt", shape=hexagon, color=black];
6904[label="57.99.83.205;s;1pkt 1fpkt", shape=hexagon, color=black];
6981[label="220.16.239.62;s;1pkt 1fpkt", shape=hexagon, color=black];
10097[label="220.16.239.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11517[label="57.99.70.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13020[label="220.16.246.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14968[label="57.99.70.134;1pkt 1fpkt", shape=invtriangle, color=brown];
15654[label="220.16.246.214;1pkt 1fpkt", shape=invtriangle, color=brown];
16791[label="220.16.246.214;1pkt 1fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 205.100.240.56:51440}[88.7719%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51440: (42.1667%)&lt;BR/&gt; 53: (42.1667%)&lt;BR/&gt; 0: (15.6667%)&gt;];
}
401--701[label="0.0144928;1pkt 1fpkt"];
401--923[label="0.037037;1pkt 1fpkt"];
401--963[label="0.0833333;1pkt 1fpkt"];
401--1568[label="1;1pkt 1fpkt"];
401--1581[label="0.111111;1pkt 1fpkt"];
401--1618[label="0.333333;1pkt 1fpkt"];
401--1810[label="1;1pkt 1fpkt"];
401--2539[label="1;1pkt 1fpkt"];
401--2664[label="0.0769231;1pkt 1fpkt"];
401--4465[label="0.111111;1pkt 1fpkt"];
401--4470[label="0.00350877;1pkt 1fpkt"];
401--4492[label="1;1pkt 1fpkt"];
401--4508[label="1;1pkt 1fpkt"];
401--4997[label="0.166667;1pkt 1fpkt"];
401--5035[label="1;1pkt 1fpkt"];
401--5558[label="0.00350877;1pkt 1fpkt"];
401--5896[label="0.0555556;1pkt 1fpkt"];
401--6150[label="0.00350877;1pkt 1fpkt"];
401--6802[label="1;1pkt 1fpkt"];
401--6904[label="1;1pkt 1fpkt"];
401--6924[label="0.333333;1pkt 1fpkt"];
401--6981[label="1;1pkt 1fpkt"];
401--7693[label="0.0434783;1pkt 1fpkt"];
401--7949[label="0.016129;1pkt 1fpkt"];
401--8005[label="0.0769231;1pkt 1fpkt"];
401--8450[label="0.0912281;26pkt 26fpkt"];
401--8540[label="0.0912281;26pkt 26fpkt"];
401--8625[label="0.0912281;26pkt 26fpkt"];
401--9704[label="0.037037;1pkt 1fpkt"];
401--9783[label="0.00552486;1pkt 1fpkt"];
401--9887[label="0.00520833;1pkt 1fpkt"];
401--10001[label="0.047619;1pkt 1fpkt"];
401--10009[label="0.111111;1pkt 1fpkt"];
401--10066[label="0.00769231;1pkt 1fpkt"];
401--10097[label="1;1pkt 1fpkt"];
401--10142[label="0.00555556;1pkt 1fpkt"];
401--10154[label="0.0117647;1pkt 1fpkt"];
401--10322[label="0.00436681;1pkt 1fpkt"];
401--10413[label="0.00877193;1pkt 1fpkt"];
401--10620[label="0.00350877;1pkt 1fpkt"];
401--10792[label="0.142857;1pkt 1fpkt"];
401--10879[label="0.00549451;1pkt 1fpkt"];
401--11182[label="0.0136986;1pkt 1fpkt"];
401--11517[label="1;1pkt 1fpkt"];
401--11708[label="0.00350877;1pkt 1fpkt"];
401--11822[label="0.0833333;1pkt 1fpkt"];
401--12025[label="0.333333;1pkt 1fpkt"];
401--12267[label="0.00689655;1pkt 1fpkt"];
401--12277[label="0.00458716;1pkt 1fpkt"];
401--12494[label="0.00724638;1pkt 1fpkt"];
401--12646[label="0.004329;1pkt 1fpkt"];
401--12802[label="0.0070922;1pkt 1fpkt"];
401--13020[label="1;1pkt 1fpkt"];
401--13182[label="0.00357143;1pkt 1fpkt"];
401--13193[label="0.00526316;1pkt 1fpkt"];
401--13241[label="0.00641026;1pkt 1fpkt"];
401--13301[label="0.00362319;1pkt 1fpkt"];
401--13309[label="0.00350877;1pkt 1fpkt"];
401--13387[label="0.111111;1pkt 1fpkt"];
401--13438[label="0.00671141;1pkt 1fpkt"];
401--14113[label="0.037037;1pkt 1fpkt"];
401--14253[label="0.047619;1pkt 1fpkt"];
401--14313[label="0.00555556;1pkt 1fpkt"];
401--14397[label="0.00436681;1pkt 1fpkt"];
401--14549[label="0.00350877;1pkt 1fpkt"];
401--14624[label="0.142857;1pkt 1fpkt"];
401--14661[label="0.00549451;1pkt 1fpkt"];
401--14804[label="0.0136986;1pkt 1fpkt"];
401--14968[label="1;1pkt 1fpkt"];
401--15053[label="0.00350877;1pkt 1fpkt"];
401--15214[label="0.333333;1pkt 1fpkt"];
401--15496[label="0.004329;1pkt 1fpkt"];
401--15562[label="0.0070922;1pkt 1fpkt"];
401--15654[label="1;1pkt 1fpkt"];
401--15751[label="0.00641026;1pkt 1fpkt"];
401--15782[label="0.00362319;1pkt 1fpkt"];
401--15786[label="0.00350877;1pkt 1fpkt"];
401--16155[label="0.037037;1pkt 1fpkt"];
401--16325[label="0.00350877;1pkt 1fpkt"];
401--16370[label="0.00549451;1pkt 1fpkt"];
401--16430[label="0.0136986;1pkt 1fpkt"];
401--16719[label="0.004329;1pkt 1fpkt"];
401--16753[label="0.0070922;1pkt 1fpkt"];
401--16791[label="1;1pkt 1fpkt"];
1568--6904[label="1;1pkt 1fpkt"];
1810--6802[label="1;1pkt 1fpkt"];
1810--13020[label="1;1pkt 1fpkt"];
1810--15654[label="1;1pkt 1fpkt"];
1810--16791[label="1;1pkt 1fpkt"];
2539--6981[label="1;1pkt 1fpkt"];
2539--10097[label="1;1pkt 1fpkt"];
6802--13020[label="1;1pkt 1fpkt"];
6802--15654[label="1;1pkt 1fpkt"];
6802--16791[label="1;1pkt 1fpkt"];
6981--10097[label="1;1pkt 1fpkt"];
11517--14968[label="1;1pkt 1fpkt"];
13020--15654[label="1;1pkt 1fpkt"];
13020--16791[label="1;1pkt 1fpkt"];
15654--16791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.56" dst_port="51440" src_port="53"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2716[label="155.192.235.87;s;488pkt 488fpkt", shape=diamond, color=yellow];
7025[label="155.192.235.87;s;219pkt 219fpkt", shape=hexagon, color=black];
10630[label="155.192.235.87;507pkt 507fpkt", shape=pentagon, color=darkviolet];
14554[label="155.192.235.87;507pkt 507fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.235.87:62170, *:*}[97.8304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (48.896%)&lt;BR/&gt; 443: (0.726322%)&lt;BR/&gt; 80: (0.377687%)&lt;BR/&gt; 1098: (0.232423%)&lt;BR/&gt; 12711: (0.20337%)&gt;];
}
2716--7025[label="1;219pkt 219fpkt"];
2716--10630[label="1;488pkt 488fpkt"];
2716--14554[label="1;488pkt 488fpkt"];
7025--10630[label="1;219pkt 219fpkt"];
7025--14554[label="1;219pkt 219fpkt"];
10630--14554[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter src_ip="155.192.235.87" src_port="62170"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
2044[label="205.100.225.212;s;510pkt 510fpkt", shape=diamond, color=yellow];
7032[label="205.100.225.212;s;232pkt 232fpkt", shape=hexagon, color=black];
12983[label="205.100.225.212;597pkt 597fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.225.212:0, *:0}[95.4774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.1001%)&lt;BR/&gt; 53: (1.53099%)&lt;BR/&gt; 25: (1.41897%)&lt;BR/&gt; 65534: (0.336072%)&lt;BR/&gt; 56920: (0.112024%)&gt;];
}
2044--7032[label="1;232pkt 232fpkt"];
2044--8450[label="0.00784314;4pkt 4fpkt"];
2044--8540[label="0.00784314;4pkt 4fpkt"];
2044--8625[label="0.00784314;4pkt 4fpkt"];
2044--12983[label="1;510pkt 510fpkt"];
7032--8450[label="0.0172414;4pkt 4fpkt"];
7032--8540[label="0.0172414;4pkt 4fpkt"];
7032--8625[label="0.0172414;4pkt 4fpkt"];
7032--12983[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter src_ip="205.100.225.212"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
2075[label="205.100.245.214;s;176pkt 176fpkt", shape=diamond, color=yellow];
7039[label="205.100.245.214;s;111pkt 111fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.245.214:0, *:0}[46.0227%]&lt;BR/&gt;{205.100.245.214:137, *:137}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (46.6899%)&lt;BR/&gt; 137: (30.3136%)&lt;BR/&gt; 2001: (0.522648%)&lt;BR/&gt; 50009: (0.348432%)&lt;BR/&gt; 49960: (0.348432%)&gt;];
}
2075--7039[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="205.100.245.214"/>
      <filter dst_port="137" src_ip="205.100.245.214" src_port="137"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
1370[label="35.88.147.236;d;491pkt 491fpkt", shape=diamond, color=yellow];
2712[label="169.185.250.226;s;677pkt 677fpkt", shape=diamond, color=yellow];
4260[label="43.140.19.12;d;17pkt 17fpkt", shape=diamond, color=yellow];
8310[label="169.185.250.226;s;677pkt 677fpkt", shape=hexagon, color=black];
13216[label="169.185.250.226;683pkt 683fpkt", shape=pentagon, color=darkviolet];
15739[label="169.185.250.226;683pkt 683fpkt", shape=invtriangle, color=brown];
16822[label="169.185.250.226;683pkt 683fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.250.226:*, 35.88.147.236:80}[71.8887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7699%)&lt;BR/&gt; 59125: (0.0767067%)&lt;BR/&gt; 59119: (0.0767067%)&lt;BR/&gt; 59118: (0.0767067%)&lt;BR/&gt; 59085: (0.0767067%)&gt;];
}
1370--2712[label="1;491pkt 491fpkt"];
1370--8310[label="1;491pkt 491fpkt"];
1370--13216[label="1;491pkt 491fpkt"];
1370--15739[label="1;491pkt 491fpkt"];
1370--16822[label="1;491pkt 491fpkt"];
2712--4136[label="0.00389105;1pkt 1fpkt"];
2712--4239[label="0.00543478;1pkt 1fpkt"];
2712--4260[label="1;17pkt 17fpkt"];
2712--4761[label="0.137615;15pkt 15fpkt"];
2712--7046[label="0.130435;6pkt 6fpkt"];
2712--7825[label="0.0263158;1pkt 1fpkt"];
2712--8310[label="1;677pkt 677fpkt"];
2712--8514[label="0.0014771;1pkt 1fpkt"];
2712--8603[label="0.0014771;1pkt 1fpkt"];
2712--8680[label="0.0014771;1pkt 1fpkt"];
2712--13216[label="1;677pkt 677fpkt"];
2712--15739[label="1;677pkt 677fpkt"];
2712--16822[label="1;677pkt 677fpkt"];
4260--8310[label="1;17pkt 17fpkt"];
4260--13216[label="1;17pkt 17fpkt"];
4260--15739[label="1;17pkt 17fpkt"];
4260--16822[label="1;17pkt 17fpkt"];
8310--8514[label="0.0014771;1pkt 1fpkt"];
8310--8603[label="0.0014771;1pkt 1fpkt"];
8310--8680[label="0.0014771;1pkt 1fpkt"];
8310--13216[label="1;677pkt 677fpkt"];
8310--15739[label="1;677pkt 677fpkt"];
8310--16822[label="1;677pkt 677fpkt"];
13216--15739[label="1;683pkt 683fpkt"];
13216--16822[label="1;683pkt 683fpkt"];
15739--16822[label="1;683pkt 683fpkt"];
</description>
    <slice>
      <filter dst_ip="35.88.147.236" dst_port="80" src_ip="169.185.250.226"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1303[label="89.36.176.9;d;7pkt 7fpkt", shape=diamond, color=yellow];
1840[label="204.91.1.0;s;35pkt 35fpkt", shape=diamond, color=yellow];
2792[label="42.30.222.218;d;26pkt 26fpkt", shape=diamond, color=yellow];
7047[label="42.30.222.218;d;19pkt 19fpkt", shape=hexagon, color=black];
8684[label="204.91.1.0;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12631[label="137.58.48.193;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.1.0:80, 42.30.222.218:*}[34.6939%]&lt;BR/&gt;{204.91.1.0:*, *:80}[24.4898%]&lt;BR/&gt;{137.58.48.193:80, 42.30.222.218:*}[22.449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7778%)&lt;BR/&gt; 59615: (1.48148%)&lt;BR/&gt; 56514: (1.48148%)&lt;BR/&gt; 53362: (1.48148%)&lt;BR/&gt; 51836: (1.48148%)&gt;];
}
1303--1840[label="1;7pkt 7fpkt"];
1303--8684[label="1;7pkt 7fpkt"];
1840--2472[label="0.0285714;1pkt 1fpkt"];
1840--2733[label="0.0285714;1pkt 1fpkt"];
1840--2792[label="0.615385;16pkt 16fpkt"];
1840--3894[label="0.0285714;1pkt 1fpkt"];
1840--5284[label="0.0571429;2pkt 2fpkt"];
1840--7047[label="0.631579;12pkt 12fpkt"];
1840--8338[label="0.0571429;2pkt 2fpkt"];
1840--8451[label="0.0571429;2pkt 2fpkt"];
1840--8458[label="0.0571429;2pkt 2fpkt"];
1840--8484[label="0.0571429;2pkt 2fpkt"];
1840--8514[label="0.0285714;1pkt 1fpkt"];
1840--8541[label="0.0571429;2pkt 2fpkt"];
1840--8548[label="0.0571429;2pkt 2fpkt"];
1840--8574[label="0.0571429;2pkt 2fpkt"];
1840--8603[label="0.0285714;1pkt 1fpkt"];
1840--8626[label="0.0571429;2pkt 2fpkt"];
1840--8633[label="0.0571429;2pkt 2fpkt"];
1840--8656[label="0.0571429;2pkt 2fpkt"];
1840--8680[label="0.0285714;1pkt 1fpkt"];
1840--8684[label="0.971429;34pkt 34fpkt"];
2792--7047[label="1;19pkt 19fpkt"];
2792--8451[label="0.0769231;2pkt 2fpkt"];
2792--8458[label="0.0384615;1pkt 1fpkt"];
2792--8484[label="0.0384615;1pkt 1fpkt"];
2792--8541[label="0.0769231;2pkt 2fpkt"];
2792--8548[label="0.0384615;1pkt 1fpkt"];
2792--8574[label="0.0384615;1pkt 1fpkt"];
2792--8626[label="0.0769231;2pkt 2fpkt"];
2792--8633[label="0.0384615;1pkt 1fpkt"];
2792--8656[label="0.0384615;1pkt 1fpkt"];
2792--8684[label="0.615385;16pkt 16fpkt"];
2792--12631[label="0.833333;10pkt 10fpkt"];
7047--8451[label="0.105263;2pkt 2fpkt"];
7047--8458[label="0.0526316;1pkt 1fpkt"];
7047--8484[label="0.0526316;1pkt 1fpkt"];
7047--8541[label="0.105263;2pkt 2fpkt"];
7047--8548[label="0.0526316;1pkt 1fpkt"];
7047--8574[label="0.0526316;1pkt 1fpkt"];
7047--8626[label="0.105263;2pkt 2fpkt"];
7047--8633[label="0.0526316;1pkt 1fpkt"];
7047--8656[label="0.0526316;1pkt 1fpkt"];
7047--8684[label="0.631579;12pkt 12fpkt"];
7047--12631[label="0.583333;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="204.91.1.0"/>
      <filter dst_ip="42.30.222.218" src_ip="204.91.1.0" src_port="80"/>
      <filter dst_ip="42.30.222.218" src_ip="137.58.48.193" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
2890[label="169.185.0.158;s;25pkt 25fpkt", shape=diamond, color=yellow];
3046[label="219.45.57.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
4453[label="219.45.57.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
6116[label="219.45.57.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
7075[label="169.185.0.158;s;13pkt 13fpkt", shape=hexagon, color=black];
7114[label="219.45.57.1;d;1pkt 1fpkt", shape=hexagon, color=black];
11975[label="169.185.0.158;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.0.158:*, 219.45.58.97:80}[57.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7941%)&lt;BR/&gt; 55322: (3.67647%)&lt;BR/&gt; 55375: (2.20588%)&lt;BR/&gt; 55366: (2.20588%)&lt;BR/&gt; 55341: (2.20588%)&gt;];
}
2890--3046[label="1;1pkt 1fpkt"];
2890--4453[label="1;1pkt 1fpkt"];
2890--6116[label="1;1pkt 1fpkt"];
2890--7075[label="1;13pkt 13fpkt"];
2890--7114[label="1;1pkt 1fpkt"];
2890--8514[label="0.24;6pkt 6fpkt"];
2890--8603[label="0.24;6pkt 6fpkt"];
2890--8680[label="0.24;6pkt 6fpkt"];
2890--11975[label="1;25pkt 25fpkt"];
3046--7075[label="1;1pkt 1fpkt"];
3046--7114[label="1;1pkt 1fpkt"];
3046--11975[label="1;1pkt 1fpkt"];
4453--11975[label="1;1pkt 1fpkt"];
6116--11975[label="1;1pkt 1fpkt"];
7075--7114[label="1;1pkt 1fpkt"];
7075--11975[label="1;13pkt 13fpkt"];
7114--11975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.45.58.97" dst_port="80" src_ip="169.185.0.158"/>
    </slice>
    <from sec="1246942831" usec="0"/>
    <to sec="1246943669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
503[label="141.179.133.70;s;170pkt 170fpkt", shape=diamond, color=yellow];
583[label="29.46.141.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1726[label="29.42.93.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
3092[label="22.154.189.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
4460[label="208.216.87.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
6738[label="141.179.133.70;s;161pkt 161fpkt", shape=hexagon, color=black];
7121[label="22.154.189.177;d;1pkt 1fpkt", shape=hexagon, color=black];
7466[label="29.42.93.5;d;1pkt 1fpkt", shape=hexagon, color=black];
8283[label="208.216.87.127;d;1pkt 1fpkt", shape=hexagon, color=black];
10259[label="141.179.133.70;186pkt 186fpkt", shape=pentagon, color=darkviolet];
14374[label="141.179.133.70;186pkt 186fpkt", shape=invtriangle, color=brown];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.133.70:25159, *:*}[88.172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25159: (43.9437%)&lt;BR/&gt; 4672: (3.66197%)&lt;BR/&gt; 7125: (0.56338%)&lt;BR/&gt; 6263: (0.56338%)&lt;BR/&gt; 6253: (0.56338%)&gt;];
}
503--583[label="1;1pkt 1fpkt"];
503--1726[label="1;1pkt 1fpkt"];
503--3092[label="1;1pkt 1fpkt"];
503--4460[label="1;1pkt 1fpkt"];
503--6738[label="1;161pkt 161fpkt"];
503--7121[label="1;1pkt 1fpkt"];
503--7466[label="1;1pkt 1fpkt"];
503--8283[label="1;1pkt 1fpkt"];
503--10259[label="1;170pkt 170fpkt"];
503--14374[label="1;170pkt 170fpkt"];
583--6738[label="1;1pkt 1fpkt"];
583--10259[label="1;1pkt 1fpkt"];
583--14374[label="1;1pkt 1fpkt"];
1726--6738[label="1;1pkt 1fpkt"];
1726--7466[label="1;1pkt 1fpkt"];
1726--10259[label="1;1pkt 1fpkt"];
1726--14374[label="1;1pkt 1fpkt"];
3092--6738[label="1;1pkt 1fpkt"];
3092--7121[label="1;1pkt 1fpkt"];
3092--10259[label="1;1pkt 1fpkt"];
3092--14374[label="1;1pkt 1fpkt"];
4460--6738[label="1;1pkt 1fpkt"];
4460--8283[label="1;1pkt 1fpkt"];
4460--10259[label="1;1pkt 1fpkt"];
4460--14374[label="1;1pkt 1fpkt"];
6738--7121[label="1;1pkt 1fpkt"];
6738--7466[label="1;1pkt 1fpkt"];
6738--8283[label="1;1pkt 1fpkt"];
6738--10259[label="1;161pkt 161fpkt"];
6738--14374[label="1;161pkt 161fpkt"];
7121--10259[label="1;1pkt 1fpkt"];
7121--14374[label="1;1pkt 1fpkt"];
7466--10259[label="1;1pkt 1fpkt"];
7466--14374[label="1;1pkt 1fpkt"];
8283--10259[label="1;1pkt 1fpkt"];
8283--14374[label="1;1pkt 1fpkt"];
10259--14374[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.133.70" src_port="25159"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
3122[label="203.240.41.162;s;6pkt 6fpkt", shape=diamond, color=yellow];
3682[label="169.185.220.98;d;20pkt 20fpkt", shape=diamond, color=yellow];
7123[label="203.240.41.162;s;6pkt 6fpkt", shape=hexagon, color=black];
7623[label="169.185.220.98;d;15pkt 15fpkt", shape=hexagon, color=black];
12318[label="17.121.10.175;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.151.63.10:80, 169.185.220.98:*}[30%]&lt;BR/&gt;{203.240.41.162:80, 169.185.220.98:*}[30%]&lt;BR/&gt;{17.121.10.175:80, 169.185.220.98:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47282: (3.77358%)&lt;BR/&gt; 47281: (3.77358%)&lt;BR/&gt; 47280: (3.77358%)&lt;BR/&gt; 47279: (3.77358%)&gt;];
}
3122--3682[label="1;6pkt 6fpkt"];
3122--7123[label="1;6pkt 6fpkt"];
3122--7623[label="1;6pkt 6fpkt"];
3682--7123[label="1;6pkt 6fpkt"];
3682--7623[label="1;15pkt 15fpkt"];
3682--12318[label="1;6pkt 6fpkt"];
7123--7623[label="1;6pkt 6fpkt"];
7623--12318[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.220.98" src_ip="17.121.10.175" src_port="80"/>
      <filter dst_ip="169.185.220.98" src_ip="203.240.41.162" src_port="80"/>
      <filter dst_ip="169.185.220.98" src_ip="205.151.63.10" src_port="80"/>
    </slice>
    <from sec="1246943057" usec="0"/>
    <to sec="1246943294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
418[label="22.49.243.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
421[label="204.91.160.183;s;143pkt 143fpkt", shape=diamond, color=yellow];
1246[label="91.52.73.22;d;3pkt 3fpkt", shape=diamond, color=yellow];
7138[label="204.91.160.183;s;100pkt 100fpkt", shape=hexagon, color=black];
12482[label="204.91.160.183;159pkt 159fpkt", shape=pentagon, color=darkviolet];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.160.183:14910, *:*}[50.9434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14910: (27.0936%)&lt;BR/&gt; 6346: (9.48276%)&lt;BR/&gt; 32684: (2.21675%)&lt;BR/&gt; 18327: (1.84729%)&lt;BR/&gt; 17509: (1.84729%)&gt;];
}
418--421[label="1;1pkt 1fpkt"];
418--7138[label="1;1pkt 1fpkt"];
418--12482[label="1;1pkt 1fpkt"];
421--1246[label="1;3pkt 3fpkt"];
421--7138[label="1;100pkt 100fpkt"];
421--12482[label="1;143pkt 143fpkt"];
1246--7138[label="0.666667;2pkt 2fpkt"];
1246--12482[label="1;3pkt 3fpkt"];
7138--12482[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.160.183" src_port="14910"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
480[label="204.91.175.10;s;2598pkt 2598fpkt", shape=diamond, color=yellow];
1666[label="29.40.54.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
1785[label="29.40.136.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
1921[label="29.44.136.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1951[label="26.122.200.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
1986[label="29.47.144.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
2421[label="29.46.121.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
2485[label="21.138.64.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
3226[label="90.52.92.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
3832[label="26.116.131.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
3887[label="29.46.113.181;d;2pkt 2fpkt", shape=diamond, color=yellow];
3959[label="32.71.134.59;d;2pkt 2fpkt", shape=diamond, color=yellow];
5907[label="29.42.132.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
6823[label="29.44.136.189;d;1pkt 1fpkt", shape=hexagon, color=black];
7142[label="204.91.175.10;s;939pkt 939fpkt", shape=hexagon, color=black];
7215[label="90.52.92.152;d;1pkt 1fpkt", shape=hexagon, color=black];
7274[label="29.47.144.227;d;1pkt 1fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.175.10:26202, *:*}[93.0716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26202: (45.8368%)&lt;BR/&gt; 16001: (0.393812%)&lt;BR/&gt; 6881: (0.337553%)&lt;BR/&gt; 8126: (0.253165%)&lt;BR/&gt; 16885: (0.2391%)&gt;];
}
480--1666[label="1;1pkt 1fpkt"];
480--1785[label="1;1pkt 1fpkt"];
480--1921[label="1;1pkt 1fpkt"];
480--1951[label="1;2pkt 2fpkt"];
480--1986[label="1;1pkt 1fpkt"];
480--2421[label="1;1pkt 1fpkt"];
480--2485[label="1;1pkt 1fpkt"];
480--3226[label="1;1pkt 1fpkt"];
480--3832[label="1;1pkt 1fpkt"];
480--3887[label="1;2pkt 2fpkt"];
480--3959[label="1;2pkt 2fpkt"];
480--5907[label="1;1pkt 1fpkt"];
480--6823[label="1;1pkt 1fpkt"];
480--7142[label="1;939pkt 939fpkt"];
480--7215[label="1;1pkt 1fpkt"];
480--7274[label="1;1pkt 1fpkt"];
480--8498[label="0.00170358;2pkt 2fpkt"];
480--8514[label="0.000384911;1pkt 1fpkt"];
480--8588[label="0.00170358;2pkt 2fpkt"];
480--8603[label="0.000384911;1pkt 1fpkt"];
480--8680[label="0.000384911;1pkt 1fpkt"];
1666--7142[label="1;1pkt 1fpkt"];
1785--7142[label="1;1pkt 1fpkt"];
1921--6823[label="1;1pkt 1fpkt"];
1921--7142[label="1;1pkt 1fpkt"];
1951--7142[label="0.5;1pkt 1fpkt"];
1986--7142[label="1;1pkt 1fpkt"];
1986--7274[label="1;1pkt 1fpkt"];
2421--7142[label="1;1pkt 1fpkt"];
2485--7142[label="1;1pkt 1fpkt"];
3226--7142[label="1;1pkt 1fpkt"];
3226--7215[label="1;1pkt 1fpkt"];
3832--7142[label="1;1pkt 1fpkt"];
3887--7142[label="0.5;1pkt 1fpkt"];
3959--7142[label="0.5;1pkt 1fpkt"];
6823--7142[label="1;1pkt 1fpkt"];
7142--7215[label="1;1pkt 1fpkt"];
7142--7274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.175.10" src_port="26202"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1675[label="172.133.112.100;d;31pkt 31fpkt", shape=diamond, color=yellow];
1676[label="220.105.246.164;s;44pkt 44fpkt", shape=diamond, color=yellow];
6139[label="172.133.113.240;d;12pkt 12fpkt", shape=diamond, color=yellow];
6947[label="220.105.246.164;s;39pkt 39fpkt", shape=hexagon, color=black];
7177[label="172.133.112.100;d;30pkt 30fpkt", shape=hexagon, color=black];
12121[label="220.105.246.164;44pkt 44fpkt", shape=pentagon, color=darkviolet];
15251[label="220.105.246.164;44pkt 44fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.105.246.164:*, 172.133.112.100:143}[70.4545%]&lt;BR/&gt;{220.105.246.164:*, 172.133.113.240:143}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 61229: (1.22951%)&lt;BR/&gt; 60996: (1.22951%)&lt;BR/&gt; 53643: (1.22951%)&lt;BR/&gt; 52772: (1.22951%)&gt;];
}
1675--1676[label="1;31pkt 31fpkt"];
1675--6947[label="0.967742;30pkt 30fpkt"];
1675--7177[label="1;30pkt 30fpkt"];
1675--12121[label="1;31pkt 31fpkt"];
1675--15251[label="1;31pkt 31fpkt"];
1676--6139[label="1;12pkt 12fpkt"];
1676--6947[label="1;39pkt 39fpkt"];
1676--7177[label="1;30pkt 30fpkt"];
1676--12121[label="1;44pkt 44fpkt"];
1676--15251[label="1;44pkt 44fpkt"];
6139--6947[label="0.666667;8pkt 8fpkt"];
6139--12121[label="1;12pkt 12fpkt"];
6139--15251[label="1;12pkt 12fpkt"];
6947--7177[label="1;30pkt 30fpkt"];
6947--12121[label="1;39pkt 39fpkt"];
6947--15251[label="1;39pkt 39fpkt"];
7177--12121[label="1;30pkt 30fpkt"];
7177--15251[label="1;30pkt 30fpkt"];
12121--15251[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.112.100" dst_port="143" src_ip="220.105.246.164"/>
      <filter dst_ip="172.133.113.240" dst_port="143" src_ip="220.105.246.164"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1008[label="205.100.245.199;s;378pkt 378fpkt", shape=diamond, color=yellow];
1797[label="55.180.146.218;d;378pkt 378fpkt", shape=diamond, color=yellow];
7220[label="205.100.245.199;s;175pkt 175fpkt", shape=hexagon, color=black];
12744[label="205.100.245.199;411pkt 411fpkt", shape=pentagon, color=darkviolet];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.245.199:*, 55.180.146.218:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56983: (0.149031%)&lt;BR/&gt; 56982: (0.149031%)&lt;BR/&gt; 56981: (0.149031%)&lt;BR/&gt; 56980: (0.149031%)&gt;];
}
1008--1797[label="1;378pkt 378fpkt"];
1008--7220[label="1;175pkt 175fpkt"];
1008--8514[label="0.0608466;23pkt 23fpkt"];
1008--8603[label="0.0608466;23pkt 23fpkt"];
1008--8680[label="0.0608466;23pkt 23fpkt"];
1008--12744[label="1;378pkt 378fpkt"];
1797--7220[label="1;175pkt 175fpkt"];
1797--8514[label="0.0608466;23pkt 23fpkt"];
1797--8603[label="0.0608466;23pkt 23fpkt"];
1797--8680[label="0.0608466;23pkt 23fpkt"];
1797--12744[label="1;378pkt 378fpkt"];
7220--12744[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_ip="55.180.146.218" dst_port="80" src_ip="205.100.245.199"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
469[label="204.91.177.151;d;1529pkt 1529fpkt", shape=diamond, color=yellow];
508[label="25.7.138.48;s;7pkt 7fpkt", shape=diamond, color=yellow];
906[label="93.218.73.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1079[label="32.7.129.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1090[label="21.186.33.153;s;6pkt 6fpkt", shape=diamond, color=yellow];
1092[label="93.168.57.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
1296[label="91.31.172.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1360[label="214.20.57.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1578[label="208.2.240.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="91.133.89.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
1800[label="90.163.96.161;s;2pkt 2fpkt", shape=diamond, color=yellow];
1829[label="214.122.0.146;s;6pkt 6fpkt", shape=diamond, color=yellow];
1866[label="26.155.143.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
1872[label="24.90.19.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
1909[label="208.27.0.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
1934[label="204.203.94.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
1981[label="214.24.0.93;s;6pkt 6fpkt", shape=diamond, color=yellow];
2014[label="93.37.94.144;s;5pkt 5fpkt", shape=diamond, color=yellow];
2149[label="23.174.66.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
2469[label="30.19.158.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2542[label="21.162.69.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="29.106.108.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
2550[label="16.181.95.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2768[label="25.131.45.118;s;8pkt 8fpkt", shape=diamond, color=yellow];
2848[label="209.38.172.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
2869[label="206.14.147.233;s;7pkt 7fpkt", shape=diamond, color=yellow];
3038[label="30.76.243.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
3269[label="27.33.7.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
3510[label="92.93.6.62;s;4pkt 4fpkt", shape=diamond, color=yellow];
3641[label="92.153.218.253;s;4pkt 4fpkt", shape=diamond, color=yellow];
3704[label="23.85.166.96;s;5pkt 5fpkt", shape=diamond, color=yellow];
3902[label="213.71.89.85;s;6pkt 6fpkt", shape=diamond, color=yellow];
4102[label="93.42.163.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
4270[label="212.132.226.152;s;5pkt 5fpkt", shape=diamond, color=yellow];
4301[label="136.90.71.8;d;44pkt 44fpkt", shape=diamond, color=yellow];
4306[label="25.32.151.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
4325[label="91.145.137.50;s;9pkt 9fpkt", shape=diamond, color=yellow];
4459[label="21.98.76.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
5001[label="214.146.7.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
5244[label="22.58.0.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
5266[label="23.188.129.17;s;3pkt 3fpkt", shape=diamond, color=yellow];
5281[label="29.219.53.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
5495[label="27.235.150.193;s;93pkt 93fpkt", shape=diamond, color=yellow];
5620[label="21.39.49.22;s;5pkt 5fpkt", shape=diamond, color=yellow];
5776[label="25.147.138.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
5883[label="212.19.20.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
5972[label="21.42.103.94;s;3pkt 3fpkt", shape=diamond, color=yellow];
6272[label="214.125.180.22;s;5pkt 5fpkt", shape=diamond, color=yellow];
6312[label="23.53.219.8;s;5pkt 5fpkt", shape=diamond, color=yellow];
6378[label="212.19.160.254;s;3pkt 3fpkt", shape=diamond, color=yellow];
6385[label="216.218.22.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
6402[label="29.219.178.14;s;2pkt 2fpkt", shape=diamond, color=yellow];
6404[label="214.21.47.153;s;2pkt 2fpkt", shape=diamond, color=yellow];
6421[label="212.142.204.126;s;2pkt 2fpkt", shape=diamond, color=yellow];
6439[label="93.135.148.214;s;2pkt 2fpkt", shape=diamond, color=yellow];
6616[label="25.7.138.48;s;7pkt 7fpkt", shape=hexagon, color=black];
6668[label="21.186.33.153;s;2pkt 2fpkt", shape=hexagon, color=black];
6735[label="208.2.240.189;s;1pkt 1fpkt", shape=hexagon, color=black];
6800[label="90.163.96.161;s;2pkt 2fpkt", shape=hexagon, color=black];
6807[label="214.122.0.146;s;5pkt 5fpkt", shape=hexagon, color=black];
6831[label="93.37.94.144;s;2pkt 2fpkt", shape=hexagon, color=black];
7011[label="214.24.0.93;s;3pkt 3fpkt", shape=hexagon, color=black];
7168[label="91.133.89.9;s;1pkt 1fpkt", shape=hexagon, color=black];
7230[label="21.162.69.11;s;1pkt 1fpkt", shape=hexagon, color=black];
7349[label="206.14.147.233;s;4pkt 4fpkt", shape=hexagon, color=black];
7545[label="25.131.45.118;s;7pkt 7fpkt", shape=hexagon, color=black];
7560[label="214.20.57.110;s;1pkt 1fpkt", shape=hexagon, color=black];
7713[label="32.7.129.2;s;1pkt 1fpkt", shape=hexagon, color=black];
8238[label="212.132.226.152;s;5pkt 5fpkt", shape=hexagon, color=black];
8337[label="29.219.53.69;s;4pkt 4fpkt", shape=hexagon, color=black];
8763[label="32.7.129.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8918[label="23.53.219.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8986[label="21.162.69.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9004[label="212.31.208.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9241[label="21.39.49.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9249[label="214.125.180.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9397[label="216.218.22.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9439[label="93.13.96.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9584[label="208.25.67.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9586[label="23.138.89.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9663[label="26.155.143.42;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9795[label="25.7.138.48;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9840[label="91.145.137.50;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9901[label="16.181.95.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10229[label="29.219.53.69;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10537[label="21.42.103.83;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10763[label="21.42.103.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10777[label="21.42.103.95;26pkt 26fpkt", shape=pentagon, color=darkviolet];
10802[label="23.85.166.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10955[label="24.11.70.104;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10978[label="213.4.116.105;54pkt 54fpkt", shape=pentagon, color=darkviolet];
11264[label="26.98.173.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11356[label="212.142.204.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11458[label="214.125.169.131;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11466[label="214.146.7.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11576[label="22.117.83.137;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11725[label="93.37.94.144;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11763[label="214.122.0.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11891[label="212.132.226.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11899[label="21.186.33.153;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12037[label="90.163.96.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12108[label="93.168.57.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12129[label="23.131.44.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12144[label="23.61.241.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12279[label="26.170.49.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12574[label="208.2.240.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12640[label="27.235.150.193;93pkt 93fpkt", shape=pentagon, color=darkviolet];
12665[label="25.32.151.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13011[label="93.135.148.214;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13114[label="22.37.138.220;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13186[label="23.223.131.225;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13324[label="206.14.147.233;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13551[label="16.179.181.247;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13638[label="212.19.160.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13763[label="23.53.219.8;2pkt 2fpkt", shape=invtriangle, color=brown];
13919[label="21.39.49.22;5pkt 5fpkt", shape=invtriangle, color=brown];
13999[label="93.13.96.32;3pkt 3fpkt", shape=invtriangle, color=brown];
14357[label="29.219.53.69;5pkt 5fpkt", shape=invtriangle, color=brown];
14500[label="21.42.103.83;5pkt 5fpkt", shape=invtriangle, color=brown];
14611[label="21.42.103.94;3pkt 3fpkt", shape=invtriangle, color=brown];
14708[label="213.4.116.105;54pkt 54fpkt", shape=invtriangle, color=brown];
14890[label="212.142.204.126;1pkt 1fpkt", shape=invtriangle, color=brown];
14945[label="214.125.169.131;12pkt 12fpkt", shape=invtriangle, color=brown];
14993[label="22.117.83.137;5pkt 5fpkt", shape=invtriangle, color=brown];
15064[label="93.37.94.144;7pkt 7fpkt", shape=invtriangle, color=brown];
15089[label="214.122.0.146;6pkt 6fpkt", shape=invtriangle, color=brown];
15152[label="21.186.33.153;6pkt 6fpkt", shape=invtriangle, color=brown];
15255[label="23.131.44.165;1pkt 1fpkt", shape=invtriangle, color=brown];
15329[label="26.170.49.173;1pkt 1fpkt", shape=invtriangle, color=brown];
15460[label="208.2.240.189;1pkt 1fpkt", shape=invtriangle, color=brown];
15495[label="27.235.150.193;93pkt 93fpkt", shape=invtriangle, color=brown];
15506[label="25.32.151.195;1pkt 1fpkt", shape=invtriangle, color=brown];
15793[label="206.14.147.233;6pkt 6fpkt", shape=invtriangle, color=brown];
15993[label="23.53.219.8;1pkt 1fpkt", shape=invhouse, color=bisque];
16096[label="93.13.96.32;3pkt 3fpkt", shape=invhouse, color=bisque];
16389[label="213.4.116.105;54pkt 54fpkt", shape=invhouse, color=bisque];
16473[label="212.142.204.126;1pkt 1fpkt", shape=invhouse, color=bisque];
16533[label="93.37.94.144;7pkt 7fpkt", shape=invhouse, color=bisque];
16546[label="214.122.0.146;6pkt 6fpkt", shape=invhouse, color=bisque];
16613[label="23.131.44.165;1pkt 1fpkt", shape=invhouse, color=bisque];
16640[label="26.170.49.173;1pkt 1fpkt", shape=invhouse, color=bisque];
16701[label="208.2.240.189;1pkt 1fpkt", shape=invhouse, color=bisque];
16726[label="25.32.151.195;1pkt 1fpkt", shape=invhouse, color=bisque];
16840[label="206.14.147.233;6pkt 6fpkt", shape=invhouse, color=bisque];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.177.151:*}[96.8987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.3013%)&lt;BR/&gt; 17296: (9.82542%)&lt;BR/&gt; 1415: (0.730816%)&lt;BR/&gt; 17031: (0.669915%)&lt;BR/&gt; 2796: (0.588713%)&gt;];
}
469--508[label="1;7pkt 7fpkt"];
469--906[label="1;1pkt 1fpkt"];
469--1079[label="1;1pkt 1fpkt"];
469--1090[label="1;6pkt 6fpkt"];
469--1092[label="1;1pkt 1fpkt"];
469--1296[label="1;1pkt 1fpkt"];
469--1360[label="1;1pkt 1fpkt"];
469--1578[label="1;1pkt 1fpkt"];
469--1653[label="1;1pkt 1fpkt"];
469--1800[label="1;2pkt 2fpkt"];
469--1829[label="1;6pkt 6fpkt"];
469--1866[label="1;2pkt 2fpkt"];
469--1872[label="1;1pkt 1fpkt"];
469--1909[label="1;1pkt 1fpkt"];
469--1934[label="1;1pkt 1fpkt"];
469--1981[label="1;6pkt 6fpkt"];
469--2014[label="1;5pkt 5fpkt"];
469--2149[label="1;1pkt 1fpkt"];
469--2469[label="1;1pkt 1fpkt"];
469--2542[label="1;1pkt 1fpkt"];
469--2548[label="1;1pkt 1fpkt"];
469--2550[label="1;1pkt 1fpkt"];
469--2768[label="1;8pkt 8fpkt"];
469--2848[label="1;1pkt 1fpkt"];
469--2869[label="1;7pkt 7fpkt"];
469--3038[label="1;1pkt 1fpkt"];
469--3269[label="1;2pkt 2fpkt"];
469--3510[label="1;4pkt 4fpkt"];
469--3641[label="0.5;2pkt 2fpkt"];
469--3704[label="1;5pkt 5fpkt"];
469--3902[label="1;6pkt 6fpkt"];
469--4102[label="0.5;1pkt 1fpkt"];
469--4270[label="1;5pkt 5fpkt"];
469--4306[label="1;2pkt 2fpkt"];
469--4459[label="1;1pkt 1fpkt"];
469--5001[label="1;1pkt 1fpkt"];
469--5244[label="1;1pkt 1fpkt"];
469--5266[label="1;3pkt 3fpkt"];
469--5281[label="1;4pkt 4fpkt"];
469--5495[label="1;93pkt 93fpkt"];
469--5620[label="1;5pkt 5fpkt"];
469--5776[label="1;1pkt 1fpkt"];
469--5883[label="1;1pkt 1fpkt"];
469--5972[label="1;3pkt 3fpkt"];
469--6272[label="1;5pkt 5fpkt"];
469--6312[label="1;5pkt 5fpkt"];
469--6378[label="1;3pkt 3fpkt"];
469--6385[label="1;2pkt 2fpkt"];
469--6402[label="1;2pkt 2fpkt"];
469--6404[label="1;2pkt 2fpkt"];
469--6421[label="1;2pkt 2fpkt"];
469--6439[label="1;2pkt 2fpkt"];
469--6616[label="1;7pkt 7fpkt"];
469--6668[label="1;2pkt 2fpkt"];
469--6735[label="1;1pkt 1fpkt"];
469--6800[label="1;2pkt 2fpkt"];
469--6807[label="1;5pkt 5fpkt"];
469--6831[label="1;2pkt 2fpkt"];
469--7011[label="1;3pkt 3fpkt"];
469--7168[label="1;1pkt 1fpkt"];
469--7230[label="1;1pkt 1fpkt"];
469--7349[label="1;4pkt 4fpkt"];
469--7545[label="1;7pkt 7fpkt"];
469--7560[label="1;1pkt 1fpkt"];
469--7713[label="1;1pkt 1fpkt"];
469--8238[label="1;5pkt 5fpkt"];
469--8337[label="1;4pkt 4fpkt"];
469--8451[label="0.00130804;2pkt 2fpkt"];
469--8458[label="0.00523218;8pkt 8fpkt"];
469--8541[label="0.00130804;2pkt 2fpkt"];
469--8548[label="0.00523218;8pkt 8fpkt"];
469--8626[label="0.00130804;2pkt 2fpkt"];
469--8633[label="0.00523218;8pkt 8fpkt"];
469--8763[label="1;1pkt 1fpkt"];
469--8918[label="1;1pkt 1fpkt"];
469--8986[label="1;1pkt 1fpkt"];
469--9004[label="1;1pkt 1fpkt"];
469--9241[label="1;4pkt 4fpkt"];
469--9249[label="1;4pkt 4fpkt"];
469--9397[label="1;1pkt 1fpkt"];
469--9439[label="1;3pkt 3fpkt"];
469--9584[label="1;1pkt 1fpkt"];
469--9586[label="1;1pkt 1fpkt"];
469--9663[label="1;5pkt 5fpkt"];
469--9795[label="1;7pkt 7fpkt"];
469--9901[label="1;1pkt 1fpkt"];
469--10229[label="0.8;4pkt 4fpkt"];
469--10537[label="1;5pkt 5fpkt"];
469--10763[label="1;3pkt 3fpkt"];
469--10777[label="1;26pkt 26fpkt"];
469--10802[label="1;1pkt 1fpkt"];
469--10955[label="1;7pkt 7fpkt"];
469--10978[label="1;54pkt 54fpkt"];
469--11264[label="1;1pkt 1fpkt"];
469--11356[label="1;1pkt 1fpkt"];
469--11458[label="0.583333;7pkt 7fpkt"];
469--11466[label="1;1pkt 1fpkt"];
469--11576[label="1;5pkt 5fpkt"];
469--11725[label="1;7pkt 7fpkt"];
469--11763[label="1;6pkt 6fpkt"];
469--11891[label="1;1pkt 1fpkt"];
469--11899[label="1;6pkt 6fpkt"];
469--12037[label="1;2pkt 2fpkt"];
469--12108[label="1;1pkt 1fpkt"];
469--12129[label="1;1pkt 1fpkt"];
469--12144[label="1;1pkt 1fpkt"];
469--12279[label="1;1pkt 1fpkt"];
469--12574[label="1;1pkt 1fpkt"];
469--12640[label="1;93pkt 93fpkt"];
469--12665[label="1;1pkt 1fpkt"];
469--13011[label="1;2pkt 2fpkt"];
469--13114[label="1;2pkt 2fpkt"];
469--13324[label="1;6pkt 6fpkt"];
469--13551[label="0.8;4pkt 4fpkt"];
469--13638[label="1;2pkt 2fpkt"];
469--13763[label="1;2pkt 2fpkt"];
469--13919[label="1;5pkt 5fpkt"];
469--13999[label="1;3pkt 3fpkt"];
469--14357[label="0.8;4pkt 4fpkt"];
469--14500[label="1;5pkt 5fpkt"];
469--14611[label="1;3pkt 3fpkt"];
469--14708[label="1;54pkt 54fpkt"];
469--14890[label="1;1pkt 1fpkt"];
469--14945[label="0.583333;7pkt 7fpkt"];
469--14993[label="1;5pkt 5fpkt"];
469--15064[label="1;7pkt 7fpkt"];
469--15089[label="1;6pkt 6fpkt"];
469--15152[label="1;6pkt 6fpkt"];
469--15255[label="1;1pkt 1fpkt"];
469--15329[label="1;1pkt 1fpkt"];
469--15460[label="1;1pkt 1fpkt"];
469--15495[label="1;93pkt 93fpkt"];
469--15506[label="1;1pkt 1fpkt"];
469--15793[label="1;6pkt 6fpkt"];
469--15993[label="1;1pkt 1fpkt"];
469--16096[label="1;3pkt 3fpkt"];
469--16389[label="1;54pkt 54fpkt"];
469--16473[label="1;1pkt 1fpkt"];
469--16533[label="1;7pkt 7fpkt"];
469--16546[label="1;6pkt 6fpkt"];
469--16613[label="1;1pkt 1fpkt"];
469--16640[label="1;1pkt 1fpkt"];
469--16701[label="1;1pkt 1fpkt"];
469--16726[label="1;1pkt 1fpkt"];
469--16840[label="1;6pkt 6fpkt"];
508--6616[label="1;7pkt 7fpkt"];
508--9795[label="1;7pkt 7fpkt"];
1079--7713[label="1;1pkt 1fpkt"];
1079--8763[label="1;1pkt 1fpkt"];
1090--6668[label="1;2pkt 2fpkt"];
1090--11899[label="1;6pkt 6fpkt"];
1090--15152[label="1;6pkt 6fpkt"];
1092--12108[label="1;1pkt 1fpkt"];
1360--7560[label="1;1pkt 1fpkt"];
1578--6735[label="1;1pkt 1fpkt"];
1578--12574[label="1;1pkt 1fpkt"];
1578--15460[label="1;1pkt 1fpkt"];
1578--16701[label="1;1pkt 1fpkt"];
1653--7168[label="1;1pkt 1fpkt"];
1800--6800[label="1;2pkt 2fpkt"];
1800--12037[label="1;2pkt 2fpkt"];
1829--6807[label="1;5pkt 5fpkt"];
1829--11763[label="1;6pkt 6fpkt"];
1829--15089[label="1;6pkt 6fpkt"];
1829--16546[label="1;6pkt 6fpkt"];
1866--9663[label="1;2pkt 2fpkt"];
1981--7011[label="1;3pkt 3fpkt"];
2014--6831[label="1;2pkt 2fpkt"];
2014--11725[label="1;5pkt 5fpkt"];
2014--15064[label="1;5pkt 5fpkt"];
2014--16533[label="1;5pkt 5fpkt"];
2542--7230[label="1;1pkt 1fpkt"];
2542--8986[label="1;1pkt 1fpkt"];
2550--9901[label="1;1pkt 1fpkt"];
2768--7545[label="1;7pkt 7fpkt"];
2869--7349[label="1;4pkt 4fpkt"];
2869--13324[label="1;6pkt 6fpkt"];
2869--15793[label="1;6pkt 6fpkt"];
2869--16840[label="1;6pkt 6fpkt"];
3704--10802[label="1;1pkt 1fpkt"];
4270--8238[label="1;5pkt 5fpkt"];
4270--11891[label="1;1pkt 1fpkt"];
4301--4325[label="1;9pkt 9fpkt"];
4301--8484[label="0.0454545;2pkt 2fpkt"];
4301--8574[label="0.0454545;2pkt 2fpkt"];
4301--8656[label="0.0454545;2pkt 2fpkt"];
4301--9840[label="1;9pkt 9fpkt"];
4301--11458[label="0.25;3pkt 3fpkt"];
4301--13186[label="1;5pkt 5fpkt"];
4301--14945[label="0.25;3pkt 3fpkt"];
4306--12665[label="1;1pkt 1fpkt"];
4306--15506[label="1;1pkt 1fpkt"];
4306--16726[label="1;1pkt 1fpkt"];
4325--9840[label="1;9pkt 9fpkt"];
5001--11466[label="1;1pkt 1fpkt"];
5281--8337[label="1;4pkt 4fpkt"];
5281--10229[label="1;4pkt 4fpkt"];
5281--14357[label="1;4pkt 4fpkt"];
5495--12640[label="1;93pkt 93fpkt"];
5495--15495[label="1;93pkt 93fpkt"];
5620--9241[label="1;4pkt 4fpkt"];
5620--13919[label="1;5pkt 5fpkt"];
5972--10763[label="1;3pkt 3fpkt"];
5972--14611[label="1;3pkt 3fpkt"];
6272--9249[label="1;4pkt 4fpkt"];
6312--8918[label="1;1pkt 1fpkt"];
6312--13763[label="1;2pkt 2fpkt"];
6312--15993[label="1;1pkt 1fpkt"];
6378--13638[label="1;2pkt 2fpkt"];
6385--9397[label="1;1pkt 1fpkt"];
6421--11356[label="1;1pkt 1fpkt"];
6421--14890[label="1;1pkt 1fpkt"];
6421--16473[label="1;1pkt 1fpkt"];
6439--13011[label="1;2pkt 2fpkt"];
6616--9795[label="1;7pkt 7fpkt"];
6668--11899[label="1;2pkt 2fpkt"];
6668--15152[label="1;2pkt 2fpkt"];
6735--12574[label="1;1pkt 1fpkt"];
6735--15460[label="1;1pkt 1fpkt"];
6735--16701[label="1;1pkt 1fpkt"];
6800--12037[label="1;2pkt 2fpkt"];
6807--11763[label="1;5pkt 5fpkt"];
6807--15089[label="1;5pkt 5fpkt"];
6807--16546[label="1;5pkt 5fpkt"];
6831--11725[label="1;2pkt 2fpkt"];
6831--15064[label="1;2pkt 2fpkt"];
6831--16533[label="1;2pkt 2fpkt"];
7230--8986[label="1;1pkt 1fpkt"];
7349--13324[label="0.75;3pkt 3fpkt"];
7349--15793[label="0.75;3pkt 3fpkt"];
7349--16840[label="0.75;3pkt 3fpkt"];
7713--8763[label="1;1pkt 1fpkt"];
8238--11891[label="1;1pkt 1fpkt"];
8337--10229[label="1;4pkt 4fpkt"];
8337--14357[label="1;4pkt 4fpkt"];
8918--13763[label="1;1pkt 1fpkt"];
8918--15993[label="1;1pkt 1fpkt"];
9241--13919[label="1;4pkt 4fpkt"];
9439--13999[label="1;3pkt 3fpkt"];
9439--16096[label="1;3pkt 3fpkt"];
10229--14357[label="1;5pkt 5fpkt"];
10537--14500[label="1;5pkt 5fpkt"];
10763--14611[label="1;3pkt 3fpkt"];
10978--14708[label="1;54pkt 54fpkt"];
10978--16389[label="1;54pkt 54fpkt"];
11356--14890[label="1;1pkt 1fpkt"];
11356--16473[label="1;1pkt 1fpkt"];
11458--14945[label="1;12pkt 12fpkt"];
11576--14993[label="1;5pkt 5fpkt"];
11725--15064[label="1;7pkt 7fpkt"];
11725--16533[label="1;7pkt 7fpkt"];
11763--15089[label="1;6pkt 6fpkt"];
11763--16546[label="1;6pkt 6fpkt"];
11899--15152[label="1;6pkt 6fpkt"];
12129--15255[label="1;1pkt 1fpkt"];
12129--16613[label="1;1pkt 1fpkt"];
12279--15329[label="1;1pkt 1fpkt"];
12279--16640[label="1;1pkt 1fpkt"];
12574--15460[label="1;1pkt 1fpkt"];
12574--16701[label="1;1pkt 1fpkt"];
12640--15495[label="1;93pkt 93fpkt"];
12665--15506[label="1;1pkt 1fpkt"];
12665--16726[label="1;1pkt 1fpkt"];
13324--15793[label="1;6pkt 6fpkt"];
13324--16840[label="1;6pkt 6fpkt"];
13763--15993[label="1;1pkt 1fpkt"];
13999--16096[label="1;3pkt 3fpkt"];
14708--16389[label="1;54pkt 54fpkt"];
14890--16473[label="1;1pkt 1fpkt"];
15064--16533[label="1;7pkt 7fpkt"];
15089--16546[label="1;6pkt 6fpkt"];
15255--16613[label="1;1pkt 1fpkt"];
15329--16640[label="1;1pkt 1fpkt"];
15460--16701[label="1;1pkt 1fpkt"];
15506--16726[label="1;1pkt 1fpkt"];
15793--16840[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.177.151"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
10878[label="141.5.75.100;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14660[label="141.5.75.100;10pkt 10fpkt", shape=invtriangle, color=brown];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.5.75.100:*, 201.217.113.54:80}[40%]&lt;BR/&gt;{141.5.75.100:*, 201.217.113.6:80}[20%]&lt;BR/&gt;{141.5.75.100:*, 200.177.19.246:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3601: (5%)&lt;BR/&gt; 3577: (5%)&lt;BR/&gt; 3562: (5%)&lt;BR/&gt; 3525: (5%)&gt;];
}
10878--14660[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="201.217.113.54" dst_port="80" src_ip="141.5.75.100"/>
      <filter dst_ip="200.177.19.246" dst_port="80" src_ip="141.5.75.100"/>
      <filter dst_ip="201.217.113.6" dst_port="80" src_ip="141.5.75.100"/>
    </slice>
    <from sec="1246942896" usec="0"/>
    <to sec="1246943651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
559[label="27.81.38.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
560[label="136.90.213.155;s;6pkt 6fpkt", shape=diamond, color=yellow];
661[label="25.10.124.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
2478[label="93.61.4.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
2515[label="25.10.124.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
11946[label="136.90.213.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15177[label="136.90.213.155;6pkt 6fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.213.155:*, 25.10.124.231:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3689: (8.69565%)&lt;BR/&gt; 3685: (8.69565%)&lt;BR/&gt; 3608: (8.69565%)&lt;BR/&gt; 3596: (8.69565%)&gt;];
}
559--560[label="1;1pkt 1fpkt"];
559--11946[label="1;1pkt 1fpkt"];
559--15177[label="1;1pkt 1fpkt"];
560--661[label="1;2pkt 2fpkt"];
560--2478[label="1;1pkt 1fpkt"];
560--2515[label="1;1pkt 1fpkt"];
560--3228[label="0.166667;1pkt 1fpkt"];
560--7479[label="0.166667;1pkt 1fpkt"];
560--11946[label="1;6pkt 6fpkt"];
560--15177[label="1;6pkt 6fpkt"];
661--11946[label="1;2pkt 2fpkt"];
661--15177[label="1;2pkt 2fpkt"];
2478--11946[label="1;1pkt 1fpkt"];
2478--15177[label="1;1pkt 1fpkt"];
2515--11946[label="1;1pkt 1fpkt"];
2515--15177[label="1;1pkt 1fpkt"];
11946--15177[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="25.10.124.231" dst_port="80" src_ip="136.90.213.155"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
4034[label="169.185.182.43;d;61pkt 61fpkt", shape=diamond, color=yellow];
7536[label="169.185.182.43;d;59pkt 59fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.49.217.69:80, 169.185.182.43:*}[62.2951%]&lt;BR/&gt;{*:*, 169.185.182.43:41846}[22.9508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.8333%)&lt;BR/&gt; 41846: (11.6667%)&lt;BR/&gt; 0: (3.33333%)&lt;BR/&gt; 64699: (0.833333%)&lt;BR/&gt; 64479: (0.833333%)&gt;];
}
4034--7536[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.182.43" dst_port="41846"/>
      <filter dst_ip="169.185.182.43" src_ip="40.49.217.69" src_port="80"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
6186[label="204.91.160.141;s;37pkt 37fpkt", shape=diamond, color=yellow];
11664[label="204.91.160.141;38pkt 38fpkt", shape=pentagon, color=darkviolet];
15031[label="204.91.160.141;38pkt 38fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.160.141:2000, *:*}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (36.7257%)&lt;BR/&gt; 17696: (3.9823%)&lt;BR/&gt; 123: (2.65487%)&lt;BR/&gt; 53: (2.65487%)&lt;BR/&gt; 62214: (1.32743%)&gt;];
}
6186--8514[label="0.027027;1pkt 1fpkt"];
6186--8603[label="0.027027;1pkt 1fpkt"];
6186--8680[label="0.027027;1pkt 1fpkt"];
6186--11664[label="1;37pkt 37fpkt"];
6186--15031[label="1;37pkt 37fpkt"];
11664--15031[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.160.141" src_port="2000"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
3656[label="218.170.73.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
7616[label="218.170.73.39;s;1pkt 1fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.170.73.39:61412, 205.100.248.222:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61412: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
3656--7616[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.248.222" dst_port="995" src_ip="218.170.73.39" src_port="61412"/>
    </slice>
    <from sec="1246943010" usec="0"/>
    <to sec="1246943207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1233[label="205.100.245.89;d;356pkt 356fpkt", shape=diamond, color=yellow];
1478[label="218.68.193.164;s;178pkt 178fpkt", shape=diamond, color=yellow];
3141[label="194.52.46.1;s;4pkt 4fpkt", shape=diamond, color=yellow];
3741[label="22.8.118.76;s;4pkt 4fpkt", shape=diamond, color=yellow];
4333[label="25.142.176.8;s;4pkt 4fpkt", shape=diamond, color=yellow];
7371[label="218.68.193.164;s;178pkt 178fpkt", shape=hexagon, color=black];
7624[label="194.52.46.1;s;4pkt 4fpkt", shape=hexagon, color=black];
7630[label="22.8.118.76;s;4pkt 4fpkt", shape=hexagon, color=black];
7638[label="25.142.176.8;s;4pkt 4fpkt", shape=hexagon, color=black];
8916[label="25.142.176.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10167[label="214.162.170.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10400[label="22.8.118.76;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13060[label="42.30.217.216;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14328[label="214.162.170.66;2pkt 2fpkt", shape=invtriangle, color=brown];
14438[label="22.8.118.76;4pkt 4fpkt", shape=invtriangle, color=brown];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.68.193.164:*, 205.100.245.89:*}[49.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (5.71616%)&lt;BR/&gt; 80: (3.08804%)&lt;BR/&gt; 48635: (0.328515%)&lt;BR/&gt; 43263: (0.328515%)&lt;BR/&gt; 35520: (0.328515%)&gt;];
}
1233--1478[label="1;178pkt 178fpkt"];
1233--3141[label="0.75;3pkt 3fpkt"];
1233--3535[label="0.666667;24pkt 24fpkt"];
1233--3741[label="0.75;3pkt 3fpkt"];
1233--4333[label="0.75;3pkt 3fpkt"];
1233--7352[label="0.592593;16pkt 16fpkt"];
1233--7371[label="1;178pkt 178fpkt"];
1233--7624[label="0.75;3pkt 3fpkt"];
1233--7630[label="0.75;3pkt 3fpkt"];
1233--7638[label="0.75;3pkt 3fpkt"];
1233--8514[label="0.011236;4pkt 4fpkt"];
1233--8603[label="0.011236;4pkt 4fpkt"];
1233--8680[label="0.011236;4pkt 4fpkt"];
1233--8916[label="1;3pkt 3fpkt"];
1233--10167[label="0.5;1pkt 1fpkt"];
1233--10400[label="0.75;3pkt 3fpkt"];
1233--13060[label="1;10pkt 10fpkt"];
1233--14328[label="0.5;1pkt 1fpkt"];
1233--14438[label="0.75;3pkt 3fpkt"];
1478--7371[label="1;178pkt 178fpkt"];
3141--7133[label="0.25;1pkt 1fpkt"];
3141--7624[label="1;4pkt 4fpkt"];
3741--7630[label="1;4pkt 4fpkt"];
3741--8514[label="0.25;1pkt 1fpkt"];
3741--8603[label="0.25;1pkt 1fpkt"];
3741--8680[label="0.25;1pkt 1fpkt"];
3741--10400[label="1;4pkt 4fpkt"];
3741--14438[label="1;4pkt 4fpkt"];
4333--7638[label="1;4pkt 4fpkt"];
4333--8514[label="0.25;1pkt 1fpkt"];
4333--8603[label="0.25;1pkt 1fpkt"];
4333--8680[label="0.25;1pkt 1fpkt"];
4333--8916[label="1;3pkt 3fpkt"];
7630--8514[label="0.25;1pkt 1fpkt"];
7630--8603[label="0.25;1pkt 1fpkt"];
7630--8680[label="0.25;1pkt 1fpkt"];
7630--10400[label="1;4pkt 4fpkt"];
7630--14438[label="1;4pkt 4fpkt"];
7638--8514[label="0.25;1pkt 1fpkt"];
7638--8603[label="0.25;1pkt 1fpkt"];
7638--8680[label="0.25;1pkt 1fpkt"];
7638--8916[label="1;3pkt 3fpkt"];
10167--14328[label="1;2pkt 2fpkt"];
10400--14438[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.245.89" src_ip="218.68.193.164"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
4378[label="52.34.172.124;s;1022pkt 1022fpkt", shape=diamond, color=yellow];
7644[label="52.34.172.124;s;939pkt 939fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.34.172.124:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 8867: (0.0509944%)&lt;BR/&gt; 8866: (0.0509944%)&lt;BR/&gt; 8865: (0.0509944%)&lt;BR/&gt; 8864: (0.0509944%)&gt;];
}
4378--7644[label="1;939pkt 939fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="52.34.172.124"/>
    </slice>
    <from sec="1246943196" usec="0"/>
    <to sec="1246943279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
386[label="37.56.150.62;s;2pkt 2fpkt", shape=diamond, color=yellow];
387[label="204.91.181.78;d;522pkt 522fpkt", shape=diamond, color=yellow];
441[label="60.34.27.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
1171[label="63.85.0.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
2885[label="91.53.169.211;s;3pkt 3fpkt", shape=diamond, color=yellow];
4163[label="26.184.147.210;s;3pkt 3fpkt", shape=diamond, color=yellow];
4187[label="177.180.3.73;s;2pkt 2fpkt", shape=diamond, color=yellow];
4257[label="46.92.77.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
5251[label="44.51.160.155;s;4pkt 4fpkt", shape=diamond, color=yellow];
5389[label="52.217.33.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
5431[label="27.211.87.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
6612[label="60.34.27.85;s;1pkt 1fpkt", shape=hexagon, color=black];
6727[label="204.91.181.78;d;161pkt 161fpkt", shape=hexagon, color=black];
7073[label="91.53.169.211;s;2pkt 2fpkt", shape=hexagon, color=black];
7262[label="63.85.0.3;s;1pkt 1fpkt", shape=hexagon, color=black];
7659[label="37.56.150.62;s;2pkt 2fpkt", shape=hexagon, color=black];
8074[label="46.92.77.143;s;1pkt 1fpkt", shape=hexagon, color=black];
8719[label="16.16.33.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8988[label="93.235.90.11;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10089[label="37.56.150.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10294[label="56.1.214.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10505[label="99.236.208.81;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10586[label="60.34.27.85;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10706[label="47.123.21.91;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10794[label="55.27.62.96;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10975[label="27.211.87.105;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11018[label="36.39.69.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11054[label="22.42.21.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11557[label="47.36.151.136;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11699[label="46.92.77.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11931[label="25.18.64.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11942[label="44.51.160.155;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12077[label="91.28.223.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12303[label="99.253.26.174;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12814[label="16.16.22.203;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14291[label="37.56.150.62;2pkt 2fpkt", shape=invtriangle, color=brown];
14625[label="55.27.62.96;10pkt 10fpkt", shape=invtriangle, color=brown];
14729[label="36.39.69.107;3pkt 3fpkt", shape=invtriangle, color=brown];
14746[label="22.42.21.109;3pkt 3fpkt", shape=invtriangle, color=brown];
15048[label="46.92.77.143;1pkt 1fpkt", shape=invtriangle, color=brown];
15234[label="91.28.223.162;6pkt 6fpkt", shape=invtriangle, color=brown];
15344[label="99.253.26.174;11pkt 11fpkt", shape=invtriangle, color=brown];
15568[label="16.16.22.203;3pkt 3fpkt", shape=invtriangle, color=brown];
16225[label="37.56.150.62;2pkt 2fpkt", shape=invhouse, color=bisque];
16649[label="99.253.26.174;11pkt 11fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.181.78:8858}[41.5414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8858: (17.4405%)&lt;BR/&gt; 6969: (2.7381%)&lt;BR/&gt; 35375: (1.96429%)&lt;BR/&gt; 10000: (1.96429%)&lt;BR/&gt; 3153: (1.36905%)&gt;];
}
386--387[label="1;2pkt 2fpkt"];
386--6727[label="0.5;1pkt 1fpkt"];
386--7659[label="1;2pkt 2fpkt"];
386--10089[label="1;2pkt 2fpkt"];
386--14291[label="1;2pkt 2fpkt"];
386--16225[label="1;2pkt 2fpkt"];
387--441[label="1;1pkt 1fpkt"];
387--1171[label="1;1pkt 1fpkt"];
387--2885[label="1;3pkt 3fpkt"];
387--4163[label="1;3pkt 3fpkt"];
387--4187[label="1;2pkt 2fpkt"];
387--4257[label="1;1pkt 1fpkt"];
387--4501[label="0.5;1pkt 1fpkt"];
387--5251[label="1;4pkt 4fpkt"];
387--5389[label="1;1pkt 1fpkt"];
387--5431[label="1;1pkt 1fpkt"];
387--6612[label="1;1pkt 1fpkt"];
387--6727[label="1;161pkt 161fpkt"];
387--7073[label="1;2pkt 2fpkt"];
387--7262[label="1;1pkt 1fpkt"];
387--7659[label="1;2pkt 2fpkt"];
387--8074[label="1;1pkt 1fpkt"];
387--8484[label="0.00191571;1pkt 1fpkt"];
387--8574[label="0.00191571;1pkt 1fpkt"];
387--8656[label="0.00191571;1pkt 1fpkt"];
387--8719[label="1;1pkt 1fpkt"];
387--8988[label="1;8pkt 8fpkt"];
387--10089[label="1;2pkt 2fpkt"];
387--10294[label="1;2pkt 2fpkt"];
387--10505[label="1;3pkt 3fpkt"];
387--10586[label="1;3pkt 3fpkt"];
387--10706[label="0.75;3pkt 3fpkt"];
387--10794[label="0.8;8pkt 8fpkt"];
387--10975[label="0.666667;2pkt 2fpkt"];
387--11018[label="1;3pkt 3fpkt"];
387--11054[label="0.666667;2pkt 2fpkt"];
387--11557[label="1;8pkt 8fpkt"];
387--11699[label="1;1pkt 1fpkt"];
387--11931[label="0.666667;2pkt 2fpkt"];
387--11942[label="0.8;4pkt 4fpkt"];
387--12077[label="0.833333;5pkt 5fpkt"];
387--12303[label="0.818182;9pkt 9fpkt"];
387--12814[label="1;3pkt 3fpkt"];
387--12846[label="0.5;1pkt 1fpkt"];
387--14291[label="1;2pkt 2fpkt"];
387--14625[label="0.8;8pkt 8fpkt"];
387--14729[label="1;3pkt 3fpkt"];
387--14746[label="0.666667;2pkt 2fpkt"];
387--15048[label="1;1pkt 1fpkt"];
387--15234[label="0.833333;5pkt 5fpkt"];
387--15344[label="0.818182;9pkt 9fpkt"];
387--15568[label="1;3pkt 3fpkt"];
387--15582[label="0.5;1pkt 1fpkt"];
387--16225[label="1;2pkt 2fpkt"];
387--16649[label="0.818182;9pkt 9fpkt"];
441--6612[label="1;1pkt 1fpkt"];
441--6727[label="1;1pkt 1fpkt"];
441--10586[label="1;1pkt 1fpkt"];
1171--6727[label="1;1pkt 1fpkt"];
1171--7262[label="1;1pkt 1fpkt"];
2885--6727[label="0.666667;2pkt 2fpkt"];
2885--7073[label="1;2pkt 2fpkt"];
4163--6727[label="0.333333;1pkt 1fpkt"];
4187--6727[label="0.5;1pkt 1fpkt"];
4257--8074[label="1;1pkt 1fpkt"];
4257--11699[label="1;1pkt 1fpkt"];
4257--15048[label="1;1pkt 1fpkt"];
5251--6727[label="0.75;3pkt 3fpkt"];
5251--11942[label="0.75;3pkt 3fpkt"];
5431--10975[label="1;1pkt 1fpkt"];
6612--6727[label="1;1pkt 1fpkt"];
6612--10586[label="1;1pkt 1fpkt"];
6727--7073[label="1;2pkt 2fpkt"];
6727--7262[label="1;1pkt 1fpkt"];
6727--7659[label="0.5;1pkt 1fpkt"];
6727--8988[label="0.5;4pkt 4fpkt"];
6727--10089[label="0.5;1pkt 1fpkt"];
6727--10294[label="0.5;1pkt 1fpkt"];
6727--10505[label="0.333333;1pkt 1fpkt"];
6727--10586[label="0.333333;1pkt 1fpkt"];
6727--10794[label="0.3;3pkt 3fpkt"];
6727--11557[label="0.125;1pkt 1fpkt"];
6727--11931[label="0.333333;1pkt 1fpkt"];
6727--11942[label="0.4;2pkt 2fpkt"];
6727--12077[label="0.333333;2pkt 2fpkt"];
6727--12303[label="0.0909091;1pkt 1fpkt"];
6727--12846[label="0.5;1pkt 1fpkt"];
6727--14291[label="0.5;1pkt 1fpkt"];
6727--14625[label="0.3;3pkt 3fpkt"];
6727--15234[label="0.333333;2pkt 2fpkt"];
6727--15344[label="0.0909091;1pkt 1fpkt"];
6727--15582[label="0.5;1pkt 1fpkt"];
6727--16225[label="0.5;1pkt 1fpkt"];
6727--16649[label="0.0909091;1pkt 1fpkt"];
7659--10089[label="1;2pkt 2fpkt"];
7659--14291[label="1;2pkt 2fpkt"];
7659--16225[label="1;2pkt 2fpkt"];
8074--11699[label="1;1pkt 1fpkt"];
8074--15048[label="1;1pkt 1fpkt"];
10089--14291[label="1;2pkt 2fpkt"];
10089--16225[label="1;2pkt 2fpkt"];
10794--14625[label="1;10pkt 10fpkt"];
11018--14729[label="1;3pkt 3fpkt"];
11054--14746[label="1;3pkt 3fpkt"];
11699--15048[label="1;1pkt 1fpkt"];
12077--15234[label="1;6pkt 6fpkt"];
12303--15344[label="1;11pkt 11fpkt"];
12303--16649[label="1;11pkt 11fpkt"];
12814--15568[label="1;3pkt 3fpkt"];
14291--16225[label="1;2pkt 2fpkt"];
15344--16649[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.181.78" dst_port="8858"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
502[label="141.179.133.70;d;190pkt 190fpkt", shape=diamond, color=yellow];
538[label="92.27.19.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
584[label="29.46.141.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
871[label="29.42.93.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
3093[label="22.154.189.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
4461[label="208.216.87.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
5521[label="90.237.0.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
6030[label="213.33.201.4;s;3pkt 3fpkt", shape=diamond, color=yellow];
6959[label="29.42.93.5;s;1pkt 1fpkt", shape=hexagon, color=black];
7151[label="29.46.141.40;s;1pkt 1fpkt", shape=hexagon, color=black];
7665[label="208.216.87.127;s;1pkt 1fpkt", shape=hexagon, color=black];
7672[label="92.27.19.162;s;2pkt 2fpkt", shape=hexagon, color=black];
8833[label="29.42.93.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11363[label="208.216.87.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12052[label="92.27.19.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12374[label="22.154.189.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14893[label="208.216.87.127;1pkt 1fpkt", shape=invtriangle, color=brown];
16658[label="22.154.189.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.133.70:25159}[87.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25159: (43.1604%)&lt;BR/&gt; 4672: (3.53774%)&lt;BR/&gt; 9223: (1.17925%)&lt;BR/&gt; 1377: (1.17925%)&lt;BR/&gt; 63005: (0.943396%)&gt;];
}
502--538[label="1;2pkt 2fpkt"];
502--584[label="1;1pkt 1fpkt"];
502--871[label="1;1pkt 1fpkt"];
502--3093[label="1;1pkt 1fpkt"];
502--4461[label="1;1pkt 1fpkt"];
502--5521[label="1;1pkt 1fpkt"];
502--6030[label="1;3pkt 3fpkt"];
502--6959[label="1;1pkt 1fpkt"];
502--7151[label="1;1pkt 1fpkt"];
502--7665[label="1;1pkt 1fpkt"];
502--7672[label="1;2pkt 2fpkt"];
502--8833[label="1;1pkt 1fpkt"];
502--11363[label="1;1pkt 1fpkt"];
502--12052[label="1;2pkt 2fpkt"];
502--12374[label="1;1pkt 1fpkt"];
502--14893[label="1;1pkt 1fpkt"];
502--16658[label="1;1pkt 1fpkt"];
538--7672[label="1;2pkt 2fpkt"];
538--12052[label="1;2pkt 2fpkt"];
584--7151[label="1;1pkt 1fpkt"];
871--6959[label="1;1pkt 1fpkt"];
871--8833[label="1;1pkt 1fpkt"];
3093--12374[label="1;1pkt 1fpkt"];
3093--16658[label="1;1pkt 1fpkt"];
4461--7665[label="1;1pkt 1fpkt"];
4461--11363[label="1;1pkt 1fpkt"];
4461--14893[label="1;1pkt 1fpkt"];
6959--8833[label="1;1pkt 1fpkt"];
7665--11363[label="1;1pkt 1fpkt"];
7665--14893[label="1;1pkt 1fpkt"];
7672--12052[label="1;2pkt 2fpkt"];
11363--14893[label="1;1pkt 1fpkt"];
12374--16658[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.133.70" dst_port="25159"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1788[label="141.179.150.77;d;207pkt 207fpkt", shape=diamond, color=yellow];
2610[label="182.38.120.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
3296[label="37.112.143.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
3924[label="2.117.153.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
6392[label="2.115.53.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
7698[label="141.179.150.77;d;89pkt 89fpkt", shape=hexagon, color=black];
7729[label="2.117.153.241;s;1pkt 1fpkt", shape=hexagon, color=black];
7984[label="182.38.120.216;s;1pkt 1fpkt", shape=hexagon, color=black];
7987[label="37.112.143.182;s;1pkt 1fpkt", shape=hexagon, color=black];
12870[label="2.97.233.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.179.150.77:2128}[89.372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2128: (42.623%)&lt;BR/&gt; 61288: (4.2623%)&lt;BR/&gt; 61382: (0.655738%)&lt;BR/&gt; 61270: (0.655738%)&lt;BR/&gt; 49666: (0.655738%)&gt;];
}
1788--2610[label="1;1pkt 1fpkt"];
1788--3296[label="1;1pkt 1fpkt"];
1788--3924[label="1;1pkt 1fpkt"];
1788--6392[label="1;1pkt 1fpkt"];
1788--7698[label="1;89pkt 89fpkt"];
1788--7729[label="1;1pkt 1fpkt"];
1788--7984[label="1;1pkt 1fpkt"];
1788--7987[label="1;1pkt 1fpkt"];
1788--12870[label="1;2pkt 2fpkt"];
2610--7698[label="1;1pkt 1fpkt"];
2610--7984[label="1;1pkt 1fpkt"];
3296--7698[label="1;1pkt 1fpkt"];
3296--7987[label="1;1pkt 1fpkt"];
3924--7698[label="1;1pkt 1fpkt"];
3924--7729[label="1;1pkt 1fpkt"];
6392--7698[label="1;1pkt 1fpkt"];
7698--7729[label="1;1pkt 1fpkt"];
7698--7984[label="1;1pkt 1fpkt"];
7698--7987[label="1;1pkt 1fpkt"];
7698--12870[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.150.77" dst_port="2128"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
4547[label="172.16.6.226;d;250pkt 250fpkt", shape=diamond, color=yellow];
4548[label="172.16.72.165;s;250pkt 250fpkt", shape=diamond, color=yellow];
7741[label="172.16.72.165;s;169pkt 169fpkt", shape=hexagon, color=black];
12133[label="172.16.72.165;271pkt 271fpkt", shape=pentagon, color=darkviolet];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.16.72.165:*, 172.16.6.226:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52371: (0.212766%)&lt;BR/&gt; 52370: (0.212766%)&lt;BR/&gt; 52369: (0.212766%)&lt;BR/&gt; 52367: (0.212766%)&gt;];
}
4547--4548[label="1;250pkt 250fpkt"];
4547--7741[label="1;169pkt 169fpkt"];
4547--8514[label="0.06;15pkt 15fpkt"];
4547--8603[label="0.06;15pkt 15fpkt"];
4547--8680[label="0.06;15pkt 15fpkt"];
4547--12133[label="0.996;249pkt 249fpkt"];
4548--7741[label="1;169pkt 169fpkt"];
4548--8514[label="0.06;15pkt 15fpkt"];
4548--8603[label="0.06;15pkt 15fpkt"];
4548--8680[label="0.06;15pkt 15fpkt"];
4548--12133[label="0.996;249pkt 249fpkt"];
7741--8514[label="0.0414201;7pkt 7fpkt"];
7741--8603[label="0.0414201;7pkt 7fpkt"];
7741--8680[label="0.0414201;7pkt 7fpkt"];
7741--12133[label="0.994083;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_ip="172.16.6.226" dst_port="80" src_ip="172.16.72.165"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
2205[label="136.90.150.80;s;227pkt 227fpkt", shape=diamond, color=yellow];
2986[label="213.4.79.207;d;106pkt 106fpkt", shape=diamond, color=yellow];
3695[label="213.4.79.204;d;90pkt 90fpkt", shape=diamond, color=yellow];
4062[label="136.90.110.195;s;66pkt 66fpkt", shape=diamond, color=yellow];
7794[label="136.90.110.195;s;64pkt 64fpkt", shape=hexagon, color=black];
10479[label="136.90.150.80;231pkt 231fpkt", shape=pentagon, color=darkviolet];
12661[label="136.90.110.195;69pkt 69fpkt", shape=pentagon, color=darkviolet];
14470[label="136.90.150.80;231pkt 231fpkt", shape=invtriangle, color=brown];
15504[label="136.90.110.195;69pkt 69fpkt", shape=invtriangle, color=brown];
16290[label="136.90.150.80;231pkt 231fpkt", shape=invhouse, color=bisque];
16725[label="136.90.110.195;69pkt 69fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.150.80:*, 213.4.79.204:80}[30%]&lt;BR/&gt;{136.90.110.195:*, *:80}[22.6667%]&lt;BR/&gt;{136.90.150.80:*, 213.4.79.207:80}[22%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8279%)&lt;BR/&gt; 1969: (0.378527%)&lt;BR/&gt; 1967: (0.378527%)&lt;BR/&gt; 1965: (0.378527%)&lt;BR/&gt; 1961: (0.378527%)&gt;];
}
2205--2436[label="0.00440529;1pkt 1fpkt"];
2205--2986[label="0.622642;66pkt 66fpkt"];
2205--3660[label="0.025641;1pkt 1fpkt"];
2205--3695[label="1;90pkt 90fpkt"];
2205--10479[label="1;227pkt 227fpkt"];
2205--14470[label="1;227pkt 227fpkt"];
2205--16290[label="1;227pkt 227fpkt"];
2986--4062[label="0.606061;40pkt 40fpkt"];
2986--7794[label="0.625;40pkt 40fpkt"];
2986--8514[label="0.0660377;7pkt 7fpkt"];
2986--8603[label="0.0660377;7pkt 7fpkt"];
2986--8680[label="0.0660377;7pkt 7fpkt"];
2986--10479[label="0.622642;66pkt 66fpkt"];
2986--12661[label="0.57971;40pkt 40fpkt"];
2986--14470[label="0.622642;66pkt 66fpkt"];
2986--15504[label="0.57971;40pkt 40fpkt"];
2986--16290[label="0.622642;66pkt 66fpkt"];
2986--16725[label="0.57971;40pkt 40fpkt"];
3695--10479[label="1;90pkt 90fpkt"];
3695--14470[label="1;90pkt 90fpkt"];
3695--16290[label="1;90pkt 90fpkt"];
4062--4463[label="0.106061;7pkt 7fpkt"];
4062--7298[label="0.0909091;6pkt 6fpkt"];
4062--7484[label="0.0151515;1pkt 1fpkt"];
4062--7794[label="1;64pkt 64fpkt"];
4062--8514[label="0.121212;8pkt 8fpkt"];
4062--8603[label="0.121212;8pkt 8fpkt"];
4062--8680[label="0.121212;8pkt 8fpkt"];
4062--12661[label="1;66pkt 66fpkt"];
4062--15504[label="1;66pkt 66fpkt"];
4062--16725[label="1;66pkt 66fpkt"];
7794--8514[label="0.125;8pkt 8fpkt"];
7794--8603[label="0.125;8pkt 8fpkt"];
7794--8680[label="0.125;8pkt 8fpkt"];
7794--12661[label="1;64pkt 64fpkt"];
7794--15504[label="1;64pkt 64fpkt"];
7794--16725[label="1;64pkt 64fpkt"];
10479--14470[label="1;231pkt 231fpkt"];
10479--16290[label="1;231pkt 231fpkt"];
12661--15504[label="1;69pkt 69fpkt"];
12661--16725[label="1;69pkt 69fpkt"];
14470--16290[label="1;231pkt 231fpkt"];
15504--16725[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.90.110.195"/>
      <filter dst_ip="213.4.79.207" dst_port="80" src_ip="136.90.150.80"/>
      <filter dst_ip="213.4.79.204" dst_port="80" src_ip="136.90.150.80"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
4682[label="141.179.149.83;s;569pkt 569fpkt", shape=diamond, color=yellow];
7817[label="141.179.149.83;s;496pkt 496fpkt", shape=hexagon, color=black];
10540[label="141.179.149.83;584pkt 584fpkt", shape=pentagon, color=darkviolet];
14502[label="141.179.149.83;584pkt 584fpkt", shape=invtriangle, color=brown];
16301[label="141.179.149.83;584pkt 584fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.149.83:1108, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1108: (50%)&lt;BR/&gt; 16001: (0.887469%)&lt;BR/&gt; 4041: (0.621228%)&lt;BR/&gt; 6881: (0.443734%)&lt;BR/&gt; 55555: (0.177494%)&gt;];
}
4682--7817[label="1;496pkt 496fpkt"];
4682--8498[label="0.00175747;1pkt 1fpkt"];
4682--8588[label="0.00175747;1pkt 1fpkt"];
4682--10540[label="0.998243;568pkt 568fpkt"];
4682--14502[label="0.998243;568pkt 568fpkt"];
4682--16301[label="0.998243;568pkt 568fpkt"];
7817--8498[label="0.00201613;1pkt 1fpkt"];
7817--8588[label="0.00201613;1pkt 1fpkt"];
7817--10540[label="0.997984;495pkt 495fpkt"];
7817--14502[label="0.997984;495pkt 495fpkt"];
7817--16301[label="0.997984;495pkt 495fpkt"];
10540--14502[label="1;584pkt 584fpkt"];
10540--16301[label="1;584pkt 584fpkt"];
14502--16301[label="1;584pkt 584fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.149.83" src_port="1108"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
4695[label="141.161.180.123;s;56pkt 56fpkt", shape=diamond, color=yellow];
4896[label="28.224.203.128;d;15pkt 15fpkt", shape=diamond, color=yellow];
7824[label="141.161.180.123;s;46pkt 46fpkt", shape=hexagon, color=black];
11300[label="141.161.180.123;72pkt 72fpkt", shape=pentagon, color=darkviolet];
14864[label="141.161.180.123;72pkt 72fpkt", shape=invtriangle, color=brown];
16461[label="141.161.180.123;72pkt 72fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.180.123:3127, 28.224.203.128:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (22.0721%)&lt;BR/&gt; 3124: (7.95796%)&lt;BR/&gt; 80: (6.15616%)&lt;BR/&gt; 8090: (4.2042%)&lt;BR/&gt; 3128: (3.3033%)&gt;];
}
4695--4896[label="1;15pkt 15fpkt"];
4695--7824[label="1;46pkt 46fpkt"];
4695--8514[label="0.0178571;1pkt 1fpkt"];
4695--8603[label="0.0178571;1pkt 1fpkt"];
4695--8680[label="0.0178571;1pkt 1fpkt"];
4695--11300[label="1;56pkt 56fpkt"];
4695--14864[label="1;56pkt 56fpkt"];
4695--16461[label="1;56pkt 56fpkt"];
4896--7824[label="1;15pkt 15fpkt"];
4896--11300[label="1;15pkt 15fpkt"];
4896--14864[label="1;15pkt 15fpkt"];
4896--16461[label="1;15pkt 15fpkt"];
7824--11300[label="1;46pkt 46fpkt"];
7824--14864[label="1;46pkt 46fpkt"];
7824--16461[label="1;46pkt 46fpkt"];
11300--14864[label="1;72pkt 72fpkt"];
11300--16461[label="1;72pkt 72fpkt"];
14864--16461[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="28.224.203.128" src_ip="141.161.180.123" src_port="3127"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
955[label="136.90.148.253;s;172pkt 172fpkt", shape=diamond, color=yellow];
1032[label="88.204.184.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
3018[label="208.119.176.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
3615[label="93.141.230.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
7107[label="208.119.176.199;d;3pkt 3fpkt", shape=hexagon, color=black];
7694[label="136.90.148.253;s;136pkt 136fpkt", shape=hexagon, color=black];
13625[label="136.90.148.253;189pkt 189fpkt", shape=pentagon, color=darkviolet];
15923[label="136.90.148.253;189pkt 189fpkt", shape=invtriangle, color=brown];
16899[label="136.90.148.253;189pkt 189fpkt", shape=invhouse, color=bisque];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.148.253:28213, *:*}[42.328%]&lt;BR/&gt;{136.90.148.253:15000, *:*}[31.2169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28213: (21.4043%)&lt;BR/&gt; 15000: (16.0815%)&lt;BR/&gt; 80: (7.64439%)&lt;BR/&gt; 8000: (2.32163%)&lt;BR/&gt; 41728: (1.01925%)&gt;];
}
955--1032[label="1;1pkt 1fpkt"];
955--1943[label="0.0174419;3pkt 3fpkt"];
955--2442[label="0.0166667;1pkt 1fpkt"];
955--2703[label="0.0174419;3pkt 3fpkt"];
955--2740[label="0.0116279;2pkt 2fpkt"];
955--2881[label="0.05;2pkt 2fpkt"];
955--3018[label="1;3pkt 3fpkt"];
955--3615[label="1;1pkt 1fpkt"];
955--7107[label="1;3pkt 3fpkt"];
955--7456[label="0.0116279;2pkt 2fpkt"];
955--7526[label="0.0174419;3pkt 3fpkt"];
955--7694[label="1;136pkt 136fpkt"];
955--7772[label="0.012987;2pkt 2fpkt"];
955--8492[label="0.00581395;1pkt 1fpkt"];
955--8514[label="0.00581395;1pkt 1fpkt"];
955--8582[label="0.00581395;1pkt 1fpkt"];
955--8603[label="0.00581395;1pkt 1fpkt"];
955--8663[label="0.00581395;1pkt 1fpkt"];
955--8680[label="0.00581395;1pkt 1fpkt"];
955--13625[label="1;172pkt 172fpkt"];
955--15923[label="1;172pkt 172fpkt"];
955--16899[label="1;172pkt 172fpkt"];
1032--7694[label="1;1pkt 1fpkt"];
1032--13625[label="1;1pkt 1fpkt"];
1032--15923[label="1;1pkt 1fpkt"];
1032--16899[label="1;1pkt 1fpkt"];
3018--7107[label="1;3pkt 3fpkt"];
3018--7694[label="1;3pkt 3fpkt"];
3018--13625[label="1;3pkt 3fpkt"];
3018--15923[label="1;3pkt 3fpkt"];
3018--16899[label="1;3pkt 3fpkt"];
3615--7694[label="1;1pkt 1fpkt"];
3615--13625[label="1;1pkt 1fpkt"];
3615--15923[label="1;1pkt 1fpkt"];
3615--16899[label="1;1pkt 1fpkt"];
7107--7694[label="1;3pkt 3fpkt"];
7107--13625[label="1;3pkt 3fpkt"];
7107--15923[label="1;3pkt 3fpkt"];
7107--16899[label="1;3pkt 3fpkt"];
7694--7772[label="0.0147059;2pkt 2fpkt"];
7694--8492[label="0.00735294;1pkt 1fpkt"];
7694--8514[label="0.00735294;1pkt 1fpkt"];
7694--8582[label="0.00735294;1pkt 1fpkt"];
7694--8603[label="0.00735294;1pkt 1fpkt"];
7694--8663[label="0.00735294;1pkt 1fpkt"];
7694--8680[label="0.00735294;1pkt 1fpkt"];
7694--13625[label="1;136pkt 136fpkt"];
7694--15923[label="1;136pkt 136fpkt"];
7694--16899[label="1;136pkt 136fpkt"];
13625--15923[label="1;189pkt 189fpkt"];
13625--16899[label="1;189pkt 189fpkt"];
15923--16899[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.148.253" src_port="28213"/>
      <filter src_ip="136.90.148.253" src_port="15000"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
5240[label="136.90.246.54;s;40pkt 40fpkt", shape=diamond, color=yellow];
5885[label="136.90.217.241;s;22pkt 22fpkt", shape=diamond, color=yellow];
6017[label="91.53.49.57;d;2pkt 2fpkt", shape=diamond, color=yellow];
6034[label="25.200.6.131;d;19pkt 19fpkt", shape=diamond, color=yellow];
6464[label="37.81.0.21;d;6pkt 6fpkt", shape=diamond, color=yellow];
8249[label="136.90.217.241;s;22pkt 22fpkt", shape=hexagon, color=black];
8275[label="25.200.6.131;d;19pkt 19fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.217.241:80, 25.200.6.131:*}[30.6452%]&lt;BR/&gt;{136.90.246.54:80, 37.81.0.21:*}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52746: (1.53846%)&lt;BR/&gt; 52745: (1.53846%)&lt;BR/&gt; 52744: (1.53846%)&lt;BR/&gt; 52743: (1.53846%)&gt;];
}
5240--6017[label="1;2pkt 2fpkt"];
5240--6464[label="1;6pkt 6fpkt"];
5240--7871[label="0.025;1pkt 1fpkt"];
5240--8451[label="0.025;1pkt 1fpkt"];
5240--8458[label="0.025;1pkt 1fpkt"];
5240--8484[label="0.05;2pkt 2fpkt"];
5240--8541[label="0.025;1pkt 1fpkt"];
5240--8548[label="0.025;1pkt 1fpkt"];
5240--8574[label="0.05;2pkt 2fpkt"];
5240--8626[label="0.025;1pkt 1fpkt"];
5240--8633[label="0.025;1pkt 1fpkt"];
5240--8656[label="0.05;2pkt 2fpkt"];
5885--6034[label="1;19pkt 19fpkt"];
5885--7871[label="0.0454545;1pkt 1fpkt"];
5885--8249[label="1;22pkt 22fpkt"];
5885--8275[label="1;19pkt 19fpkt"];
6034--8249[label="1;19pkt 19fpkt"];
6034--8275[label="1;19pkt 19fpkt"];
8249--8275[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="37.81.0.21" src_ip="136.90.246.54" src_port="80"/>
      <filter dst_ip="25.200.6.131" src_ip="136.90.217.241" src_port="80"/>
    </slice>
    <from sec="1246942831" usec="0"/>
    <to sec="1246943609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
3135[label="17.121.51.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
4252[label="136.90.71.18;d;3pkt 3fpkt", shape=diamond, color=yellow];
7874[label="17.121.51.112;s;2pkt 2fpkt", shape=hexagon, color=black];
11123[label="17.121.51.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.155.75.84:80, 136.90.71.18:3919}[33.3333%]&lt;BR/&gt;{17.121.51.112:80, 136.90.71.18:3935}[33.3333%]&lt;BR/&gt;{17.121.51.112:80, 136.90.71.18:3937}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3937: (22.2222%)&lt;BR/&gt; 3935: (22.2222%)&lt;BR/&gt; 3919: (5.55556%)&gt;];
}
3135--4252[label="1;2pkt 2fpkt"];
3135--7874[label="1;2pkt 2fpkt"];
3135--11123[label="1;2pkt 2fpkt"];
4252--7874[label="1;2pkt 2fpkt"];
4252--10565[label="0.333333;1pkt 1fpkt"];
4252--11123[label="1;2pkt 2fpkt"];
4252--14518[label="0.333333;1pkt 1fpkt"];
7874--11123[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.71.18" dst_port="3937" src_ip="17.121.51.112" src_port="80"/>
      <filter dst_ip="136.90.71.18" dst_port="3935" src_ip="17.121.51.112" src_port="80"/>
      <filter dst_ip="136.90.71.18" dst_port="3919" src_ip="204.155.75.84" src_port="80"/>
    </slice>
    <from sec="1246943051" usec="0"/>
    <to sec="1246943225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
2560[label="90.133.4.202;s;1618pkt 1618fpkt", shape=diamond, color=yellow];
7972[label="90.133.4.202;s;1278pkt 1278fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.133.4.202:25511, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25511: (50%)&lt;BR/&gt; 2900: (0.103591%)&lt;BR/&gt; 62263: (0.0690608%)&lt;BR/&gt; 57692: (0.0690608%)&lt;BR/&gt; 55674: (0.0690608%)&gt;];
}
2560--7972[label="1;1278pkt 1278fpkt"];
</description>
    <slice>
      <filter src_ip="90.133.4.202" src_port="25511"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
3931[label="155.192.140.124;s;309pkt 309fpkt", shape=diamond, color=yellow];
7985[label="155.192.140.124;s;258pkt 258fpkt", shape=hexagon, color=black];
11315[label="155.192.140.124;319pkt 319fpkt", shape=pentagon, color=darkviolet];
14870[label="155.192.140.124;319pkt 319fpkt", shape=invtriangle, color=brown];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.140.124:16906, *:*}[97.1787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16906: (48.5062%)&lt;BR/&gt; 443: (0.829876%)&lt;BR/&gt; 80: (0.788382%)&lt;BR/&gt; 63243: (0.497925%)&lt;BR/&gt; 23847: (0.33195%)&gt;];
}
3931--7985[label="1;258pkt 258fpkt"];
3931--8451[label="0.00323625;1pkt 1fpkt"];
3931--8484[label="0.00323625;1pkt 1fpkt"];
3931--8497[label="0.00323625;1pkt 1fpkt"];
3931--8541[label="0.00323625;1pkt 1fpkt"];
3931--8574[label="0.00323625;1pkt 1fpkt"];
3931--8587[label="0.00323625;1pkt 1fpkt"];
3931--8626[label="0.00323625;1pkt 1fpkt"];
3931--8656[label="0.00323625;1pkt 1fpkt"];
3931--8666[label="0.00323625;1pkt 1fpkt"];
3931--11315[label="1;309pkt 309fpkt"];
3931--14870[label="1;309pkt 309fpkt"];
7985--8451[label="0.00387597;1pkt 1fpkt"];
7985--8484[label="0.00387597;1pkt 1fpkt"];
7985--8497[label="0.00387597;1pkt 1fpkt"];
7985--8541[label="0.00387597;1pkt 1fpkt"];
7985--8574[label="0.00387597;1pkt 1fpkt"];
7985--8587[label="0.00387597;1pkt 1fpkt"];
7985--8626[label="0.00387597;1pkt 1fpkt"];
7985--8656[label="0.00387597;1pkt 1fpkt"];
7985--8666[label="0.00387597;1pkt 1fpkt"];
7985--11315[label="1;258pkt 258fpkt"];
7985--14870[label="1;258pkt 258fpkt"];
11315--14870[label="1;319pkt 319fpkt"];
</description>
    <slice>
      <filter src_ip="155.192.140.124" src_port="16906"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
712[label="136.90.206.140;d;83pkt 83fpkt", shape=diamond, color=yellow];
2058[label="21.141.24.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2453[label="21.39.143.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
2738[label="214.64.203.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
3407[label="20.24.196.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
5137[label="16.201.162.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
5828[label="17.180.66.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
8019[label="214.64.203.22;s;1pkt 1fpkt", shape=hexagon, color=black];
9253[label="214.64.203.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9304[label="21.39.143.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9692[label="17.59.98.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10244[label="90.154.11.70;30pkt 30fpkt", shape=pentagon, color=darkviolet];
10704[label="22.88.9.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14586[label="22.88.9.91;1pkt 1fpkt", shape=invtriangle, color=brown];
16246[label="90.154.11.70;30pkt 30fpkt", shape=invhouse, color=bisque];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.154.11.70:80, 136.90.206.140:*}[36.1446%]&lt;BR/&gt;{*:*, 136.90.206.140:60213}[22.8916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.4516%)&lt;BR/&gt; 60213: (9.35484%)&lt;BR/&gt; 60517: (3.22581%)&lt;BR/&gt; 10643: (1.29032%)&lt;BR/&gt; 64086: (0.967742%)&gt;];
}
712--2058[label="1;1pkt 1fpkt"];
712--2453[label="1;1pkt 1fpkt"];
712--2738[label="1;1pkt 1fpkt"];
712--3407[label="1;1pkt 1fpkt"];
712--5137[label="1;1pkt 1fpkt"];
712--5828[label="1;1pkt 1fpkt"];
712--8019[label="1;1pkt 1fpkt"];
712--8451[label="0.0120482;1pkt 1fpkt"];
712--8484[label="0.13253;11pkt 11fpkt"];
712--8541[label="0.0120482;1pkt 1fpkt"];
712--8574[label="0.13253;11pkt 11fpkt"];
712--8626[label="0.0120482;1pkt 1fpkt"];
712--8656[label="0.13253;11pkt 11fpkt"];
712--9253[label="1;1pkt 1fpkt"];
712--9304[label="1;1pkt 1fpkt"];
712--9692[label="1;1pkt 1fpkt"];
712--10244[label="1;30pkt 30fpkt"];
712--10704[label="1;1pkt 1fpkt"];
712--14586[label="1;1pkt 1fpkt"];
712--16246[label="1;30pkt 30fpkt"];
2453--9304[label="1;1pkt 1fpkt"];
2738--8019[label="1;1pkt 1fpkt"];
2738--9253[label="1;1pkt 1fpkt"];
8019--9253[label="1;1pkt 1fpkt"];
10244--16246[label="1;30pkt 30fpkt"];
10704--14586[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.206.140" dst_port="60213"/>
      <filter dst_ip="136.90.206.140" src_ip="90.154.11.70" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
4646[label="22.52.97.49;s;3pkt 3fpkt", shape=diamond, color=yellow];
4647[label="204.91.1.69;d;8pkt 8fpkt", shape=diamond, color=yellow];
7796[label="204.91.1.69;d;6pkt 6fpkt", shape=hexagon, color=black];
8030[label="22.52.97.49;s;3pkt 3fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.30.217.162:*, 204.91.1.69:80}[40%]&lt;BR/&gt;{218.170.96.120:*, 204.91.1.69:80}[20%]&lt;BR/&gt;{22.52.97.49:*, 204.91.2.205:8007}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 8007: (20%)&lt;BR/&gt; 2894: (10%)&lt;BR/&gt; 58995: (5%)&lt;BR/&gt; 40554: (5%)&gt;];
}
4646--4647[label="0.333333;1pkt 1fpkt"];
4646--7796[label="0.333333;1pkt 1fpkt"];
4646--8030[label="1;3pkt 3fpkt"];
4647--7796[label="1;6pkt 6fpkt"];
4647--8030[label="0.333333;1pkt 1fpkt"];
7796--8030[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.1.69" dst_port="80" src_ip="42.30.217.162"/>
      <filter dst_ip="204.91.2.205" dst_port="8007" src_ip="22.52.97.49"/>
      <filter dst_ip="204.91.1.69" dst_port="80" src_ip="218.170.96.120"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
5190[label="205.100.243.145;s;80pkt 80fpkt", shape=diamond, color=yellow];
5516[label="208.104.138.78;d;268pkt 268fpkt", shape=diamond, color=yellow];
8041[label="205.100.243.145;s;59pkt 59fpkt", shape=hexagon, color=black];
11761[label="205.100.243.145;88pkt 88fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.104.138.78:0}[75.493%]&lt;BR/&gt;{205.100.243.145:0, *:0}[24.7887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5190--5511[label="0.0125;1pkt 1fpkt"];
5190--5516[label="0.0125;1pkt 1fpkt"];
5190--7316[label="0.0125;1pkt 1fpkt"];
5190--8041[label="1;59pkt 59fpkt"];
5190--11761[label="1;80pkt 80fpkt"];
5516--6183[label="0.00520833;1pkt 1fpkt"];
5516--6921[label="0.00373134;1pkt 1fpkt"];
5516--7147[label="0.00373134;1pkt 1fpkt"];
5516--7201[label="0.00373134;1pkt 1fpkt"];
5516--7478[label="0.00373134;1pkt 1fpkt"];
5516--8041[label="0.0169492;1pkt 1fpkt"];
5516--8464[label="0.00373134;1pkt 1fpkt"];
5516--8554[label="0.00373134;1pkt 1fpkt"];
5516--8639[label="0.00373134;1pkt 1fpkt"];
5516--8968[label="0.00373134;1pkt 1fpkt"];
5516--9238[label="0.00373134;1pkt 1fpkt"];
5516--9608[label="0.00373134;1pkt 1fpkt"];
5516--10911[label="0.00729927;1pkt 1fpkt"];
5516--11139[label="0.00373134;1pkt 1fpkt"];
5516--11462[label="0.00373134;1pkt 1fpkt"];
5516--11761[label="0.0113636;1pkt 1fpkt"];
5516--14070[label="0.00373134;1pkt 1fpkt"];
5516--14677[label="0.00729927;1pkt 1fpkt"];
5516--14781[label="0.00373134;1pkt 1fpkt"];
5516--14947[label="0.00373134;1pkt 1fpkt"];
5516--16128[label="0.00373134;1pkt 1fpkt"];
5516--16420[label="0.00373134;1pkt 1fpkt"];
8041--11761[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="205.100.243.145"/>
      <filter dst_ip="208.104.138.78"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
4171[label="41.65.67.22;d;13pkt 13fpkt", shape=diamond, color=yellow];
5230[label="136.90.122.200;s;16pkt 16fpkt", shape=diamond, color=yellow];
7843[label="41.65.67.22;d;9pkt 9fpkt", shape=hexagon, color=black];
8054[label="136.90.122.200;s;13pkt 13fpkt", shape=hexagon, color=black];
12755[label="136.90.122.200;17pkt 17fpkt", shape=pentagon, color=darkviolet];
15543[label="136.90.122.200;16pkt 16fpkt", shape=invtriangle, color=brown];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.122.200:*, 41.65.67.22:5100}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5100: (43.4524%)&lt;BR/&gt; 80: (6.54762%)&lt;BR/&gt; 60654: (3.57143%)&lt;BR/&gt; 60653: (3.57143%)&lt;BR/&gt; 59986: (3.57143%)&gt;];
}
4171--5230[label="1;13pkt 13fpkt"];
4171--7843[label="1;9pkt 9fpkt"];
4171--8054[label="0.769231;10pkt 10fpkt"];
4171--12755[label="1;13pkt 13fpkt"];
4171--15543[label="1;13pkt 13fpkt"];
5230--7843[label="1;9pkt 9fpkt"];
5230--8054[label="1;13pkt 13fpkt"];
5230--12755[label="1;16pkt 16fpkt"];
5230--15543[label="0.9375;15pkt 15fpkt"];
7843--8054[label="1;9pkt 9fpkt"];
7843--12755[label="1;9pkt 9fpkt"];
7843--15543[label="1;9pkt 9fpkt"];
8054--12755[label="1;13pkt 13fpkt"];
8054--15543[label="0.923077;12pkt 12fpkt"];
12755--15543[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="41.65.67.22" dst_port="5100" src_ip="136.90.122.200"/>
    </slice>
    <from sec="1246942825" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
4884[label="56.234.5.89;s;255pkt 255fpkt", shape=diamond, color=yellow];
8096[label="56.234.5.89;s;255pkt 255fpkt", shape=hexagon, color=black];
10659[label="56.234.5.89;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.234.5.89:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3808: (0.196078%)&lt;BR/&gt; 3807: (0.196078%)&lt;BR/&gt; 3806: (0.196078%)&lt;BR/&gt; 3805: (0.196078%)&gt;];
}
4884--7424[label="0.00392157;1pkt 1fpkt"];
4884--8096[label="1;255pkt 255fpkt"];
4884--8393[label="0.00392157;1pkt 1fpkt"];
4884--10659[label="1;255pkt 255fpkt"];
8096--8393[label="0.00392157;1pkt 1fpkt"];
8096--10659[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="56.234.5.89"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
5381[label="141.5.68.53;d;32pkt 32fpkt", shape=diamond, color=yellow];
5947[label="192.107.105.251;s;5pkt 5fpkt", shape=diamond, color=yellow];
8111[label="141.5.68.53;d;28pkt 28fpkt", shape=hexagon, color=black];
10549[label="50.209.201.83;34pkt 34fpkt", shape=pentagon, color=darkviolet];
13605[label="192.107.105.251;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14507[label="50.209.201.83;34pkt 34fpkt", shape=invtriangle, color=brown];
16304[label="50.209.201.83;34pkt 34fpkt", shape=invhouse, color=bisque];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.209.201.83:443, 141.5.68.53:*}[77.2727%]&lt;BR/&gt;{192.107.105.251:*, *:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (43.5028%)&lt;BR/&gt; 993: (5.36723%)&lt;BR/&gt; 2065: (1.41243%)&lt;BR/&gt; 2064: (1.41243%)&lt;BR/&gt; 2062: (1.41243%)&gt;];
}
5381--5947[label="0.8;4pkt 4fpkt"];
5381--8111[label="1;28pkt 28fpkt"];
5381--10549[label="0.875;28pkt 28fpkt"];
5381--13605[label="0.4;4pkt 4fpkt"];
5381--14507[label="0.875;28pkt 28fpkt"];
5381--16304[label="0.875;28pkt 28fpkt"];
5947--8111[label="0.8;4pkt 4fpkt"];
5947--13605[label="1;5pkt 5fpkt"];
8111--10549[label="0.857143;24pkt 24fpkt"];
8111--13605[label="0.4;4pkt 4fpkt"];
8111--14507[label="0.857143;24pkt 24fpkt"];
8111--16304[label="0.857143;24pkt 24fpkt"];
10549--14507[label="1;34pkt 34fpkt"];
10549--16304[label="1;34pkt 34fpkt"];
14507--16304[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="192.107.105.251"/>
      <filter dst_ip="141.5.68.53" src_ip="50.209.201.83" src_port="443"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24563,2.09597,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
5378[label="136.90.65.157;d;12pkt 12fpkt", shape=diamond, color=yellow];
5470[label="204.240.45.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
6110[label="210.21.253.62;s;3pkt 3fpkt", shape=diamond, color=yellow];
6452[label="17.121.59.2;s;8pkt 8fpkt", shape=diamond, color=yellow];
8109[label="136.90.65.157;d;4pkt 4fpkt", shape=hexagon, color=black];
8119[label="204.240.45.50;s;2pkt 2fpkt", shape=hexagon, color=black];
16179[label="204.240.45.50;2pkt 2fpkt", shape=invhouse, color=bisque];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.121.59.2:80, 136.90.71.135:*}[25%]&lt;BR/&gt;{17.121.59.2:80, 136.90.65.157:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1845: (7.57576%)&lt;BR/&gt; 1843: (7.57576%)&lt;BR/&gt; 1873: (4.54545%)&lt;BR/&gt; 1872: (4.54545%)&gt;];
}
5378--5470[label="1;2pkt 2fpkt"];
5378--6110[label="1;3pkt 3fpkt"];
5378--6452[label="0.5;4pkt 4fpkt"];
5378--8109[label="1;4pkt 4fpkt"];
5378--8119[label="1;2pkt 2fpkt"];
5378--16179[label="1;2pkt 2fpkt"];
5470--8109[label="1;2pkt 2fpkt"];
5470--8119[label="1;2pkt 2fpkt"];
5470--16179[label="1;2pkt 2fpkt"];
6452--8109[label="0.5;2pkt 2fpkt"];
8109--8119[label="1;2pkt 2fpkt"];
8109--16179[label="1;2pkt 2fpkt"];
8119--16179[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.65.157" src_ip="17.121.59.2" src_port="80"/>
      <filter dst_ip="136.90.71.135" src_ip="17.121.59.2" src_port="80"/>
    </slice>
    <from sec="1246943294" usec="0"/>
    <to sec="1246943609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
5562[label="204.80.31.148;d;63pkt 63fpkt", shape=diamond, color=yellow];
8151[label="204.80.31.148;d;58pkt 58fpkt", shape=hexagon, color=black];
11662[label="50.196.149.141;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.181.223.235:7920, 204.80.31.148:*}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7920: (49.2424%)&lt;BR/&gt; 4827: (1.13636%)&lt;BR/&gt; 3545: (1.13636%)&lt;BR/&gt; 2587: (1.13636%)&lt;BR/&gt; 2511: (1.13636%)&gt;];
}
5562--8151[label="1;58pkt 58fpkt"];
5562--11662[label="0.909091;10pkt 10fpkt"];
8151--11662[label="0.727273;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.31.148" src_ip="38.181.223.235" src_port="7920"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
5067[label="204.91.174.152;s;64pkt 64fpkt", shape=diamond, color=yellow];
8168[label="204.91.174.152;s;60pkt 60fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.174.152:13381, *:*}[73.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13381: (36.6935%)&lt;BR/&gt; 8000: (6.45161%)&lt;BR/&gt; 80: (3.22581%)&lt;BR/&gt; 13186: (2.41935%)&lt;BR/&gt; 10513: (2.41935%)&gt;];
}
5067--8168[label="1;60pkt 60fpkt"];
5067--8514[label="0.015625;1pkt 1fpkt"];
5067--8603[label="0.015625;1pkt 1fpkt"];
5067--8680[label="0.015625;1pkt 1fpkt"];
8168--8514[label="0.0166667;1pkt 1fpkt"];
8168--8603[label="0.0166667;1pkt 1fpkt"];
8168--8680[label="0.0166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.174.152" src_port="13381"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
4082[label="169.185.121.26;s;30pkt 30fpkt", shape=diamond, color=yellow];
8200[label="169.185.121.26;s;29pkt 29fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.121.26:20229, *:*}[76.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20229: (38.1356%)&lt;BR/&gt; 33154: (3.38983%)&lt;BR/&gt; 31875: (3.38983%)&lt;BR/&gt; 443: (3.38983%)&lt;BR/&gt; 57299: (1.69492%)&gt;];
}
4082--8200[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="169.185.121.26" src_port="20229"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
2917[label="218.170.96.205;d;16pkt 16fpkt", shape=diamond, color=yellow];
3053[label="155.192.168.175;s;9pkt 9fpkt", shape=diamond, color=yellow];
7393[label="155.192.168.175;s;3pkt 3fpkt", shape=hexagon, color=black];
8219[label="218.170.96.205;d;14pkt 14fpkt", shape=hexagon, color=black];
12335[label="155.192.168.175;10pkt 10fpkt", shape=pentagon, color=darkviolet];
15359[label="155.192.168.175;10pkt 10fpkt", shape=invtriangle, color=brown];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.58.10.157:80, 218.170.96.205:*}[42.1053%]&lt;BR/&gt;{155.192.168.175:80, 218.170.96.205:*}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 57544: (4.83871%)&lt;BR/&gt; 38455: (4.83871%)&lt;BR/&gt; 52299: (4.03226%)&lt;BR/&gt; 48027: (4.03226%)&gt;];
}
2917--3053[label="0.777778;7pkt 7fpkt"];
2917--7393[label="0.666667;2pkt 2fpkt"];
2917--8219[label="1;14pkt 14fpkt"];
2917--8451[label="0.0625;1pkt 1fpkt"];
2917--8484[label="0.0625;1pkt 1fpkt"];
2917--8541[label="0.0625;1pkt 1fpkt"];
2917--8574[label="0.0625;1pkt 1fpkt"];
2917--8626[label="0.0625;1pkt 1fpkt"];
2917--8656[label="0.0625;1pkt 1fpkt"];
2917--12335[label="0.7;7pkt 7fpkt"];
2917--15359[label="0.7;7pkt 7fpkt"];
3053--7393[label="1;3pkt 3fpkt"];
3053--8219[label="0.666667;6pkt 6fpkt"];
3053--8484[label="0.111111;1pkt 1fpkt"];
3053--8574[label="0.111111;1pkt 1fpkt"];
3053--8656[label="0.111111;1pkt 1fpkt"];
3053--12335[label="1;9pkt 9fpkt"];
3053--15359[label="1;9pkt 9fpkt"];
7393--8219[label="0.666667;2pkt 2fpkt"];
7393--12335[label="1;3pkt 3fpkt"];
7393--15359[label="1;3pkt 3fpkt"];
8219--8451[label="0.0714286;1pkt 1fpkt"];
8219--8484[label="0.0714286;1pkt 1fpkt"];
8219--8541[label="0.0714286;1pkt 1fpkt"];
8219--8574[label="0.0714286;1pkt 1fpkt"];
8219--8626[label="0.0714286;1pkt 1fpkt"];
8219--8656[label="0.0714286;1pkt 1fpkt"];
8219--12335[label="0.6;6pkt 6fpkt"];
8219--15359[label="0.6;6pkt 6fpkt"];
12335--15359[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="218.170.96.205" src_ip="155.192.168.175" src_port="80"/>
      <filter dst_ip="218.170.96.205" src_ip="137.58.10.157" src_port="80"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
5443[label="169.185.9.140;d;17pkt 17fpkt", shape=diamond, color=yellow];
5884[label="16.17.212.124;s;11pkt 11fpkt", shape=diamond, color=yellow];
8248[label="16.17.212.124;s;11pkt 11fpkt", shape=hexagon, color=black];
11319[label="16.17.212.124;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.17.212.124:80, 169.185.9.140:*}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2515: (4%)&lt;BR/&gt; 2514: (4%)&lt;BR/&gt; 2508: (4%)&lt;BR/&gt; 2507: (4%)&gt;];
}
5443--5884[label="0.909091;10pkt 10fpkt"];
5443--8248[label="0.909091;10pkt 10fpkt"];
5443--11319[label="0.909091;10pkt 10fpkt"];
5884--8248[label="1;11pkt 11fpkt"];
5884--8484[label="0.0909091;1pkt 1fpkt"];
5884--8574[label="0.0909091;1pkt 1fpkt"];
5884--8656[label="0.0909091;1pkt 1fpkt"];
5884--11319[label="1;11pkt 11fpkt"];
8248--8484[label="0.0909091;1pkt 1fpkt"];
8248--8574[label="0.0909091;1pkt 1fpkt"];
8248--8656[label="0.0909091;1pkt 1fpkt"];
8248--11319[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.9.140" src_ip="16.17.212.124" src_port="80"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947303,2.18132,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.113.228.200"/>
      <from sec="1246943334" usec="0"/>
      <to sec="1246943539" usec="0"/>
    </slice>
    <from sec="1246943334" usec="0"/>
    <to sec="1246943539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
704[label="193.150.201.33;s;1010pkt 1010fpkt", shape=diamond, color=yellow];
8285[label="193.150.201.33;s;1010pkt 1010fpkt", shape=hexagon, color=black];
9478[label="193.150.201.33;1096pkt 1096fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.150.201.33:6667, *:*}[29.2883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.8427%)&lt;BR/&gt; 113: (9.21053%)&lt;BR/&gt; 80: (9.05006%)&lt;BR/&gt; 1080: (9.00193%)&lt;BR/&gt; 6661: (0.962773%)&gt;];
}
704--8285[label="1;1010pkt 1010fpkt"];
704--8497[label="0.000990099;1pkt 1fpkt"];
704--8514[label="0.0128713;13pkt 13fpkt"];
704--8587[label="0.000990099;1pkt 1fpkt"];
704--8603[label="0.0128713;13pkt 13fpkt"];
704--8666[label="0.000990099;1pkt 1fpkt"];
704--8680[label="0.0128713;13pkt 13fpkt"];
704--9478[label="1;1010pkt 1010fpkt"];
8285--8497[label="0.000990099;1pkt 1fpkt"];
8285--8514[label="0.0128713;13pkt 13fpkt"];
8285--8587[label="0.000990099;1pkt 1fpkt"];
8285--8603[label="0.0128713;13pkt 13fpkt"];
8285--8666[label="0.000990099;1pkt 1fpkt"];
8285--8680[label="0.0128713;13pkt 13fpkt"];
8285--9478[label="1;1010pkt 1010fpkt"];
</description>
    <slice>
      <filter src_ip="193.150.201.33" src_port="6667"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
5239[label="141.179.135.70;s;54pkt 54fpkt", shape=diamond, color=yellow];
8330[label="141.179.135.70;s;54pkt 54fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.135.70:61473, *:*}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61473: (46.2963%)&lt;BR/&gt; 443: (2.77778%)&lt;BR/&gt; 17244: (1.85185%)&lt;BR/&gt; 12084: (1.85185%)&lt;BR/&gt; 3641: (1.85185%)&gt;];
}
5239--8330[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.135.70" src_port="61473"/>
    </slice>
    <from sec="1246942831" usec="0"/>
    <to sec="1246943619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
5489[label="46.138.1.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
8351[label="46.138.1.138;s;1pkt 1fpkt", shape=hexagon, color=black];
11587[label="46.138.1.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14998[label="46.138.1.138;2pkt 2fpkt", shape=invtriangle, color=brown];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.138.1.138:80, 169.185.225.58:60163}[50%]&lt;BR/&gt;{46.138.1.138:80, 204.91.178.197:1462}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60163: (33.3333%)&lt;BR/&gt; 1462: (16.6667%)&gt;];
}
5489--8351[label="1;1pkt 1fpkt"];
5489--11587[label="1;1pkt 1fpkt"];
5489--14998[label="1;1pkt 1fpkt"];
8351--11587[label="1;1pkt 1fpkt"];
8351--14998[label="1;1pkt 1fpkt"];
11587--14998[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.178.197" dst_port="1462" src_ip="46.138.1.138" src_port="80"/>
      <filter dst_ip="169.185.225.58" dst_port="60163" src_ip="46.138.1.138" src_port="80"/>
    </slice>
    <from sec="1246943232" usec="0"/>
    <to sec="1246943498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.37.0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
6029[label="216.64.128.0;s;10pkt 10fpkt", shape=diamond, color=yellow];
6149[label="141.179.200.68;d;11pkt 11fpkt", shape=diamond, color=yellow];
8701[label="216.64.128.0;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.64.128.0:*, 141.179.200.68:80}[50%]&lt;BR/&gt;{216.64.128.0:*, 141.179.174.0:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61611: (5%)&lt;BR/&gt; 61603: (5%)&lt;BR/&gt; 61602: (5%)&lt;BR/&gt; 61601: (5%)&gt;];
}
6029--6149[label="0.7;7pkt 7fpkt"];
6029--8701[label="1;9pkt 9fpkt"];
6149--8701[label="0.777778;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.200.68" dst_port="80" src_ip="216.64.128.0"/>
      <filter dst_ip="141.179.174.0" dst_port="80" src_ip="216.64.128.0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.3.135.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.53.154.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.208.196.0"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.16.40.1"/>
    </slice>
    <from sec="1246943209" usec="0"/>
    <to sec="1246943220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
2889[label="169.185.0.158;d;27pkt 27fpkt", shape=diamond, color=yellow];
3047[label="219.45.57.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
4454[label="219.45.57.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
6117[label="219.45.57.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
7837[label="169.185.0.158;d;22pkt 22fpkt", shape=hexagon, color=black];
8724[label="219.45.57.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10811[label="219.45.58.97;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.45.58.97:80, 169.185.0.158:*}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 55322: (2.94118%)&lt;BR/&gt; 10442: (2.94118%)&lt;BR/&gt; 55367: (2.20588%)&lt;BR/&gt; 55366: (2.20588%)&gt;];
}
2889--3047[label="1;1pkt 1fpkt"];
2889--4454[label="1;1pkt 1fpkt"];
2889--6117[label="1;1pkt 1fpkt"];
2889--7837[label="1;22pkt 22fpkt"];
2889--8451[label="0.0740741;2pkt 2fpkt"];
2889--8484[label="0.222222;6pkt 6fpkt"];
2889--8541[label="0.0740741;2pkt 2fpkt"];
2889--8574[label="0.222222;6pkt 6fpkt"];
2889--8626[label="0.0740741;2pkt 2fpkt"];
2889--8656[label="0.222222;6pkt 6fpkt"];
2889--8724[label="1;1pkt 1fpkt"];
2889--9614[label="0.037037;1pkt 1fpkt"];
2889--10811[label="1;15pkt 15fpkt"];
3047--7837[label="1;1pkt 1fpkt"];
3047--8724[label="1;1pkt 1fpkt"];
4454--7837[label="1;1pkt 1fpkt"];
7837--8451[label="0.0909091;2pkt 2fpkt"];
7837--8484[label="0.272727;6pkt 6fpkt"];
7837--8541[label="0.0909091;2pkt 2fpkt"];
7837--8574[label="0.272727;6pkt 6fpkt"];
7837--8626[label="0.0909091;2pkt 2fpkt"];
7837--8656[label="0.272727;6pkt 6fpkt"];
7837--8724[label="1;1pkt 1fpkt"];
7837--10811[label="0.8;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.0.158" src_ip="219.45.58.97" src_port="80"/>
    </slice>
    <from sec="1246942831" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.18.120.1"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.85.123.1"/>
    </slice>
    <from sec="1246943318" usec="0"/>
    <to sec="1246943654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.3.135.1"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.42.223.1"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.152.232.1"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.101.25.2"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.110.33.2"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.119.144.2"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.85.0.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.180.0.3"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.157.2.3"/>
    </slice>
    <from sec="1246943298" usec="0"/>
    <to sec="1246943326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
8780[label="141.179.54.3;118pkt 118fpkt", shape=pentagon, color=darkviolet];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.54.3:3072, *:*}[95.7627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3072: (47.8814%)&lt;BR/&gt; 443: (1.27119%)&lt;BR/&gt; 80: (0.847458%)&lt;BR/&gt; 64715: (0.423729%)&lt;BR/&gt; 64309: (0.423729%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.179.54.3" src_port="3072"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.51.65.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.32.82.3"/>
    </slice>
    <from sec="1246943554" usec="0"/>
    <to sec="1246943604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.156.119.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.37.4"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.45.57.4"/>
    </slice>
    <from sec="1246943261" usec="0"/>
    <to sec="1246943267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.170.84.4"/>
    </slice>
    <from sec="1246943215" usec="0"/>
    <to sec="1246943255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.172.196.4"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.102.197.4"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.11.5"/>
    </slice>
    <from sec="1246943627" usec="0"/>
    <to sec="1246943663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.42.14.5"/>
    </slice>
    <from sec="1246942973" usec="0"/>
    <to sec="1246943165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.22.24.5"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.114.63.5"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.22.71.5"/>
    </slice>
    <from sec="1246942872" usec="0"/>
    <to sec="1246943073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.84.5"/>
    </slice>
    <from sec="1246942917" usec="0"/>
    <to sec="1246943667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.37.86.5"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.168.96.5"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.25.181.5"/>
    </slice>
    <from sec="1246943521" usec="0"/>
    <to sec="1246943526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.40.208.5"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.80.231.5"/>
    </slice>
    <from sec="1246942888" usec="0"/>
    <to sec="1246943106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.142.10.6"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.195.10.6"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.36.53.6"/>
    </slice>
    <from sec="1246943673" usec="0"/>
    <to sec="1246943686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.150.70.6"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.147.89.6"/>
    </slice>
    <from sec="1246942848" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.188.6"/>
    </slice>
    <from sec="1246943356" usec="0"/>
    <to sec="1246943369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.245.6"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.224.0.7"/>
    </slice>
    <from sec="1246943611" usec="0"/>
    <to sec="1246943628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.16.7"/>
    </slice>
    <from sec="1246943672" usec="0"/>
    <to sec="1246943678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.134.7"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.22.168.7"/>
    </slice>
    <from sec="1246942956" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.44.18.8"/>
    </slice>
    <from sec="1246942981" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.240.45.8"/>
    </slice>
    <from sec="1246943379" usec="0"/>
    <to sec="1246943593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.103.86.8"/>
    </slice>
    <from sec="1246943294" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.72.101.8"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.209.245.8"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.185.23.9"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.148.55.9"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.133.89.9"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32482,2.17817,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
5[label="136.90.214.9s;31pkt 31fpkt", shape=rectangle, color=red];
8947[label="136.90.214.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13775[label="136.90.214.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.214.9:*, 204.81.58.173:80}[61.2903%]&lt;BR/&gt;{136.90.214.9:*, 204.81.58.169:80}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2085: (4.54545%)&lt;BR/&gt; 2081: (1.51515%)&lt;BR/&gt; 2079: (1.51515%)&lt;BR/&gt; 2073: (1.51515%)&gt;];
}
5--8947[label="1;1pkt 1fpkt"];
5--13775[label="1;1pkt 1fpkt"];
8947--13775[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.81.58.173" dst_port="80" src_ip="136.90.214.9"/>
      <filter dst_ip="204.81.58.169" dst_port="80" src_ip="136.90.214.9"/>
    </slice>
    <from sec="1246943650" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
2619[label="204.91.3.10;s;208pkt 208fpkt", shape=diamond, color=yellow];
2620[label="89.11.163.196;d;105pkt 105fpkt", shape=diamond, color=yellow];
3649[label="89.11.163.236;d;95pkt 95fpkt", shape=diamond, color=yellow];
7392[label="89.11.163.236;d;95pkt 95fpkt", shape=hexagon, color=black];
8950[label="204.91.3.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13777[label="204.91.3.10;1pkt 1fpkt", shape=invtriangle, color=brown];
16001[label="204.91.3.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.3.10:*, 89.11.163.196:443}[50%]&lt;BR/&gt;{204.91.3.10:*, 89.11.163.236:443}[49.5192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.5059%)&lt;BR/&gt; 17326: (0.494071%)&lt;BR/&gt; 1170: (0.494071%)&lt;BR/&gt; 1430: (0.296443%)&lt;BR/&gt; 1428: (0.296443%)&gt;];
}
2619--2620[label="1;105pkt 105fpkt"];
2619--3649[label="1;95pkt 95fpkt"];
2619--7392[label="1;95pkt 95fpkt"];
2619--8950[label="1;1pkt 1fpkt"];
2619--13777[label="1;1pkt 1fpkt"];
2619--16001[label="1;1pkt 1fpkt"];
2620--8950[label="1;1pkt 1fpkt"];
2620--13777[label="1;1pkt 1fpkt"];
2620--16001[label="1;1pkt 1fpkt"];
3649--7392[label="1;95pkt 95fpkt"];
8950--13777[label="1;1pkt 1fpkt"];
8950--16001[label="1;1pkt 1fpkt"];
13777--16001[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="89.11.163.196" dst_port="443" src_ip="204.91.3.10"/>
      <filter dst_ip="89.11.163.236" dst_port="443" src_ip="204.91.3.10"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
3936[label="136.90.133.20;d;110pkt 110fpkt", shape=diamond, color=yellow];
8957[label="213.82.70.10;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.90.133.20:3690}[71.8182%]&lt;BR/&gt;{*:80, 136.90.133.20:*}[20.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3690: (36.8644%)&lt;BR/&gt; 80: (9.74576%)&lt;BR/&gt; 8000: (3.38983%)&lt;BR/&gt; 18151: (0.847458%)&lt;BR/&gt; 18021: (0.847458%)&gt;];
}
3936--3973[label="0.0181818;2pkt 2fpkt"];
3936--8009[label="0.0181818;2pkt 2fpkt"];
3936--8451[label="0.0181818;2pkt 2fpkt"];
3936--8484[label="0.00909091;1pkt 1fpkt"];
3936--8541[label="0.0181818;2pkt 2fpkt"];
3936--8574[label="0.00909091;1pkt 1fpkt"];
3936--8626[label="0.0181818;2pkt 2fpkt"];
3936--8656[label="0.00909091;1pkt 1fpkt"];
3936--8957[label="1;8pkt 8fpkt"];
3936--10644[label="0.212766;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.133.20" src_port="80"/>
      <filter dst_ip="136.90.133.20" dst_port="3690"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.60.151.10"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.0.161.10"/>
    </slice>
    <from sec="1246943302" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.207.10"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.195.10.11"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.205.99.11"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.116.58.12"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.92.75.12"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.34.100.12"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.19.144.12"/>
    </slice>
    <from sec="1246943642" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.212.51.13"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
9048[label="169.185.65.13;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.65.13:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="169.185.65.13"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.142.218.13"/>
    </slice>
    <from sec="1246943072" usec="0"/>
    <to sec="1246943673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.33.38.14"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.186.14"/>
    </slice>
    <from sec="1246943510" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.83.6.15"/>
    </slice>
    <from sec="1246942816" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.91.53.15"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.86.147.15"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246942942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.198.189.15"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.0.195.16"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.22.196.16"/>
    </slice>
    <from sec="1246943649" usec="0"/>
    <to sec="1246943679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.188.129.17"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.66.166.17"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
5944[label="136.90.117.241;d;20pkt 20fpkt", shape=diamond, color=yellow];
9194[label="204.100.230.19;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.100.230.19:80, 136.90.117.241:*}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2722: (2.5%)&lt;BR/&gt; 2720: (2.5%)&lt;BR/&gt; 2718: (2.5%)&lt;BR/&gt; 2716: (2.5%)&gt;];
}
5944--9194[label="0.8;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.117.241" src_ip="204.100.230.19" src_port="80"/>
    </slice>
    <from sec="1246943366" usec="0"/>
    <to sec="1246943632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.230.52.20"/>
    </slice>
    <from sec="1246943056" usec="0"/>
    <to sec="1246943136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.65.73.20"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.140.78.21"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.227.78.21"/>
    </slice>
    <from sec="1246943395" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.141.129.21"/>
    </slice>
    <from sec="1246943102" usec="0"/>
    <to sec="1246943110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.217.151.21"/>
    </slice>
    <from sec="1246943002" usec="0"/>
    <to sec="1246943138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
419[label="22.49.243.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="204.91.160.183;d;92pkt 92fpkt", shape=diamond, color=yellow];
2027[label="91.52.73.22;s;3pkt 3fpkt", shape=diamond, color=yellow];
6732[label="22.49.243.132;s;1pkt 1fpkt", shape=hexagon, color=black];
9245[label="91.52.73.22;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.160.183:14910}[55.914%]&lt;BR/&gt;{*:6346, 204.91.160.183:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14910: (26.4423%)&lt;BR/&gt; 6346: (15.8654%)&lt;BR/&gt; 22125: (2.88462%)&lt;BR/&gt; 25159: (1.92308%)&lt;BR/&gt; 36832: (1.44231%)&gt;];
}
419--420[label="1;1pkt 1fpkt"];
419--6732[label="1;1pkt 1fpkt"];
420--2027[label="1;3pkt 3fpkt"];
420--6732[label="1;1pkt 1fpkt"];
420--9245[label="0.857143;6pkt 6fpkt"];
2027--9245[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.160.183" src_port="6346"/>
      <filter dst_ip="204.91.160.183" dst_port="14910"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.182.22"/>
    </slice>
    <from sec="1246943008" usec="0"/>
    <to sec="1246943427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.58.97.23"/>
    </slice>
    <from sec="1246943260" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.134.132.23"/>
    </slice>
    <from sec="1246942824" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.182.168.24"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.216.170.24"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.68.175.24"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.44.97.25"/>
    </slice>
    <from sec="1246942915" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.46.163.25"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.192.23.26"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
1218[label="136.90.44.170;d;6pkt 6fpkt", shape=diamond, color=yellow];
1220[label="219.5.246.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
6681[label="219.5.246.69;s;1pkt 1fpkt", shape=hexagon, color=black];
10241[label="219.5.246.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14364[label="219.5.246.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.168.96.26:80, 136.90.44.170:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62559: (25%)&lt;BR/&gt; 8084: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 62658: (5%)&lt;BR/&gt; 62656: (5%)&gt;];
}
1218--1220[label="1;1pkt 1fpkt"];
1218--6123[label="0.833333;5pkt 5fpkt"];
1218--6681[label="1;1pkt 1fpkt"];
1218--8451[label="0.333333;2pkt 2fpkt"];
1218--8541[label="0.333333;2pkt 2fpkt"];
1218--8626[label="0.333333;2pkt 2fpkt"];
1218--9325[label="0.833333;5pkt 5fpkt"];
1218--10241[label="1;1pkt 1fpkt"];
1218--14364[label="1;1pkt 1fpkt"];
1220--6681[label="1;1pkt 1fpkt"];
1220--10241[label="1;1pkt 1fpkt"];
1220--14364[label="1;1pkt 1fpkt"];
6681--10241[label="1;1pkt 1fpkt"];
6681--14364[label="1;1pkt 1fpkt"];
10241--14364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.44.170" src_ip="46.168.96.26" src_port="80"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.3.135.26"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.45.169.26"/>
    </slice>
    <from sec="1246943495" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.30.217.26"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.138.18.27"/>
    </slice>
    <from sec="1246943104" usec="0"/>
    <to sec="1246943124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
855[label="141.179.130.27;s;2583pkt 2583fpkt", shape=diamond, color=yellow];
9353[label="141.179.130.27;2783pkt 2783fpkt", shape=pentagon, color=darkviolet];
13970[label="141.179.130.27;2783pkt 2783fpkt", shape=invtriangle, color=brown];
16078[label="141.179.130.27;2782pkt 2782fpkt", shape=invhouse, color=bisque];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.130.27:40773, *:*}[98.1315%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40773: (49.0577%)&lt;BR/&gt; 443: (0.869088%)&lt;BR/&gt; 54045: (0.0548898%)&lt;BR/&gt; 15442: (0.0548898%)&lt;BR/&gt; 10885: (0.0548898%)&gt;];
}
855--9353[label="1;2583pkt 2583fpkt"];
855--13970[label="1;2583pkt 2583fpkt"];
855--16078[label="0.999613;2582pkt 2582fpkt"];
9353--13970[label="1;2783pkt 2783fpkt"];
9353--16078[label="1;2782pkt 2782fpkt"];
13970--16078[label="1;2782pkt 2782fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.130.27" src_port="40773"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.149.45.28"/>
    </slice>
    <from sec="1246943622" usec="0"/>
    <to sec="1246943670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.3.184.28"/>
    </slice>
    <from sec="1246942844" usec="0"/>
    <to sec="1246943257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
381[label="204.91.175.39;d;1019pkt 1019fpkt", shape=diamond, color=yellow];
686[label="46.79.148.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
967[label="99.24.137.166;s;13pkt 13fpkt", shape=diamond, color=yellow];
1088[label="204.18.69.75;s;29pkt 29fpkt", shape=diamond, color=yellow];
1136[label="211.1.85.222;s;9pkt 9fpkt", shape=diamond, color=yellow];
1906[label="45.50.12.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
2705[label="32.210.23.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
5200[label="27.37.40.237;s;9pkt 9fpkt", shape=diamond, color=yellow];
7212[label="99.24.137.166;s;5pkt 5fpkt", shape=hexagon, color=black];
7245[label="204.18.69.75;s;17pkt 17fpkt", shape=hexagon, color=black];
7290[label="32.210.23.175;s;1pkt 1fpkt", shape=hexagon, color=black];
9378[label="22.132.54.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9396[label="45.50.12.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10370[label="204.18.69.75;36pkt 36fpkt", shape=pentagon, color=darkviolet];
11229[label="22.50.186.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12155[label="99.24.137.166;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12321[label="32.210.23.175;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12452[label="46.79.148.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13137[label="211.1.85.222;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13392[label="27.37.40.237;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13983[label="45.50.12.30;1pkt 1fpkt", shape=invtriangle, color=brown];
14425[label="204.18.69.75;36pkt 36fpkt", shape=invtriangle, color=brown];
16086[label="45.50.12.30;1pkt 1fpkt", shape=invhouse, color=bisque];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.175.39:44694}[85.6445%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44694: (39.3355%)&lt;BR/&gt; 60624: (3.40443%)&lt;BR/&gt; 0: (2.21493%)&lt;BR/&gt; 80: (1.72272%)&lt;BR/&gt; 42412: (1.39459%)&gt;];
}
381--383[label="0.07;7pkt 7fpkt"];
381--686[label="1;1pkt 1fpkt"];
381--865[label="1;1pkt 1fpkt"];
381--967[label="1;13pkt 13fpkt"];
381--1088[label="1;29pkt 29fpkt"];
381--1136[label="1;9pkt 9fpkt"];
381--1565[label="0.021645;5pkt 5fpkt"];
381--1906[label="1;1pkt 1fpkt"];
381--2705[label="1;1pkt 1fpkt"];
381--2895[label="0.0204082;1pkt 1fpkt"];
381--4683[label="0.03125;4pkt 4fpkt"];
381--5200[label="1;9pkt 9fpkt"];
381--6607[label="0.269231;7pkt 7fpkt"];
381--6773[label="1;1pkt 1fpkt"];
381--7212[label="1;5pkt 5fpkt"];
381--7245[label="1;17pkt 17fpkt"];
381--7290[label="1;1pkt 1fpkt"];
381--8367[label="0.583333;7pkt 7fpkt"];
381--8451[label="0.00686948;7pkt 7fpkt"];
381--8458[label="0.00686948;7pkt 7fpkt"];
381--8484[label="0.00686948;7pkt 7fpkt"];
381--8541[label="0.00686948;7pkt 7fpkt"];
381--8548[label="0.00686948;7pkt 7fpkt"];
381--8574[label="0.00686948;7pkt 7fpkt"];
381--8626[label="0.00686948;7pkt 7fpkt"];
381--8633[label="0.00686948;7pkt 7fpkt"];
381--8656[label="0.00686948;7pkt 7fpkt"];
381--9028[label="1;1pkt 1fpkt"];
381--9378[label="1;1pkt 1fpkt"];
381--9396[label="1;1pkt 1fpkt"];
381--10370[label="0.916667;33pkt 33fpkt"];
381--10416[label="0.114286;4pkt 4fpkt"];
381--10565[label="0.0192308;1pkt 1fpkt"];
381--11019[label="0.0272109;4pkt 4fpkt"];
381--11229[label="1;4pkt 4fpkt"];
381--12003[label="0.019084;5pkt 5fpkt"];
381--12155[label="0.928571;13pkt 13fpkt"];
381--12321[label="1;1pkt 1fpkt"];
381--12452[label="1;1pkt 1fpkt"];
381--13030[label="0.0113636;1pkt 1fpkt"];
381--13137[label="1;9pkt 9fpkt"];
381--13392[label="0.888889;8pkt 8fpkt"];
381--13815[label="1;1pkt 1fpkt"];
381--13983[label="1;1pkt 1fpkt"];
381--14425[label="0.916667;33pkt 33fpkt"];
381--14518[label="0.0192308;1pkt 1fpkt"];
381--15202[label="0.019084;5pkt 5fpkt"];
381--15659[label="0.0113636;1pkt 1fpkt"];
381--16086[label="1;1pkt 1fpkt"];
686--12452[label="1;1pkt 1fpkt"];
967--7212[label="1;5pkt 5fpkt"];
967--12155[label="1;13pkt 13fpkt"];
1088--7245[label="1;17pkt 17fpkt"];
1088--10370[label="1;29pkt 29fpkt"];
1088--14425[label="1;29pkt 29fpkt"];
1136--13137[label="1;9pkt 9fpkt"];
1906--9396[label="1;1pkt 1fpkt"];
1906--13983[label="1;1pkt 1fpkt"];
1906--16086[label="1;1pkt 1fpkt"];
2705--7290[label="1;1pkt 1fpkt"];
2705--12321[label="1;1pkt 1fpkt"];
5200--13392[label="0.888889;8pkt 8fpkt"];
7212--12155[label="1;5pkt 5fpkt"];
7245--10370[label="1;17pkt 17fpkt"];
7245--14425[label="1;17pkt 17fpkt"];
7290--12321[label="1;1pkt 1fpkt"];
9396--13983[label="1;1pkt 1fpkt"];
9396--16086[label="1;1pkt 1fpkt"];
10370--14425[label="1;36pkt 36fpkt"];
13983--16086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.175.39" dst_port="44694"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.30.31.31"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
481[label="42.30.217.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
482[label="155.192.38.153;s;11pkt 11fpkt", shape=diamond, color=yellow];
1293[label="141.161.242.100;s;87pkt 87fpkt", shape=diamond, color=yellow];
1353[label="42.30.222.98;d;8pkt 8fpkt", shape=diamond, color=yellow];
1996[label="137.58.48.223;s;123pkt 123fpkt", shape=diamond, color=yellow];
2188[label="42.30.217.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
2189[label="141.161.112.41;s;29pkt 29fpkt", shape=diamond, color=yellow];
2377[label="42.30.222.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
2682[label="42.30.217.81;d;160pkt 160fpkt", shape=diamond, color=yellow];
2762[label="42.30.222.192;d;88pkt 88fpkt", shape=diamond, color=yellow];
3743[label="42.30.222.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
4363[label="42.30.217.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
4990[label="42.30.222.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
5760[label="42.30.217.242;d;4pkt 4fpkt", shape=diamond, color=yellow];
5771[label="141.161.87.219;s;39pkt 39fpkt", shape=diamond, color=yellow];
7037[label="141.161.242.100;s;27pkt 27fpkt", shape=hexagon, color=black];
7143[label="155.192.38.153;s;7pkt 7fpkt", shape=hexagon, color=black];
7926[label="42.30.217.44;d;1pkt 1fpkt", shape=hexagon, color=black];
10894[label="141.161.242.100;97pkt 97fpkt", shape=pentagon, color=darkviolet];
11901[label="155.192.38.153;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13096[label="141.161.87.219;43pkt 43fpkt", shape=pentagon, color=darkviolet];
15153[label="155.192.38.153;12pkt 12fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.58.48.223:80, 42.30.217.81:*}[38.0805%]&lt;BR/&gt;{141.161.242.100:80, 42.30.222.192:*}[28.1734%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4032%)&lt;BR/&gt; 63568: (0.397878%)&lt;BR/&gt; 443: (0.397878%)&lt;BR/&gt; 50437: (0.331565%)&lt;BR/&gt; 49269: (0.331565%)&gt;];
}
481--482[label="1;1pkt 1fpkt"];
481--7143[label="1;1pkt 1fpkt"];
481--11901[label="1;1pkt 1fpkt"];
481--15153[label="1;1pkt 1fpkt"];
482--1353[label="0.125;1pkt 1fpkt"];
482--1520[label="1;1pkt 1fpkt"];
482--2377[label="1;1pkt 1fpkt"];
482--3743[label="1;1pkt 1fpkt"];
482--4363[label="1;1pkt 1fpkt"];
482--4990[label="1;1pkt 1fpkt"];
482--5760[label="0.25;1pkt 1fpkt"];
482--7143[label="1;7pkt 7fpkt"];
482--8451[label="0.0909091;1pkt 1fpkt"];
482--8458[label="0.0909091;1pkt 1fpkt"];
482--8541[label="0.0909091;1pkt 1fpkt"];
482--8548[label="0.0909091;1pkt 1fpkt"];
482--8626[label="0.0909091;1pkt 1fpkt"];
482--8633[label="0.0909091;1pkt 1fpkt"];
482--11901[label="1;11pkt 11fpkt"];
482--15153[label="1;11pkt 11fpkt"];
1293--1353[label="0.375;3pkt 3fpkt"];
1293--2762[label="0.747126;65pkt 65fpkt"];
1293--7037[label="1;27pkt 27fpkt"];
1293--8451[label="0.0344828;3pkt 3fpkt"];
1293--8458[label="0.0344828;3pkt 3fpkt"];
1293--8484[label="0.0574713;5pkt 5fpkt"];
1293--8541[label="0.0344828;3pkt 3fpkt"];
1293--8548[label="0.0344828;3pkt 3fpkt"];
1293--8574[label="0.0574713;5pkt 5fpkt"];
1293--8626[label="0.0344828;3pkt 3fpkt"];
1293--8633[label="0.0344828;3pkt 3fpkt"];
1293--8656[label="0.0574713;5pkt 5fpkt"];
1293--10894[label="1;87pkt 87fpkt"];
1353--2228[label="0.125;1pkt 1fpkt"];
1353--6683[label="0.125;1pkt 1fpkt"];
1353--7037[label="0.375;3pkt 3fpkt"];
1353--8484[label="0.125;1pkt 1fpkt"];
1353--8574[label="0.125;1pkt 1fpkt"];
1353--8656[label="0.125;1pkt 1fpkt"];
1353--10452[label="0.125;1pkt 1fpkt"];
1353--10894[label="0.375;3pkt 3fpkt"];
1353--11901[label="0.125;1pkt 1fpkt"];
1353--15153[label="0.125;1pkt 1fpkt"];
1996--2682[label="1;123pkt 123fpkt"];
1996--8451[label="0.0569106;7pkt 7fpkt"];
1996--8458[label="0.0650407;8pkt 8fpkt"];
1996--8484[label="0.0731707;9pkt 9fpkt"];
1996--8541[label="0.0569106;7pkt 7fpkt"];
1996--8548[label="0.0650407;8pkt 8fpkt"];
1996--8574[label="0.0731707;9pkt 9fpkt"];
1996--8626[label="0.0569106;7pkt 7fpkt"];
1996--8633[label="0.0650407;8pkt 8fpkt"];
1996--8656[label="0.0731707;9pkt 9fpkt"];
2188--2189[label="1;1pkt 1fpkt"];
2189--2762[label="0.37931;11pkt 11fpkt"];
2189--4011[label="0.272727;6pkt 6fpkt"];
2189--7926[label="1;1pkt 1fpkt"];
2189--8458[label="0.103448;3pkt 3fpkt"];
2189--8484[label="0.103448;3pkt 3fpkt"];
2189--8548[label="0.103448;3pkt 3fpkt"];
2189--8574[label="0.103448;3pkt 3fpkt"];
2189--8633[label="0.103448;3pkt 3fpkt"];
2189--8656[label="0.103448;3pkt 3fpkt"];
2377--7143[label="1;1pkt 1fpkt"];
2377--11901[label="1;1pkt 1fpkt"];
2377--15153[label="1;1pkt 1fpkt"];
2682--5771[label="0.666667;26pkt 26fpkt"];
2682--8451[label="0.05625;9pkt 9fpkt"];
2682--8458[label="0.06875;11pkt 11fpkt"];
2682--8484[label="0.0625;10pkt 10fpkt"];
2682--8541[label="0.05625;9pkt 9fpkt"];
2682--8548[label="0.06875;11pkt 11fpkt"];
2682--8574[label="0.0625;10pkt 10fpkt"];
2682--8626[label="0.05625;9pkt 9fpkt"];
2682--8633[label="0.06875;11pkt 11fpkt"];
2682--8656[label="0.0625;10pkt 10fpkt"];
2682--13096[label="0.627907;27pkt 27fpkt"];
2762--3554[label="0.222222;2pkt 2fpkt"];
2762--5771[label="0.25641;10pkt 10fpkt"];
2762--7037[label="0.851852;23pkt 23fpkt"];
2762--7363[label="0.285714;2pkt 2fpkt"];
2762--8451[label="0.0568182;5pkt 5fpkt"];
2762--8458[label="0.0568182;5pkt 5fpkt"];
2762--8484[label="0.102273;9pkt 9fpkt"];
2762--8541[label="0.0568182;5pkt 5fpkt"];
2762--8548[label="0.0568182;5pkt 5fpkt"];
2762--8574[label="0.102273;9pkt 9fpkt"];
2762--8626[label="0.0568182;5pkt 5fpkt"];
2762--8633[label="0.0568182;5pkt 5fpkt"];
2762--8656[label="0.102273;9pkt 9fpkt"];
2762--10894[label="0.738636;65pkt 65fpkt"];
2762--13096[label="0.232558;10pkt 10fpkt"];
3743--7143[label="1;1pkt 1fpkt"];
3743--11901[label="1;1pkt 1fpkt"];
3743--15153[label="1;1pkt 1fpkt"];
4363--7143[label="1;1pkt 1fpkt"];
4363--11901[label="1;1pkt 1fpkt"];
4363--15153[label="1;1pkt 1fpkt"];
4990--11901[label="1;1pkt 1fpkt"];
4990--15153[label="1;1pkt 1fpkt"];
5760--8052[label="0.25;1pkt 1fpkt"];
5760--11901[label="0.25;1pkt 1fpkt"];
5760--15153[label="0.25;1pkt 1fpkt"];
5771--8451[label="0.0769231;3pkt 3fpkt"];
5771--8458[label="0.0769231;3pkt 3fpkt"];
5771--8484[label="0.0512821;2pkt 2fpkt"];
5771--8541[label="0.0769231;3pkt 3fpkt"];
5771--8548[label="0.0769231;3pkt 3fpkt"];
5771--8574[label="0.0512821;2pkt 2fpkt"];
5771--8626[label="0.0769231;3pkt 3fpkt"];
5771--8633[label="0.0769231;3pkt 3fpkt"];
5771--8656[label="0.0512821;2pkt 2fpkt"];
5771--13096[label="1;39pkt 39fpkt"];
7037--8451[label="0.111111;3pkt 3fpkt"];
7037--8458[label="0.111111;3pkt 3fpkt"];
7037--8541[label="0.111111;3pkt 3fpkt"];
7037--8548[label="0.111111;3pkt 3fpkt"];
7037--8626[label="0.111111;3pkt 3fpkt"];
7037--8633[label="0.111111;3pkt 3fpkt"];
7037--10894[label="1;27pkt 27fpkt"];
7143--8451[label="0.142857;1pkt 1fpkt"];
7143--8458[label="0.142857;1pkt 1fpkt"];
7143--8541[label="0.142857;1pkt 1fpkt"];
7143--8548[label="0.142857;1pkt 1fpkt"];
7143--8626[label="0.142857;1pkt 1fpkt"];
7143--8633[label="0.142857;1pkt 1fpkt"];
7143--11901[label="1;7pkt 7fpkt"];
7143--15153[label="1;7pkt 7fpkt"];
11901--15153[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.217.81" src_ip="137.58.48.223" src_port="80"/>
      <filter dst_ip="42.30.222.192" src_ip="141.161.242.100" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.33.44.32"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
9440[label="141.179.110.32;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.110.32:*, 151.1.29.97:80}[58.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1531: (0.47619%)&lt;BR/&gt; 1529: (0.47619%)&lt;BR/&gt; 1527: (0.47619%)&lt;BR/&gt; 1525: (0.47619%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="151.1.29.97" dst_port="80" src_ip="141.179.110.32"/>
    </slice>
    <from sec="1246943057" usec="0"/>
    <to sec="1246943420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.44.119.32"/>
    </slice>
    <from sec="1246943263" usec="0"/>
    <to sec="1246943286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.176.155.32"/>
    </slice>
    <from sec="1246943271" usec="0"/>
    <to sec="1246943546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.116.165.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.20.182.32"/>
    </slice>
    <from sec="1246943503" usec="0"/>
    <to sec="1246943576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.23.218.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.240.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.132.18.33"/>
    </slice>
    <from sec="1246942839" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
9461[label="169.185.65.33;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.65.33:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="169.185.65.33"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.118.33"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.192.141.33"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.16.160.34"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.112.101.37"/>
    </slice>
    <from sec="1246943495" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.145.129.37"/>
    </slice>
    <from sec="1246943627" usec="0"/>
    <to sec="1246943675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
4707[label="141.179.133.37;s;660pkt 660fpkt", shape=diamond, color=yellow];
9552[label="141.179.133.37;697pkt 697fpkt", shape=pentagon, color=darkviolet];
14049[label="141.179.133.37;697pkt 697fpkt", shape=invtriangle, color=brown];
16117[label="141.179.133.37;697pkt 697fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.133.37:50000, *:*}[98.2783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50000: (49.4002%)&lt;BR/&gt; 16001: (0.654308%)&lt;BR/&gt; 4041: (0.654308%)&lt;BR/&gt; 80: (0.527081%)&lt;BR/&gt; 6881: (0.490731%)&gt;];
}
4707--7233[label="0.0122699;2pkt 2fpkt"];
4707--8498[label="0.0030303;2pkt 2fpkt"];
4707--8588[label="0.0030303;2pkt 2fpkt"];
4707--9552[label="1;660pkt 660fpkt"];
4707--14049[label="1;660pkt 660fpkt"];
4707--16117[label="1;660pkt 660fpkt"];
9552--14049[label="1;697pkt 697fpkt"];
9552--16117[label="1;697pkt 697fpkt"];
14049--16117[label="1;697pkt 697fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.133.37" src_port="50000"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
643[label="193.150.201.37;s;1428pkt 1428fpkt", shape=diamond, color=yellow];
9558[label="193.150.201.37;1497pkt 1497fpkt", shape=pentagon, color=darkviolet];
14053[label="193.150.201.37;1497pkt 1497fpkt", shape=invtriangle, color=brown];
16118[label="193.150.201.37;1497pkt 1497fpkt", shape=invhouse, color=bisque];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.150.201.37:6667, *:*}[26.9205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (13.4989%)&lt;BR/&gt; 113: (6.96064%)&lt;BR/&gt; 80: (6.16658%)&lt;BR/&gt; 1080: (6.14124%)&lt;BR/&gt; 6660: (2.25545%)&gt;];
}
643--8497[label="0.00070028;1pkt 1fpkt"];
643--8514[label="0.0070028;10pkt 10fpkt"];
643--8587[label="0.00070028;1pkt 1fpkt"];
643--8603[label="0.0070028;10pkt 10fpkt"];
643--8666[label="0.00070028;1pkt 1fpkt"];
643--8680[label="0.0070028;10pkt 10fpkt"];
643--9558[label="1;1428pkt 1428fpkt"];
643--14053[label="1;1428pkt 1428fpkt"];
643--16118[label="1;1428pkt 1428fpkt"];
9558--14053[label="1;1497pkt 1497fpkt"];
9558--16118[label="1;1497pkt 1497fpkt"];
14053--16118[label="1;1497pkt 1497fpkt"];
</description>
    <slice>
      <filter src_ip="193.150.201.37" src_port="6667"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.186.230.37"/>
    </slice>
    <from sec="1246943240" usec="0"/>
    <to sec="1246943283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.67.41.38"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.3.53.39"/>
    </slice>
    <from sec="1246943664" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.76.63.39"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.170.73.39"/>
    </slice>
    <from sec="1246943011" usec="0"/>
    <to sec="1246943017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.111.39"/>
    </slice>
    <from sec="1246943119" usec="0"/>
    <to sec="1246943285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.191.13.40"/>
    </slice>
    <from sec="1246942961" usec="0"/>
    <to sec="1246943347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.83.26.40"/>
    </slice>
    <from sec="1246943250" usec="0"/>
    <to sec="1246943259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.80.231.40"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.74.41"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.35.85.41"/>
    </slice>
    <from sec="1246943119" usec="0"/>
    <to sec="1246943575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.192.219.41"/>
    </slice>
    <from sec="1246943224" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.156.81.42"/>
    </slice>
    <from sec="1246942820" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.107.42"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.190.140.42"/>
    </slice>
    <from sec="1246943137" usec="0"/>
    <to sec="1246943140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.212.163.42"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.132.224.42"/>
    </slice>
    <from sec="1246943123" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.155.89.43"/>
    </slice>
    <from sec="1246942844" usec="0"/>
    <to sec="1246943180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.141.79.44"/>
    </slice>
    <from sec="1246942842" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.10.102.44"/>
    </slice>
    <from sec="1246943227" usec="0"/>
    <to sec="1246943236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.11.162.44"/>
    </slice>
    <from sec="1246943666" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.32.211.44"/>
    </slice>
    <from sec="1246942865" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.130.46.45"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
3945[label="141.179.128.45;s;937pkt 937fpkt", shape=diamond, color=yellow];
9743[label="141.179.128.45;994pkt 994fpkt", shape=pentagon, color=darkviolet];
14127[label="141.179.128.45;994pkt 994fpkt", shape=invtriangle, color=brown];
16162[label="141.179.128.45;994pkt 994fpkt", shape=invhouse, color=bisque];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.128.45:30267, *:*}[99.497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30267: (49.7448%)&lt;BR/&gt; 16001: (0.612401%)&lt;BR/&gt; 6881: (0.497576%)&lt;BR/&gt; 10000: (0.204134%)&lt;BR/&gt; 4041: (0.204134%)&gt;];
}
3945--5570[label="0.00980392;1pkt 1fpkt"];
3945--8498[label="0.00106724;1pkt 1fpkt"];
3945--8588[label="0.00106724;1pkt 1fpkt"];
3945--9743[label="1;937pkt 937fpkt"];
3945--14127[label="1;937pkt 937fpkt"];
3945--16162[label="1;937pkt 937fpkt"];
9743--14127[label="1;994pkt 994fpkt"];
9743--16162[label="1;994pkt 994fpkt"];
14127--16162[label="1;994pkt 994fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.128.45" src_port="30267"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.4.166.45"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.212.45"/>
    </slice>
    <from sec="1246943101" usec="0"/>
    <to sec="1246943113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.139.214.45"/>
    </slice>
    <from sec="1246943660" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.230.58.46"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.24.176.46"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.180.206.46"/>
    </slice>
    <from sec="1246943273" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.181.32.47"/>
    </slice>
    <from sec="1246943132" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.18.120.47"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.19.129.47"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.97.216.47"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.118.48"/>
    </slice>
    <from sec="1246942824" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.115.2.49"/>
    </slice>
    <from sec="1246943523" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.74.49"/>
    </slice>
    <from sec="1246943678" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
574[label="43.163.144.117;d;2pkt 2fpkt", shape=diamond, color=yellow];
575[label="136.90.249.49;s;2pkt 2fpkt", shape=diamond, color=yellow];
958[label="141.179.200.83;s;20pkt 20fpkt", shape=diamond, color=yellow];
6786[label="141.179.200.83;s;1pkt 1fpkt", shape=hexagon, color=black];
9824[label="136.90.249.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10547[label="141.179.200.83;20pkt 20fpkt", shape=pentagon, color=darkviolet];
14164[label="136.90.249.49;2pkt 2fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.200.83:1682, *:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1682: (38.7755%)&lt;BR/&gt; 9056: (8.16327%)&lt;BR/&gt; 123: (6.12245%)&lt;BR/&gt; 63848: (4.08163%)&lt;BR/&gt; 49434: (4.08163%)&gt;];
}
574--575[label="0.5;1pkt 1fpkt"];
574--958[label="0.5;1pkt 1fpkt"];
574--6786[label="1;1pkt 1fpkt"];
574--9824[label="0.5;1pkt 1fpkt"];
574--10547[label="0.5;1pkt 1fpkt"];
574--14164[label="0.5;1pkt 1fpkt"];
575--1856[label="0.5;1pkt 1fpkt"];
575--9824[label="1;2pkt 2fpkt"];
575--14164[label="1;2pkt 2fpkt"];
958--6786[label="1;1pkt 1fpkt"];
958--10547[label="1;20pkt 20fpkt"];
6786--10547[label="1;1pkt 1fpkt"];
9824--14164[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.200.83" src_port="1682"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.14.64.50"/>
    </slice>
    <from sec="1246943055" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.110.131.50"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.139.3.51"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.45.209.51"/>
    </slice>
    <from sec="1246943036" usec="0"/>
    <to sec="1246943616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.40.185.52"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.164.216.52"/>
    </slice>
    <from sec="1246942971" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.220.161.53"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.138.215.53"/>
    </slice>
    <from sec="1246943667" usec="0"/>
    <to sec="1246943679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.0.54"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.33.89.54"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.116.131.54"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.28.146.54"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246942944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.93.14.55"/>
    </slice>
    <from sec="1246942946" usec="0"/>
    <to sec="1246943083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.209.55"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.174.137.56"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.1.201.56"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.5.57"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.134.57"/>
    </slice>
    <from sec="1246943591" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.0.182.57"/>
    </slice>
    <from sec="1246943538" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.109.40.58"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246942833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.42.51.58"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887642,2.09332,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
6493[label="36.9.128.58;s;35pkt 35fpkt", shape=diamond, color=yellow];
9999[label="36.9.128.58;35pkt 35fpkt", shape=pentagon, color=darkviolet];
16210[label="36.9.128.58;35pkt 35fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.9.128.58:80, 204.80.30.250:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59396: (1.42857%)&lt;BR/&gt; 59359: (1.42857%)&lt;BR/&gt; 59322: (1.42857%)&lt;BR/&gt; 59321: (1.42857%)&gt;];
}
6493--9999[label="1;35pkt 35fpkt"];
6493--16210[label="1;35pkt 35fpkt"];
9999--16210[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" src_ip="36.9.128.58" src_port="80"/>
    </slice>
    <from sec="1246943505" usec="0"/>
    <to sec="1246943584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.11.206.58"/>
    </slice>
    <from sec="1246943197" usec="0"/>
    <to sec="1246943253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.130.34.59"/>
    </slice>
    <from sec="1246942974" usec="0"/>
    <to sec="1246943023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.46.76.59"/>
    </slice>
    <from sec="1246943420" usec="0"/>
    <to sec="1246943452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.19.104.59"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.88.61"/>
    </slice>
    <from sec="1246942933" usec="0"/>
    <to sec="1246943472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.128.13.62"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.60.34.62"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.235.221.62"/>
    </slice>
    <from sec="1246942861" usec="0"/>
    <to sec="1246942868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.150.87.63"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.156.112.63"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.130.128.63"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.106.14.64"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.100.49.64"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.98.66.64"/>
    </slice>
    <from sec="1246943185" usec="0"/>
    <to sec="1246943654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.179.124.64"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.132.213.64"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.144.1.65"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.149.65"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.36.196.65"/>
    </slice>
    <from sec="1246943419" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.201.58.66"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
379[label="136.90.206.39;d;330pkt 330fpkt", shape=diamond, color=yellow];
684[label="29.44.18.140;s;8pkt 8fpkt", shape=diamond, color=yellow];
1337[label="216.244.54.204;s;3pkt 3fpkt", shape=diamond, color=yellow];
1561[label="208.208.199.161;s;7pkt 7fpkt", shape=diamond, color=yellow];
1722[label="208.216.3.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
1728[label="93.142.83.82;s;2pkt 2fpkt", shape=diamond, color=yellow];
1787[label="90.235.43.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
1861[label="90.176.125.201;s;14pkt 14fpkt", shape=diamond, color=yellow];
2077[label="93.6.184.147;s;2pkt 2fpkt", shape=diamond, color=yellow];
2514[label="92.20.15.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
2584[label="16.36.67.66;s;5pkt 5fpkt", shape=diamond, color=yellow];
2592[label="208.223.68.147;s;9pkt 9fpkt", shape=diamond, color=yellow];
2806[label="213.35.177.248;s;7pkt 7fpkt", shape=diamond, color=yellow];
3934[label="213.32.35.157;s;5pkt 5fpkt", shape=diamond, color=yellow];
6725[label="208.208.199.161;s;7pkt 7fpkt", shape=hexagon, color=black];
6795[label="90.235.43.137;s;1pkt 1fpkt", shape=hexagon, color=black];
6991[label="16.36.67.66;s;5pkt 5fpkt", shape=hexagon, color=black];
7197[label="208.216.3.205;s;1pkt 1fpkt", shape=hexagon, color=black];
7808[label="213.35.177.248;s;5pkt 5fpkt", shape=hexagon, color=black];
7979[label="208.223.68.147;s;8pkt 8fpkt", shape=hexagon, color=black];
9671[label="93.6.191.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10161[label="16.36.67.66;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10480[label="91.19.161.80;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10518[label="93.142.83.82;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11723[label="23.55.73.144;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11782[label="208.223.68.147;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11962[label="213.32.35.157;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12047[label="208.208.199.161;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12782[label="90.176.125.201;16pkt 16fpkt", shape=pentagon, color=darkviolet];
12830[label="216.244.54.204;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12843[label="208.216.3.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13272[label="21.131.226.229;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13316[label="92.20.15.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14324[label="16.36.67.66;6pkt 6fpkt", shape=invtriangle, color=brown];
15063[label="23.55.73.144;15pkt 15fpkt", shape=invtriangle, color=brown];
15185[label="213.32.35.157;6pkt 6fpkt", shape=invtriangle, color=brown];
15557[label="90.176.125.201;16pkt 16fpkt", shape=invtriangle, color=brown];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.90.206.39:51413}[77.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51413: (41.6667%)&lt;BR/&gt; 80: (3.15789%)&lt;BR/&gt; 34622: (0.877193%)&lt;BR/&gt; 24377: (0.701754%)&lt;BR/&gt; 38648: (0.614035%)&gt;];
}
379--684[label="1;8pkt 8fpkt"];
379--1337[label="1;3pkt 3fpkt"];
379--1561[label="1;7pkt 7fpkt"];
379--1722[label="1;1pkt 1fpkt"];
379--1728[label="1;2pkt 2fpkt"];
379--1787[label="1;1pkt 1fpkt"];
379--1861[label="0.928571;13pkt 13fpkt"];
379--2077[label="1;2pkt 2fpkt"];
379--2514[label="1;1pkt 1fpkt"];
379--2584[label="1;5pkt 5fpkt"];
379--2592[label="1;9pkt 9fpkt"];
379--2806[label="1;7pkt 7fpkt"];
379--3934[label="1;5pkt 5fpkt"];
379--6725[label="1;7pkt 7fpkt"];
379--6795[label="1;1pkt 1fpkt"];
379--6991[label="1;5pkt 5fpkt"];
379--7197[label="1;1pkt 1fpkt"];
379--7808[label="1;5pkt 5fpkt"];
379--7979[label="1;8pkt 8fpkt"];
379--8451[label="0.0575758;19pkt 19fpkt"];
379--8458[label="0.00606061;2pkt 2fpkt"];
379--8541[label="0.0575758;19pkt 19fpkt"];
379--8548[label="0.00606061;2pkt 2fpkt"];
379--8626[label="0.0575758;19pkt 19fpkt"];
379--8633[label="0.00606061;2pkt 2fpkt"];
379--9134[label="0.2;1pkt 1fpkt"];
379--9671[label="1;1pkt 1fpkt"];
379--10161[label="0.833333;5pkt 5fpkt"];
379--10480[label="1;14pkt 14fpkt"];
379--10518[label="0.8;8pkt 8fpkt"];
379--11723[label="0.866667;13pkt 13fpkt"];
379--11782[label="1;9pkt 9fpkt"];
379--11962[label="0.833333;5pkt 5fpkt"];
379--12047[label="0.875;7pkt 7fpkt"];
379--12782[label="0.875;14pkt 14fpkt"];
379--12830[label="0.909091;10pkt 10fpkt"];
379--12843[label="1;1pkt 1fpkt"];
379--13272[label="1;7pkt 7fpkt"];
379--13316[label="1;1pkt 1fpkt"];
379--14324[label="0.833333;5pkt 5fpkt"];
379--15063[label="0.866667;13pkt 13fpkt"];
379--15185[label="0.833333;5pkt 5fpkt"];
379--15557[label="0.875;14pkt 14fpkt"];
1337--12830[label="0.666667;2pkt 2fpkt"];
1561--6725[label="1;7pkt 7fpkt"];
1561--12047[label="1;7pkt 7fpkt"];
1722--7197[label="1;1pkt 1fpkt"];
1722--12843[label="1;1pkt 1fpkt"];
1728--10518[label="1;2pkt 2fpkt"];
1787--6795[label="1;1pkt 1fpkt"];
1861--6597[label="0.0714286;1pkt 1fpkt"];
1861--12782[label="1;14pkt 14fpkt"];
1861--15557[label="1;14pkt 14fpkt"];
2514--13316[label="1;1pkt 1fpkt"];
2584--6991[label="1;5pkt 5fpkt"];
2584--10161[label="1;5pkt 5fpkt"];
2584--14324[label="1;5pkt 5fpkt"];
2592--7979[label="1;8pkt 8fpkt"];
2592--11782[label="0.888889;8pkt 8fpkt"];
2806--7808[label="1;5pkt 5fpkt"];
3934--11962[label="1;5pkt 5fpkt"];
3934--15185[label="1;5pkt 5fpkt"];
6725--12047[label="1;7pkt 7fpkt"];
6991--10161[label="1;5pkt 5fpkt"];
6991--14324[label="1;5pkt 5fpkt"];
7197--12843[label="1;1pkt 1fpkt"];
7979--11782[label="0.875;7pkt 7fpkt"];
10161--14324[label="1;6pkt 6fpkt"];
11723--15063[label="1;15pkt 15fpkt"];
11962--15185[label="1;6pkt 6fpkt"];
12782--15557[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.206.39" dst_port="51413"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.42.0.67"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.152.133.67"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.36.68"/>
    </slice>
    <from sec="1246943112" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.128.202.68"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246942861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.64.242.68"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
3359[label="205.100.241.69;s;486pkt 486fpkt", shape=diamond, color=yellow];
10240[label="205.100.241.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14363[label="205.100.241.69;2pkt 2fpkt", shape=invtriangle, color=brown];
16244[label="205.100.241.69;2pkt 2fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.241.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3359--10240[label="1;2pkt 2fpkt"];
3359--14363[label="1;2pkt 2fpkt"];
3359--16244[label="1;2pkt 2fpkt"];
10240--14363[label="1;2pkt 2fpkt"];
10240--16244[label="1;2pkt 2fpkt"];
14363--16244[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="205.100.241.69"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.38.16.70"/>
    </slice>
    <from sec="1246943000" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.195.21.70"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.210.70"/>
    </slice>
    <from sec="1246942884" usec="0"/>
    <to sec="1246943615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.222.13.71"/>
    </slice>
    <from sec="1246943270" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.27.77.71"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.43.73"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.83.15.74"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.139.79.74"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.58.1.75"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.90.6.75"/>
    </slice>
    <from sec="1246943501" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.212.50.75"/>
    </slice>
    <from sec="1246943014" usec="0"/>
    <to sec="1246943486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.134.75"/>
    </slice>
    <from sec="1246942899" usec="0"/>
    <to sec="1246943270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.194.75"/>
    </slice>
    <from sec="1246942824" usec="0"/>
    <to sec="1246943591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.201.75"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.117.205.75"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
6088[label="55.42.111.76;s;290pkt 290fpkt", shape=diamond, color=yellow];
10399[label="55.42.111.76;290pkt 290fpkt", shape=pentagon, color=darkviolet];
14437[label="55.42.111.76;290pkt 290fpkt", shape=invtriangle, color=brown];
16277[label="55.42.111.76;290pkt 290fpkt", shape=invhouse, color=bisque];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.42.111.76:*, *:139}[61.3793%]&lt;BR/&gt;{55.42.111.76:*, *:445}[38.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (30.6897%)&lt;BR/&gt; 445: (19.3103%)&lt;BR/&gt; 4981: (0.172414%)&lt;BR/&gt; 4960: (0.172414%)&lt;BR/&gt; 4956: (0.172414%)&gt;];
}
6088--10399[label="1;290pkt 290fpkt"];
6088--14437[label="1;290pkt 290fpkt"];
6088--16277[label="1;290pkt 290fpkt"];
10399--14437[label="1;290pkt 290fpkt"];
10399--16277[label="1;290pkt 290fpkt"];
14437--16277[label="1;290pkt 290fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="55.42.111.76"/>
      <filter dst_port="445" src_ip="55.42.111.76"/>
    </slice>
    <from sec="1246943490" usec="0"/>
    <to sec="1246943553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.32.147.76"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.214.76"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.156.242.76"/>
    </slice>
    <from sec="1246942816" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.245.76"/>
    </slice>
    <from sec="1246942985" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.18.88.77"/>
    </slice>
    <from sec="1246943654" usec="0"/>
    <to sec="1246943656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.137.88.78"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.94.145.78"/>
    </slice>
    <from sec="1246943646" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.140.226.78"/>
    </slice>
    <from sec="1246943101" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.153.33.79"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.24.131.79"/>
    </slice>
    <from sec="1246943105" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.109.164.79"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246942964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.38.186.79"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.108.17.80"/>
    </slice>
    <from sec="1246943349" usec="0"/>
    <to sec="1246943398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.226.42.80"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.77.80"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.144.96.80"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.10.182.80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.210.80"/>
    </slice>
    <from sec="1246942824" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
1311[label="205.100.248.216;d;326pkt 326fpkt", shape=diamond, color=yellow];
1416[label="217.198.21.16;s;28pkt 28fpkt", shape=diamond, color=yellow];
3235[label="217.198.21.74;s;436pkt 436fpkt", shape=diamond, color=yellow];
5212[label="91.42.71.81;s;150pkt 150fpkt", shape=diamond, color=yellow];
7068[label="217.198.21.16;s;20pkt 20fpkt", shape=hexagon, color=black];
7226[label="217.198.21.74;s;197pkt 197fpkt", shape=hexagon, color=black];
8326[label="91.42.71.81;s;150pkt 150fpkt", shape=hexagon, color=black];
9114[label="217.198.21.16;30pkt 30fpkt", shape=pentagon, color=darkviolet];
10496[label="91.42.71.81;165pkt 165fpkt", shape=pentagon, color=darkviolet];
13861[label="217.198.21.16;29pkt 29fpkt", shape=invtriangle, color=brown];
14478[label="91.42.71.81;165pkt 165fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.198.21.74:*, 205.100.248.139:80}[45.7278%]&lt;BR/&gt;{91.42.71.81:*, 205.100.248.216:80}[26.1076%]&lt;BR/&gt;{217.198.21.74:*, 205.100.248.216:80}[23.2595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9705%)&lt;BR/&gt; 32935: (0.147406%)&lt;BR/&gt; 32934: (0.147406%)&lt;BR/&gt; 32933: (0.147406%)&lt;BR/&gt; 32932: (0.147406%)&gt;];
}
1311--1416[label="1;28pkt 28fpkt"];
1311--3235[label="0.45092;147pkt 147fpkt"];
1311--5212[label="1;150pkt 150fpkt"];
1311--7068[label="1;20pkt 20fpkt"];
1311--7226[label="0.329949;65pkt 65fpkt"];
1311--8326[label="1;150pkt 150fpkt"];
1311--8514[label="0.0552147;18pkt 18fpkt"];
1311--8603[label="0.0552147;18pkt 18fpkt"];
1311--8680[label="0.0552147;18pkt 18fpkt"];
1311--9114[label="0.933333;28pkt 28fpkt"];
1311--10496[label="0.909091;150pkt 150fpkt"];
1311--13861[label="0.931034;27pkt 27fpkt"];
1311--14478[label="0.909091;150pkt 150fpkt"];
1416--7068[label="1;20pkt 20fpkt"];
1416--8514[label="0.0714286;2pkt 2fpkt"];
1416--8603[label="0.0714286;2pkt 2fpkt"];
1416--8680[label="0.0714286;2pkt 2fpkt"];
1416--9114[label="1;28pkt 28fpkt"];
1416--13861[label="0.964286;27pkt 27fpkt"];
3235--7226[label="1;197pkt 197fpkt"];
3235--8514[label="0.0550459;24pkt 24fpkt"];
3235--8603[label="0.0550459;24pkt 24fpkt"];
3235--8680[label="0.0550459;24pkt 24fpkt"];
5212--8326[label="1;150pkt 150fpkt"];
5212--8514[label="0.0533333;8pkt 8fpkt"];
5212--8603[label="0.0533333;8pkt 8fpkt"];
5212--8680[label="0.0533333;8pkt 8fpkt"];
5212--10496[label="1;150pkt 150fpkt"];
5212--14478[label="1;150pkt 150fpkt"];
7068--8514[label="0.1;2pkt 2fpkt"];
7068--8603[label="0.1;2pkt 2fpkt"];
7068--8680[label="0.1;2pkt 2fpkt"];
7068--9114[label="1;20pkt 20fpkt"];
7068--13861[label="0.95;19pkt 19fpkt"];
8326--8514[label="0.0533333;8pkt 8fpkt"];
8326--8603[label="0.0533333;8pkt 8fpkt"];
8326--8680[label="0.0533333;8pkt 8fpkt"];
8326--10496[label="1;150pkt 150fpkt"];
8326--14478[label="1;150pkt 150fpkt"];
9114--13861[label="1;29pkt 29fpkt"];
10496--14478[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.248.216" dst_port="80" src_ip="217.198.21.74"/>
      <filter dst_ip="205.100.248.139" dst_port="80" src_ip="217.198.21.74"/>
      <filter dst_ip="205.100.248.216" dst_port="80" src_ip="91.42.71.81"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.209.90.82"/>
    </slice>
    <from sec="1246943574" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.197.95.82"/>
    </slice>
    <from sec="1246942830" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.100.16.83"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.5.131.83"/>
    </slice>
    <from sec="1246943667" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.163.166.83"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.28.187.83"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.152.234.83"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.177.30.84"/>
    </slice>
    <from sec="1246942945" usec="0"/>
    <to sec="1246942953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.128.145.84"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
4396[label="93.198.49.166;d;26pkt 26fpkt", shape=diamond, color=yellow];
4397[label="141.161.174.84;s;17pkt 17fpkt", shape=diamond, color=yellow];
10575[label="141.161.174.84;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.174.84:9544, 93.198.49.166:*}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9544: (50%)&lt;BR/&gt; 55859: (1.13636%)&lt;BR/&gt; 55728: (1.13636%)&lt;BR/&gt; 55579: (1.13636%)&lt;BR/&gt; 55505: (1.13636%)&gt;];
}
4396--10575[label="1;26pkt 26fpkt"];
4397--10575[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="93.198.49.166" src_ip="141.161.174.84" src_port="9544"/>
    </slice>
    <from sec="1246942953" usec="0"/>
    <to sec="1246943570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.85.178.84"/>
    </slice>
    <from sec="1246943099" usec="0"/>
    <to sec="1246943126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.240.84"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.90.26.85"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.164.48.85"/>
    </slice>
    <from sec="1246942839" usec="0"/>
    <to sec="1246942908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.199.120.85"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.149.33.86"/>
    </slice>
    <from sec="1246943372" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.42.158.87"/>
    </slice>
    <from sec="1246942994" usec="0"/>
    <to sec="1246943190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
6241[label="141.179.168.87;s;57pkt 57fpkt", shape=diamond, color=yellow];
10627[label="141.179.168.87;65pkt 65fpkt", shape=pentagon, color=darkviolet];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.168.87:9124, 92.24.54.216:*}[66.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9124: (47.9508%)&lt;BR/&gt; 443: (2.04918%)&lt;BR/&gt; 61823: (0.819672%)&lt;BR/&gt; 60865: (0.819672%)&lt;BR/&gt; 55249: (0.819672%)&gt;];
}
6241--10627[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="92.24.54.216" src_ip="141.179.168.87" src_port="9124"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.90.189.87"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.1.215.87"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.24.17.88"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.246.178.88"/>
    </slice>
    <from sec="1246942825" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.240.0.89"/>
    </slice>
    <from sec="1246942959" usec="0"/>
    <to sec="1246943674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.25.89"/>
    </slice>
    <from sec="1246943078" usec="0"/>
    <to sec="1246943679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.154.89"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.201.69.90"/>
    </slice>
    <from sec="1246943636" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.23.227.90"/>
    </slice>
    <from sec="1246943504" usec="0"/>
    <to sec="1246943637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.153.91.91"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.155.91.91"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
507[label="204.91.174.91;s;60pkt 60fpkt", shape=diamond, color=yellow];
1969[label="22.90.27.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
2138[label="2.114.191.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
2427[label="20.19.10.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
5312[label="17.181.32.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
5383[label="30.92.216.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
6914[label="20.19.10.205;d;1pkt 1fpkt", shape=hexagon, color=black];
10715[label="204.91.174.91;71pkt 71fpkt", shape=pentagon, color=darkviolet];
14590[label="204.91.174.91;71pkt 71fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.174.91:*, 16.198.20.135:80}[32.3944%]&lt;BR/&gt;{204.91.174.91:2238, *:17788}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.3654%)&lt;BR/&gt; 2238: (21.6346%)&lt;BR/&gt; 17788: (11.5385%)&lt;BR/&gt; 51124: (1.20192%)&lt;BR/&gt; 20000: (0.961538%)&gt;];
}
507--1969[label="1;1pkt 1fpkt"];
507--2138[label="1;1pkt 1fpkt"];
507--2146[label="0.0333333;2pkt 2fpkt"];
507--2427[label="1;1pkt 1fpkt"];
507--5312[label="1;1pkt 1fpkt"];
507--5383[label="1;1pkt 1fpkt"];
507--6914[label="1;1pkt 1fpkt"];
507--8514[label="0.133333;8pkt 8fpkt"];
507--8603[label="0.133333;8pkt 8fpkt"];
507--8680[label="0.133333;8pkt 8fpkt"];
507--10715[label="1;60pkt 60fpkt"];
507--14590[label="1;60pkt 60fpkt"];
1969--10715[label="1;1pkt 1fpkt"];
1969--14590[label="1;1pkt 1fpkt"];
2138--10715[label="1;1pkt 1fpkt"];
2138--14590[label="1;1pkt 1fpkt"];
2427--6914[label="1;1pkt 1fpkt"];
2427--10715[label="1;1pkt 1fpkt"];
2427--14590[label="1;1pkt 1fpkt"];
5312--10715[label="1;1pkt 1fpkt"];
5312--14590[label="1;1pkt 1fpkt"];
5383--10715[label="1;1pkt 1fpkt"];
5383--14590[label="1;1pkt 1fpkt"];
6914--10715[label="1;1pkt 1fpkt"];
6914--14590[label="1;1pkt 1fpkt"];
10715--14590[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="16.198.20.135" dst_port="80" src_ip="204.91.174.91"/>
      <filter dst_port="17788" src_ip="204.91.174.91" src_port="2238"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.204.112.92"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.24.0.93"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.168.93"/>
    </slice>
    <from sec="1246943631" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.129.31.95"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.35.36.96"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.110.158.96"/>
    </slice>
    <from sec="1246942834" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
4129[label="204.91.174.96;s;199pkt 199fpkt", shape=diamond, color=yellow];
4258[label="27.24.37.3;d;97pkt 97fpkt", shape=diamond, color=yellow];
10803[label="204.91.174.96;199pkt 199fpkt", shape=pentagon, color=darkviolet];
14629[label="204.91.174.96;199pkt 199fpkt", shape=invtriangle, color=brown];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.174.96:*, 27.24.37.3:80}[48%]&lt;BR/&gt;{204.91.174.96:*, 27.24.37.10:80}[26%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52282: (0.288184%)&lt;BR/&gt; 52281: (0.288184%)&lt;BR/&gt; 52278: (0.288184%)&lt;BR/&gt; 52277: (0.288184%)&gt;];
}
4129--4258[label="0.989691;96pkt 96fpkt"];
4129--4631[label="0.132075;14pkt 14fpkt"];
4129--10803[label="1;199pkt 199fpkt"];
4129--14629[label="1;199pkt 199fpkt"];
4258--10803[label="0.989691;96pkt 96fpkt"];
4258--11649[label="0.0103093;1pkt 1fpkt"];
4258--14629[label="0.989691;96pkt 96fpkt"];
4258--15025[label="0.0103093;1pkt 1fpkt"];
4258--16518[label="0.0103093;1pkt 1fpkt"];
10803--14629[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_ip="27.24.37.3" dst_port="80" src_ip="204.91.174.96"/>
      <filter dst_ip="27.24.37.10" dst_port="80" src_ip="204.91.174.96"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.149.67.97"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.244.97"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.13.249.97"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.40.21.98"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.141.24.98"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.229.48.98"/>
    </slice>
    <from sec="1246943585" usec="0"/>
    <to sec="1246943590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.44.132.98"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.79.99"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.35.106.99"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.33.143.99"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.90.180.99"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.241.100"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
470[label="204.91.177.151;s;1872pkt 1872fpkt", shape=diamond, color=yellow];
795[label="136.90.252.100;s;716pkt 716fpkt", shape=diamond, color=yellow];
797[label="30.19.158.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
1013[label="214.207.6.109;d;6pkt 6fpkt", shape=diamond, color=yellow];
1016[label="90.163.96.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
1029[label="21.162.69.11;d;6pkt 6fpkt", shape=diamond, color=yellow];
1078[label="32.7.129.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
1091[label="93.168.57.164;d;6pkt 6fpkt", shape=diamond, color=yellow];
1102[label="24.90.19.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1145[label="208.27.0.227;d;6pkt 6fpkt", shape=diamond, color=yellow];
1231[label="93.37.94.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
1359[label="214.20.57.110;d;6pkt 6fpkt", shape=diamond, color=yellow];
1373[label="23.174.66.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1577[label="208.2.240.189;d;6pkt 6fpkt", shape=diamond, color=yellow];
1652[label="91.133.89.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1815[label="29.106.108.55;d;6pkt 6fpkt", shape=diamond, color=yellow];
1817[label="16.181.95.53;d;6pkt 6fpkt", shape=diamond, color=yellow];
1867[label="21.186.33.153;d;6pkt 6fpkt", shape=diamond, color=yellow];
1868[label="27.33.7.131;d;4pkt 4fpkt", shape=diamond, color=yellow];
1933[label="204.203.94.6;d;7pkt 7fpkt", shape=diamond, color=yellow];
1963[label="22.181.99.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
1980[label="214.24.0.93;d;6pkt 6fpkt", shape=diamond, color=yellow];
2157[label="209.38.172.236;d;4pkt 4fpkt", shape=diamond, color=yellow];
2167[label="92.93.6.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
2424[label="21.98.76.202;d;6pkt 6fpkt", shape=diamond, color=yellow];
2510[label="22.90.26.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
2561[label="214.122.0.146;d;6pkt 6fpkt", shape=diamond, color=yellow];
2864[label="28.155.89.43;d;5pkt 5fpkt", shape=diamond, color=yellow];
3048[label="93.145.174.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
3230[label="169.205.123.121;s;585pkt 585fpkt", shape=diamond, color=yellow];
3355[label="24.11.70.104;d;3pkt 3fpkt", shape=diamond, color=yellow];
3527[label="206.14.147.233;d;7pkt 7fpkt", shape=diamond, color=yellow];
3645[label="30.76.243.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
3651[label="213.4.116.105;d;57pkt 57fpkt", shape=diamond, color=yellow];
3658[label="29.219.53.69;d;2pkt 2fpkt", shape=diamond, color=yellow];
3693[label="212.132.226.152;d;4pkt 4fpkt", shape=diamond, color=yellow];
3703[label="23.85.166.96;d;4pkt 4fpkt", shape=diamond, color=yellow];
3753[label="25.32.151.195;d;3pkt 3fpkt", shape=diamond, color=yellow];
3813[label="25.7.138.48;d;6pkt 6fpkt", shape=diamond, color=yellow];
4061[label="25.131.45.118;d;6pkt 6fpkt", shape=diamond, color=yellow];
4101[label="93.42.163.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
4177[label="22.58.0.241;d;4pkt 4fpkt", shape=diamond, color=yellow];
4204[label="23.188.129.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
4232[label="92.153.218.253;d;4pkt 4fpkt", shape=diamond, color=yellow];
4275[label="9.98.151.54;d;16pkt 16fpkt", shape=diamond, color=yellow];
4517[label="218.170.72.75;d;34pkt 34fpkt", shape=diamond, color=yellow];
5000[label="214.146.7.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
5313[label="212.19.160.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
5325[label="24.97.4.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
5333[label="212.19.20.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
5775[label="25.147.138.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
5779[label="23.53.219.8;d;3pkt 3fpkt", shape=diamond, color=yellow];
6271[label="214.125.180.22;d;3pkt 3fpkt", shape=diamond, color=yellow];
6384[label="216.218.22.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
6393[label="47.55.28.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
6401[label="29.219.178.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
6403[label="214.21.47.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
6417[label="23.138.89.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
6420[label="212.142.204.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
6615[label="204.91.177.151;s;1158pkt 1158fpkt", shape=hexagon, color=black];
6684[label="93.37.94.144;d;1pkt 1fpkt", shape=hexagon, color=black];
6700[label="214.20.57.110;d;6pkt 6fpkt", shape=hexagon, color=black];
6907[label="208.2.240.189;d;5pkt 5fpkt", shape=hexagon, color=black];
6911[label="21.98.76.202;d;3pkt 3fpkt", shape=hexagon, color=black];
7067[label="28.155.89.43;d;5pkt 5fpkt", shape=hexagon, color=black];
7238[label="214.122.0.146;d;4pkt 4fpkt", shape=hexagon, color=black];
7280[label="24.11.70.104;d;1pkt 1fpkt", shape=hexagon, color=black];
7343[label="209.38.172.236;d;4pkt 4fpkt", shape=hexagon, color=black];
7414[label="25.32.151.195;d;3pkt 3fpkt", shape=hexagon, color=black];
7506[label="208.27.0.227;d;4pkt 4fpkt", shape=hexagon, color=black];
7625[label="212.132.226.152;d;4pkt 4fpkt", shape=hexagon, color=black];
7667[label="25.7.138.48;d;6pkt 6fpkt", shape=hexagon, color=black];
7831[label="206.14.147.233;d;4pkt 4fpkt", shape=hexagon, color=black];
8190[label="25.131.45.118;d;6pkt 6fpkt", shape=hexagon, color=black];
8226[label="23.188.129.17;d;1pkt 1fpkt", shape=hexagon, color=black];
8293[label="21.186.33.153;d;6pkt 6fpkt", shape=hexagon, color=black];
10896[label="136.90.252.100;772pkt 772fpkt", shape=pentagon, color=darkviolet];
11867[label="204.91.177.151;2005pkt 2005fpkt", shape=pentagon, color=darkviolet];
14668[label="136.90.252.100;772pkt 772fpkt", shape=invtriangle, color=brown];
15139[label="204.91.177.151;2005pkt 2005fpkt", shape=invtriangle, color=brown];
16570[label="204.91.177.151;2005pkt 2005fpkt", shape=invhouse, color=bisque];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.177.151:*, *:*}[59.0227%]&lt;BR/&gt;{136.90.252.100:*, *:*}[22.7259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (6.78604%)&lt;BR/&gt; 0: (4.82381%)&lt;BR/&gt; 80: (2.79617%)&lt;BR/&gt; 113: (2.58769%)&lt;BR/&gt; 17296: (2.53863%)&gt;];
}
470--797[label="1;1pkt 1fpkt"];
470--1013[label="1;6pkt 6fpkt"];
470--1016[label="1;2pkt 2fpkt"];
470--1029[label="1;6pkt 6fpkt"];
470--1078[label="1;1pkt 1fpkt"];
470--1091[label="1;6pkt 6fpkt"];
470--1102[label="1;1pkt 1fpkt"];
470--1145[label="1;6pkt 6fpkt"];
470--1231[label="1;2pkt 2fpkt"];
470--1263[label="0.0129032;2pkt 2fpkt"];
470--1359[label="1;6pkt 6fpkt"];
470--1373[label="1;1pkt 1fpkt"];
470--1577[label="1;6pkt 6fpkt"];
470--1652[label="1;1pkt 1fpkt"];
470--1815[label="1;6pkt 6fpkt"];
470--1817[label="1;6pkt 6fpkt"];
470--1867[label="1;6pkt 6fpkt"];
470--1868[label="1;4pkt 4fpkt"];
470--1933[label="1;7pkt 7fpkt"];
470--1963[label="1;1pkt 1fpkt"];
470--1980[label="1;6pkt 6fpkt"];
470--2157[label="1;4pkt 4fpkt"];
470--2167[label="1;1pkt 1fpkt"];
470--2424[label="1;6pkt 6fpkt"];
470--2510[label="1;1pkt 1fpkt"];
470--2561[label="1;6pkt 6fpkt"];
470--2864[label="1;5pkt 5fpkt"];
470--3048[label="1;1pkt 1fpkt"];
470--3355[label="1;3pkt 3fpkt"];
470--3527[label="1;7pkt 7fpkt"];
470--3645[label="1;1pkt 1fpkt"];
470--3651[label="0.947368;54pkt 54fpkt"];
470--3658[label="1;2pkt 2fpkt"];
470--3693[label="1;4pkt 4fpkt"];
470--3703[label="1;4pkt 4fpkt"];
470--3753[label="1;3pkt 3fpkt"];
470--3813[label="1;6pkt 6fpkt"];
470--4061[label="1;6pkt 6fpkt"];
470--4101[label="0.5;1pkt 1fpkt"];
470--4177[label="0.75;3pkt 3fpkt"];
470--4204[label="1;1pkt 1fpkt"];
470--4232[label="0.25;1pkt 1fpkt"];
470--4275[label="0.4375;7pkt 7fpkt"];
470--5000[label="1;1pkt 1fpkt"];
470--5313[label="1;1pkt 1fpkt"];
470--5325[label="1;1pkt 1fpkt"];
470--5333[label="1;1pkt 1fpkt"];
470--5775[label="1;1pkt 1fpkt"];
470--5779[label="1;3pkt 3fpkt"];
470--6271[label="1;3pkt 3fpkt"];
470--6384[label="1;2pkt 2fpkt"];
470--6393[label="1;1pkt 1fpkt"];
470--6401[label="1;1pkt 1fpkt"];
470--6403[label="1;2pkt 2fpkt"];
470--6417[label="1;1pkt 1fpkt"];
470--6420[label="1;1pkt 1fpkt"];
470--6489[label="0.0625;1pkt 1fpkt"];
470--6615[label="1;1158pkt 1158fpkt"];
470--6684[label="1;1pkt 1fpkt"];
470--6700[label="1;6pkt 6fpkt"];
470--6907[label="1;5pkt 5fpkt"];
470--6911[label="1;3pkt 3fpkt"];
470--7067[label="1;5pkt 5fpkt"];
470--7238[label="1;4pkt 4fpkt"];
470--7280[label="1;1pkt 1fpkt"];
470--7343[label="1;4pkt 4fpkt"];
470--7414[label="1;3pkt 3fpkt"];
470--7506[label="1;4pkt 4fpkt"];
470--7625[label="1;4pkt 4fpkt"];
470--7667[label="1;6pkt 6fpkt"];
470--7831[label="1;4pkt 4fpkt"];
470--8190[label="1;6pkt 6fpkt"];
470--8226[label="1;1pkt 1fpkt"];
470--8293[label="1;6pkt 6fpkt"];
470--8514[label="0.00267094;5pkt 5fpkt"];
470--8603[label="0.00267094;5pkt 5fpkt"];
470--8680[label="0.00267094;5pkt 5fpkt"];
470--11867[label="1;1872pkt 1872fpkt"];
470--15139[label="1;1872pkt 1872fpkt"];
470--16570[label="1;1872pkt 1872fpkt"];
795--1286[label="0.0740741;12pkt 12fpkt"];
795--4232[label="0.5;2pkt 2fpkt"];
795--4517[label="0.382353;13pkt 13fpkt"];
795--5028[label="0.0172414;1pkt 1fpkt"];
795--7541[label="0.0638298;9pkt 9fpkt"];
795--8449[label="0.0195531;14pkt 14fpkt"];
795--8483[label="0.0265363;19pkt 19fpkt"];
795--8491[label="0.0363128;26pkt 26fpkt"];
795--8539[label="0.0195531;14pkt 14fpkt"];
795--8573[label="0.0265363;19pkt 19fpkt"];
795--8581[label="0.0363128;26pkt 26fpkt"];
795--8624[label="0.0195531;14pkt 14fpkt"];
795--8655[label="0.0265363;19pkt 19fpkt"];
795--10896[label="1;716pkt 716fpkt"];
795--14668[label="1;716pkt 716fpkt"];
797--6615[label="1;1pkt 1fpkt"];
797--11867[label="1;1pkt 1fpkt"];
797--15139[label="1;1pkt 1fpkt"];
797--16570[label="1;1pkt 1fpkt"];
1013--6615[label="0.666667;4pkt 4fpkt"];
1013--11867[label="1;6pkt 6fpkt"];
1013--15139[label="1;6pkt 6fpkt"];
1013--16570[label="1;6pkt 6fpkt"];
1016--6615[label="1;2pkt 2fpkt"];
1016--11867[label="1;2pkt 2fpkt"];
1016--15139[label="1;2pkt 2fpkt"];
1016--16570[label="1;2pkt 2fpkt"];
1029--6615[label="0.666667;4pkt 4fpkt"];
1029--11867[label="1;6pkt 6fpkt"];
1029--15139[label="1;6pkt 6fpkt"];
1029--16570[label="1;6pkt 6fpkt"];
1078--6615[label="1;1pkt 1fpkt"];
1078--11867[label="1;1pkt 1fpkt"];
1078--15139[label="1;1pkt 1fpkt"];
1078--16570[label="1;1pkt 1fpkt"];
1091--6615[label="0.666667;4pkt 4fpkt"];
1091--11867[label="1;6pkt 6fpkt"];
1091--15139[label="1;6pkt 6fpkt"];
1091--16570[label="1;6pkt 6fpkt"];
1102--6615[label="1;1pkt 1fpkt"];
1102--11867[label="1;1pkt 1fpkt"];
1102--15139[label="1;1pkt 1fpkt"];
1102--16570[label="1;1pkt 1fpkt"];
1145--6615[label="0.666667;4pkt 4fpkt"];
1145--7506[label="1;4pkt 4fpkt"];
1145--11867[label="1;6pkt 6fpkt"];
1145--15139[label="1;6pkt 6fpkt"];
1145--16570[label="1;6pkt 6fpkt"];
1231--6615[label="1;2pkt 2fpkt"];
1231--6684[label="1;1pkt 1fpkt"];
1231--11867[label="1;2pkt 2fpkt"];
1231--15139[label="1;2pkt 2fpkt"];
1231--16570[label="1;2pkt 2fpkt"];
1359--6615[label="0.666667;4pkt 4fpkt"];
1359--6700[label="1;6pkt 6fpkt"];
1359--11867[label="1;6pkt 6fpkt"];
1359--15139[label="1;6pkt 6fpkt"];
1359--16570[label="1;6pkt 6fpkt"];
1373--6615[label="1;1pkt 1fpkt"];
1373--11867[label="1;1pkt 1fpkt"];
1373--15139[label="1;1pkt 1fpkt"];
1373--16570[label="1;1pkt 1fpkt"];
1577--6615[label="0.666667;4pkt 4fpkt"];
1577--6907[label="1;5pkt 5fpkt"];
1577--11867[label="1;6pkt 6fpkt"];
1577--15139[label="1;6pkt 6fpkt"];
1577--16570[label="1;6pkt 6fpkt"];
1652--6615[label="1;1pkt 1fpkt"];
1652--11867[label="1;1pkt 1fpkt"];
1652--15139[label="1;1pkt 1fpkt"];
1652--16570[label="1;1pkt 1fpkt"];
1815--6615[label="0.666667;4pkt 4fpkt"];
1815--11867[label="1;6pkt 6fpkt"];
1815--15139[label="1;6pkt 6fpkt"];
1815--16570[label="1;6pkt 6fpkt"];
1817--6615[label="0.666667;4pkt 4fpkt"];
1817--11867[label="1;6pkt 6fpkt"];
1817--15139[label="1;6pkt 6fpkt"];
1817--16570[label="1;6pkt 6fpkt"];
1867--6615[label="0.666667;4pkt 4fpkt"];
1867--8293[label="1;6pkt 6fpkt"];
1867--11867[label="1;6pkt 6fpkt"];
1867--15139[label="1;6pkt 6fpkt"];
1867--16570[label="1;6pkt 6fpkt"];
1868--6615[label="1;4pkt 4fpkt"];
1868--11867[label="1;4pkt 4fpkt"];
1868--15139[label="1;4pkt 4fpkt"];
1868--16570[label="1;4pkt 4fpkt"];
1933--6615[label="0.571429;4pkt 4fpkt"];
1933--11867[label="1;7pkt 7fpkt"];
1933--15139[label="1;7pkt 7fpkt"];
1933--16570[label="1;7pkt 7fpkt"];
1963--6615[label="1;1pkt 1fpkt"];
1963--11867[label="1;1pkt 1fpkt"];
1963--15139[label="1;1pkt 1fpkt"];
1963--16570[label="1;1pkt 1fpkt"];
1980--6615[label="0.666667;4pkt 4fpkt"];
1980--11867[label="1;6pkt 6fpkt"];
1980--15139[label="1;6pkt 6fpkt"];
1980--16570[label="1;6pkt 6fpkt"];
2157--6615[label="1;4pkt 4fpkt"];
2157--7343[label="1;4pkt 4fpkt"];
2157--11867[label="1;4pkt 4fpkt"];
2157--15139[label="1;4pkt 4fpkt"];
2157--16570[label="1;4pkt 4fpkt"];
2167--6615[label="1;1pkt 1fpkt"];
2167--11867[label="1;1pkt 1fpkt"];
2167--15139[label="1;1pkt 1fpkt"];
2167--16570[label="1;1pkt 1fpkt"];
2424--6615[label="0.666667;4pkt 4fpkt"];
2424--6911[label="1;3pkt 3fpkt"];
2424--11867[label="1;6pkt 6fpkt"];
2424--15139[label="1;6pkt 6fpkt"];
2424--16570[label="1;6pkt 6fpkt"];
2510--6615[label="1;1pkt 1fpkt"];
2510--11867[label="1;1pkt 1fpkt"];
2510--15139[label="1;1pkt 1fpkt"];
2510--16570[label="1;1pkt 1fpkt"];
2561--6615[label="0.666667;4pkt 4fpkt"];
2561--7238[label="1;4pkt 4fpkt"];
2561--11867[label="1;6pkt 6fpkt"];
2561--15139[label="1;6pkt 6fpkt"];
2561--16570[label="1;6pkt 6fpkt"];
2864--6615[label="0.8;4pkt 4fpkt"];
2864--7067[label="1;5pkt 5fpkt"];
2864--11867[label="1;5pkt 5fpkt"];
2864--15139[label="1;5pkt 5fpkt"];
2864--16570[label="1;5pkt 5fpkt"];
3048--6615[label="1;1pkt 1fpkt"];
3048--11867[label="1;1pkt 1fpkt"];
3048--15139[label="1;1pkt 1fpkt"];
3048--16570[label="1;1pkt 1fpkt"];
3230--3233[label="0.00251256;1pkt 1fpkt"];
3230--3264[label="0.00282486;1pkt 1fpkt"];
3230--3890[label="0.00361011;1pkt 1fpkt"];
3230--4177[label="0.25;1pkt 1fpkt"];
3230--4500[label="0.00289017;1pkt 1fpkt"];
3230--4543[label="0.0030303;1pkt 1fpkt"];
3230--4545[label="0.0031746;1pkt 1fpkt"];
3230--5516[label="0.00373134;1pkt 1fpkt"];
3230--7222[label="0.0028169;1pkt 1fpkt"];
3230--7706[label="0.00361011;1pkt 1fpkt"];
3230--8288[label="0.00289017;1pkt 1fpkt"];
3355--6615[label="0.333333;1pkt 1fpkt"];
3355--7280[label="1;1pkt 1fpkt"];
3355--11867[label="1;3pkt 3fpkt"];
3355--15139[label="1;3pkt 3fpkt"];
3355--16570[label="1;3pkt 3fpkt"];
3527--6615[label="0.571429;4pkt 4fpkt"];
3527--7831[label="1;4pkt 4fpkt"];
3527--11867[label="1;7pkt 7fpkt"];
3527--15139[label="1;7pkt 7fpkt"];
3527--16570[label="1;7pkt 7fpkt"];
3645--6615[label="1;1pkt 1fpkt"];
3645--11867[label="1;1pkt 1fpkt"];
3645--15139[label="1;1pkt 1fpkt"];
3645--16570[label="1;1pkt 1fpkt"];
3651--3745[label="0.0526316;3pkt 3fpkt"];
3651--6615[label="0.947368;54pkt 54fpkt"];
3651--8908[label="0.0526316;3pkt 3fpkt"];
3651--11867[label="0.947368;54pkt 54fpkt"];
3651--15139[label="0.947368;54pkt 54fpkt"];
3651--16570[label="0.947368;54pkt 54fpkt"];
3658--6615[label="0.5;1pkt 1fpkt"];
3658--11867[label="1;2pkt 2fpkt"];
3658--15139[label="1;2pkt 2fpkt"];
3658--16570[label="1;2pkt 2fpkt"];
3693--6615[label="0.5;2pkt 2fpkt"];
3693--7625[label="1;4pkt 4fpkt"];
3693--11867[label="1;4pkt 4fpkt"];
3693--15139[label="1;4pkt 4fpkt"];
3693--16570[label="1;4pkt 4fpkt"];
3703--6615[label="0.5;2pkt 2fpkt"];
3703--11867[label="1;4pkt 4fpkt"];
3703--15139[label="1;4pkt 4fpkt"];
3703--16570[label="1;4pkt 4fpkt"];
3753--6615[label="0.666667;2pkt 2fpkt"];
3753--7414[label="1;3pkt 3fpkt"];
3753--11867[label="1;3pkt 3fpkt"];
3753--15139[label="1;3pkt 3fpkt"];
3753--16570[label="1;3pkt 3fpkt"];
3813--6615[label="0.666667;4pkt 4fpkt"];
3813--7667[label="1;6pkt 6fpkt"];
3813--11867[label="1;6pkt 6fpkt"];
3813--15139[label="1;6pkt 6fpkt"];
3813--16570[label="1;6pkt 6fpkt"];
4061--6615[label="0.666667;4pkt 4fpkt"];
4061--8190[label="1;6pkt 6fpkt"];
4061--11867[label="1;6pkt 6fpkt"];
4061--15139[label="1;6pkt 6fpkt"];
4061--16570[label="1;6pkt 6fpkt"];
4101--6615[label="0.5;1pkt 1fpkt"];
4101--11867[label="0.5;1pkt 1fpkt"];
4101--15139[label="0.5;1pkt 1fpkt"];
4101--16570[label="0.5;1pkt 1fpkt"];
4177--6615[label="0.75;3pkt 3fpkt"];
4177--11867[label="0.75;3pkt 3fpkt"];
4177--15139[label="0.75;3pkt 3fpkt"];
4177--16570[label="0.75;3pkt 3fpkt"];
4204--6615[label="1;1pkt 1fpkt"];
4204--8226[label="1;1pkt 1fpkt"];
4204--11867[label="1;1pkt 1fpkt"];
4204--15139[label="1;1pkt 1fpkt"];
4204--16570[label="1;1pkt 1fpkt"];
4232--6615[label="0.25;1pkt 1fpkt"];
4232--7435[label="0.25;1pkt 1fpkt"];
4232--10896[label="0.5;2pkt 2fpkt"];
4232--11867[label="0.25;1pkt 1fpkt"];
4232--14668[label="0.5;2pkt 2fpkt"];
4232--15139[label="0.25;1pkt 1fpkt"];
4232--16570[label="0.25;1pkt 1fpkt"];
4275--6615[label="0.375;6pkt 6fpkt"];
4275--7658[label="0.0625;1pkt 1fpkt"];
4275--7945[label="0.5;8pkt 8fpkt"];
4275--10837[label="0.0625;1pkt 1fpkt"];
4275--11867[label="0.4375;7pkt 7fpkt"];
4275--14644[label="0.0625;1pkt 1fpkt"];
4275--15139[label="0.4375;7pkt 7fpkt"];
4275--16364[label="0.0625;1pkt 1fpkt"];
4275--16570[label="0.4375;7pkt 7fpkt"];
4517--5546[label="0.0588235;2pkt 2fpkt"];
4517--6912[label="0.0294118;1pkt 1fpkt"];
4517--8040[label="0.117647;4pkt 4fpkt"];
4517--8491[label="0.0588235;2pkt 2fpkt"];
4517--8581[label="0.0588235;2pkt 2fpkt"];
4517--10896[label="0.382353;13pkt 13fpkt"];
4517--11873[label="0.0294118;1pkt 1fpkt"];
4517--14668[label="0.382353;13pkt 13fpkt"];
4517--15142[label="0.0294118;1pkt 1fpkt"];
4517--16572[label="0.0294118;1pkt 1fpkt"];
5000--6615[label="1;1pkt 1fpkt"];
5000--11867[label="1;1pkt 1fpkt"];
5000--15139[label="1;1pkt 1fpkt"];
5000--16570[label="1;1pkt 1fpkt"];
5313--6615[label="1;1pkt 1fpkt"];
5313--11867[label="1;1pkt 1fpkt"];
5313--15139[label="1;1pkt 1fpkt"];
5313--16570[label="1;1pkt 1fpkt"];
5325--6615[label="1;1pkt 1fpkt"];
5325--11867[label="1;1pkt 1fpkt"];
5325--15139[label="1;1pkt 1fpkt"];
5325--16570[label="1;1pkt 1fpkt"];
5333--6615[label="1;1pkt 1fpkt"];
5333--11867[label="1;1pkt 1fpkt"];
5333--15139[label="1;1pkt 1fpkt"];
5333--16570[label="1;1pkt 1fpkt"];
5775--6615[label="1;1pkt 1fpkt"];
5775--11867[label="1;1pkt 1fpkt"];
5775--15139[label="1;1pkt 1fpkt"];
5775--16570[label="1;1pkt 1fpkt"];
5779--6615[label="0.666667;2pkt 2fpkt"];
5779--11867[label="1;3pkt 3fpkt"];
5779--15139[label="1;3pkt 3fpkt"];
5779--16570[label="1;3pkt 3fpkt"];
6271--6615[label="0.666667;2pkt 2fpkt"];
6271--11867[label="1;3pkt 3fpkt"];
6271--15139[label="1;3pkt 3fpkt"];
6271--16570[label="1;3pkt 3fpkt"];
6384--6615[label="1;2pkt 2fpkt"];
6384--11867[label="1;2pkt 2fpkt"];
6384--15139[label="1;2pkt 2fpkt"];
6384--16570[label="1;2pkt 2fpkt"];
6393--6615[label="1;1pkt 1fpkt"];
6393--11867[label="1;1pkt 1fpkt"];
6393--15139[label="1;1pkt 1fpkt"];
6393--16570[label="1;1pkt 1fpkt"];
6401--6615[label="1;1pkt 1fpkt"];
6401--11867[label="1;1pkt 1fpkt"];
6401--15139[label="1;1pkt 1fpkt"];
6401--16570[label="1;1pkt 1fpkt"];
6403--6615[label="0.5;1pkt 1fpkt"];
6403--11867[label="1;2pkt 2fpkt"];
6403--15139[label="1;2pkt 2fpkt"];
6403--16570[label="1;2pkt 2fpkt"];
6417--11867[label="1;1pkt 1fpkt"];
6417--15139[label="1;1pkt 1fpkt"];
6417--16570[label="1;1pkt 1fpkt"];
6420--11867[label="1;1pkt 1fpkt"];
6420--15139[label="1;1pkt 1fpkt"];
6420--16570[label="1;1pkt 1fpkt"];
6615--6684[label="1;1pkt 1fpkt"];
6615--6700[label="0.666667;4pkt 4fpkt"];
6615--6907[label="0.8;4pkt 4fpkt"];
6615--6911[label="1;3pkt 3fpkt"];
6615--7067[label="0.8;4pkt 4fpkt"];
6615--7238[label="1;4pkt 4fpkt"];
6615--7280[label="1;1pkt 1fpkt"];
6615--7343[label="1;4pkt 4fpkt"];
6615--7414[label="0.666667;2pkt 2fpkt"];
6615--7506[label="1;4pkt 4fpkt"];
6615--7625[label="0.5;2pkt 2fpkt"];
6615--7667[label="0.666667;4pkt 4fpkt"];
6615--7831[label="1;4pkt 4fpkt"];
6615--8190[label="0.666667;4pkt 4fpkt"];
6615--8226[label="1;1pkt 1fpkt"];
6615--8293[label="0.666667;4pkt 4fpkt"];
6615--11867[label="1;1158pkt 1158fpkt"];
6615--15139[label="1;1158pkt 1158fpkt"];
6615--16570[label="1;1158pkt 1158fpkt"];
6684--11867[label="1;1pkt 1fpkt"];
6684--15139[label="1;1pkt 1fpkt"];
6684--16570[label="1;1pkt 1fpkt"];
6700--11867[label="1;6pkt 6fpkt"];
6700--15139[label="1;6pkt 6fpkt"];
6700--16570[label="1;6pkt 6fpkt"];
6907--11867[label="1;5pkt 5fpkt"];
6907--15139[label="1;5pkt 5fpkt"];
6907--16570[label="1;5pkt 5fpkt"];
6911--11867[label="1;3pkt 3fpkt"];
6911--15139[label="1;3pkt 3fpkt"];
6911--16570[label="1;3pkt 3fpkt"];
7067--11867[label="1;5pkt 5fpkt"];
7067--15139[label="1;5pkt 5fpkt"];
7067--16570[label="1;5pkt 5fpkt"];
7238--11867[label="1;4pkt 4fpkt"];
7238--15139[label="1;4pkt 4fpkt"];
7238--16570[label="1;4pkt 4fpkt"];
7280--11867[label="1;1pkt 1fpkt"];
7280--15139[label="1;1pkt 1fpkt"];
7280--16570[label="1;1pkt 1fpkt"];
7343--11867[label="1;4pkt 4fpkt"];
7343--15139[label="1;4pkt 4fpkt"];
7343--16570[label="1;4pkt 4fpkt"];
7414--11867[label="1;3pkt 3fpkt"];
7414--15139[label="1;3pkt 3fpkt"];
7414--16570[label="1;3pkt 3fpkt"];
7506--11867[label="1;4pkt 4fpkt"];
7506--15139[label="1;4pkt 4fpkt"];
7506--16570[label="1;4pkt 4fpkt"];
7625--11867[label="1;4pkt 4fpkt"];
7625--15139[label="1;4pkt 4fpkt"];
7625--16570[label="1;4pkt 4fpkt"];
7667--11867[label="1;6pkt 6fpkt"];
7667--15139[label="1;6pkt 6fpkt"];
7667--16570[label="1;6pkt 6fpkt"];
7831--11867[label="1;4pkt 4fpkt"];
7831--15139[label="1;4pkt 4fpkt"];
7831--16570[label="1;4pkt 4fpkt"];
8190--11867[label="1;6pkt 6fpkt"];
8190--15139[label="1;6pkt 6fpkt"];
8190--16570[label="1;6pkt 6fpkt"];
8226--11867[label="1;1pkt 1fpkt"];
8226--15139[label="1;1pkt 1fpkt"];
8226--16570[label="1;1pkt 1fpkt"];
8293--11867[label="1;6pkt 6fpkt"];
8293--15139[label="1;6pkt 6fpkt"];
8293--16570[label="1;6pkt 6fpkt"];
10896--14668[label="1;772pkt 772fpkt"];
11867--15139[label="1;2005pkt 2005fpkt"];
11867--16570[label="1;2005pkt 2005fpkt"];
15139--16570[label="1;2005pkt 2005fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.177.151"/>
      <filter src_ip="136.90.252.100"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
445[label="212.17.253.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
773[label="208.67.88.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
815[label="204.33.114.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
1183[label="212.23.13.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
1364[label="21.132.181.144;s;3pkt 3fpkt", shape=diamond, color=yellow];
1365[label="93.142.113.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
1575[label="31.92.125.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
1655[label="92.93.71.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
1780[label="208.117.23.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
1798[label="49.144.33.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
2164[label="209.147.162.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
2295[label="30.193.208.133;s;498pkt 498fpkt", shape=diamond, color=yellow];
2301[label="20.66.222.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
2310[label="16.214.160.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
2313[label="22.81.97.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
2411[label="204.91.174.236;d;2655pkt 2655fpkt", shape=diamond, color=yellow];
2856[label="209.51.30.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2944[label="216.219.24.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
2958[label="17.43.10.215;s;3pkt 3fpkt", shape=diamond, color=yellow];
2971[label="93.129.98.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
3079[label="216.246.158.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
3493[label="21.139.79.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
3528[label="32.219.220.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
3583[label="93.165.201.218;s;301pkt 301fpkt", shape=diamond, color=yellow];
3607[label="90.176.23.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
4121[label="9.114.63.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
4173[label="25.230.234.198;s;528pkt 528fpkt", shape=diamond, color=yellow];
4207[label="212.132.198.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
4561[label="30.202.118.131;s;14pkt 14fpkt", shape=diamond, color=yellow];
4607[label="30.197.28.101;s;70pkt 70fpkt", shape=diamond, color=yellow];
4684[label="30.205.99.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
4775[label="214.81.152.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
5079[label="212.6.163.141;s;8pkt 8fpkt", shape=diamond, color=yellow];
5107[label="23.90.189.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
5109[label="30.193.222.200;s;2pkt 2fpkt", shape=diamond, color=yellow];
5130[label="27.100.91.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
5210[label="9.109.235.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
5245[label="212.26.99.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
5550[label="212.131.84.249;s;4pkt 4fpkt", shape=diamond, color=yellow];
5571[label="212.131.81.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
5705[label="22.137.179.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
5839[label="17.199.120.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
5927[label="93.143.206.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
6092[label="27.45.169.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
6093[label="214.112.101.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
6127[label="33.163.13.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
6458[label="212.134.237.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
6857[label="21.132.181.144;s;3pkt 3fpkt", shape=hexagon, color=black];
6858[label="93.142.113.210;s;1pkt 1fpkt", shape=hexagon, color=black];
6881[label="16.214.160.65;s;1pkt 1fpkt", shape=hexagon, color=black];
6949[label="208.67.88.119;s;1pkt 1fpkt", shape=hexagon, color=black];
7064[label="209.147.162.181;s;1pkt 1fpkt", shape=hexagon, color=black];
7096[label="91.25.152.57;s;1pkt 1fpkt", shape=hexagon, color=black];
7853[label="93.165.201.218;s;301pkt 301fpkt", shape=hexagon, color=black];
7999[label="212.23.13.125;s;1pkt 1fpkt", shape=hexagon, color=black];
8018[label="30.197.28.101;s;48pkt 48fpkt", shape=hexagon, color=black];
8044[label="30.205.99.11;s;1pkt 1fpkt", shape=hexagon, color=black];
8154[label="212.131.81.165;s;1pkt 1fpkt", shape=hexagon, color=black];
8869[label="92.94.138.6;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9206[label="212.136.125.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9367[label="27.100.91.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9675[label="91.28.217.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9822[label="22.88.207.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9836[label="204.33.114.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9851[label="92.93.71.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9974[label="91.25.152.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10023[label="212.22.111.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10041[label="93.140.28.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10058[label="25.140.216.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10064[label="209.47.46.61;91pkt 91fpkt", shape=pentagon, color=darkviolet];
10072[label="23.85.138.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10084[label="23.62.83.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10360[label="23.50.144.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10467[label="212.140.32.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10539[label="23.92.145.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10864[label="214.152.154.99;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10865[label="20.22.156.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10885[label="31.92.125.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10900[label="30.197.28.101;76pkt 76fpkt", shape=pentagon, color=darkviolet];
11161[label="16.199.138.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11224[label="208.67.88.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11256[label="91.20.106.121;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11409[label="208.108.106.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11450[label="27.70.102.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11451[label="30.202.118.131;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11535[label="216.220.53.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11609[label="212.17.253.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11665[label="212.6.163.141;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11667[label="23.61.187.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11735[label="21.132.181.144;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11799[label="17.199.78.148;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11880[label="16.195.83.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11930[label="93.139.32.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12354[label="93.143.206.176;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12464[label="30.202.113.182;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12486[label="212.134.237.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12560[label="16.5.199.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12584[label="3.176.145.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12586[label="23.93.210.190;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12621[label="20.66.222.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12679[label="91.155.30.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12765[label="30.193.222.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12826[label="23.62.38.204;58pkt 58fpkt", shape=pentagon, color=darkviolet];
12933[label="93.142.113.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13025[label="17.43.10.215;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13311[label="208.34.214.232;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13573[label="212.131.84.249;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13615[label="33.163.13.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13636[label="30.202.138.254;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13741[label="92.94.138.6;7pkt 7fpkt", shape=invtriangle, color=brown];
13974[label="27.100.91.28;1pkt 1fpkt", shape=invtriangle, color=brown];
14162[label="22.88.207.49;1pkt 1fpkt", shape=invtriangle, color=brown];
14170[label="204.33.114.50;1pkt 1fpkt", shape=invtriangle, color=brown];
14240[label="91.25.152.57;1pkt 1fpkt", shape=invtriangle, color=brown];
14259[label="212.22.111.59;1pkt 1fpkt", shape=invtriangle, color=brown];
14275[label="25.140.216.60;1pkt 1fpkt", shape=invtriangle, color=brown];
14281[label="23.85.138.61;1pkt 1fpkt", shape=invtriangle, color=brown];
14287[label="23.62.83.62;2pkt 2fpkt", shape=invtriangle, color=brown];
14501[label="23.92.145.83;1pkt 1fpkt", shape=invtriangle, color=brown];
14653[label="214.152.154.99;2pkt 2fpkt", shape=invtriangle, color=brown];
14664[label="31.92.125.100;1pkt 1fpkt", shape=invtriangle, color=brown];
14670[label="30.197.28.101;76pkt 76fpkt", shape=invtriangle, color=brown];
14823[label="208.67.88.119;1pkt 1fpkt", shape=invtriangle, color=brown];
14914[label="208.108.106.129;1pkt 1fpkt", shape=invtriangle, color=brown];
14940[label="27.70.102.131;1pkt 1fpkt", shape=invtriangle, color=brown];
14980[label="216.220.53.135;1pkt 1fpkt", shape=invtriangle, color=brown];
15007[label="212.17.253.138;1pkt 1fpkt", shape=invtriangle, color=brown];
15070[label="21.132.181.144;3pkt 3fpkt", shape=invtriangle, color=brown];
15145[label="16.195.83.152;2pkt 2fpkt", shape=invtriangle, color=brown];
15367[label="93.143.206.176;4pkt 4fpkt", shape=invtriangle, color=brown];
15425[label="212.134.237.183;1pkt 1fpkt", shape=invtriangle, color=brown];
15466[label="3.176.145.190;1pkt 1fpkt", shape=invtriangle, color=brown];
15468[label="23.93.210.190;7pkt 7fpkt", shape=invtriangle, color=brown];
15512[label="91.155.30.196;3pkt 3fpkt", shape=invtriangle, color=brown];
15546[label="30.193.222.200;2pkt 2fpkt", shape=invtriangle, color=brown];
15572[label="23.62.38.204;58pkt 58fpkt", shape=invtriangle, color=brown];
15617[label="93.142.113.210;1pkt 1fpkt", shape=invtriangle, color=brown];
15899[label="212.131.84.249;4pkt 4fpkt", shape=invtriangle, color=brown];
15917[label="33.163.13.253;1pkt 1fpkt", shape=invtriangle, color=brown];
16081[label="27.100.91.28;1pkt 1fpkt", shape=invhouse, color=bisque];
16178[label="22.88.207.49;1pkt 1fpkt", shape=invhouse, color=bisque];
16182[label="204.33.114.50;1pkt 1fpkt", shape=invhouse, color=bisque];
16219[label="23.85.138.61;1pkt 1fpkt", shape=invhouse, color=bisque];
16222[label="23.62.83.62;2pkt 2fpkt", shape=invhouse, color=bisque];
16373[label="31.92.125.100;1pkt 1fpkt", shape=invhouse, color=bisque];
16376[label="30.197.28.101;76pkt 76fpkt", shape=invhouse, color=bisque];
16439[label="208.67.88.119;1pkt 1fpkt", shape=invhouse, color=bisque];
16730[label="91.155.30.196;3pkt 3fpkt", shape=invhouse, color=bisque];
16897[label="33.163.13.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.174.236:80}[21.5138%]&lt;BR/&gt;{*:*, 204.91.174.236:15000}[20.0969%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.9282%)&lt;BR/&gt; 15000: (11.058%)&lt;BR/&gt; 107: (8.94007%)&lt;BR/&gt; 18426: (1.65918%)&lt;BR/&gt; 53: (1.45423%)&gt;];
}
445--2411[label="1;1pkt 1fpkt"];
445--11609[label="1;1pkt 1fpkt"];
445--15007[label="1;1pkt 1fpkt"];
773--2411[label="1;1pkt 1fpkt"];
773--6949[label="1;1pkt 1fpkt"];
815--2411[label="1;1pkt 1fpkt"];
815--9836[label="1;1pkt 1fpkt"];
815--14170[label="1;1pkt 1fpkt"];
815--16182[label="1;1pkt 1fpkt"];
1183--2411[label="1;1pkt 1fpkt"];
1183--7999[label="1;1pkt 1fpkt"];
1364--2411[label="1;3pkt 3fpkt"];
1364--6857[label="1;3pkt 3fpkt"];
1364--11735[label="1;3pkt 3fpkt"];
1364--15070[label="1;3pkt 3fpkt"];
1365--2411[label="1;1pkt 1fpkt"];
1365--6858[label="1;1pkt 1fpkt"];
1365--12933[label="1;1pkt 1fpkt"];
1365--15617[label="1;1pkt 1fpkt"];
1575--2411[label="1;1pkt 1fpkt"];
1575--10885[label="1;1pkt 1fpkt"];
1575--14664[label="1;1pkt 1fpkt"];
1575--16373[label="1;1pkt 1fpkt"];
1655--2411[label="1;1pkt 1fpkt"];
1655--9851[label="1;1pkt 1fpkt"];
1780--2411[label="1;1pkt 1fpkt"];
1798--2411[label="1;1pkt 1fpkt"];
2164--2411[label="1;1pkt 1fpkt"];
2164--7064[label="1;1pkt 1fpkt"];
2295--2411[label="1;498pkt 498fpkt"];
2295--8458[label="0.130522;65pkt 65fpkt"];
2295--8459[label="0.0120482;6pkt 6fpkt"];
2295--8460[label="0.00200803;1pkt 1fpkt"];
2295--8484[label="0.00200803;1pkt 1fpkt"];
2295--8548[label="0.130522;65pkt 65fpkt"];
2295--8549[label="0.0120482;6pkt 6fpkt"];
2295--8550[label="0.00200803;1pkt 1fpkt"];
2295--8574[label="0.00200803;1pkt 1fpkt"];
2295--8633[label="0.130522;65pkt 65fpkt"];
2295--8634[label="0.0120482;6pkt 6fpkt"];
2295--8635[label="0.00200803;1pkt 1fpkt"];
2295--8656[label="0.00200803;1pkt 1fpkt"];
2301--2411[label="1;1pkt 1fpkt"];
2301--12621[label="1;1pkt 1fpkt"];
2310--2411[label="1;1pkt 1fpkt"];
2310--6881[label="1;1pkt 1fpkt"];
2313--2411[label="1;1pkt 1fpkt"];
2411--2856[label="1;1pkt 1fpkt"];
2411--2944[label="1;1pkt 1fpkt"];
2411--2958[label="1;3pkt 3fpkt"];
2411--2971[label="1;1pkt 1fpkt"];
2411--3079[label="1;1pkt 1fpkt"];
2411--3376[label="0.5;1pkt 1fpkt"];
2411--3493[label="1;1pkt 1fpkt"];
2411--3528[label="1;1pkt 1fpkt"];
2411--3583[label="1;301pkt 301fpkt"];
2411--3607[label="1;1pkt 1fpkt"];
2411--3973[label="0.0242424;4pkt 4fpkt"];
2411--4121[label="1;1pkt 1fpkt"];
2411--4173[label="1;528pkt 528fpkt"];
2411--4207[label="1;1pkt 1fpkt"];
2411--4561[label="1;14pkt 14fpkt"];
2411--4607[label="1;70pkt 70fpkt"];
2411--4684[label="1;1pkt 1fpkt"];
2411--4775[label="1;1pkt 1fpkt"];
2411--5079[label="1;8pkt 8fpkt"];
2411--5107[label="1;1pkt 1fpkt"];
2411--5109[label="1;2pkt 2fpkt"];
2411--5130[label="1;1pkt 1fpkt"];
2411--5210[label="1;1pkt 1fpkt"];
2411--5245[label="1;1pkt 1fpkt"];
2411--5550[label="1;4pkt 4fpkt"];
2411--5571[label="1;1pkt 1fpkt"];
2411--5705[label="1;2pkt 2fpkt"];
2411--5839[label="1;1pkt 1fpkt"];
2411--5927[label="1;1pkt 1fpkt"];
2411--6092[label="1;1pkt 1fpkt"];
2411--6093[label="1;1pkt 1fpkt"];
2411--6127[label="1;1pkt 1fpkt"];
2411--6458[label="1;1pkt 1fpkt"];
2411--6695[label="0.75;3pkt 3fpkt"];
2411--6857[label="1;3pkt 3fpkt"];
2411--6858[label="1;1pkt 1fpkt"];
2411--6881[label="1;1pkt 1fpkt"];
2411--6949[label="1;1pkt 1fpkt"];
2411--7064[label="1;1pkt 1fpkt"];
2411--7096[label="1;1pkt 1fpkt"];
2411--7135[label="0.000791766;1pkt 1fpkt"];
2411--7853[label="1;301pkt 301fpkt"];
2411--7999[label="1;1pkt 1fpkt"];
2411--8009[label="0.0208333;3pkt 3fpkt"];
2411--8018[label="1;48pkt 48fpkt"];
2411--8044[label="1;1pkt 1fpkt"];
2411--8154[label="1;1pkt 1fpkt"];
2411--8451[label="0.00489642;13pkt 13fpkt"];
2411--8458[label="0.0290019;77pkt 77fpkt"];
2411--8459[label="0.00225989;6pkt 6fpkt"];
2411--8460[label="0.000376648;1pkt 1fpkt"];
2411--8483[label="0.00102041;1pkt 1fpkt"];
2411--8484[label="0.00602637;16pkt 16fpkt"];
2411--8485[label="0.000376648;1pkt 1fpkt"];
2411--8492[label="0.00230415;2pkt 2fpkt"];
2411--8514[label="0.00715631;19pkt 19fpkt"];
2411--8541[label="0.00489642;13pkt 13fpkt"];
2411--8548[label="0.0290019;77pkt 77fpkt"];
2411--8549[label="0.00225989;6pkt 6fpkt"];
2411--8550[label="0.000376648;1pkt 1fpkt"];
2411--8573[label="0.00102041;1pkt 1fpkt"];
2411--8574[label="0.00602637;16pkt 16fpkt"];
2411--8575[label="0.000376648;1pkt 1fpkt"];
2411--8582[label="0.00230415;2pkt 2fpkt"];
2411--8603[label="0.00715631;19pkt 19fpkt"];
2411--8626[label="0.00489642;13pkt 13fpkt"];
2411--8633[label="0.0290019;77pkt 77fpkt"];
2411--8634[label="0.00225989;6pkt 6fpkt"];
2411--8635[label="0.000376648;1pkt 1fpkt"];
2411--8655[label="0.00102041;1pkt 1fpkt"];
2411--8656[label="0.00602637;16pkt 16fpkt"];
2411--8657[label="0.000376648;1pkt 1fpkt"];
2411--8663[label="0.00230415;2pkt 2fpkt"];
2411--8680[label="0.00715631;19pkt 19fpkt"];
2411--8869[label="1;7pkt 7fpkt"];
2411--9206[label="1;1pkt 1fpkt"];
2411--9367[label="1;1pkt 1fpkt"];
2411--9675[label="0.333333;1pkt 1fpkt"];
2411--9822[label="1;1pkt 1fpkt"];
2411--9836[label="1;1pkt 1fpkt"];
2411--9851[label="1;1pkt 1fpkt"];
2411--9974[label="1;1pkt 1fpkt"];
2411--10023[label="1;1pkt 1fpkt"];
2411--10041[label="1;1pkt 1fpkt"];
2411--10058[label="1;1pkt 1fpkt"];
2411--10064[label="1;91pkt 91fpkt"];
2411--10072[label="1;1pkt 1fpkt"];
2411--10084[label="1;2pkt 2fpkt"];
2411--10360[label="1;1pkt 1fpkt"];
2411--10426[label="0.5;1pkt 1fpkt"];
2411--10467[label="1;1pkt 1fpkt"];
2411--10539[label="1;1pkt 1fpkt"];
2411--10644[label="0.0106383;1pkt 1fpkt"];
2411--10864[label="0.5;1pkt 1fpkt"];
2411--10865[label="1;1pkt 1fpkt"];
2411--10885[label="1;1pkt 1fpkt"];
2411--10900[label="0.921053;70pkt 70fpkt"];
2411--11153[label="0.75;3pkt 3fpkt"];
2411--11161[label="1;1pkt 1fpkt"];
2411--11224[label="1;1pkt 1fpkt"];
2411--11256[label="1;5pkt 5fpkt"];
2411--11409[label="1;1pkt 1fpkt"];
2411--11450[label="1;1pkt 1fpkt"];
2411--11451[label="1;13pkt 13fpkt"];
2411--11535[label="1;1pkt 1fpkt"];
2411--11609[label="1;1pkt 1fpkt"];
2411--11665[label="0.875;7pkt 7fpkt"];
2411--11667[label="1;1pkt 1fpkt"];
2411--11735[label="1;3pkt 3fpkt"];
2411--11799[label="1;3pkt 3fpkt"];
2411--11880[label="1;2pkt 2fpkt"];
2411--11930[label="1;3pkt 3fpkt"];
2411--12354[label="0.5;2pkt 2fpkt"];
2411--12464[label="1;8pkt 8fpkt"];
2411--12486[label="1;1pkt 1fpkt"];
2411--12560[label="1;2pkt 2fpkt"];
2411--12584[label="1;1pkt 1fpkt"];
2411--12586[label="1;7pkt 7fpkt"];
2411--12621[label="1;1pkt 1fpkt"];
2411--12679[label="1;3pkt 3fpkt"];
2411--12765[label="1;2pkt 2fpkt"];
2411--12826[label="1;58pkt 58fpkt"];
2411--12933[label="1;1pkt 1fpkt"];
2411--13025[label="1;3pkt 3fpkt"];
2411--13311[label="0.210526;4pkt 4fpkt"];
2411--13573[label="1;4pkt 4fpkt"];
2411--13615[label="1;1pkt 1fpkt"];
2411--13636[label="1;9pkt 9fpkt"];
2411--13741[label="1;7pkt 7fpkt"];
2411--13974[label="1;1pkt 1fpkt"];
2411--14162[label="1;1pkt 1fpkt"];
2411--14170[label="1;1pkt 1fpkt"];
2411--14240[label="1;1pkt 1fpkt"];
2411--14259[label="1;1pkt 1fpkt"];
2411--14275[label="1;1pkt 1fpkt"];
2411--14281[label="1;1pkt 1fpkt"];
2411--14287[label="1;2pkt 2fpkt"];
2411--14501[label="1;1pkt 1fpkt"];
2411--14653[label="0.5;1pkt 1fpkt"];
2411--14664[label="1;1pkt 1fpkt"];
2411--14670[label="0.921053;70pkt 70fpkt"];
2411--14823[label="1;1pkt 1fpkt"];
2411--14914[label="1;1pkt 1fpkt"];
2411--14940[label="1;1pkt 1fpkt"];
2411--14980[label="1;1pkt 1fpkt"];
2411--15007[label="1;1pkt 1fpkt"];
2411--15070[label="1;3pkt 3fpkt"];
2411--15145[label="1;2pkt 2fpkt"];
2411--15367[label="0.5;2pkt 2fpkt"];
2411--15425[label="1;1pkt 1fpkt"];
2411--15466[label="1;1pkt 1fpkt"];
2411--15468[label="1;7pkt 7fpkt"];
2411--15512[label="1;3pkt 3fpkt"];
2411--15546[label="1;2pkt 2fpkt"];
2411--15572[label="1;58pkt 58fpkt"];
2411--15617[label="1;1pkt 1fpkt"];
2411--15899[label="1;4pkt 4fpkt"];
2411--15917[label="1;1pkt 1fpkt"];
2411--16081[label="1;1pkt 1fpkt"];
2411--16178[label="1;1pkt 1fpkt"];
2411--16182[label="1;1pkt 1fpkt"];
2411--16219[label="1;1pkt 1fpkt"];
2411--16222[label="1;2pkt 2fpkt"];
2411--16373[label="1;1pkt 1fpkt"];
2411--16376[label="0.921053;70pkt 70fpkt"];
2411--16439[label="1;1pkt 1fpkt"];
2411--16730[label="1;3pkt 3fpkt"];
2411--16897[label="1;1pkt 1fpkt"];
2958--13025[label="1;3pkt 3fpkt"];
3583--7853[label="1;301pkt 301fpkt"];
4173--8484[label="0.00189394;1pkt 1fpkt"];
4173--8492[label="0.00189394;1pkt 1fpkt"];
4173--8514[label="0.00568182;3pkt 3fpkt"];
4173--8574[label="0.00189394;1pkt 1fpkt"];
4173--8582[label="0.00189394;1pkt 1fpkt"];
4173--8603[label="0.00568182;3pkt 3fpkt"];
4173--8656[label="0.00189394;1pkt 1fpkt"];
4173--8663[label="0.00189394;1pkt 1fpkt"];
4173--8680[label="0.00568182;3pkt 3fpkt"];
4561--11451[label="1;13pkt 13fpkt"];
4607--8018[label="1;48pkt 48fpkt"];
4607--10900[label="1;70pkt 70fpkt"];
4607--14670[label="1;70pkt 70fpkt"];
4607--16376[label="1;70pkt 70fpkt"];
4684--8044[label="1;1pkt 1fpkt"];
5079--8514[label="0.125;1pkt 1fpkt"];
5079--8603[label="0.125;1pkt 1fpkt"];
5079--8680[label="0.125;1pkt 1fpkt"];
5079--11665[label="0.875;7pkt 7fpkt"];
5109--12765[label="1;2pkt 2fpkt"];
5109--15546[label="1;2pkt 2fpkt"];
5130--9367[label="1;1pkt 1fpkt"];
5130--13974[label="1;1pkt 1fpkt"];
5130--16081[label="1;1pkt 1fpkt"];
5550--13573[label="1;4pkt 4fpkt"];
5550--15899[label="1;4pkt 4fpkt"];
5571--8154[label="1;1pkt 1fpkt"];
5927--12354[label="1;1pkt 1fpkt"];
5927--15367[label="1;1pkt 1fpkt"];
6127--13615[label="1;1pkt 1fpkt"];
6127--15917[label="1;1pkt 1fpkt"];
6127--16897[label="1;1pkt 1fpkt"];
6458--12486[label="1;1pkt 1fpkt"];
6458--15425[label="1;1pkt 1fpkt"];
6857--11735[label="1;3pkt 3fpkt"];
6857--15070[label="1;3pkt 3fpkt"];
6858--12933[label="1;1pkt 1fpkt"];
6858--15617[label="1;1pkt 1fpkt"];
7096--9974[label="1;1pkt 1fpkt"];
7096--14240[label="1;1pkt 1fpkt"];
8018--10900[label="1;48pkt 48fpkt"];
8018--14670[label="1;48pkt 48fpkt"];
8018--16376[label="1;48pkt 48fpkt"];
8869--13741[label="1;7pkt 7fpkt"];
9367--13974[label="1;1pkt 1fpkt"];
9367--16081[label="1;1pkt 1fpkt"];
9822--14162[label="1;1pkt 1fpkt"];
9822--16178[label="1;1pkt 1fpkt"];
9836--14170[label="1;1pkt 1fpkt"];
9836--16182[label="1;1pkt 1fpkt"];
9974--14240[label="1;1pkt 1fpkt"];
10023--14259[label="1;1pkt 1fpkt"];
10058--14275[label="1;1pkt 1fpkt"];
10072--14281[label="1;1pkt 1fpkt"];
10072--16219[label="1;1pkt 1fpkt"];
10084--14287[label="1;2pkt 2fpkt"];
10084--16222[label="1;2pkt 2fpkt"];
10539--14501[label="1;1pkt 1fpkt"];
10864--14653[label="1;2pkt 2fpkt"];
10885--14664[label="1;1pkt 1fpkt"];
10885--16373[label="1;1pkt 1fpkt"];
10900--14670[label="1;76pkt 76fpkt"];
10900--16376[label="1;76pkt 76fpkt"];
11224--14823[label="1;1pkt 1fpkt"];
11224--16439[label="1;1pkt 1fpkt"];
11409--14914[label="1;1pkt 1fpkt"];
11450--14940[label="1;1pkt 1fpkt"];
11535--14980[label="1;1pkt 1fpkt"];
11609--15007[label="1;1pkt 1fpkt"];
11735--15070[label="1;3pkt 3fpkt"];
11880--15145[label="1;2pkt 2fpkt"];
12354--15367[label="1;4pkt 4fpkt"];
12486--15425[label="1;1pkt 1fpkt"];
12584--15466[label="1;1pkt 1fpkt"];
12586--15468[label="1;7pkt 7fpkt"];
12679--15512[label="1;3pkt 3fpkt"];
12679--16730[label="1;3pkt 3fpkt"];
12765--15546[label="1;2pkt 2fpkt"];
12826--15572[label="1;58pkt 58fpkt"];
12933--15617[label="1;1pkt 1fpkt"];
13573--15899[label="1;4pkt 4fpkt"];
13615--15917[label="1;1pkt 1fpkt"];
13615--16897[label="1;1pkt 1fpkt"];
13974--16081[label="1;1pkt 1fpkt"];
14162--16178[label="1;1pkt 1fpkt"];
14170--16182[label="1;1pkt 1fpkt"];
14281--16219[label="1;1pkt 1fpkt"];
14287--16222[label="1;2pkt 2fpkt"];
14664--16373[label="1;1pkt 1fpkt"];
14670--16376[label="1;76pkt 76fpkt"];
14823--16439[label="1;1pkt 1fpkt"];
15512--16730[label="1;3pkt 3fpkt"];
15917--16897[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.174.236" dst_port="80"/>
      <filter dst_ip="204.91.174.236" dst_port="15000"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.2.249.101"/>
    </slice>
    <from sec="1246943106" usec="0"/>
    <to sec="1246943123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.64.79.102"/>
    </slice>
    <from sec="1246942816" usec="0"/>
    <to sec="1246943172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
3975[label="204.91.175.152;d;153pkt 153fpkt", shape=diamond, color=yellow];
10924[label="213.4.106.102;38pkt 38fpkt", shape=pentagon, color=darkviolet];
14684[label="213.4.106.102;38pkt 38fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.4.106.102:80, 204.91.175.152:*}[24.8366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7817%)&lt;BR/&gt; 49586: (0.655022%)&lt;BR/&gt; 49585: (0.655022%)&lt;BR/&gt; 49584: (0.655022%)&lt;BR/&gt; 49570: (0.655022%)&gt;];
}
3975--7135[label="0.00653595;1pkt 1fpkt"];
3975--8451[label="0.00653595;1pkt 1fpkt"];
3975--8458[label="0.0457516;7pkt 7fpkt"];
3975--8484[label="0.0261438;4pkt 4fpkt"];
3975--8541[label="0.00653595;1pkt 1fpkt"];
3975--8548[label="0.0457516;7pkt 7fpkt"];
3975--8574[label="0.0261438;4pkt 4fpkt"];
3975--8626[label="0.00653595;1pkt 1fpkt"];
3975--8633[label="0.0457516;7pkt 7fpkt"];
3975--8656[label="0.0261438;4pkt 4fpkt"];
3975--10924[label="1;38pkt 38fpkt"];
3975--14684[label="1;38pkt 38fpkt"];
10924--14684[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.175.152" src_ip="213.4.106.102" src_port="80"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.106.102"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.210.68.103"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.195.92.103"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.113.201.103"/>
    </slice>
    <from sec="1246942990" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.82.4.104"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.134.4.104"/>
    </slice>
    <from sec="1246943004" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.5.100.104"/>
    </slice>
    <from sec="1246942964" usec="0"/>
    <to sec="1246943207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.156.155.104"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.137.19.105"/>
    </slice>
    <from sec="1246943383" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
2465[label="90.146.30.105;s;1874pkt 1874fpkt", shape=diamond, color=yellow];
10971[label="90.146.30.105;2048pkt 2048fpkt", shape=pentagon, color=darkviolet];
14704[label="90.146.30.105;2048pkt 2048fpkt", shape=invtriangle, color=brown];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.146.30.105:5641, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5641: (50.0251%)&lt;BR/&gt; 56405: (0.0502513%)&lt;BR/&gt; 49273: (0.0502513%)&lt;BR/&gt; 46968: (0.0502513%)&lt;BR/&gt; 34145: (0.0502513%)&gt;];
}
2465--10971[label="1;1874pkt 1874fpkt"];
2465--14704[label="1;1874pkt 1874fpkt"];
10971--14704[label="1;2048pkt 2048fpkt"];
</description>
    <slice>
      <filter src_ip="90.146.30.105" src_port="5641"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.136.204.105"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.22.222.105"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
479[label="204.91.175.10;d;2043pkt 2043fpkt", shape=diamond, color=yellow];
492[label="91.35.92.255;s;2pkt 2fpkt", shape=diamond, color=yellow];
493[label="204.91.174.147;d;569pkt 569fpkt", shape=diamond, color=yellow];
535[label="204.91.175.33;d;7334pkt 7334fpkt", shape=diamond, color=yellow];
1600[label="26.120.240.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
1643[label="26.116.131.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
1667[label="29.40.54.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
1786[label="29.40.136.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
1922[label="29.44.136.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
1948[label="29.37.36.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
1952[label="26.122.200.153;s;2pkt 2fpkt", shape=diamond, color=yellow];
2422[label="29.46.121.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2486[label="21.138.64.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
2517[label="204.91.186.106;d;1071pkt 1071fpkt", shape=diamond, color=yellow];
2671[label="29.47.144.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
3248[label="29.46.113.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
5908[label="29.42.132.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
6793[label="29.40.136.96;s;1pkt 1fpkt", shape=hexagon, color=black];
6974[label="204.91.186.106;d;520pkt 520fpkt", shape=hexagon, color=black];
7429[label="91.35.92.255;s;2pkt 2fpkt", shape=hexagon, color=black];
7446[label="26.116.131.216;s;1pkt 1fpkt", shape=hexagon, color=black];
7518[label="29.47.144.227;s;1pkt 1fpkt", shape=hexagon, color=black];
7688[label="21.138.64.71;s;1pkt 1fpkt", shape=hexagon, color=black];
8001[label="26.122.200.153;s;2pkt 2fpkt", shape=hexagon, color=black];
9379[label="91.92.86.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9409[label="29.33.36.31;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9445[label="29.42.134.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9531[label="29.36.103.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10278[label="21.138.64.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10800[label="29.40.136.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10942[label="92.70.187.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10995[label="27.41.46.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11143[label="29.42.132.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11511[label="91.67.230.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11518[label="208.21.80.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11559[label="23.163.161.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11628[label="92.21.20.140;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12447[label="29.46.113.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12510[label="16.36.33.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12630[label="29.37.36.193;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12781[label="29.46.121.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12851[label="22.154.106.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13649[label="91.35.92.255;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14628[label="29.40.136.96;2pkt 2fpkt", shape=invtriangle, color=brown];
14717[label="27.41.46.106;1pkt 1fpkt", shape=invtriangle, color=brown];
15405[label="29.46.113.181;1pkt 1fpkt", shape=invtriangle, color=brown];
15490[label="29.37.36.193;5pkt 5fpkt", shape=invtriangle, color=brown];
15556[label="29.46.121.201;2pkt 2fpkt", shape=invtriangle, color=brown];
15933[label="91.35.92.255;2pkt 2fpkt", shape=invtriangle, color=brown];
16357[label="29.40.136.96;2pkt 2fpkt", shape=invhouse, color=bisque];
16672[label="29.46.113.181;1pkt 1fpkt", shape=invhouse, color=bisque];
16717[label="29.37.36.193;5pkt 5fpkt", shape=invhouse, color=bisque];
16903[label="91.35.92.255;2pkt 2fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.175.33:25136}[64.9968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25136: (30.8567%)&lt;BR/&gt; 26202: (8.14034%)&lt;BR/&gt; 11349: (6.68102%)&lt;BR/&gt; 0: (2.10934%)&lt;BR/&gt; 16001: (1.69608%)&gt;];
}
479--1600[label="0.5;1pkt 1fpkt"];
479--1643[label="1;1pkt 1fpkt"];
479--1667[label="1;1pkt 1fpkt"];
479--1786[label="1;1pkt 1fpkt"];
479--1922[label="1;1pkt 1fpkt"];
479--1948[label="1;1pkt 1fpkt"];
479--1952[label="1;2pkt 2fpkt"];
479--2422[label="1;1pkt 1fpkt"];
479--2486[label="1;1pkt 1fpkt"];
479--2671[label="1;1pkt 1fpkt"];
479--3248[label="1;2pkt 2fpkt"];
479--5908[label="1;1pkt 1fpkt"];
479--6793[label="1;1pkt 1fpkt"];
479--7446[label="1;1pkt 1fpkt"];
479--7518[label="1;1pkt 1fpkt"];
479--7688[label="1;1pkt 1fpkt"];
479--8001[label="1;2pkt 2fpkt"];
479--8451[label="0.000489476;1pkt 1fpkt"];
479--8484[label="0.000978953;2pkt 2fpkt"];
479--8541[label="0.000489476;1pkt 1fpkt"];
479--8574[label="0.000978953;2pkt 2fpkt"];
479--8626[label="0.000489476;1pkt 1fpkt"];
479--8656[label="0.000978953;2pkt 2fpkt"];
479--9409[label="0.5;1pkt 1fpkt"];
479--9445[label="1;1pkt 1fpkt"];
479--9531[label="1;1pkt 1fpkt"];
479--10278[label="1;1pkt 1fpkt"];
479--10800[label="1;2pkt 2fpkt"];
479--11143[label="1;1pkt 1fpkt"];
479--11628[label="1;3pkt 3fpkt"];
479--12447[label="1;1pkt 1fpkt"];
479--12630[label="0.8;4pkt 4fpkt"];
479--12781[label="1;2pkt 2fpkt"];
479--12851[label="1;1pkt 1fpkt"];
479--14628[label="1;2pkt 2fpkt"];
479--15405[label="1;1pkt 1fpkt"];
479--15490[label="0.8;4pkt 4fpkt"];
479--15556[label="1;2pkt 2fpkt"];
479--16357[label="1;2pkt 2fpkt"];
479--16672[label="1;1pkt 1fpkt"];
479--16717[label="0.8;4pkt 4fpkt"];
492--493[label="0.5;1pkt 1fpkt"];
492--535[label="0.5;1pkt 1fpkt"];
492--7429[label="1;2pkt 2fpkt"];
492--13649[label="1;2pkt 2fpkt"];
492--15933[label="1;2pkt 2fpkt"];
492--16903[label="1;2pkt 2fpkt"];
493--3973[label="0.0242424;4pkt 4fpkt"];
493--7135[label="0.00175747;1pkt 1fpkt"];
493--7429[label="0.5;1pkt 1fpkt"];
493--8009[label="0.0208333;3pkt 3fpkt"];
493--8451[label="0.00351494;2pkt 2fpkt"];
493--8458[label="0.00175747;1pkt 1fpkt"];
493--8484[label="0.00351494;2pkt 2fpkt"];
493--8541[label="0.00351494;2pkt 2fpkt"];
493--8548[label="0.00175747;1pkt 1fpkt"];
493--8574[label="0.00351494;2pkt 2fpkt"];
493--8626[label="0.00351494;2pkt 2fpkt"];
493--8633[label="0.00175747;1pkt 1fpkt"];
493--8656[label="0.00351494;2pkt 2fpkt"];
493--9379[label="1;1pkt 1fpkt"];
493--10926[label="0.0655738;4pkt 4fpkt"];
493--10942[label="1;1pkt 1fpkt"];
493--10995[label="1;1pkt 1fpkt"];
493--11511[label="1;1pkt 1fpkt"];
493--11518[label="1;1pkt 1fpkt"];
493--11559[label="1;1pkt 1fpkt"];
493--12510[label="0.5;1pkt 1fpkt"];
493--13030[label="0.0227273;2pkt 2fpkt"];
493--13649[label="0.5;1pkt 1fpkt"];
493--14685[label="0.0655738;4pkt 4fpkt"];
493--14717[label="1;1pkt 1fpkt"];
493--15659[label="0.0227273;2pkt 2fpkt"];
493--15933[label="0.5;1pkt 1fpkt"];
493--16903[label="0.5;1pkt 1fpkt"];
535--1600[label="0.5;1pkt 1fpkt"];
535--2809[label="0.166667;1pkt 1fpkt"];
535--3964[label="0.5;1pkt 1fpkt"];
535--7429[label="0.5;1pkt 1fpkt"];
535--10029[label="0.1;1pkt 1fpkt"];
535--10392[label="0.5;1pkt 1fpkt"];
535--12127[label="0.5;1pkt 1fpkt"];
535--13649[label="0.5;1pkt 1fpkt"];
535--15253[label="0.5;1pkt 1fpkt"];
535--15933[label="0.5;1pkt 1fpkt"];
535--16903[label="0.5;1pkt 1fpkt"];
1643--7446[label="1;1pkt 1fpkt"];
1786--6793[label="1;1pkt 1fpkt"];
1786--10800[label="1;1pkt 1fpkt"];
1786--14628[label="1;1pkt 1fpkt"];
1786--16357[label="1;1pkt 1fpkt"];
1948--12630[label="1;1pkt 1fpkt"];
1948--15490[label="1;1pkt 1fpkt"];
1948--16717[label="1;1pkt 1fpkt"];
1952--8001[label="1;2pkt 2fpkt"];
2422--12781[label="1;1pkt 1fpkt"];
2422--15556[label="1;1pkt 1fpkt"];
2486--7688[label="1;1pkt 1fpkt"];
2486--10278[label="1;1pkt 1fpkt"];
2517--6974[label="1;520pkt 520fpkt"];
2517--7135[label="0.000933707;1pkt 1fpkt"];
2517--8451[label="0.000933707;1pkt 1fpkt"];
2517--8458[label="0.000933707;1pkt 1fpkt"];
2517--8484[label="0.000933707;1pkt 1fpkt"];
2517--8541[label="0.000933707;1pkt 1fpkt"];
2517--8548[label="0.000933707;1pkt 1fpkt"];
2517--8574[label="0.000933707;1pkt 1fpkt"];
2517--8626[label="0.000933707;1pkt 1fpkt"];
2517--8633[label="0.000933707;1pkt 1fpkt"];
2517--8656[label="0.000933707;1pkt 1fpkt"];
2517--12510[label="0.5;1pkt 1fpkt"];
2517--13030[label="0.0113636;1pkt 1fpkt"];
2517--15659[label="0.0113636;1pkt 1fpkt"];
2671--7518[label="1;1pkt 1fpkt"];
3248--12447[label="1;1pkt 1fpkt"];
3248--15405[label="1;1pkt 1fpkt"];
3248--16672[label="1;1pkt 1fpkt"];
5908--11143[label="1;1pkt 1fpkt"];
6793--10800[label="1;1pkt 1fpkt"];
6793--14628[label="1;1pkt 1fpkt"];
6793--16357[label="1;1pkt 1fpkt"];
6974--7135[label="0.00192308;1pkt 1fpkt"];
6974--8451[label="0.00192308;1pkt 1fpkt"];
6974--8458[label="0.00192308;1pkt 1fpkt"];
6974--8484[label="0.00192308;1pkt 1fpkt"];
6974--8541[label="0.00192308;1pkt 1fpkt"];
6974--8548[label="0.00192308;1pkt 1fpkt"];
6974--8574[label="0.00192308;1pkt 1fpkt"];
6974--8626[label="0.00192308;1pkt 1fpkt"];
6974--8633[label="0.00192308;1pkt 1fpkt"];
6974--8656[label="0.00192308;1pkt 1fpkt"];
6974--12510[label="0.5;1pkt 1fpkt"];
6974--13030[label="0.0113636;1pkt 1fpkt"];
6974--15659[label="0.0113636;1pkt 1fpkt"];
7429--13649[label="1;2pkt 2fpkt"];
7429--15933[label="1;2pkt 2fpkt"];
7429--16903[label="1;2pkt 2fpkt"];
7688--10278[label="1;1pkt 1fpkt"];
10800--14628[label="1;2pkt 2fpkt"];
10800--16357[label="1;2pkt 2fpkt"];
10995--14717[label="1;1pkt 1fpkt"];
12447--15405[label="1;1pkt 1fpkt"];
12447--16672[label="1;1pkt 1fpkt"];
12630--15490[label="1;5pkt 5fpkt"];
12630--16717[label="1;5pkt 5fpkt"];
12781--15556[label="1;2pkt 2fpkt"];
13649--15933[label="1;2pkt 2fpkt"];
13649--16903[label="1;2pkt 2fpkt"];
14628--16357[label="1;2pkt 2fpkt"];
15405--16672[label="1;1pkt 1fpkt"];
15490--16717[label="1;5pkt 5fpkt"];
15933--16903[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.175.33" dst_port="25136"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.96.131.106"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
3869[label="204.91.186.106;s;1072pkt 1072fpkt", shape=diamond, color=yellow];
11000[label="204.91.186.106;1149pkt 1149fpkt", shape=pentagon, color=darkviolet];
14720[label="204.91.186.106;1149pkt 1149fpkt", shape=invtriangle, color=brown];
16394[label="204.91.186.106;1149pkt 1149fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.186.106:11349, *:*}[99.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11349: (49.9557%)&lt;BR/&gt; 6881: (0.354061%)&lt;BR/&gt; 16001: (0.309803%)&lt;BR/&gt; 16881: (0.221288%)&lt;BR/&gt; 55555: (0.17703%)&gt;];
}
3869--5681[label="0.0444444;2pkt 2fpkt"];
3869--8498[label="0.00186567;2pkt 2fpkt"];
3869--8588[label="0.00186567;2pkt 2fpkt"];
3869--11000[label="1;1072pkt 1072fpkt"];
3869--14720[label="1;1072pkt 1072fpkt"];
3869--16394[label="1;1072pkt 1072fpkt"];
11000--14720[label="1;1149pkt 1149fpkt"];
11000--16394[label="1;1149pkt 1149fpkt"];
14720--16394[label="1;1149pkt 1149fpkt"];
</description>
    <slice>
      <filter src_ip="204.91.186.106" src_port="11349"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.144.1.107"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.22.6.107"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.176.23.107"/>
    </slice>
    <from sec="1246942940" usec="0"/>
    <to sec="1246943550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.112.227.107"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.133.90.108"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.196.212.108"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246942816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.81.140.109"/>
    </slice>
    <from sec="1246943023" usec="0"/>
    <to sec="1246943150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.201.144.109"/>
    </slice>
    <from sec="1246943397" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.68.197.109"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.57.110"/>
    </slice>
    <from sec="1246942831" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.21.60.110"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.154.73.110"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.74.110"/>
    </slice>
    <from sec="1246943161" usec="0"/>
    <to sec="1246943491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.68.2.111"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.177.165.111"/>
    </slice>
    <from sec="1246943084" usec="0"/>
    <to sec="1246943112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.182.209.111"/>
    </slice>
    <from sec="1246943623" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.212.112"/>
    </slice>
    <from sec="1246942897" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.90.56.113"/>
    </slice>
    <from sec="1246942981" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05896,2.0727,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
1794[label="204.91.186.97;d;3670pkt 3670fpkt", shape=diamond, color=yellow];
4606[label="29.156.74.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
5142[label="29.173.93.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
5598[label="92.67.41.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
5622[label="208.102.57.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
8017[label="29.156.74.203;s;1pkt 1fpkt", shape=hexagon, color=black];
11138[label="208.102.57.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12817[label="29.156.74.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.186.97:26816}[98.8556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26816: (49.4289%)&lt;BR/&gt; 0: (1.14224%)&lt;BR/&gt; 16001: (0.979059%)&lt;BR/&gt; 6881: (0.571118%)&lt;BR/&gt; 4041: (0.231167%)&gt;];
}
1794--2854[label="0.142857;1pkt 1fpkt"];
1794--4606[label="1;1pkt 1fpkt"];
1794--5142[label="1;1pkt 1fpkt"];
1794--5598[label="1;1pkt 1fpkt"];
1794--5622[label="1;1pkt 1fpkt"];
1794--7063[label="0.25;1pkt 1fpkt"];
1794--8017[label="1;1pkt 1fpkt"];
1794--8452[label="0.00027248;1pkt 1fpkt"];
1794--8542[label="0.00027248;1pkt 1fpkt"];
1794--8627[label="0.00027248;1pkt 1fpkt"];
1794--10361[label="0.333333;1pkt 1fpkt"];
1794--10415[label="0.0222222;1pkt 1fpkt"];
1794--10882[label="0.142857;1pkt 1fpkt"];
1794--11138[label="1;1pkt 1fpkt"];
1794--12297[label="0.5;1pkt 1fpkt"];
1794--12817[label="1;1pkt 1fpkt"];
1794--13030[label="0.0113636;1pkt 1fpkt"];
1794--15659[label="0.0113636;1pkt 1fpkt"];
4606--8017[label="1;1pkt 1fpkt"];
4606--12817[label="1;1pkt 1fpkt"];
5622--11138[label="1;1pkt 1fpkt"];
8017--12817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.186.97" dst_port="26816"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.150.9.114"/>
    </slice>
    <from sec="1246943419" usec="0"/>
    <to sec="1246943444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.22.96.114"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.230.116.114"/>
    </slice>
    <from sec="1246943616" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.50.218.114"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.151.12.115"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.84.155.115"/>
    </slice>
    <from sec="1246943152" usec="0"/>
    <to sec="1246943171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.39.33.117"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.157.137.117"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2827,2.2095,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
71[label="136.90.74.118s;1pkt 1fpkt", shape=rectangle, color=red];
11211[label="136.90.74.118;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.74.118:2605, 205.179.58.26:80}[20%]&lt;BR/&gt;{136.90.74.118:2597, 205.179.58.114:80}[20%]&lt;BR/&gt;{136.90.74.118:2603, 219.57.221.128:80}[20%]&lt;BR/&gt;{136.90.74.118:2611, 219.57.221.128:80}[20%]&lt;BR/&gt;{136.90.74.118:2613, 219.57.221.128:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2597: (16.6667%)&lt;BR/&gt; 2613: (8.33333%)&lt;BR/&gt; 2611: (8.33333%)&lt;BR/&gt; 2605: (8.33333%)&gt;];
}
71--11211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.57.221.128" dst_port="80" src_ip="136.90.74.118" src_port="2613"/>
      <filter dst_ip="219.57.221.128" dst_port="80" src_ip="136.90.74.118" src_port="2611"/>
      <filter dst_ip="219.57.221.128" dst_port="80" src_ip="136.90.74.118" src_port="2603"/>
      <filter dst_ip="205.179.58.114" dst_port="80" src_ip="136.90.74.118" src_port="2597"/>
      <filter dst_ip="205.179.58.26" dst_port="80" src_ip="136.90.74.118" src_port="2605"/>
    </slice>
    <from sec="1246943696" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.37.91.118"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.107.202.118"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.93.50.119"/>
    </slice>
    <from sec="1246942833" usec="0"/>
    <to sec="1246943119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.209.80.120"/>
    </slice>
    <from sec="1246943622" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.154.85.120"/>
    </slice>
    <from sec="1246943009" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.163.137.120"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.72.149.120"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.10.184.120"/>
    </slice>
    <from sec="1246943686" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
831[label="136.90.45.31;d;20pkt 20fpkt", shape=diamond, color=yellow];
834[label="17.128.108.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
892[label="93.134.25.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
2541[label="17.57.82.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
4425[label="208.67.208.120;s;4pkt 4fpkt", shape=diamond, color=yellow];
5879[label="27.27.139.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
6651[label="93.134.25.229;s;1pkt 1fpkt", shape=hexagon, color=black];
9280[label="17.128.108.24;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11246[label="208.67.208.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13256[label="93.134.25.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13305[label="27.27.139.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13935[label="17.128.108.24;1pkt 1fpkt", shape=invtriangle, color=brown];
14833[label="208.67.208.120;1pkt 1fpkt", shape=invtriangle, color=brown];
16058[label="17.128.108.24;2pkt 2fpkt", shape=invhouse, color=bisque];
16444[label="208.67.208.120;1pkt 1fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.90.45.31:30863}[45%]&lt;BR/&gt;{208.66.26.48:8000, 136.90.45.31:*}[30%]&lt;BR/&gt;{208.67.208.120:20115, 136.90.45.31:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30863: (26.1905%)&lt;BR/&gt; 20115: (13.0952%)&lt;BR/&gt; 0: (11.9048%)&lt;BR/&gt; 8000: (8.33333%)&lt;BR/&gt; 17278: (7.14286%)&gt;];
}
831--834[label="1;2pkt 2fpkt"];
831--892[label="1;1pkt 1fpkt"];
831--2541[label="1;1pkt 1fpkt"];
831--4425[label="1;4pkt 4fpkt"];
831--5879[label="1;2pkt 2fpkt"];
831--6651[label="1;1pkt 1fpkt"];
831--9280[label="1;2pkt 2fpkt"];
831--11246[label="1;1pkt 1fpkt"];
831--13256[label="1;1pkt 1fpkt"];
831--13305[label="1;2pkt 2fpkt"];
831--13935[label="1;1pkt 1fpkt"];
831--14833[label="1;1pkt 1fpkt"];
831--16058[label="1;2pkt 2fpkt"];
831--16444[label="1;1pkt 1fpkt"];
834--9280[label="1;2pkt 2fpkt"];
834--13935[label="1;1pkt 1fpkt"];
834--16058[label="1;2pkt 2fpkt"];
892--6651[label="1;1pkt 1fpkt"];
892--13256[label="1;1pkt 1fpkt"];
4425--11246[label="1;1pkt 1fpkt"];
4425--14833[label="1;1pkt 1fpkt"];
4425--16444[label="1;1pkt 1fpkt"];
5879--13305[label="1;2pkt 2fpkt"];
6651--13256[label="1;1pkt 1fpkt"];
9280--13935[label="1;1pkt 1fpkt"];
9280--16058[label="1;2pkt 2fpkt"];
11246--14833[label="1;1pkt 1fpkt"];
11246--16444[label="1;1pkt 1fpkt"];
13935--16058[label="1;1pkt 1fpkt"];
14833--16444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.45.31" dst_port="30863"/>
      <filter dst_ip="136.90.45.31" src_ip="208.66.26.48" src_port="8000"/>
      <filter dst_ip="136.90.45.31" src_ip="208.67.208.120" src_port="20115"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.213.120"/>
    </slice>
    <from sec="1246943490" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.179.17.121"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.32.194.121"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.137.225.122"/>
    </slice>
    <from sec="1246942920" usec="0"/>
    <to sec="1246943253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
3705[label="208.69.50.123;s;243pkt 243fpkt", shape=diamond, color=yellow];
11292[label="208.69.50.123;243pkt 243fpkt", shape=pentagon, color=darkviolet];
14859[label="208.69.50.123;243pkt 243fpkt", shape=invtriangle, color=brown];
16458[label="208.69.50.123;243pkt 243fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.69.50.123:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52260: (0.411523%)&lt;BR/&gt; 64893: (0.205761%)&lt;BR/&gt; 64339: (0.205761%)&lt;BR/&gt; 64090: (0.205761%)&gt;];
}
3705--11292[label="1;243pkt 243fpkt"];
3705--14859[label="1;243pkt 243fpkt"];
3705--16458[label="1;243pkt 243fpkt"];
11292--14859[label="1;243pkt 243fpkt"];
11292--16458[label="1;243pkt 243fpkt"];
14859--16458[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter src_ip="208.69.50.123" src_port="80"/>
    </slice>
    <from sec="1246943084" usec="0"/>
    <to sec="1246943128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.69.188.123"/>
    </slice>
    <from sec="1246943288" usec="0"/>
    <to sec="1246943293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.100.231.123"/>
    </slice>
    <from sec="1246943001" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.143.100.124"/>
    </slice>
    <from sec="1246942869" usec="0"/>
    <to sec="1246942964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.193.124"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.209.124"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.70.4.125"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.23.13.125"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.201.164.125"/>
    </slice>
    <from sec="1246943118" usec="0"/>
    <to sec="1246943188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.55.126"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.65.73.126"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.155.191.126"/>
    </slice>
    <from sec="1246943496" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.19.117.127"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.109.158.127"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.3.1.128"/>
    </slice>
    <from sec="1246943347" usec="0"/>
    <to sec="1246943351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.121.18.128"/>
    </slice>
    <from sec="1246943288" usec="0"/>
    <to sec="1246943299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.56.159.128"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.16.229.128"/>
    </slice>
    <from sec="1246942863" usec="0"/>
    <to sec="1246943336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.1.253.128"/>
    </slice>
    <from sec="1246943654" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.93.129"/>
    </slice>
    <from sec="1246943182" usec="0"/>
    <to sec="1246943210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.98.130.129"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.88.213.129"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.99.70.130"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.120.162.130"/>
    </slice>
    <from sec="1246943686" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.88.238.130"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.148.2.131"/>
    </slice>
    <from sec="1246942896" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.18.120.131"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.30.174.131"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
4551[label="141.179.246.131;s;712pkt 712fpkt", shape=diamond, color=yellow];
11463[label="141.179.246.131;766pkt 766fpkt", shape=pentagon, color=darkviolet];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.246.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4551--11463[label="0.998596;711pkt 711fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.246.131"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.99.70.132"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.96.132"/>
    </slice>
    <from sec="1246943128" usec="0"/>
    <to sec="1246943191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.28.161.132"/>
    </slice>
    <from sec="1246942903" usec="0"/>
    <to sec="1246943234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.24.133"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.148.133"/>
    </slice>
    <from sec="1246942855" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.221.133"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.88.229.134"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.77.21.135"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.234.89.135"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.18.136"/>
    </slice>
    <from sec="1246943187" usec="0"/>
    <to sec="1246943205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.221.81.136"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.73.135.136"/>
    </slice>
    <from sec="1246943230" usec="0"/>
    <to sec="1246943351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
6406[label="136.90.221.136;s;77pkt 77fpkt", shape=diamond, color=yellow];
11564[label="136.90.221.136;78pkt 78fpkt", shape=pentagon, color=darkviolet];
14990[label="136.90.221.136;78pkt 78fpkt", shape=invtriangle, color=brown];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.221.136:80, 205.92.167.213:*}[91.0256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57700: (0.643777%)&lt;BR/&gt; 53083: (0.643777%)&lt;BR/&gt; 49366: (0.643777%)&lt;BR/&gt; 49364: (0.643777%)&gt;];
}
6406--7871[label="0.012987;1pkt 1fpkt"];
6406--8484[label="0.038961;3pkt 3fpkt"];
6406--8574[label="0.038961;3pkt 3fpkt"];
6406--8656[label="0.038961;3pkt 3fpkt"];
6406--11564[label="1;77pkt 77fpkt"];
6406--14990[label="1;77pkt 77fpkt"];
11564--14990[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="205.92.167.213" src_ip="136.90.221.136" src_port="80"/>
    </slice>
    <from sec="1246943269" usec="0"/>
    <to sec="1246943683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.235.136"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.80.21.137"/>
    </slice>
    <from sec="1246943594" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.5.43.137"/>
    </slice>
    <from sec="1246942918" usec="0"/>
    <to sec="1246942967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.69.234.137"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.244.50.138"/>
    </slice>
    <from sec="1246942922" usec="0"/>
    <to sec="1246943296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.14.62.138"/>
    </slice>
    <from sec="1246943089" usec="0"/>
    <to sec="1246943433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.47.67.138"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.122.74.138"/>
    </slice>
    <from sec="1246942937" usec="0"/>
    <to sec="1246943209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.44.92.138"/>
    </slice>
    <from sec="1246942867" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
6478[label="27.233.129.138;s;4pkt 4fpkt", shape=diamond, color=yellow];
11604[label="27.233.129.138;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.233.129.138:80, 136.90.66.98:2752}[25%]&lt;BR/&gt;{27.233.129.138:80, 136.90.66.98:2753}[25%]&lt;BR/&gt;{27.233.129.138:80, 136.90.66.98:2754}[25%]&lt;BR/&gt;{27.233.129.138:80, 136.90.66.98:2755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2755: (12.5%)&lt;BR/&gt; 2754: (12.5%)&lt;BR/&gt; 2753: (12.5%)&lt;BR/&gt; 2752: (12.5%)&gt;];
}
6478--11604[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.66.98" dst_port="2755" src_ip="27.233.129.138" src_port="80"/>
      <filter dst_ip="136.90.66.98" dst_port="2754" src_ip="27.233.129.138" src_port="80"/>
      <filter dst_ip="136.90.66.98" dst_port="2753" src_ip="27.233.129.138" src_port="80"/>
      <filter dst_ip="136.90.66.98" dst_port="2752" src_ip="27.233.129.138" src_port="80"/>
    </slice>
    <from sec="1246943490" usec="0"/>
    <to sec="1246943511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.24.196.138"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.128.139"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.47.140"/>
    </slice>
    <from sec="1246942833" usec="0"/>
    <to sec="1246943676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.16.132.141"/>
    </slice>
    <from sec="1246943630" usec="0"/>
    <to sec="1246943653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.22.142"/>
    </slice>
    <from sec="1246942973" usec="0"/>
    <to sec="1246943114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.133.108.142"/>
    </slice>
    <from sec="1246943013" usec="0"/>
    <to sec="1246943609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.133.140.142"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.168.225.142"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.2.143"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.21.143"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.184.56.143"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.18.120.143"/>
    </slice>
    <from sec="1246942894" usec="0"/>
    <to sec="1246942928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.163.165.143"/>
    </slice>
    <from sec="1246943176" usec="0"/>
    <to sec="1246943220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.221.19.144"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.90.33.144"/>
    </slice>
    <from sec="1246943092" usec="0"/>
    <to sec="1246943124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.99.70.144"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.12.165.144"/>
    </slice>
    <from sec="1246943503" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
5213[label="141.179.215.144;s;431pkt 431fpkt", shape=diamond, color=yellow];
11739[label="141.179.215.144;430pkt 430fpkt", shape=pentagon, color=darkviolet];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.215.144:27506, *:*}[82.5986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27506: (41.3473%)&lt;BR/&gt; 29066: (6.73635%)&lt;BR/&gt; 16001: (0.696864%)&lt;BR/&gt; 4041: (0.696864%)&lt;BR/&gt; 6881: (0.58072%)&gt;];
}
5213--11739[label="1;430pkt 430fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.215.144" src_port="27506"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.22.4.145"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.5.84.145"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.34.75.146"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246942900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.145.199.146"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.129.203.146"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.24.139.147"/>
    </slice>
    <from sec="1246943107" usec="0"/>
    <to sec="1246943230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.196.22.148"/>
    </slice>
    <from sec="1246942859" usec="0"/>
    <to sec="1246943505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.41.36.148"/>
    </slice>
    <from sec="1246943256" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.54.140.148"/>
    </slice>
    <from sec="1246942942" usec="0"/>
    <to sec="1246942972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.49.222.148"/>
    </slice>
    <from sec="1246943591" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.80.241.148"/>
    </slice>
    <from sec="1246943192" usec="0"/>
    <to sec="1246943195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.76.243.148"/>
    </slice>
    <from sec="1246943003" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
4609[label="42.30.216.143;d;81pkt 81fpkt", shape=diamond, color=yellow];
4610[label="205.100.246.148;s;95pkt 95fpkt", shape=diamond, color=yellow];
11819[label="205.100.246.148;103pkt 103fpkt", shape=pentagon, color=darkviolet];
15114[label="205.100.246.148;103pkt 103fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.246.148:80, 42.30.216.143:*}[95.1456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0366%)&lt;BR/&gt; 53: (1.96335%)&lt;BR/&gt; 65365: (0.52356%)&lt;BR/&gt; 65180: (0.52356%)&lt;BR/&gt; 64873: (0.52356%)&gt;];
}
4609--4610[label="1;81pkt 81fpkt"];
4609--8451[label="0.0617284;5pkt 5fpkt"];
4609--8458[label="0.0740741;6pkt 6fpkt"];
4609--8484[label="0.0740741;6pkt 6fpkt"];
4609--8541[label="0.0617284;5pkt 5fpkt"];
4609--8548[label="0.0740741;6pkt 6fpkt"];
4609--8574[label="0.0740741;6pkt 6fpkt"];
4609--8626[label="0.0617284;5pkt 5fpkt"];
4609--8633[label="0.0740741;6pkt 6fpkt"];
4609--8656[label="0.0740741;6pkt 6fpkt"];
4609--11819[label="1;81pkt 81fpkt"];
4609--15114[label="1;81pkt 81fpkt"];
4610--8451[label="0.0526316;5pkt 5fpkt"];
4610--8458[label="0.0631579;6pkt 6fpkt"];
4610--8484[label="0.0631579;6pkt 6fpkt"];
4610--8541[label="0.0526316;5pkt 5fpkt"];
4610--8548[label="0.0631579;6pkt 6fpkt"];
4610--8574[label="0.0631579;6pkt 6fpkt"];
4610--8626[label="0.0526316;5pkt 5fpkt"];
4610--8633[label="0.0631579;6pkt 6fpkt"];
4610--8656[label="0.0631579;6pkt 6fpkt"];
4610--11819[label="1;95pkt 95fpkt"];
4610--15114[label="1;95pkt 95fpkt"];
11819--15114[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.216.143" src_ip="205.100.246.148" src_port="80"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.5.40.150"/>
    </slice>
    <from sec="1246942828" usec="0"/>
    <to sec="1246943072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.67.41.150"/>
    </slice>
    <from sec="1246943592" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.129.80.151"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.138.143.151"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.169.101.152"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
1513[label="204.19.43.240;d;87pkt 87fpkt", shape=diamond, color=yellow];
1514[label="136.90.71.158;s;99pkt 99fpkt", shape=diamond, color=yellow];
7088[label="136.90.71.158;s;97pkt 97fpkt", shape=hexagon, color=black];
11639[label="136.90.117.140;17pkt 17fpkt", shape=pentagon, color=darkviolet];
15021[label="136.90.117.140;17pkt 17fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.71.158:*, 204.19.43.240:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1623: (0.473186%)&lt;BR/&gt; 1621: (0.473186%)&lt;BR/&gt; 1619: (0.473186%)&lt;BR/&gt; 1617: (0.473186%)&gt;];
}
1513--1514[label="1;87pkt 87fpkt"];
1513--7088[label="1;87pkt 87fpkt"];
1514--2703[label="0.010101;1pkt 1fpkt"];
1514--2721[label="0.020202;2pkt 2fpkt"];
1514--2731[label="0.020202;2pkt 2fpkt"];
1514--3279[label="0.010101;1pkt 1fpkt"];
1514--4099[label="0.020202;2pkt 2fpkt"];
1514--6936[label="0.010101;1pkt 1fpkt"];
1514--7088[label="1;97pkt 97fpkt"];
1514--7298[label="0.020202;2pkt 2fpkt"];
1514--7500[label="0.0116279;1pkt 1fpkt"];
1514--7526[label="0.010101;1pkt 1fpkt"];
7088--7298[label="0.0206186;2pkt 2fpkt"];
7088--7500[label="0.0116279;1pkt 1fpkt"];
11639--15021[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="204.19.43.240" dst_port="80" src_ip="136.90.71.158"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.168.5.153"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.78.153"/>
    </slice>
    <from sec="1246942848" usec="0"/>
    <to sec="1246943649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.89.153"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.39.139.153"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.198.153"/>
    </slice>
    <from sec="1246942937" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.21.48.154"/>
    </slice>
    <from sec="1246943022" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.102.236.154"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.160.182.157"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.201.157"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.129.8.158"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.170.160.158"/>
    </slice>
    <from sec="1246942843" usec="0"/>
    <to sec="1246943617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.68.239.158"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.29.135.159"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.60.196.159"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.192.226.159"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.27.61.160"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.37.161"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.122.25.162"/>
    </slice>
    <from sec="1246943191" usec="0"/>
    <to sec="1246943234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.51.30.162"/>
    </slice>
    <from sec="1246942836" usec="0"/>
    <to sec="1246943181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.86.159.162"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.100.248.162"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.35.134.163"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
4674[label="136.90.27.164;s;26pkt 26fpkt", shape=diamond, color=yellow];
12102[label="136.90.27.164;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.27.164:56689, *:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56689: (42.3077%)&lt;BR/&gt; 443: (5.76923%)&lt;BR/&gt; 62363: (1.92308%)&lt;BR/&gt; 57549: (1.92308%)&lt;BR/&gt; 50358: (1.92308%)&gt;];
}
4674--5232[label="0.0384615;1pkt 1fpkt"];
4674--8514[label="0.0384615;1pkt 1fpkt"];
4674--8603[label="0.0384615;1pkt 1fpkt"];
4674--8680[label="0.0384615;1pkt 1fpkt"];
4674--12102[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.27.164" src_port="56689"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.131.81.165"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.146.165"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.170.29.166"/>
    </slice>
    <from sec="1246943662" usec="0"/>
    <to sec="1246943687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.189.226.166"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.17.48.167"/>
    </slice>
    <from sec="1246942872" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.1.102.167"/>
    </slice>
    <from sec="1246943603" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.149.111.167"/>
    </slice>
    <from sec="1246943641" usec="0"/>
    <to sec="1246943669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.32.112.167"/>
    </slice>
    <from sec="1246942913" usec="0"/>
    <to sec="1246943036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
948[label="170.81.21.255;d;660pkt 660fpkt", shape=diamond, color=yellow];
2074[label="25.224.32.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
2507[label="16.189.78.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
2575[label="17.68.189.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
3174[label="141.5.10.135;d;579pkt 579fpkt", shape=diamond, color=yellow];
3672[label="141.5.104.62;d;210pkt 210fpkt", shape=diamond, color=yellow];
4294[label="90.154.101.83;s;153pkt 153fpkt", shape=diamond, color=yellow];
6969[label="16.189.78.223;s;2pkt 2fpkt", shape=hexagon, color=black];
7161[label="141.5.10.135;d;579pkt 579fpkt", shape=hexagon, color=black];
7961[label="170.81.21.255;d;440pkt 440fpkt", shape=hexagon, color=black];
8757[label="90.154.101.2;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8938[label="90.154.124.9;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8995[label="90.154.124.11;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9011[label="27.79.11.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9366[label="90.154.65.28;63pkt 63fpkt", shape=pentagon, color=darkviolet];
10285[label="90.154.125.71;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11080[label="90.154.121.110;74pkt 74fpkt", shape=pentagon, color=darkviolet];
12174[label="23.3.128.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13149[label="16.189.78.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13692[label="90.154.101.2;48pkt 48fpkt", shape=invtriangle, color=brown];
14758[label="90.154.121.110;74pkt 74fpkt", shape=invtriangle, color=brown];
15275[label="23.3.128.167;1pkt 1fpkt", shape=invtriangle, color=brown];
16409[label="90.154.121.110;74pkt 74fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.5.10.135:*}[39.5079%]&lt;BR/&gt;{*:*, 170.81.21.255:16881}[28.9815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3664%)&lt;BR/&gt; 16881: (12.0814%)&lt;BR/&gt; 8080: (5.8109%)&lt;BR/&gt; 2580: (1.51018%)&lt;BR/&gt; 0: (0.787919%)&gt;];
}
948--2074[label="0.5;1pkt 1fpkt"];
948--2507[label="0.5;1pkt 1fpkt"];
948--2575[label="0.5;1pkt 1fpkt"];
948--6969[label="0.5;1pkt 1fpkt"];
948--7961[label="1;440pkt 440fpkt"];
948--9011[label="0.5;1pkt 1fpkt"];
948--9366[label="0.555556;35pkt 35fpkt"];
948--10285[label="0.125;1pkt 1fpkt"];
948--11080[label="0.986486;73pkt 73fpkt"];
948--12174[label="1;1pkt 1fpkt"];
948--13030[label="0.0113636;1pkt 1fpkt"];
948--14758[label="0.986486;73pkt 73fpkt"];
948--15275[label="1;1pkt 1fpkt"];
948--15659[label="0.0113636;1pkt 1fpkt"];
948--16409[label="0.986486;73pkt 73fpkt"];
2074--7961[label="0.5;1pkt 1fpkt"];
2507--6969[label="1;2pkt 2fpkt"];
2507--7961[label="0.5;1pkt 1fpkt"];
2507--13149[label="1;1pkt 1fpkt"];
2575--7961[label="0.5;1pkt 1fpkt"];
3174--4294[label="1;153pkt 153fpkt"];
3174--6713[label="0.00172712;1pkt 1fpkt"];
3174--7161[label="1;579pkt 579fpkt"];
3174--8374[label="0.00172712;1pkt 1fpkt"];
3174--8451[label="0.0138169;8pkt 8fpkt"];
3174--8452[label="0.00172712;1pkt 1fpkt"];
3174--8458[label="0.00172712;1pkt 1fpkt"];
3174--8484[label="0.0397237;23pkt 23fpkt"];
3174--8541[label="0.0138169;8pkt 8fpkt"];
3174--8542[label="0.00172712;1pkt 1fpkt"];
3174--8548[label="0.00172712;1pkt 1fpkt"];
3174--8574[label="0.0397237;23pkt 23fpkt"];
3174--8626[label="0.0138169;8pkt 8fpkt"];
3174--8627[label="0.00172712;1pkt 1fpkt"];
3174--8633[label="0.00172712;1pkt 1fpkt"];
3174--8656[label="0.0397237;23pkt 23fpkt"];
3174--8709[label="0.00172712;1pkt 1fpkt"];
3174--8938[label="0.625;5pkt 5fpkt"];
3174--8995[label="0.933333;14pkt 14fpkt"];
3174--13673[label="0.00172712;1pkt 1fpkt"];
3174--15950[label="0.00172712;1pkt 1fpkt"];
3672--8484[label="0.00952381;2pkt 2fpkt"];
3672--8574[label="0.00952381;2pkt 2fpkt"];
3672--8656[label="0.00952381;2pkt 2fpkt"];
3672--8757[label="1;48pkt 48fpkt"];
3672--8938[label="0.375;3pkt 3fpkt"];
3672--8995[label="0.0666667;1pkt 1fpkt"];
3672--9366[label="0.31746;20pkt 20fpkt"];
3672--10205[label="0.184615;12pkt 12fpkt"];
3672--10285[label="0.75;6pkt 6fpkt"];
3672--13692[label="1;48pkt 48fpkt"];
4294--7161[label="1;153pkt 153fpkt"];
4294--8484[label="0.0261438;4pkt 4fpkt"];
4294--8574[label="0.0261438;4pkt 4fpkt"];
4294--8656[label="0.0261438;4pkt 4fpkt"];
6969--7961[label="0.5;1pkt 1fpkt"];
6969--13149[label="1;1pkt 1fpkt"];
7161--8374[label="0.00172712;1pkt 1fpkt"];
7161--8451[label="0.0138169;8pkt 8fpkt"];
7161--8452[label="0.00172712;1pkt 1fpkt"];
7161--8458[label="0.00172712;1pkt 1fpkt"];
7161--8484[label="0.0397237;23pkt 23fpkt"];
7161--8541[label="0.0138169;8pkt 8fpkt"];
7161--8542[label="0.00172712;1pkt 1fpkt"];
7161--8548[label="0.00172712;1pkt 1fpkt"];
7161--8574[label="0.0397237;23pkt 23fpkt"];
7161--8626[label="0.0138169;8pkt 8fpkt"];
7161--8627[label="0.00172712;1pkt 1fpkt"];
7161--8633[label="0.00172712;1pkt 1fpkt"];
7161--8656[label="0.0397237;23pkt 23fpkt"];
7161--8709[label="0.00172712;1pkt 1fpkt"];
7161--8938[label="0.625;5pkt 5fpkt"];
7161--8995[label="0.933333;14pkt 14fpkt"];
7161--13673[label="0.00172712;1pkt 1fpkt"];
7161--15950[label="0.00172712;1pkt 1fpkt"];
7961--9011[label="0.5;1pkt 1fpkt"];
7961--11080[label="0.77027;57pkt 57fpkt"];
7961--12174[label="1;1pkt 1fpkt"];
7961--14758[label="0.77027;57pkt 57fpkt"];
7961--15275[label="1;1pkt 1fpkt"];
7961--16409[label="0.77027;57pkt 57fpkt"];
8757--13692[label="1;48pkt 48fpkt"];
11080--14758[label="1;74pkt 74fpkt"];
11080--16409[label="1;74pkt 74fpkt"];
12174--15275[label="1;1pkt 1fpkt"];
14758--16409[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.21.255" dst_port="16881"/>
      <filter dst_ip="141.5.10.135" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.27.251.167"/>
    </slice>
    <from sec="1246943104" usec="0"/>
    <to sec="1246943109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.146.153.168"/>
    </slice>
    <from sec="1246943042" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.28.24.169"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.112.243.169"/>
    </slice>
    <from sec="1246943296" usec="0"/>
    <to sec="1246943504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.142.1.170"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.112.29.171"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.134.188.171"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.20.224.171"/>
    </slice>
    <from sec="1246943083" usec="0"/>
    <to sec="1246943093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.219.220.172"/>
    </slice>
    <from sec="1246942823" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.44.96.173"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.81.97.173"/>
    </slice>
    <from sec="1246942908" usec="0"/>
    <to sec="1246943037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.119.136.173"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.90.0.174"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.64.174"/>
    </slice>
    <from sec="1246943401" usec="0"/>
    <to sec="1246943610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.22.133.175"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.2.250.176"/>
    </slice>
    <from sec="1246943038" usec="0"/>
    <to sec="1246943077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.22.71.177"/>
    </slice>
    <from sec="1246943333" usec="0"/>
    <to sec="1246943382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.100.82.177"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.62.124.177"/>
    </slice>
    <from sec="1246943635" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.22.160.177"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.85.163.177"/>
    </slice>
    <from sec="1246943053" usec="0"/>
    <to sec="1246943095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.40.9.178"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.121.77.178"/>
    </slice>
    <from sec="1246943136" usec="0"/>
    <to sec="1246943160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.210.100.178"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246942836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.17.51.179"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
6536[label="203.240.61.179;s;45pkt 45fpkt", shape=diamond, color=yellow];
12404[label="203.240.61.179;45pkt 45fpkt", shape=pentagon, color=darkviolet];
15388[label="203.240.61.179;45pkt 45fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.240.61.179:80, 141.179.149.123:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50257: (1.11111%)&lt;BR/&gt; 50254: (1.11111%)&lt;BR/&gt; 50251: (1.11111%)&lt;BR/&gt; 50248: (1.11111%)&gt;];
}
6536--12404[label="1;45pkt 45fpkt"];
6536--15388[label="1;45pkt 45fpkt"];
12404--15388[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.149.123" src_ip="203.240.61.179" src_port="80"/>
    </slice>
    <from sec="1246943551" usec="0"/>
    <to sec="1246943595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.177.166.179"/>
    </slice>
    <from sec="1246943057" usec="0"/>
    <to sec="1246943083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.12.63.180"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.81.138.180"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.84.191.180"/>
    </slice>
    <from sec="1246943667" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.21.200.181"/>
    </slice>
    <from sec="1246942874" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.179.123.182"/>
    </slice>
    <from sec="1246943639" usec="0"/>
    <to sec="1246943666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.112.143.182"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.11.104.183"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.146.7.184"/>
    </slice>
    <from sec="1246943409" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.163.75.184"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.32.128.184"/>
    </slice>
    <from sec="1246943319" usec="0"/>
    <to sec="1246943344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.201.157.184"/>
    </slice>
    <from sec="1246942835" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.29.174.184"/>
    </slice>
    <from sec="1246942838" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.117.100.185"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.51.208.185"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.48.227.185"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.205.60.188"/>
    </slice>
    <from sec="1246943178" usec="0"/>
    <to sec="1246943220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.18.168.188"/>
    </slice>
    <from sec="1246943071" usec="0"/>
    <to sec="1246943673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.43.129.189"/>
    </slice>
    <from sec="1246943143" usec="0"/>
    <to sec="1246943322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.20.25.190"/>
    </slice>
    <from sec="1246942929" usec="0"/>
    <to sec="1246943283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.253.190"/>
    </slice>
    <from sec="1246943570" usec="0"/>
    <to sec="1246943589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.58.191"/>
    </slice>
    <from sec="1246943255" usec="0"/>
    <to sec="1246943289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.202.122.191"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.200.128.191"/>
    </slice>
    <from sec="1246943675" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.109.6.192"/>
    </slice>
    <from sec="1246943479" usec="0"/>
    <to sec="1246943536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
407[label="17.3.203.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
408[label="136.90.44.166;s;894pkt 894fpkt", shape=diamond, color=yellow];
1500[label="22.110.53.249;d;7pkt 7fpkt", shape=diamond, color=yellow];
2701[label="204.91.4.193;s;189pkt 189fpkt", shape=diamond, color=yellow];
3790[label="22.111.39.78;d;41pkt 41fpkt", shape=diamond, color=yellow];
4339[label="90.60.39.24;d;22pkt 22fpkt", shape=diamond, color=yellow];
4869[label="208.8.200.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
4871[label="24.7.2.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
4872[label="24.5.36.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
4873[label="93.69.26.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
6731[label="136.90.44.166;s;302pkt 302fpkt", shape=hexagon, color=black];
8245[label="22.111.39.78;d;33pkt 33fpkt", shape=hexagon, color=black];
12148[label="136.90.44.166;895pkt 895fpkt", shape=pentagon, color=darkviolet];
12627[label="204.91.4.193;210pkt 210fpkt", shape=pentagon, color=darkviolet];
15263[label="136.90.44.166;895pkt 895fpkt", shape=invtriangle, color=brown];
15489[label="204.91.4.193;210pkt 210fpkt", shape=invtriangle, color=brown];
16617[label="136.90.44.166;895pkt 895fpkt", shape=invhouse, color=bisque];
16715[label="204.91.4.193;210pkt 210fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.44.166:17368, *:*}[33.6652%]&lt;BR/&gt;{136.90.44.166:*, *:80}[28.5068%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.6793%)&lt;BR/&gt; 17368: (15.5574%)&lt;BR/&gt; 13148: (7.45632%)&lt;BR/&gt; 4672: (2.32945%)&lt;BR/&gt; 443: (1.01913%)&gt;];
}
407--408[label="1;1pkt 1fpkt"];
407--6731[label="1;1pkt 1fpkt"];
407--12148[label="1;1pkt 1fpkt"];
407--15263[label="1;1pkt 1fpkt"];
407--16617[label="1;1pkt 1fpkt"];
408--1500[label="1;7pkt 7fpkt"];
408--3364[label="0.00255754;1pkt 1fpkt"];
408--3790[label="1;41pkt 41fpkt"];
408--3972[label="0.0180723;3pkt 3fpkt"];
408--4339[label="0.318182;7pkt 7fpkt"];
408--4869[label="1;1pkt 1fpkt"];
408--4871[label="1;1pkt 1fpkt"];
408--4872[label="1;1pkt 1fpkt"];
408--4873[label="1;1pkt 1fpkt"];
408--6731[label="1;302pkt 302fpkt"];
408--8245[label="1;33pkt 33fpkt"];
408--8514[label="0.0637584;57pkt 57fpkt"];
408--8603[label="0.0637584;57pkt 57fpkt"];
408--8680[label="0.0637584;57pkt 57fpkt"];
408--12148[label="1;894pkt 894fpkt"];
408--15263[label="1;894pkt 894fpkt"];
408--16617[label="1;894pkt 894fpkt"];
1500--6731[label="1;7pkt 7fpkt"];
1500--12148[label="1;7pkt 7fpkt"];
1500--15263[label="1;7pkt 7fpkt"];
1500--16617[label="1;7pkt 7fpkt"];
2701--4339[label="0.681818;15pkt 15fpkt"];
2701--8492[label="0.0582011;11pkt 11fpkt"];
2701--8514[label="0.0687831;13pkt 13fpkt"];
2701--8582[label="0.0582011;11pkt 11fpkt"];
2701--8603[label="0.0687831;13pkt 13fpkt"];
2701--8663[label="0.0582011;11pkt 11fpkt"];
2701--8680[label="0.0687831;13pkt 13fpkt"];
2701--12627[label="1;189pkt 189fpkt"];
2701--15489[label="1;189pkt 189fpkt"];
2701--16715[label="1;189pkt 189fpkt"];
3790--6731[label="0.243902;10pkt 10fpkt"];
3790--8245[label="1;33pkt 33fpkt"];
3790--8514[label="0.487805;20pkt 20fpkt"];
3790--8603[label="0.487805;20pkt 20fpkt"];
3790--8680[label="0.487805;20pkt 20fpkt"];
3790--12148[label="1;41pkt 41fpkt"];
3790--15263[label="1;41pkt 41fpkt"];
3790--16617[label="1;41pkt 41fpkt"];
4339--8514[label="0.136364;3pkt 3fpkt"];
4339--8603[label="0.136364;3pkt 3fpkt"];
4339--8680[label="0.136364;3pkt 3fpkt"];
4339--12148[label="0.318182;7pkt 7fpkt"];
4339--12627[label="0.681818;15pkt 15fpkt"];
4339--15263[label="0.318182;7pkt 7fpkt"];
4339--15489[label="0.681818;15pkt 15fpkt"];
4339--16617[label="0.318182;7pkt 7fpkt"];
4339--16715[label="0.681818;15pkt 15fpkt"];
4869--12148[label="1;1pkt 1fpkt"];
4869--15263[label="1;1pkt 1fpkt"];
4869--16617[label="1;1pkt 1fpkt"];
4871--12148[label="1;1pkt 1fpkt"];
4871--15263[label="1;1pkt 1fpkt"];
4871--16617[label="1;1pkt 1fpkt"];
4872--12148[label="1;1pkt 1fpkt"];
4872--15263[label="1;1pkt 1fpkt"];
4872--16617[label="1;1pkt 1fpkt"];
4873--12148[label="1;1pkt 1fpkt"];
4873--15263[label="1;1pkt 1fpkt"];
4873--16617[label="1;1pkt 1fpkt"];
6731--8245[label="0.30303;10pkt 10fpkt"];
6731--12148[label="1;302pkt 302fpkt"];
6731--15263[label="1;302pkt 302fpkt"];
6731--16617[label="1;302pkt 302fpkt"];
8245--8514[label="0.606061;20pkt 20fpkt"];
8245--8603[label="0.606061;20pkt 20fpkt"];
8245--8680[label="0.606061;20pkt 20fpkt"];
8245--12148[label="1;33pkt 33fpkt"];
8245--15263[label="1;33pkt 33fpkt"];
8245--16617[label="1;33pkt 33fpkt"];
12148--15263[label="1;895pkt 895fpkt"];
12148--16617[label="1;895pkt 895fpkt"];
12627--15489[label="1;210pkt 210fpkt"];
12627--16715[label="1;210pkt 210fpkt"];
15263--16617[label="1;895pkt 895fpkt"];
15489--16715[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.44.166" src_port="17368"/>
      <filter dst_port="80" src_ip="136.90.44.166"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.238.68.193"/>
    </slice>
    <from sec="1246942958" usec="0"/>
    <to sec="1246943356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
6535[label="141.179.53.194;s;68pkt 68fpkt", shape=diamond, color=yellow];
12647[label="141.179.53.194;70pkt 70fpkt", shape=pentagon, color=darkviolet];
15497[label="141.179.53.194;70pkt 70fpkt", shape=invtriangle, color=brown];
16720[label="141.179.53.194;70pkt 70fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.53.194:*, 216.166.64.153:80}[94.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1438: (0.719424%)&lt;BR/&gt; 1436: (0.719424%)&lt;BR/&gt; 1434: (0.719424%)&lt;BR/&gt; 1432: (0.719424%)&gt;];
}
6535--12647[label="1;68pkt 68fpkt"];
6535--15497[label="1;68pkt 68fpkt"];
6535--16720[label="1;68pkt 68fpkt"];
12647--15497[label="1;70pkt 70fpkt"];
12647--16720[label="1;70pkt 70fpkt"];
15497--16720[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="216.166.64.153" dst_port="80" src_ip="141.179.53.194"/>
    </slice>
    <from sec="1246943236" usec="0"/>
    <to sec="1246943574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.64.97.195"/>
    </slice>
    <from sec="1246943103" usec="0"/>
    <to sec="1246943110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.117.130.195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.97.177.195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.86.146.196"/>
    </slice>
    <from sec="1246943289" usec="0"/>
    <to sec="1246943341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.216.168.196"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.39.32.197"/>
    </slice>
    <from sec="1246943650" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.132.198.197"/>
    </slice>
    <from sec="1246942926" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
530[label="208.72.193.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
531[label="136.90.244.42;s;25pkt 25fpkt", shape=diamond, color=yellow];
558[label="200.173.135.161;d;1661pkt 1661fpkt", shape=diamond, color=yellow];
672[label="136.90.72.246;s;143pkt 143fpkt", shape=diamond, color=yellow];
1227[label="136.90.249.10;s;533pkt 533fpkt", shape=diamond, color=yellow];
1357[label="136.90.206.110;s;106pkt 106fpkt", shape=diamond, color=yellow];
1411[label="221.100.5.98;d;11pkt 11fpkt", shape=diamond, color=yellow];
1650[label="175.78.160.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
2039[label="136.90.240.175;s;6pkt 6fpkt", shape=diamond, color=yellow];
2285[label="52.94.31.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
2287[label="220.106.143.47;d;39pkt 39fpkt", shape=diamond, color=yellow];
3525[label="136.90.148.7;s;80pkt 80fpkt", shape=diamond, color=yellow];
3602[label="141.179.132.130;s;108pkt 108fpkt", shape=diamond, color=yellow];
3786[label="24.48.28.224;d;2pkt 2fpkt", shape=diamond, color=yellow];
4342[label="136.90.25.243;s;72pkt 72fpkt", shape=diamond, color=yellow];
4811[label="169.185.128.45;s;48pkt 48fpkt", shape=diamond, color=yellow];
4821[label="204.81.6.213;d;83pkt 83fpkt", shape=diamond, color=yellow];
4878[label="141.179.106.226;s;152pkt 152fpkt", shape=diamond, color=yellow];
4888[label="216.115.128.167;d;23pkt 23fpkt", shape=diamond, color=yellow];
4897[label="216.101.181.119;d;138pkt 138fpkt", shape=diamond, color=yellow];
5085[label="136.90.83.83;s;27pkt 27fpkt", shape=diamond, color=yellow];
5553[label="136.90.72.247;s;74pkt 74fpkt", shape=diamond, color=yellow];
6750[label="136.90.72.246;s;41pkt 41fpkt", shape=hexagon, color=black];
6837[label="136.90.240.175;s;4pkt 4fpkt", shape=hexagon, color=black];
7433[label="136.90.244.42;s;3pkt 3fpkt", shape=hexagon, color=black];
7879[label="169.185.128.45;s;48pkt 48fpkt", shape=hexagon, color=black];
7903[label="141.179.106.226;s;143pkt 143fpkt", shape=hexagon, color=black];
8051[label="136.90.148.7;s;79pkt 79fpkt", shape=hexagon, color=black];
8768[label="141.179.214.2;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8892[label="136.90.148.7;82pkt 82fpkt", shape=pentagon, color=darkviolet];
8980[label="136.90.249.10;561pkt 561fpkt", shape=pentagon, color=darkviolet];
9677[label="136.90.244.42;39pkt 39fpkt", shape=pentagon, color=darkviolet];
9703[label="136.90.24.44;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9744[label="169.185.128.45;48pkt 48fpkt", shape=pentagon, color=darkviolet];
10236[label="141.179.148.69;47pkt 47fpkt", shape=pentagon, color=darkviolet];
10312[label="136.90.154.72;29pkt 29fpkt", shape=pentagon, color=darkviolet];
10507[label="136.90.4.82;46pkt 46fpkt", shape=pentagon, color=darkviolet];
10536[label="136.90.83.83;27pkt 27fpkt", shape=pentagon, color=darkviolet];
11089[label="136.90.206.110;114pkt 114fpkt", shape=pentagon, color=darkviolet];
11144[label="170.81.138.113;30pkt 30fpkt", shape=pentagon, color=darkviolet];
11422[label="136.90.8.130;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11966[label="136.90.83.157;17pkt 17fpkt", shape=pentagon, color=darkviolet];
12154[label="136.90.81.166;16pkt 16fpkt", shape=pentagon, color=darkviolet];
12341[label="136.90.240.175;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13202[label="136.90.75.226;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13479[label="136.90.25.243;72pkt 72fpkt", shape=pentagon, color=darkviolet];
13533[label="169.185.135.246;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13538[label="136.90.249.246;68pkt 68fpkt", shape=pentagon, color=darkviolet];
13547[label="136.90.72.247;76pkt 76fpkt", shape=pentagon, color=darkviolet];
13791[label="136.90.249.10;561pkt 561fpkt", shape=invtriangle, color=brown];
14100[label="136.90.244.42;39pkt 39fpkt", shape=invtriangle, color=brown];
14128[label="169.185.128.45;48pkt 48fpkt", shape=invtriangle, color=brown];
14499[label="136.90.83.83;27pkt 27fpkt", shape=invtriangle, color=brown];
14759[label="136.90.206.110;114pkt 114fpkt", shape=invtriangle, color=brown];
14784[label="170.81.138.113;30pkt 30fpkt", shape=invtriangle, color=brown];
15884[label="136.90.249.246;68pkt 68fpkt", shape=invtriangle, color=brown];
16145[label="136.90.244.42;39pkt 39fpkt", shape=invhouse, color=bisque];
16300[label="136.90.83.83;27pkt 27fpkt", shape=invhouse, color=bisque];
16410[label="136.90.206.110;114pkt 114fpkt", shape=invhouse, color=bisque];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.173.135.161:443}[56.0119%]&lt;BR/&gt;{*:*, *:80}[33.6535%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (24.8688%)&lt;BR/&gt; 80: (23.2125%)&lt;BR/&gt; 32048: (0.614956%)&lt;BR/&gt; 25: (0.262381%)&lt;BR/&gt; 16019: (0.213185%)&gt;];
}
530--531[label="1;1pkt 1fpkt"];
530--7433[label="1;1pkt 1fpkt"];
530--9677[label="1;1pkt 1fpkt"];
530--14100[label="1;1pkt 1fpkt"];
530--16145[label="1;1pkt 1fpkt"];
531--558[label="0.96;24pkt 24fpkt"];
531--7433[label="1;3pkt 3fpkt"];
531--9677[label="1;25pkt 25fpkt"];
531--14100[label="1;25pkt 25fpkt"];
531--16145[label="1;25pkt 25fpkt"];
558--573[label="0.00361228;6pkt 6fpkt"];
558--672[label="0.027972;4pkt 4fpkt"];
558--782[label="0.00615385;4pkt 4fpkt"];
558--786[label="0.0107875;10pkt 10fpkt"];
558--897[label="0.0261538;17pkt 17fpkt"];
558--922[label="0.139576;79pkt 79fpkt"];
558--946[label="0.0323102;20pkt 20fpkt"];
558--947[label="0.0780142;11pkt 11fpkt"];
558--957[label="0.0299065;16pkt 16fpkt"];
558--1027[label="0.0105634;6pkt 6fpkt"];
558--1047[label="0.0117188;3pkt 3fpkt"];
558--1210[label="0.00920245;3pkt 3fpkt"];
558--1217[label="0.0547645;50pkt 50fpkt"];
558--1227[label="0.0337711;18pkt 18fpkt"];
558--1259[label="0.0792079;8pkt 8fpkt"];
558--1318[label="0.0386266;9pkt 9fpkt"];
558--1329[label="0.00613497;3pkt 3fpkt"];
558--1350[label="0.12069;7pkt 7fpkt"];
558--1357[label="0.113208;12pkt 12fpkt"];
558--1424[label="0.0348837;3pkt 3fpkt"];
558--1616[label="0.016129;2pkt 2fpkt"];
558--1622[label="0.00209205;2pkt 2fpkt"];
558--1644[label="0.0264901;44pkt 44fpkt"];
558--1857[label="0.00507614;3pkt 3fpkt"];
558--2039[label="0.666667;4pkt 4fpkt"];
558--2065[label="0.108738;56pkt 56fpkt"];
558--2606[label="0.116883;9pkt 9fpkt"];
558--2684[label="0.011236;1pkt 1fpkt"];
558--2756[label="0.00487805;2pkt 2fpkt"];
558--2858[label="0.0754717;4pkt 4fpkt"];
558--3083[label="0.0769231;4pkt 4fpkt"];
558--3268[label="0.0393701;5pkt 5fpkt"];
558--3307[label="0.0215827;3pkt 3fpkt"];
558--3525[label="0.1625;13pkt 13fpkt"];
558--3602[label="0.111111;12pkt 12fpkt"];
558--3606[label="0.0373134;5pkt 5fpkt"];
558--3648[label="0.0666667;7pkt 7fpkt"];
558--3935[label="0.00324675;1pkt 1fpkt"];
558--4074[label="0.027933;5pkt 5fpkt"];
558--4088[label="0.0238095;2pkt 2fpkt"];
558--4116[label="0.00763359;1pkt 1fpkt"];
558--4164[label="0.0517241;3pkt 3fpkt"];
558--4594[label="0.06;9pkt 9fpkt"];
558--4715[label="0.227273;5pkt 5fpkt"];
558--4725[label="0.0518868;11pkt 11fpkt"];
558--4811[label="0.5;24pkt 24fpkt"];
558--4878[label="0.0723684;11pkt 11fpkt"];
558--5085[label="0.407407;11pkt 11fpkt"];
558--5126[label="0.120172;28pkt 28fpkt"];
558--5317[label="0.147059;5pkt 5fpkt"];
558--5553[label="0.0540541;4pkt 4fpkt"];
558--6333[label="0.0232558;1pkt 1fpkt"];
558--6600[label="0.0234798;39pkt 39fpkt"];
558--6656[label="0.0785714;11pkt 11fpkt"];
558--6696[label="0.00645161;1pkt 1fpkt"];
558--6837[label="0.75;3pkt 3fpkt"];
558--6893[label="0.047619;5pkt 5fpkt"];
558--6923[label="0.017094;2pkt 2fpkt"];
558--6928[label="0.00680272;2pkt 2fpkt"];
558--7012[label="0.00840336;2pkt 2fpkt"];
558--7014[label="0.0342205;18pkt 18fpkt"];
558--7204[label="0.182028;79pkt 79fpkt"];
558--7351[label="0.0454545;3pkt 3fpkt"];
558--7433[label="0.666667;2pkt 2fpkt"];
558--7658[label="0.0710415;118pkt 118fpkt"];
558--7770[label="0.106061;7pkt 7fpkt"];
558--7809[label="0.0238095;2pkt 2fpkt"];
558--7858[label="0.0373134;5pkt 5fpkt"];
558--7879[label="0.5;24pkt 24fpkt"];
558--7903[label="0.027972;4pkt 4fpkt"];
558--7945[label="0.0288303;35pkt 35fpkt"];
558--7971[label="0.00438596;1pkt 1fpkt"];
558--7976[label="0.00585938;3pkt 3fpkt"];
558--7989[label="0.00358423;1pkt 1fpkt"];
558--7991[label="0.0215827;3pkt 3fpkt"];
558--8051[label="0.164557;13pkt 13fpkt"];
558--8069[label="0.0103093;1pkt 1fpkt"];
558--8071[label="0.0784314;4pkt 4fpkt"];
558--8127[label="0.00715308;5pkt 5fpkt"];
558--8184[label="0.139037;26pkt 26fpkt"];
558--8331[label="0.0232558;1pkt 1fpkt"];
558--8365[label="0.0234798;39pkt 39fpkt"];
558--8467[label="0.00524934;4pkt 4fpkt"];
558--8492[label="0.112903;98pkt 98fpkt"];
558--8511[label="0.0161074;12pkt 12fpkt"];
558--8557[label="0.00524934;4pkt 4fpkt"];
558--8582[label="0.112903;98pkt 98fpkt"];
558--8601[label="0.0161074;12pkt 12fpkt"];
558--8641[label="0.00524246;4pkt 4fpkt"];
558--8663[label="0.112903;98pkt 98fpkt"];
558--8677[label="0.0161074;12pkt 12fpkt"];
558--8768[label="0.681818;15pkt 15fpkt"];
558--8806[label="0.035461;5pkt 5fpkt"];
558--8892[label="0.158537;13pkt 13fpkt"];
558--8920[label="0.105263;2pkt 2fpkt"];
558--8980[label="0.0320856;18pkt 18fpkt"];
558--8987[label="0.108696;5pkt 5fpkt"];
558--9029[label="0.00289017;1pkt 1fpkt"];
558--9183[label="0.00361228;6pkt 6fpkt"];
558--9668[label="0.063745;16pkt 16fpkt"];
558--9677[label="0.615385;24pkt 24fpkt"];
558--9703[label="0.777778;28pkt 28fpkt"];
558--9722[label="0.0833333;1pkt 1fpkt"];
558--9744[label="0.5;24pkt 24fpkt"];
558--9753[label="0.00974026;6pkt 6fpkt"];
558--9770[label="0.0645161;8pkt 8fpkt"];
558--9908[label="0.0405405;3pkt 3fpkt"];
558--9990[label="0.133898;79pkt 79fpkt"];
558--10000[label="0.0434783;1pkt 1fpkt"];
558--10184[label="0.111981;186pkt 186fpkt"];
558--10219[label="0.0234798;39pkt 39fpkt"];
558--10236[label="1;47pkt 47fpkt"];
558--10312[label="0.793103;23pkt 23fpkt"];
558--10316[label="0.015873;2pkt 2fpkt"];
558--10340[label="0.0530223;50pkt 50fpkt"];
558--10356[label="0.0655738;4pkt 4fpkt"];
558--10507[label="0.521739;24pkt 24fpkt"];
558--10536[label="0.407407;11pkt 11fpkt"];
558--10632[label="0.00189573;2pkt 2fpkt"];
558--10824[label="0.12;3pkt 3fpkt"];
558--10837[label="0.10596;176pkt 176fpkt"];
558--10847[label="0.0271739;5pkt 5fpkt"];
558--10988[label="0.0194175;2pkt 2fpkt"];
558--11089[label="0.105263;12pkt 12fpkt"];
558--11144[label="1;30pkt 30fpkt"];
558--11420[label="0.0518868;11pkt 11fpkt"];
558--11422[label="1;13pkt 13fpkt"];
558--11671[label="0.00564175;4pkt 4fpkt"];
558--11803[label="0.010395;10pkt 10fpkt"];
558--11853[label="0.0247093;17pkt 17fpkt"];
558--11936[label="0.0386266;9pkt 9fpkt"];
558--11966[label="0.705882;12pkt 12fpkt"];
558--12154[label="0.625;10pkt 10fpkt"];
558--12192[label="0.258065;16pkt 16fpkt"];
558--12341[label="0.555556;5pkt 5fpkt"];
558--12752[label="0.0625;4pkt 4fpkt"];
558--12842[label="0.0037594;4pkt 4fpkt"];
558--13050[label="0.0277008;20pkt 20fpkt"];
558--13129[label="0.00641026;5pkt 5fpkt"];
558--13202[label="1;12pkt 12fpkt"];
558--13214[label="0.112;28pkt 28fpkt"];
558--13533[label="1;15pkt 15fpkt"];
558--13538[label="0.926471;63pkt 63fpkt"];
558--13547[label="0.0526316;4pkt 4fpkt"];
558--13714[label="0.035461;5pkt 5fpkt"];
558--13791[label="0.0320856;18pkt 18fpkt"];
558--13794[label="0.111111;5pkt 5fpkt"];
558--13816[label="0.00289017;1pkt 1fpkt"];
558--14100[label="0.615385;24pkt 24fpkt"];
558--14128[label="0.5;24pkt 24fpkt"];
558--14138[label="0.0645161;8pkt 8fpkt"];
558--14337[label="0.111981;186pkt 186fpkt"];
558--14351[label="0.0234798;39pkt 39fpkt"];
558--14409[label="0.0530223;50pkt 50fpkt"];
558--14418[label="0.0655738;4pkt 4fpkt"];
558--14499[label="0.407407;11pkt 11fpkt"];
558--14556[label="0.00189573;2pkt 2fpkt"];
558--14644[label="0.10596;176pkt 176fpkt"];
558--14714[label="0.0194175;2pkt 2fpkt"];
558--14759[label="0.105263;12pkt 12fpkt"];
558--14784[label="1;30pkt 30fpkt"];
558--15107[label="0.010395;10pkt 10fpkt"];
558--15174[label="0.0386266;9pkt 9fpkt"];
558--15285[label="0.258065;16pkt 16fpkt"];
558--15580[label="0.0037594;4pkt 4fpkt"];
558--15668[label="0.0277008;20pkt 20fpkt"];
558--15738[label="0.112;28pkt 28fpkt"];
558--15884[label="0.926471;63pkt 63fpkt"];
558--16145[label="0.615385;24pkt 24fpkt"];
558--16243[label="0.0234798;39pkt 39fpkt"];
558--16269[label="0.0655738;4pkt 4fpkt"];
558--16300[label="0.407407;11pkt 11fpkt"];
558--16364[label="0.10596;176pkt 176fpkt"];
558--16391[label="0.0194175;2pkt 2fpkt"];
558--16410[label="0.105263;12pkt 12fpkt"];
558--16553[label="0.010395;10pkt 10fpkt"];
558--16584[label="0.0386266;9pkt 9fpkt"];
558--16762[label="0.0037594;4pkt 4fpkt"];
558--16797[label="0.0277008;20pkt 20fpkt"];
672--1036[label="0.013986;2pkt 2fpkt"];
672--1128[label="0.018018;2pkt 2fpkt"];
672--1267[label="0.0155039;2pkt 2fpkt"];
672--1314[label="0.013986;2pkt 2fpkt"];
672--1551[label="0.00699301;1pkt 1fpkt"];
672--1650[label="1;1pkt 1fpkt"];
672--2067[label="0.00699301;1pkt 1fpkt"];
672--2740[label="0.027972;4pkt 4fpkt"];
672--3894[label="0.00699301;1pkt 1fpkt"];
672--6750[label="1;41pkt 41fpkt"];
672--7036[label="0.0142857;1pkt 1fpkt"];
672--7315[label="0.00699301;1pkt 1fpkt"];
672--7484[label="0.013986;2pkt 2fpkt"];
672--7505[label="0.025974;2pkt 2fpkt"];
672--7654[label="0.00699301;1pkt 1fpkt"];
672--7772[label="0.013986;2pkt 2fpkt"];
672--8492[label="0.00699301;1pkt 1fpkt"];
672--8514[label="0.020979;3pkt 3fpkt"];
672--8582[label="0.00699301;1pkt 1fpkt"];
672--8603[label="0.020979;3pkt 3fpkt"];
672--8663[label="0.00699301;1pkt 1fpkt"];
672--8680[label="0.020979;3pkt 3fpkt"];
1227--1411[label="1;11pkt 11fpkt"];
1227--2067[label="0.00584795;1pkt 1fpkt"];
1227--2287[label="1;39pkt 39fpkt"];
1227--2693[label="0.0916667;11pkt 11fpkt"];
1227--2703[label="0.0525328;28pkt 28fpkt"];
1227--2733[label="0.0133333;2pkt 2fpkt"];
1227--3469[label="0.00769231;3pkt 3fpkt"];
1227--3499[label="0.0151515;1pkt 1fpkt"];
1227--4028[label="0.0225225;5pkt 5fpkt"];
1227--4037[label="0.00438596;1pkt 1fpkt"];
1227--4099[label="0.00564972;1pkt 1fpkt"];
1227--4713[label="0.0156863;4pkt 4fpkt"];
1227--4821[label="0.337349;28pkt 28fpkt"];
1227--5100[label="0.0333333;2pkt 2fpkt"];
1227--5547[label="0.0267857;3pkt 3fpkt"];
1227--5658[label="0.00787402;1pkt 1fpkt"];
1227--5721[label="0.03125;2pkt 2fpkt"];
1227--5765[label="0.0366972;4pkt 4fpkt"];
1227--5897[label="0.146341;6pkt 6fpkt"];
1227--6197[label="0.01;1pkt 1fpkt"];
1227--6278[label="0.114286;4pkt 4fpkt"];
1227--6936[label="0.00387597;1pkt 1fpkt"];
1227--7036[label="0.0142857;1pkt 1fpkt"];
1227--7233[label="0.0122699;2pkt 2fpkt"];
1227--7456[label="0.0241935;6pkt 6fpkt"];
1227--7526[label="0.0320513;10pkt 10fpkt"];
1227--7534[label="0.0234375;3pkt 3fpkt"];
1227--7755[label="0.108696;10pkt 10fpkt"];
1227--8136[label="0.00392157;1pkt 1fpkt"];
1227--8199[label="0.00787402;3pkt 3fpkt"];
1227--8492[label="0.00375235;2pkt 2fpkt"];
1227--8514[label="0.0919325;49pkt 49fpkt"];
1227--8582[label="0.00375235;2pkt 2fpkt"];
1227--8603[label="0.0919325;49pkt 49fpkt"];
1227--8663[label="0.00375235;2pkt 2fpkt"];
1227--8680[label="0.0919325;49pkt 49fpkt"];
1227--8980[label="1;533pkt 533fpkt"];
1227--13791[label="1;533pkt 533fpkt"];
1357--1601[label="0.0188679;2pkt 2fpkt"];
1357--2054[label="0.0188679;2pkt 2fpkt"];
1357--2285[label="1;1pkt 1fpkt"];
1357--2417[label="0.0188679;2pkt 2fpkt"];
1357--2436[label="0.00943396;1pkt 1fpkt"];
1357--2764[label="0.00943396;1pkt 1fpkt"];
1357--3382[label="0.00943396;1pkt 1fpkt"];
1357--3957[label="0.010101;1pkt 1fpkt"];
1357--3992[label="0.00943396;1pkt 1fpkt"];
1357--4160[label="0.0754717;8pkt 8fpkt"];
1357--6613[label="0.0283019;3pkt 3fpkt"];
1357--7233[label="0.0188679;2pkt 2fpkt"];
1357--7544[label="0.00943396;1pkt 1fpkt"];
1357--7777[label="0.0188679;2pkt 2fpkt"];
1357--8483[label="0.00943396;1pkt 1fpkt"];
1357--8492[label="0.0471698;5pkt 5fpkt"];
1357--8514[label="0.0188679;2pkt 2fpkt"];
1357--8573[label="0.00943396;1pkt 1fpkt"];
1357--8582[label="0.0471698;5pkt 5fpkt"];
1357--8603[label="0.0188679;2pkt 2fpkt"];
1357--8655[label="0.00943396;1pkt 1fpkt"];
1357--8663[label="0.0471698;5pkt 5fpkt"];
1357--8680[label="0.0188679;2pkt 2fpkt"];
1357--11089[label="1;106pkt 106fpkt"];
1357--14759[label="1;106pkt 106fpkt"];
1357--16410[label="1;106pkt 106fpkt"];
1411--8980[label="1;11pkt 11fpkt"];
1411--13791[label="1;11pkt 11fpkt"];
1650--6750[label="1;1pkt 1fpkt"];
2039--6837[label="1;4pkt 4fpkt"];
2039--12341[label="1;6pkt 6fpkt"];
2285--11089[label="1;1pkt 1fpkt"];
2285--14759[label="1;1pkt 1fpkt"];
2285--16410[label="1;1pkt 1fpkt"];
2287--8514[label="0.0512821;2pkt 2fpkt"];
2287--8603[label="0.0512821;2pkt 2fpkt"];
2287--8680[label="0.0512821;2pkt 2fpkt"];
2287--8980[label="1;39pkt 39fpkt"];
2287--13791[label="1;39pkt 39fpkt"];
3525--3786[label="0.5;1pkt 1fpkt"];
3525--3957[label="0.1;8pkt 8fpkt"];
3525--5059[label="0.0125;1pkt 1fpkt"];
3525--5610[label="0.0125;1pkt 1fpkt"];
3525--5652[label="0.101449;7pkt 7fpkt"];
3525--8051[label="1;79pkt 79fpkt"];
3525--8492[label="0.05;4pkt 4fpkt"];
3525--8514[label="0.0125;1pkt 1fpkt"];
3525--8582[label="0.05;4pkt 4fpkt"];
3525--8603[label="0.0125;1pkt 1fpkt"];
3525--8663[label="0.05;4pkt 4fpkt"];
3525--8680[label="0.0125;1pkt 1fpkt"];
3525--8892[label="0.9875;79pkt 79fpkt"];
3602--4099[label="0.00925926;1pkt 1fpkt"];
3602--4705[label="0.025;1pkt 1fpkt"];
3602--7298[label="0.00925926;1pkt 1fpkt"];
3786--8051[label="0.5;1pkt 1fpkt"];
3786--8892[label="0.5;1pkt 1fpkt"];
4342--4821[label="0.513889;37pkt 37fpkt"];
4342--4888[label="1;23pkt 23fpkt"];
4342--5721[label="0.03125;2pkt 2fpkt"];
4342--7484[label="0.0138889;1pkt 1fpkt"];
4342--7755[label="0.0416667;3pkt 3fpkt"];
4342--13479[label="1;72pkt 72fpkt"];
4811--5769[label="0.0625;3pkt 3fpkt"];
4811--6337[label="0.0416667;2pkt 2fpkt"];
4811--7298[label="0.0208333;1pkt 1fpkt"];
4811--7879[label="1;48pkt 48fpkt"];
4811--9744[label="1;48pkt 48fpkt"];
4811--14128[label="1;48pkt 48fpkt"];
4821--5553[label="0.189189;14pkt 14fpkt"];
4821--8980[label="0.337349;28pkt 28fpkt"];
4821--11599[label="0.0930233;4pkt 4fpkt"];
4821--13479[label="0.513889;37pkt 37fpkt"];
4821--13547[label="0.184211;14pkt 14fpkt"];
4821--13791[label="0.337349;28pkt 28fpkt"];
4878--4897[label="1;138pkt 138fpkt"];
4878--7903[label="1;143pkt 143fpkt"];
4878--8492[label="0.00657895;1pkt 1fpkt"];
4878--8582[label="0.00657895;1pkt 1fpkt"];
4878--8663[label="0.00657895;1pkt 1fpkt"];
4888--13479[label="1;23pkt 23fpkt"];
4897--7903[label="1;138pkt 138fpkt"];
5085--5156[label="0.037037;1pkt 1fpkt"];
5085--7233[label="0.0740741;2pkt 2fpkt"];
5085--10536[label="1;27pkt 27fpkt"];
5085--14499[label="1;27pkt 27fpkt"];
5085--16300[label="1;27pkt 27fpkt"];
5553--7315[label="0.027027;2pkt 2fpkt"];
5553--7654[label="0.0135135;1pkt 1fpkt"];
5553--7755[label="0.0135135;1pkt 1fpkt"];
5553--13547[label="1;74pkt 74fpkt"];
6750--7036[label="0.0243902;1pkt 1fpkt"];
6837--12341[label="1;4pkt 4fpkt"];
7433--9677[label="1;3pkt 3fpkt"];
7433--14100[label="1;3pkt 3fpkt"];
7433--16145[label="1;3pkt 3fpkt"];
7879--9744[label="1;48pkt 48fpkt"];
7879--14128[label="1;48pkt 48fpkt"];
7903--8492[label="0.00699301;1pkt 1fpkt"];
7903--8582[label="0.00699301;1pkt 1fpkt"];
7903--8663[label="0.00699301;1pkt 1fpkt"];
8051--8492[label="0.0506329;4pkt 4fpkt"];
8051--8514[label="0.0126582;1pkt 1fpkt"];
8051--8582[label="0.0506329;4pkt 4fpkt"];
8051--8603[label="0.0126582;1pkt 1fpkt"];
8051--8663[label="0.0506329;4pkt 4fpkt"];
8051--8680[label="0.0126582;1pkt 1fpkt"];
8051--8892[label="0.987342;78pkt 78fpkt"];
8980--13791[label="1;561pkt 561fpkt"];
9677--14100[label="1;39pkt 39fpkt"];
9677--16145[label="1;39pkt 39fpkt"];
9744--14128[label="1;48pkt 48fpkt"];
10536--14499[label="1;27pkt 27fpkt"];
10536--16300[label="1;27pkt 27fpkt"];
11089--14759[label="1;114pkt 114fpkt"];
11089--16410[label="1;114pkt 114fpkt"];
11144--14784[label="1;30pkt 30fpkt"];
13538--15884[label="1;68pkt 68fpkt"];
14100--16145[label="1;39pkt 39fpkt"];
14499--16300[label="1;27pkt 27fpkt"];
14759--16410[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="200.173.135.161" dst_port="443"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.84.31.199"/>
    </slice>
    <from sec="1246942828" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.139.66.199"/>
    </slice>
    <from sec="1246943556" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.91.175.199"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.88.212.199"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.112.214.199"/>
    </slice>
    <from sec="1246943314" usec="0"/>
    <to sec="1246943501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.132.2.200"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.113.131.200"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.91.192.200"/>
    </slice>
    <from sec="1246942816" usec="0"/>
    <to sec="1246943477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.154.46.201"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.106.25.202"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
3989[label="204.80.49.202;s;164pkt 164fpkt", shape=diamond, color=yellow];
12794[label="204.80.49.202;183pkt 183fpkt", shape=pentagon, color=darkviolet];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.80.49.202:0, *:0}[95.082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8127%)&lt;BR/&gt; 5122: (1.15274%)&lt;BR/&gt; 5121: (1.15274%)&lt;BR/&gt; 2122: (1.15274%)&lt;BR/&gt; 2121: (1.15274%)&gt;];
}
3989--12794[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter src_ip="204.80.49.202"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.86.178.202"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246942886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.207.178.202"/>
    </slice>
    <from sec="1246942912" usec="0"/>
    <to sec="1246943047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.12.175.203"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.179.38.204"/>
    </slice>
    <from sec="1246943262" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.192.40.204"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.208.168.204"/>
    </slice>
    <from sec="1246942873" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.19.10.205"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.47.110.205"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.5.92.206"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.157.78.207"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.148.80.208"/>
    </slice>
    <from sec="1246943391" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.60.0.209"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.60.2.209"/>
    </slice>
    <from sec="1246942855" usec="0"/>
    <to sec="1246943682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.58.136.209"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.168.209"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.251.209"/>
    </slice>
    <from sec="1246943171" usec="0"/>
    <to sec="1246943516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.132.210"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.229.147.210"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.109.149.210"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.232.139.211"/>
    </slice>
    <from sec="1246943395" usec="0"/>
    <to sec="1246943557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.246.158.211"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.174.172.211"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.52.212"/>
    </slice>
    <from sec="1246942842" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.123.67.212"/>
    </slice>
    <from sec="1246943005" usec="0"/>
    <to sec="1246943283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
2853[label="170.81.104.136;d;146pkt 146fpkt", shape=diamond, color=yellow];
7566[label="170.81.104.136;d;146pkt 146fpkt", shape=hexagon, color=black];
12972[label="204.155.68.212;31pkt 31fpkt", shape=pentagon, color=darkviolet];
12973[label="204.155.69.212;55pkt 55fpkt", shape=pentagon, color=darkviolet];
15633[label="204.155.69.212;55pkt 55fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.155.70.48:80, 170.81.104.136:*}[37.6712%]&lt;BR/&gt;{204.155.69.212:80, 170.81.104.136:*}[37.6712%]&lt;BR/&gt;{204.155.68.212:80, 170.81.104.136:*}[21.2329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44495: (0.461894%)&lt;BR/&gt; 44481: (0.461894%)&lt;BR/&gt; 44479: (0.461894%)&lt;BR/&gt; 44477: (0.461894%)&gt;];
}
2853--6746[label="0.00684932;1pkt 1fpkt"];
2853--7566[label="1;146pkt 146fpkt"];
2853--8451[label="0.00684932;1pkt 1fpkt"];
2853--8541[label="0.00684932;1pkt 1fpkt"];
2853--8626[label="0.00684932;1pkt 1fpkt"];
2853--11261[label="0.00684932;1pkt 1fpkt"];
2853--12972[label="1;31pkt 31fpkt"];
2853--12973[label="1;55pkt 55fpkt"];
2853--13331[label="0.027027;1pkt 1fpkt"];
2853--15633[label="1;55pkt 55fpkt"];
7566--8451[label="0.00684932;1pkt 1fpkt"];
7566--8541[label="0.00684932;1pkt 1fpkt"];
7566--8626[label="0.00684932;1pkt 1fpkt"];
7566--11261[label="0.00684932;1pkt 1fpkt"];
7566--12972[label="1;31pkt 31fpkt"];
7566--12973[label="1;55pkt 55fpkt"];
7566--13331[label="0.027027;1pkt 1fpkt"];
7566--15633[label="1;55pkt 55fpkt"];
12973--15633[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.104.136" src_ip="204.155.69.212" src_port="80"/>
      <filter dst_ip="170.81.104.136" src_ip="204.155.70.48" src_port="80"/>
      <filter dst_ip="170.81.104.136" src_ip="204.155.68.212" src_port="80"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.22.70.212"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.34.255.212"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.116.17.213"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.200.53.213"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.73.137.213"/>
    </slice>
    <from sec="1246943078" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.80.0.215"/>
    </slice>
    <from sec="1246943628" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.184.8.215"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.184.28.215"/>
    </slice>
    <from sec="1246942896" usec="0"/>
    <to sec="1246942906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676687,2.12279,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
675[label="205.100.240.215;s;806pkt 806fpkt", shape=diamond, color=yellow];
13037[label="205.100.240.215;927pkt 927fpkt", shape=pentagon, color=darkviolet];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.240.215:*, *:53}[80.3668%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.5268%)&lt;BR/&gt; 0: (20.6578%)&lt;BR/&gt; 22: (0.144259%)&lt;BR/&gt; 59882: (0.115407%)&lt;BR/&gt; 59801: (0.115407%)&gt;];
}
675--8459[label="0.00124069;1pkt 1fpkt"];
675--8549[label="0.00124069;1pkt 1fpkt"];
675--8634[label="0.00124069;1pkt 1fpkt"];
675--13037[label="1;806pkt 806fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="205.100.240.215"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.24.54.216"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.116.131.216"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
4641[label="205.100.248.216;s;148pkt 148fpkt", shape=diamond, color=yellow];
5211[label="91.42.71.81;d;150pkt 150fpkt", shape=diamond, color=yellow];
8027[label="205.100.248.216;s;124pkt 124fpkt", shape=hexagon, color=black];
13062[label="205.100.248.216;178pkt 178fpkt", shape=pentagon, color=darkviolet];
15673[label="205.100.248.216;178pkt 178fpkt", shape=invtriangle, color=brown];
16798[label="205.100.248.216;178pkt 178fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.248.216:80, 91.42.71.81:*}[92.6966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2862: (0.313808%)&lt;BR/&gt; 2859: (0.313808%)&lt;BR/&gt; 2856: (0.313808%)&lt;BR/&gt; 2853: (0.313808%)&gt;];
}
4641--5211[label="0.912162;135pkt 135fpkt"];
4641--8027[label="1;124pkt 124fpkt"];
4641--8451[label="0.0540541;8pkt 8fpkt"];
4641--8458[label="0.0743243;11pkt 11fpkt"];
4641--8484[label="0.0472973;7pkt 7fpkt"];
4641--8541[label="0.0540541;8pkt 8fpkt"];
4641--8548[label="0.0743243;11pkt 11fpkt"];
4641--8574[label="0.0472973;7pkt 7fpkt"];
4641--8626[label="0.0540541;8pkt 8fpkt"];
4641--8633[label="0.0743243;11pkt 11fpkt"];
4641--8656[label="0.0472973;7pkt 7fpkt"];
4641--13062[label="1;148pkt 148fpkt"];
4641--15673[label="1;148pkt 148fpkt"];
4641--16798[label="1;148pkt 148fpkt"];
5211--8027[label="0.919355;114pkt 114fpkt"];
5211--8451[label="0.04;6pkt 6fpkt"];
5211--8458[label="0.0733333;11pkt 11fpkt"];
5211--8484[label="0.0466667;7pkt 7fpkt"];
5211--8541[label="0.04;6pkt 6fpkt"];
5211--8548[label="0.0733333;11pkt 11fpkt"];
5211--8574[label="0.0466667;7pkt 7fpkt"];
5211--8626[label="0.04;6pkt 6fpkt"];
5211--8633[label="0.0733333;11pkt 11fpkt"];
5211--8656[label="0.0466667;7pkt 7fpkt"];
5211--13062[label="1;150pkt 150fpkt"];
5211--15673[label="1;150pkt 150fpkt"];
5211--16798[label="1;150pkt 150fpkt"];
8027--8451[label="0.0645161;8pkt 8fpkt"];
8027--8458[label="0.0887097;11pkt 11fpkt"];
8027--8484[label="0.0564516;7pkt 7fpkt"];
8027--8541[label="0.0645161;8pkt 8fpkt"];
8027--8548[label="0.0887097;11pkt 11fpkt"];
8027--8574[label="0.0564516;7pkt 7fpkt"];
8027--8626[label="0.0645161;8pkt 8fpkt"];
8027--8633[label="0.0887097;11pkt 11fpkt"];
8027--8656[label="0.0564516;7pkt 7fpkt"];
8027--13062[label="1;124pkt 124fpkt"];
8027--15673[label="1;124pkt 124fpkt"];
8027--16798[label="1;124pkt 124fpkt"];
13062--15673[label="1;178pkt 178fpkt"];
13062--16798[label="1;178pkt 178fpkt"];
15673--16798[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_ip="91.42.71.81" src_ip="205.100.248.216" src_port="80"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.13.217"/>
    </slice>
    <from sec="1246942841" usec="0"/>
    <to sec="1246942863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.141.230.217"/>
    </slice>
    <from sec="1246942961" usec="0"/>
    <to sec="1246943679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.28.218"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.240.34.218"/>
    </slice>
    <from sec="1246943042" usec="0"/>
    <to sec="1246943094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.185.153.218"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
4199[label="136.90.154.36;s;175pkt 175fpkt", shape=diamond, color=yellow];
4840[label="44.188.68.183;d;129pkt 129fpkt", shape=diamond, color=yellow];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.154.36:*, 44.188.68.183:80}[73.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49751: (0.328947%)&lt;BR/&gt; 49750: (0.328947%)&lt;BR/&gt; 49749: (0.328947%)&lt;BR/&gt; 49748: (0.328947%)&gt;];
}
4199--4840[label="1;129pkt 129fpkt"];
4199--5725[label="0.0105263;1pkt 1fpkt"];
4199--7298[label="0.0228571;4pkt 4fpkt"];
4199--8028[label="0.08;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="44.188.68.183" dst_port="80" src_ip="136.90.154.36"/>
    </slice>
    <from sec="1246942904" usec="0"/>
    <to sec="1246943240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.57.243.219"/>
    </slice>
    <from sec="1246942942" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.48.28.220"/>
    </slice>
    <from sec="1246942924" usec="0"/>
    <to sec="1246942939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.109.60.220"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.162.222.220"/>
    </slice>
    <from sec="1246942832" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.43.110.221"/>
    </slice>
    <from sec="1246943516" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.196.172.222"/>
    </slice>
    <from sec="1246942830" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.114.225.223"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.58.20.224"/>
    </slice>
    <from sec="1246942991" usec="0"/>
    <to sec="1246943579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.115.134.224"/>
    </slice>
    <from sec="1246942972" usec="0"/>
    <to sec="1246943563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.71.171.224"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.88.13.225"/>
    </slice>
    <from sec="1246943669" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.140.28.226"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.64.40.226"/>
    </slice>
    <from sec="1246943106" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.42.50.226"/>
    </slice>
    <from sec="1246943239" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
2887[label="141.161.150.226;s;16pkt 16fpkt", shape=diamond, color=yellow];
2934[label="204.18.156.184;d;6pkt 6fpkt", shape=diamond, color=yellow];
13210[label="141.161.150.226;25pkt 25fpkt", shape=pentagon, color=darkviolet];
15736[label="141.161.150.226;25pkt 25fpkt", shape=invtriangle, color=brown];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.150.226:6346, 91.168.27.106:*}[36%]&lt;BR/&gt;{141.161.150.226:*, 204.18.156.184:6346}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (52.7778%)&lt;BR/&gt; 1928: (2.77778%)&lt;BR/&gt; 1912: (2.77778%)&lt;BR/&gt; 47636: (2.08333%)&lt;BR/&gt; 40500: (2.08333%)&gt;];
}
2887--2934[label="0.5;3pkt 3fpkt"];
2887--13210[label="1;16pkt 16fpkt"];
2887--15736[label="1;16pkt 16fpkt"];
2934--13210[label="1;6pkt 6fpkt"];
2934--15736[label="1;6pkt 6fpkt"];
13210--15736[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="91.168.27.106" src_ip="141.161.150.226" src_port="6346"/>
      <filter dst_ip="204.18.156.184" dst_port="6346" src_ip="141.161.150.226"/>
    </slice>
    <from sec="1246942830" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.151.211.226"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.27.0.227"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.122.64.227"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.137.70.228"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.71.148.229"/>
    </slice>
    <from sec="1246942968" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
1118[label="170.81.231.75;d;44pkt 44fpkt", shape=diamond, color=yellow];
3921[label="90.56.156.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
10002[label="16.205.160.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10724[label="26.99.86.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12034[label="93.0.40.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13278[label="90.56.156.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15769[label="90.56.156.230;1pkt 1fpkt", shape=invtriangle, color=brown];
16831[label="90.56.156.230;1pkt 1fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.81.231.75:18143}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18143: (48.0392%)&lt;BR/&gt; 32087: (4.90196%)&lt;BR/&gt; 4672: (3.92157%)&lt;BR/&gt; 42397: (2.94118%)&lt;BR/&gt; 56451: (1.96078%)&gt;];
}
1118--3921[label="1;1pkt 1fpkt"];
1118--10002[label="1;1pkt 1fpkt"];
1118--10724[label="1;1pkt 1fpkt"];
1118--12034[label="1;1pkt 1fpkt"];
1118--13278[label="1;1pkt 1fpkt"];
1118--15769[label="1;1pkt 1fpkt"];
1118--16831[label="1;1pkt 1fpkt"];
3921--13278[label="1;1pkt 1fpkt"];
3921--15769[label="1;1pkt 1fpkt"];
3921--16831[label="1;1pkt 1fpkt"];
13278--15769[label="1;1pkt 1fpkt"];
13278--16831[label="1;1pkt 1fpkt"];
15769--16831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.231.75" dst_port="18143"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.153.130.231"/>
    </slice>
    <from sec="1246942915" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.161.153.231"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.170.214.231"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.88.17.232"/>
    </slice>
    <from sec="1246943587" usec="0"/>
    <to sec="1246943615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.148.21.232"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.23.96.232"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.99.225.232"/>
    </slice>
    <from sec="1246943310" usec="0"/>
    <to sec="1246943615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.48.155.233"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.208.233"/>
    </slice>
    <from sec="1246943202" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
740[label="169.185.138.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
741[label="42.249.128.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
840[label="136.90.240.233;s;5pkt 5fpkt", shape=diamond, color=yellow];
7176[label="42.249.128.80;d;2pkt 2fpkt", shape=hexagon, color=black];
10052[label="169.185.138.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13330[label="136.90.240.233;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14273[label="169.185.138.60;1pkt 1fpkt", shape=invtriangle, color=brown];
15796[label="136.90.240.233;5pkt 5fpkt", shape=invtriangle, color=brown];
16217[label="169.185.138.60;1pkt 1fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.240.233:0, *:0}[33.3333%]&lt;BR/&gt;{136.90.240.233:*, 88.89.10.45:*}[33.3333%]&lt;BR/&gt;{*:*, 42.249.128.80:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (26.087%)&lt;BR/&gt; 49331: (13.0435%)&lt;BR/&gt; 14210: (13.0435%)&lt;BR/&gt; 123: (13.0435%)&lt;BR/&gt; 49178: (10.8696%)&gt;];
}
740--741[label="1;1pkt 1fpkt"];
740--7176[label="1;1pkt 1fpkt"];
740--10052[label="1;1pkt 1fpkt"];
740--14273[label="1;1pkt 1fpkt"];
740--16217[label="1;1pkt 1fpkt"];
741--840[label="0.5;1pkt 1fpkt"];
741--7176[label="1;2pkt 2fpkt"];
741--10052[label="1;1pkt 1fpkt"];
741--13330[label="0.5;1pkt 1fpkt"];
741--14273[label="1;1pkt 1fpkt"];
741--15796[label="0.5;1pkt 1fpkt"];
741--16217[label="1;1pkt 1fpkt"];
840--1036[label="0.4;2pkt 2fpkt"];
840--1856[label="0.2;1pkt 1fpkt"];
840--7176[label="0.5;1pkt 1fpkt"];
840--13330[label="1;5pkt 5fpkt"];
840--15796[label="1;5pkt 5fpkt"];
7176--10052[label="1;1pkt 1fpkt"];
7176--13330[label="0.5;1pkt 1fpkt"];
7176--14273[label="1;1pkt 1fpkt"];
7176--15796[label="0.5;1pkt 1fpkt"];
7176--16217[label="1;1pkt 1fpkt"];
10052--14273[label="1;1pkt 1fpkt"];
10052--16217[label="1;1pkt 1fpkt"];
13330--15796[label="1;5pkt 5fpkt"];
14273--16217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.249.128.80"/>
      <filter dst_ip="88.89.10.45" src_ip="136.90.240.233"/>
      <filter src_ip="136.90.240.233"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.172.56.234"/>
    </slice>
    <from sec="1246943101" usec="0"/>
    <to sec="1246943210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.198.84.234"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.129.14.235"/>
    </slice>
    <from sec="1246943442" usec="0"/>
    <to sec="1246943587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.180.66.235"/>
    </slice>
    <from sec="1246943074" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.143.89.235"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
13360[label="136.90.140.235;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.140.235:*, 2.68.57.130:80}[29.6296%]&lt;BR/&gt;{136.90.140.235:*, 218.192.25.103:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56835: (1.85185%)&lt;BR/&gt; 56755: (1.85185%)&lt;BR/&gt; 56753: (1.85185%)&lt;BR/&gt; 56752: (1.85185%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="2.68.57.130" dst_port="80" src_ip="136.90.140.235"/>
      <filter dst_ip="218.192.25.103" dst_port="80" src_ip="136.90.140.235"/>
    </slice>
    <from sec="1246942892" usec="0"/>
    <to sec="1246942959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.144.235"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.230.231.235"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.49.65.236"/>
    </slice>
    <from sec="1246942962" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
2618[label="204.91.3.10;d;208pkt 208fpkt", shape=diamond, color=yellow];
2621[label="89.11.163.196;s;105pkt 105fpkt", shape=diamond, color=yellow];
3650[label="89.11.163.236;s;95pkt 95fpkt", shape=diamond, color=yellow];
7260[label="89.11.163.196;s;99pkt 99fpkt", shape=hexagon, color=black];
12691[label="89.11.163.196;105pkt 105fpkt", shape=pentagon, color=darkviolet];
13378[label="89.11.163.236;103pkt 103fpkt", shape=pentagon, color=darkviolet];
15521[label="89.11.163.196;105pkt 105fpkt", shape=invtriangle, color=brown];
16736[label="89.11.163.196;105pkt 105fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.11.163.196:443, 204.91.3.10:*}[50%]&lt;BR/&gt;{89.11.163.236:443, 204.91.3.10:*}[49.5192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.6757%)&lt;BR/&gt; 17326: (0.324324%)&lt;BR/&gt; 1429: (0.324324%)&lt;BR/&gt; 1426: (0.324324%)&lt;BR/&gt; 1424: (0.324324%)&gt;];
}
2618--2621[label="1;105pkt 105fpkt"];
2618--3650[label="1;95pkt 95fpkt"];
2618--7260[label="1;99pkt 99fpkt"];
2618--12691[label="1;105pkt 105fpkt"];
2618--13378[label="1;103pkt 103fpkt"];
2618--15521[label="1;105pkt 105fpkt"];
2618--16736[label="1;105pkt 105fpkt"];
2621--7260[label="1;99pkt 99fpkt"];
2621--12691[label="1;105pkt 105fpkt"];
2621--15521[label="1;105pkt 105fpkt"];
2621--16736[label="1;105pkt 105fpkt"];
3650--13378[label="1;95pkt 95fpkt"];
7260--12691[label="1;99pkt 99fpkt"];
7260--15521[label="1;99pkt 99fpkt"];
7260--16736[label="1;99pkt 99fpkt"];
12691--15521[label="1;105pkt 105fpkt"];
12691--16736[label="1;105pkt 105fpkt"];
15521--16736[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.3.10" src_ip="89.11.163.196" src_port="443"/>
      <filter dst_ip="204.91.3.10" src_ip="89.11.163.236" src_port="443"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.38.172.236"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246943069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
1298[label="205.100.245.214;d;147pkt 147fpkt", shape=diamond, color=yellow];
6693[label="205.100.245.214;d;86pkt 86fpkt", shape=hexagon, color=black];
9255[label="27.66.228.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10844[label="91.52.178.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11321[label="27.138.221.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11387[label="92.172.193.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14647[label="91.52.178.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 205.100.245.214:0}[79.5918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (78.2427%)&lt;BR/&gt; 3713: (1.25523%)&lt;BR/&gt; 2001: (1.25523%)&lt;BR/&gt; 3646: (0.83682%)&lt;BR/&gt; 3300: (0.83682%)&gt;];
}
1298--2664[label="0.0769231;1pkt 1fpkt"];
1298--4465[label="0.111111;1pkt 1fpkt"];
1298--6693[label="1;86pkt 86fpkt"];
1298--7693[label="0.0434783;1pkt 1fpkt"];
1298--8005[label="0.0769231;1pkt 1fpkt"];
1298--9255[label="1;2pkt 2fpkt"];
1298--9704[label="0.037037;1pkt 1fpkt"];
1298--10844[label="1;1pkt 1fpkt"];
1298--11321[label="1;1pkt 1fpkt"];
1298--11387[label="1;1pkt 1fpkt"];
1298--13387[label="0.111111;1pkt 1fpkt"];
1298--14113[label="0.037037;1pkt 1fpkt"];
1298--14647[label="1;1pkt 1fpkt"];
1298--16155[label="0.037037;1pkt 1fpkt"];
6693--7693[label="0.0434783;1pkt 1fpkt"];
6693--8005[label="0.0769231;1pkt 1fpkt"];
6693--9255[label="1;2pkt 2fpkt"];
6693--9704[label="0.037037;1pkt 1fpkt"];
6693--10844[label="1;1pkt 1fpkt"];
6693--11321[label="1;1pkt 1fpkt"];
6693--13387[label="0.111111;1pkt 1fpkt"];
6693--14113[label="0.037037;1pkt 1fpkt"];
6693--14647[label="1;1pkt 1fpkt"];
6693--16155[label="0.037037;1pkt 1fpkt"];
10844--14647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.245.214"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.56.239.236"/>
    </slice>
    <from sec="1246943589" usec="0"/>
    <to sec="1246943591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.141.1.237"/>
    </slice>
    <from sec="1246943103" usec="0"/>
    <to sec="1246943146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.112.130.237"/>
    </slice>
    <from sec="1246943270" usec="0"/>
    <to sec="1246943280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
13414[label="141.179.130.238;86pkt 86fpkt", shape=pentagon, color=darkviolet];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.130.238:62925, *:*}[86.0465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62925: (43.0233%)&lt;BR/&gt; 7024: (1.74419%)&lt;BR/&gt; 56594: (1.16279%)&lt;BR/&gt; 52071: (1.16279%)&lt;BR/&gt; 50236: (1.16279%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.179.130.238" src_port="62925"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.24.2.239"/>
    </slice>
    <from sec="1246942826" usec="0"/>
    <to sec="1246943107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.242.73.239"/>
    </slice>
    <from sec="1246942816" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.197.188.239"/>
    </slice>
    <from sec="1246943049" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.82.226.239"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.5.253.239"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.220.18.240"/>
    </slice>
    <from sec="1246943621" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.44.240"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.160.227.242"/>
    </slice>
    <from sec="1246942901" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.40.34.243"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.97.37.243"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.14.154.243"/>
    </slice>
    <from sec="1246943041" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.169.166.243"/>
    </slice>
    <from sec="1246942820" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
6370[label="136.90.110.111;d;14pkt 14fpkt", shape=diamond, color=yellow];
6505[label="208.68.197.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
8357[label="208.68.197.109;s;1pkt 1fpkt", shape=hexagon, color=black];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.130.172.35:80, 136.90.110.111:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 3462: (9.375%)&lt;BR/&gt; 4441: (3.125%)&lt;BR/&gt; 3406: (3.125%)&lt;BR/&gt; 3398: (3.125%)&gt;];
}
6370--6505[label="1;1pkt 1fpkt"];
6370--8357[label="1;1pkt 1fpkt"];
6370--8484[label="0.214286;3pkt 3fpkt"];
6370--8574[label="0.214286;3pkt 3fpkt"];
6370--8656[label="0.214286;3pkt 3fpkt"];
6370--13640[label="0.333333;1pkt 1fpkt"];
6370--15929[label="0.333333;1pkt 1fpkt"];
6505--8357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.110.111" src_ip="17.130.172.35" src_port="80"/>
    </slice>
    <from sec="1246943119" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.179.16.244"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.136.36.245"/>
    </slice>
    <from sec="1246943323" usec="0"/>
    <to sec="1246943338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.30.217.245"/>
    </slice>
    <from sec="1246942912" usec="0"/>
    <to sec="1246943521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.57.2.246"/>
    </slice>
    <from sec="1246943074" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.154.9.247"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.18.27.247"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.11.52.249"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.136.137.249"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747075,2.17429,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
2119[label="136.90.128.139;s;117pkt 117fpkt", shape=diamond, color=yellow];
2339[label="211.46.169.205;d;98pkt 98fpkt", shape=diamond, color=yellow];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.128.139:*, 211.46.169.205:80}[83.7607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9767%)&lt;BR/&gt; 59580: (1.39535%)&lt;BR/&gt; 443: (1.39535%)&lt;BR/&gt; 3970: (0.465116%)&lt;BR/&gt; 3969: (0.465116%)&gt;];
}
2119--2339[label="1;98pkt 98fpkt"];
2119--2442[label="0.0166667;1pkt 1fpkt"];
2119--3160[label="0.025641;3pkt 3fpkt"];
2119--3221[label="0.00854701;1pkt 1fpkt"];
2119--4090[label="0.00854701;1pkt 1fpkt"];
2119--4473[label="0.0116279;1pkt 1fpkt"];
2119--5031[label="0.00943396;1pkt 1fpkt"];
2119--7302[label="0.00854701;1pkt 1fpkt"];
2119--7554[label="0.00990099;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.46.169.205" dst_port="80" src_ip="136.90.128.139"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.80.251"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.22.24.252"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.103.82.252"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.16.88.252"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.108.131.253"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.96.175.253"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.161.76.254"/>
    </slice>
    <from sec="1246942994" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.365629,2.17877,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.34.34.255"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.43.37.0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.3.135.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.53.154.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
8705[label="141.179.174.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13670[label="141.179.174.0;1pkt 1fpkt", shape=invtriangle, color=brown];
15948[label="141.179.174.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.174.0:80, 219.56.148.113:40826}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40826: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8705--13670[label="1;1pkt 1fpkt"];
8705--15948[label="1;1pkt 1fpkt"];
13670--15948[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.56.148.113" dst_port="40826" src_ip="141.179.174.0" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.208.196.0"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
8732[label="141.5.109.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13684[label="141.5.109.1;1pkt 1fpkt", shape=invtriangle, color=brown];
15956[label="141.5.109.1;1pkt 1fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.5.109.1:25, 62.78.116.175:11221}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11221: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
8732--13684[label="1;1pkt 1fpkt"];
8732--15956[label="1;1pkt 1fpkt"];
13684--15956[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.78.116.175" dst_port="11221" src_ip="141.5.109.1" src_port="25"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.18.120.1"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.42.223.1"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.101.25.2"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.7.129.2"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
8766[label="141.161.174.2;35pkt 35fpkt", shape=pentagon, color=darkviolet];
13697[label="141.161.174.2;35pkt 35fpkt", shape=invtriangle, color=brown];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.174.2:21112, *:*}[60%]&lt;BR/&gt;{141.161.174.2:5624, *:*}[34.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21112: (30%)&lt;BR/&gt; 5624: (18.5714%)&lt;BR/&gt; 15580: (2.85714%)&lt;BR/&gt; 15116: (2.85714%)&lt;BR/&gt; 7561: (2.85714%)&gt;];
}
8766--13697[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="141.161.174.2" src_port="21112"/>
      <filter src_ip="141.161.174.2" src_port="5624"/>
    </slice>
    <from sec="1246942820" usec="0"/>
    <to sec="1246943663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.85.0.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.32.82.3"/>
    </slice>
    <from sec="1246943554" usec="0"/>
    <to sec="1246943604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
8787[label="136.90.89.3;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13705[label="136.90.89.3;6pkt 6fpkt", shape=invtriangle, color=brown];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.89.3:80, 93.20.54.23:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63447: (9.09091%)&lt;BR/&gt; 61431: (9.09091%)&lt;BR/&gt; 61194: (9.09091%)&lt;BR/&gt; 60554: (9.09091%)&gt;];
}
8787--13705[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="93.20.54.23" src_ip="136.90.89.3" src_port="80"/>
    </slice>
    <from sec="1246943552" usec="0"/>
    <to sec="1246943563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.156.119.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.42.93.5"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.142.10.6"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.36.53.6"/>
    </slice>
    <from sec="1246943673" usec="0"/>
    <to sec="1246943686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.150.70.6"/>
    </slice>
    <from sec="1246942818" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
2771[label="42.30.217.108;d;39pkt 39fpkt", shape=diamond, color=yellow];
6308[label="218.170.96.209;d;30pkt 30fpkt", shape=diamond, color=yellow];
7313[label="42.30.217.108;d;20pkt 20fpkt", shape=hexagon, color=black];
8876[label="169.185.232.6;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12252[label="141.161.194.171;81pkt 81fpkt", shape=pentagon, color=darkviolet];
13746[label="169.185.232.6;8pkt 8fpkt", shape=invtriangle, color=brown];
15318[label="141.161.194.171;81pkt 81fpkt", shape=invtriangle, color=brown];
15984[label="169.185.232.6;8pkt 8fpkt", shape=invhouse, color=bisque];
16639[label="141.161.194.171;81pkt 81fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.194.171:80, 42.30.217.108:*}[40.5941%]&lt;BR/&gt;{*:80, 218.170.96.209:*}[31.6832%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3146%)&lt;BR/&gt; 25: (1.68539%)&lt;BR/&gt; 64910: (0.702247%)&lt;BR/&gt; 54980: (0.702247%)&lt;BR/&gt; 54472: (0.702247%)&gt;];
}
2771--7313[label="1;20pkt 20fpkt"];
2771--8451[label="0.0769231;3pkt 3fpkt"];
2771--8458[label="0.0769231;3pkt 3fpkt"];
2771--8484[label="0.0769231;3pkt 3fpkt"];
2771--8541[label="0.0769231;3pkt 3fpkt"];
2771--8548[label="0.0769231;3pkt 3fpkt"];
2771--8574[label="0.0769231;3pkt 3fpkt"];
2771--8626[label="0.0769231;3pkt 3fpkt"];
2771--8633[label="0.0769231;3pkt 3fpkt"];
2771--8656[label="0.0769231;3pkt 3fpkt"];
2771--11660[label="0.025641;1pkt 1fpkt"];
2771--12252[label="0.974359;38pkt 38fpkt"];
2771--15318[label="0.974359;38pkt 38fpkt"];
2771--16639[label="0.974359;38pkt 38fpkt"];
6308--8451[label="0.0333333;1pkt 1fpkt"];
6308--8458[label="0.0666667;2pkt 2fpkt"];
6308--8484[label="0.0333333;1pkt 1fpkt"];
6308--8541[label="0.0333333;1pkt 1fpkt"];
6308--8548[label="0.0666667;2pkt 2fpkt"];
6308--8574[label="0.0333333;1pkt 1fpkt"];
6308--8626[label="0.0333333;1pkt 1fpkt"];
6308--8633[label="0.0666667;2pkt 2fpkt"];
6308--8656[label="0.0333333;1pkt 1fpkt"];
6308--8876[label="0.125;1pkt 1fpkt"];
6308--9866[label="0.0333333;1pkt 1fpkt"];
6308--12002[label="0.166667;5pkt 5fpkt"];
6308--12252[label="0.6;18pkt 18fpkt"];
6308--13746[label="0.125;1pkt 1fpkt"];
6308--14186[label="0.0333333;1pkt 1fpkt"];
6308--15318[label="0.6;18pkt 18fpkt"];
6308--15984[label="0.125;1pkt 1fpkt"];
6308--16639[label="0.6;18pkt 18fpkt"];
7313--8451[label="0.15;3pkt 3fpkt"];
7313--8458[label="0.15;3pkt 3fpkt"];
7313--8541[label="0.15;3pkt 3fpkt"];
7313--8548[label="0.15;3pkt 3fpkt"];
7313--8626[label="0.15;3pkt 3fpkt"];
7313--8633[label="0.15;3pkt 3fpkt"];
7313--11660[label="0.05;1pkt 1fpkt"];
7313--12252[label="0.95;19pkt 19fpkt"];
7313--15318[label="0.95;19pkt 19fpkt"];
7313--16639[label="0.95;19pkt 19fpkt"];
8876--13746[label="1;8pkt 8fpkt"];
8876--15984[label="1;8pkt 8fpkt"];
12252--15318[label="1;81pkt 81fpkt"];
12252--16639[label="1;81pkt 81fpkt"];
13746--15984[label="1;8pkt 8fpkt"];
15318--16639[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="218.170.96.209" src_port="80"/>
      <filter dst_ip="42.30.217.108" src_ip="141.161.194.171" src_port="80"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.100.245.6"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.22.168.7"/>
    </slice>
    <from sec="1246942956" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
8915[label="210.60.164.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13762[label="210.60.164.8;2pkt 2fpkt", shape=invtriangle, color=brown];
15992[label="210.60.164.8;2pkt 2fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.60.164.8:80, 204.80.30.250:60922}[50%]&lt;BR/&gt;{210.60.164.8:80, 204.80.30.250:60923}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60923: (25%)&lt;BR/&gt; 60922: (25%)&gt;];
}
8915--13762[label="1;2pkt 2fpkt"];
8915--15992[label="1;2pkt 2fpkt"];
13762--15992[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" dst_port="60923" src_ip="210.60.164.8" src_port="80"/>
      <filter dst_ip="204.80.30.250" dst_port="60922" src_ip="210.60.164.8" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.209.245.8"/>
    </slice>
    <from sec="1246942815" usec="0"/>
    <to sec="1246943390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.185.23.9"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
8953[label="213.47.16.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13780[label="213.47.16.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.47.16.10:13988, 205.100.250.68:11292}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13988: (50%)&lt;BR/&gt; 11292: (50%)&gt;];
}
8953--13780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="11292" src_ip="213.47.16.10" src_port="13988"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.129.35.10"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
8958[label="92.85.83.10;503pkt 503fpkt", shape=pentagon, color=darkviolet];
13782[label="92.85.83.10;502pkt 502fpkt", shape=invtriangle, color=brown];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.85.83.10:25511, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25511: (50%)&lt;BR/&gt; 50746: (0.199005%)&lt;BR/&gt; 48700: (0.199005%)&lt;BR/&gt; 44100: (0.199005%)&lt;BR/&gt; 26456: (0.199005%)&gt;];
}
8958--13782[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter src_ip="92.85.83.10" src_port="25511"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.60.151.10"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.80.207.10"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.138.236.10"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.205.99.11"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
8997[label="33.65.142.11;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13799[label="33.65.142.11;9pkt 9fpkt", shape=invtriangle, color=brown];
16005[label="33.65.142.11;10pkt 10fpkt", shape=invhouse, color=bisque];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.65.142.11:*, 205.100.240.58:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64132: (5.17241%)&lt;BR/&gt; 63703: (5.17241%)&lt;BR/&gt; 51895: (5.17241%)&lt;BR/&gt; 50766: (5.17241%)&gt;];
}
8997--13799[label="1;9pkt 9fpkt"];
8997--16005[label="1;10pkt 10fpkt"];
13799--16005[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.58" dst_port="80" src_ip="33.65.142.11"/>
    </slice>
    <from sec="1246943265" usec="0"/>
    <to sec="1246943330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
8998[label="169.185.152.11;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13800[label="169.185.152.11;14pkt 14fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.152.11:*, 219.38.166.12:80}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49718: (3.44828%)&lt;BR/&gt; 49717: (3.44828%)&lt;BR/&gt; 49716: (3.44828%)&lt;BR/&gt; 49715: (3.44828%)&gt;];
}
8998--13800[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="219.38.166.12" dst_port="80" src_ip="169.185.152.11"/>
    </slice>
    <from sec="1246943315" usec="0"/>
    <to sec="1246943317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
8999[label="46.184.153.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13801[label="46.184.153.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.184.153.11:80, 170.81.28.117:2274}[50%]&lt;BR/&gt;{46.184.153.11:80, 170.81.28.117:2275}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2275: (25%)&lt;BR/&gt; 2274: (25%)&gt;];
}
8999--13801[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.28.117" dst_port="2275" src_ip="46.184.153.11" src_port="80"/>
      <filter dst_ip="170.81.28.117" dst_port="2274" src_ip="46.184.153.11" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
9000[label="136.90.166.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13802[label="136.90.166.11;1pkt 1fpkt", shape=invtriangle, color=brown];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.166.11:25, 54.229.39.71:1593}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1593: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9000--13802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="54.229.39.71" dst_port="1593" src_ip="136.90.166.11" src_port="25"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.212.188.11"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.221.188.11"/>
    </slice>
    <from sec="1246943380" usec="0"/>
    <to sec="1246943391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.116.58.12"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.92.75.12"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
9057[label="141.179.149.13;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13830[label="141.179.149.13;17pkt 17fpkt", shape=invtriangle, color=brown];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.149.13:*, 219.38.167.90:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2103: (2.94118%)&lt;BR/&gt; 2099: (2.94118%)&lt;BR/&gt; 2085: (2.94118%)&lt;BR/&gt; 2079: (2.94118%)&gt;];
}
9057--13830[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="219.38.167.90" dst_port="80" src_ip="141.179.149.13"/>
    </slice>
    <from sec="1246943644" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
9059[label="136.90.153.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13832[label="136.90.153.13;2pkt 2fpkt", shape=invtriangle, color=brown];
16016[label="136.90.153.13;2pkt 2fpkt", shape=invhouse, color=bisque];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.153.13:59191, 193.17.210.141:53}[50%]&lt;BR/&gt;{136.90.153.13:41022, 197.148.209.170:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 59191: (25%)&lt;BR/&gt; 41022: (25%)&gt;];
}
9059--13832[label="1;2pkt 2fpkt"];
9059--16016[label="1;2pkt 2fpkt"];
13832--16016[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.148.209.170" dst_port="53" src_ip="136.90.153.13" src_port="41022"/>
      <filter dst_ip="193.17.210.141" dst_port="53" src_ip="136.90.153.13" src_port="59191"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
9094[label="205.151.58.15;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13849[label="205.151.58.15;5pkt 5fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.151.58.15:80, 141.166.221.33:58050}[20%]&lt;BR/&gt;{205.151.58.15:80, 141.166.221.33:58053}[20%]&lt;BR/&gt;{205.151.58.15:80, 141.166.221.33:58054}[20%]&lt;BR/&gt;{205.151.58.15:80, 141.166.221.33:58055}[20%]&lt;BR/&gt;{205.151.58.15:80, 141.166.221.33:58058}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58058: (10%)&lt;BR/&gt; 58055: (10%)&lt;BR/&gt; 58054: (10%)&lt;BR/&gt; 58053: (10%)&gt;];
}
9094--13849[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.166.221.33" dst_port="58058" src_ip="205.151.58.15" src_port="80"/>
      <filter dst_ip="141.166.221.33" dst_port="58055" src_ip="205.151.58.15" src_port="80"/>
      <filter dst_ip="141.166.221.33" dst_port="58054" src_ip="205.151.58.15" src_port="80"/>
      <filter dst_ip="141.166.221.33" dst_port="58053" src_ip="205.151.58.15" src_port="80"/>
      <filter dst_ip="141.166.221.33" dst_port="58050" src_ip="205.151.58.15" src_port="80"/>
    </slice>
    <from sec="1246943699" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
5265[label="169.185.200.37;d;39pkt 39fpkt", shape=diamond, color=yellow];
8067[label="169.185.200.37;d;35pkt 35fpkt", shape=hexagon, color=black];
9096[label="137.11.78.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13851[label="137.11.78.15;2pkt 2fpkt", shape=invtriangle, color=brown];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.185.200.37:40331}[68.2927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40331: (35.443%)&lt;BR/&gt; 12350: (8.22785%)&lt;BR/&gt; 80: (3.79747%)&lt;BR/&gt; 1034: (2.53165%)&lt;BR/&gt; 62678: (1.26582%)&gt;];
}
5265--8067[label="1;35pkt 35fpkt"];
5265--8458[label="0.025641;1pkt 1fpkt"];
5265--8484[label="0.025641;1pkt 1fpkt"];
5265--8548[label="0.025641;1pkt 1fpkt"];
5265--8574[label="0.025641;1pkt 1fpkt"];
5265--8633[label="0.025641;1pkt 1fpkt"];
5265--8656[label="0.025641;1pkt 1fpkt"];
5265--9096[label="0.333333;1pkt 1fpkt"];
5265--13851[label="0.5;1pkt 1fpkt"];
8067--8458[label="0.0285714;1pkt 1fpkt"];
8067--8484[label="0.0285714;1pkt 1fpkt"];
8067--8548[label="0.0285714;1pkt 1fpkt"];
8067--8574[label="0.0285714;1pkt 1fpkt"];
8067--8633[label="0.0285714;1pkt 1fpkt"];
8067--8656[label="0.0285714;1pkt 1fpkt"];
8067--9096[label="0.333333;1pkt 1fpkt"];
8067--13851[label="0.5;1pkt 1fpkt"];
9096--13851[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.200.37" dst_port="40331"/>
    </slice>
    <from sec="1246942909" usec="0"/>
    <to sec="1246943617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.86.147.15"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246942942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.32.104.16"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.0.195.16"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.188.129.17"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
9156[label="141.42.58.18;120pkt 120fpkt", shape=pentagon, color=darkviolet];
13878[label="141.42.58.18;119pkt 119fpkt", shape=invtriangle, color=brown];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.42.58.18:*, 36.21.231.137:44445}[90.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44445: (45.6067%)&lt;BR/&gt; 1080: (3.34728%)&lt;BR/&gt; 137: (1.25523%)&lt;BR/&gt; 4411: (0.41841%)&lt;BR/&gt; 4402: (0.41841%)&gt;];
}
9156--13878[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_ip="36.21.231.137" dst_port="44445" src_ip="141.42.58.18"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
9158[label="136.90.69.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13880[label="136.90.69.18;3pkt 3fpkt", shape=invtriangle, color=brown];
16034[label="136.90.69.18;3pkt 3fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.69.18:25, 17.129.118.209:4134}[33.3333%]&lt;BR/&gt;{136.90.69.18:25, 214.162.72.108:15106}[33.3333%]&lt;BR/&gt;{136.90.69.18:25, 214.162.72.108:15107}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 15107: (16.6667%)&lt;BR/&gt; 15106: (16.6667%)&lt;BR/&gt; 4134: (16.6667%)&gt;];
}
9158--13880[label="1;3pkt 3fpkt"];
9158--16034[label="1;3pkt 3fpkt"];
13880--16034[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.72.108" dst_port="15107" src_ip="136.90.69.18" src_port="25"/>
      <filter dst_ip="214.162.72.108" dst_port="15106" src_ip="136.90.69.18" src_port="25"/>
      <filter dst_ip="17.129.118.209" dst_port="4134" src_ip="136.90.69.18" src_port="25"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
9159[label="17.209.69.18;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13881[label="17.209.69.18;5pkt 5fpkt", shape=invtriangle, color=brown];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.209.69.18:49192, 141.179.243.121:587}[20%]&lt;BR/&gt;{17.209.69.18:49227, 141.179.243.121:587}[20%]&lt;BR/&gt;{17.209.69.18:49193, 141.179.243.123:995}[20%]&lt;BR/&gt;{17.209.69.18:49221, 141.179.243.123:995}[20%]&lt;BR/&gt;{17.209.69.18:49225, 141.179.243.123:995}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (30%)&lt;BR/&gt; 587: (20%)&lt;BR/&gt; 49227: (10%)&lt;BR/&gt; 49225: (10%)&lt;BR/&gt; 49221: (10%)&gt;];
}
9159--13881[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.243.123" dst_port="995" src_ip="17.209.69.18" src_port="49225"/>
      <filter dst_ip="141.179.243.123" dst_port="995" src_ip="17.209.69.18" src_port="49221"/>
      <filter dst_ip="141.179.243.123" dst_port="995" src_ip="17.209.69.18" src_port="49193"/>
      <filter dst_ip="141.179.243.121" dst_port="587" src_ip="17.209.69.18" src_port="49227"/>
      <filter dst_ip="141.179.243.121" dst_port="587" src_ip="17.209.69.18" src_port="49192"/>
    </slice>
    <from sec="1246942932" usec="0"/>
    <to sec="1246943690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
861[label="170.81.68.199;d;1072pkt 1072fpkt", shape=diamond, color=yellow];
9168[label="221.152.142.18;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10692[label="35.124.120.90;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10773[label="195.167.45.95;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10776[label="2.20.99.95;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10805[label="99.70.184.96;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10816[label="33.84.110.97;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11935[label="56.0.99.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13279[label="167.27.215.230;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13574[label="59.101.130.249;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13886[label="221.152.142.18;13pkt 13fpkt", shape=invtriangle, color=brown];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.81.68.199:25337}[33.6111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25337: (16.4807%)&lt;BR/&gt; 6881: (2.23176%)&lt;BR/&gt; 51413: (1.33047%)&lt;BR/&gt; 10163: (1.28755%)&lt;BR/&gt; 6882: (0.858369%)&gt;];
}
861--8484[label="0.000932836;1pkt 1fpkt"];
861--8574[label="0.000932836;1pkt 1fpkt"];
861--8656[label="0.000932836;1pkt 1fpkt"];
861--9168[label="0.916667;11pkt 11fpkt"];
861--10692[label="1;6pkt 6fpkt"];
861--10773[label="0.9;9pkt 9fpkt"];
861--10776[label="0.777778;7pkt 7fpkt"];
861--10805[label="0.875;7pkt 7fpkt"];
861--10816[label="1;7pkt 7fpkt"];
861--11935[label="1;3pkt 3fpkt"];
861--13279[label="0.875;14pkt 14fpkt"];
861--13574[label="0.888889;8pkt 8fpkt"];
861--13886[label="0.923077;12pkt 12fpkt"];
9168--13886[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.68.199" dst_port="25337"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
9181[label="147.22.57.19;143pkt 143fpkt", shape=pentagon, color=darkviolet];
13893[label="147.22.57.19;143pkt 143fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.22.57.19:24931, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24931: (50%)&lt;BR/&gt; 65207: (0.34965%)&lt;BR/&gt; 65079: (0.34965%)&lt;BR/&gt; 64465: (0.34965%)&lt;BR/&gt; 63606: (0.34965%)&gt;];
}
9181--13893[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="147.22.57.19" src_port="24931"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
9196[label="141.179.231.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13899[label="141.179.231.19;2pkt 2fpkt", shape=invtriangle, color=brown];
16040[label="141.179.231.19;2pkt 2fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.231.19:61949, 192.38.130.117:53}[50%]&lt;BR/&gt;{141.179.231.19:62692, 192.38.130.117:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62692: (25%)&lt;BR/&gt; 61949: (25%)&gt;];
}
9196--13899[label="1;2pkt 2fpkt"];
9196--16040[label="1;2pkt 2fpkt"];
13899--16040[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.38.130.117" dst_port="53" src_ip="141.179.231.19" src_port="62692"/>
      <filter dst_ip="192.38.130.117" dst_port="53" src_ip="141.179.231.19" src_port="61949"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.65.73.20"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.40.101.21"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.217.151.21"/>
    </slice>
    <from sec="1246943002" usec="0"/>
    <to sec="1246943138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.138.37.23"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
9279[label="46.168.96.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13934[label="46.168.96.24;1pkt 1fpkt", shape=invtriangle, color=brown];
16057[label="46.168.96.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.168.96.24:80, 136.90.44.240:3649}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3649: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9279--13934[label="1;1pkt 1fpkt"];
9279--16057[label="1;1pkt 1fpkt"];
13934--16057[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.44.240" dst_port="3649" src_ip="46.168.96.24" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.3.135.24"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.182.168.24"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.186.92.25"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
9299[label="21.138.102.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13944[label="21.138.102.25;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.138.102.25:28289, 205.100.240.132:54667}[50%]&lt;BR/&gt;{21.138.102.25:28311, 205.100.240.132:15284}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54667: (25%)&lt;BR/&gt; 28311: (25%)&lt;BR/&gt; 28289: (25%)&lt;BR/&gt; 15284: (25%)&gt;];
}
9299--13944[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.132" dst_port="15284" src_ip="21.138.102.25" src_port="28311"/>
      <filter dst_ip="205.100.240.132" dst_port="54667" src_ip="21.138.102.25" src_port="28289"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
9314[label="160.39.1.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13951[label="160.39.1.26;2pkt 2fpkt", shape=invtriangle, color=brown];
16068[label="160.39.1.26;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.39.1.26:34649, 193.137.56.227:53}[50%]&lt;BR/&gt;{160.39.1.26:62822, 193.137.56.227:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62822: (25%)&lt;BR/&gt; 34649: (25%)&gt;];
}
9314--13951[label="1;2pkt 2fpkt"];
9314--16068[label="1;2pkt 2fpkt"];
13951--16068[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.137.56.227" dst_port="53" src_ip="160.39.1.26" src_port="62822"/>
      <filter dst_ip="193.137.56.227" dst_port="53" src_ip="160.39.1.26" src_port="34649"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.116.164.26"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
9341[label="213.149.16.27;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13961[label="213.149.16.27;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.149.16.27:80, 141.179.237.85:2744}[20%]&lt;BR/&gt;{213.149.16.27:80, 141.179.237.85:2746}[20%]&lt;BR/&gt;{213.149.16.27:80, 141.179.237.85:2748}[20%]&lt;BR/&gt;{213.149.16.27:80, 141.179.237.85:2750}[20%]&lt;BR/&gt;{213.149.16.27:80, 141.179.237.85:2772}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2772: (11.1111%)&lt;BR/&gt; 2750: (11.1111%)&lt;BR/&gt; 2748: (11.1111%)&lt;BR/&gt; 2746: (11.1111%)&gt;];
}
9341--13961[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.237.85" dst_port="2772" src_ip="213.149.16.27" src_port="80"/>
      <filter dst_ip="141.179.237.85" dst_port="2750" src_ip="213.149.16.27" src_port="80"/>
      <filter dst_ip="141.179.237.85" dst_port="2748" src_ip="213.149.16.27" src_port="80"/>
      <filter dst_ip="141.179.237.85" dst_port="2746" src_ip="213.149.16.27" src_port="80"/>
      <filter dst_ip="141.179.237.85" dst_port="2744" src_ip="213.149.16.27" src_port="80"/>
    </slice>
    <from sec="1246943552" usec="0"/>
    <to sec="1246943564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
9345[label="16.202.54.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13963[label="16.202.54.27;1pkt 1fpkt", shape=invtriangle, color=brown];
16074[label="16.202.54.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.202.54.27:23278, 170.81.231.75:18143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23278: (50%)&lt;BR/&gt; 18143: (50%)&gt;];
}
9345--13963[label="1;1pkt 1fpkt"];
9345--16074[label="1;1pkt 1fpkt"];
13963--16074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.231.75" dst_port="18143" src_ip="16.202.54.27" src_port="23278"/>
    </slice>
    <from sec="1246943655" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
9349[label="46.168.96.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13966[label="46.168.96.27;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.168.96.27:80, 204.80.31.60:35264}[33.3333%]&lt;BR/&gt;{46.168.96.27:80, 204.80.31.60:39616}[33.3333%]&lt;BR/&gt;{46.168.96.27:80, 204.80.31.60:52881}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52881: (16.6667%)&lt;BR/&gt; 39616: (16.6667%)&lt;BR/&gt; 35264: (16.6667%)&gt;];
}
9349--13966[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.31.60" dst_port="52881" src_ip="46.168.96.27" src_port="80"/>
      <filter dst_ip="204.80.31.60" dst_port="39616" src_ip="46.168.96.27" src_port="80"/>
      <filter dst_ip="204.80.31.60" dst_port="35264" src_ip="46.168.96.27" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
9350[label="141.5.100.27;21pkt 21fpkt", shape=pentagon, color=darkviolet];
13967[label="141.5.100.27;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.5.100.27:*, 90.73.212.153:443}[61.9048%]&lt;BR/&gt;{141.5.100.27:*, 90.73.212.144:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.2381%)&lt;BR/&gt; 80: (4.7619%)&lt;BR/&gt; 2344: (2.38095%)&lt;BR/&gt; 2343: (2.38095%)&lt;BR/&gt; 2342: (2.38095%)&gt;];
}
9350--13967[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="90.73.212.153" dst_port="443" src_ip="141.5.100.27"/>
      <filter dst_ip="90.73.212.144" dst_port="443" src_ip="141.5.100.27"/>
    </slice>
    <from sec="1246942877" usec="0"/>
    <to sec="1246943195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
9351[label="169.185.121.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13968[label="169.185.121.27;1pkt 1fpkt", shape=invtriangle, color=brown];
16076[label="169.185.121.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.121.27:61723, 219.18.120.1:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61723: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9351--13968[label="1;1pkt 1fpkt"];
9351--16076[label="1;1pkt 1fpkt"];
13968--16076[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.1" dst_port="80" src_ip="169.185.121.27" src_port="61723"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.3.184.28"/>
    </slice>
    <from sec="1246942844" usec="0"/>
    <to sec="1246943257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
9389[label="29.130.188.29;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13982[label="29.130.188.29;24pkt 24fpkt", shape=invtriangle, color=brown];
16085[label="29.130.188.29;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.130.188.29:*, 136.90.99.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3643: (2.11268%)&lt;BR/&gt; 3641: (2.11268%)&lt;BR/&gt; 3639: (2.11268%)&lt;BR/&gt; 3637: (2.11268%)&gt;];
}
9389--13982[label="1;24pkt 24fpkt"];
9389--16085[label="1;23pkt 23fpkt"];
13982--16085[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.99.72" dst_port="80" src_ip="29.130.188.29"/>
    </slice>
    <from sec="1246942953" usec="0"/>
    <to sec="1246942960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
9404[label="197.202.228.30;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13985[label="197.202.228.30;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.202.228.30:80, 136.90.112.64:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4974: (3.33333%)&lt;BR/&gt; 4972: (3.33333%)&lt;BR/&gt; 4970: (3.33333%)&lt;BR/&gt; 4968: (3.33333%)&gt;];
}
9404--13985[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.112.64" src_ip="197.202.228.30" src_port="80"/>
    </slice>
    <from sec="1246943676" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
9406[label="136.90.2.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13986[label="136.90.2.31;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.2.31:53, 221.241.119.64:56598}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56598: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
9406--13986[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.241.119.64" dst_port="56598" src_ip="136.90.2.31" src_port="53"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
954[label="136.90.148.253;d;65pkt 65fpkt", shape=diamond, color=yellow];
1127[label="91.156.217.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1965[label="212.26.33.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
7007[label="212.26.33.9;s;1pkt 1fpkt", shape=hexagon, color=black];
9375[label="23.91.7.29;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9407[label="27.10.19.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9991[label="20.21.81.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11522[label="20.19.134.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12736[label="208.119.176.199;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12961[label="208.102.207.211;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13987[label="27.10.19.31;1pkt 1fpkt", shape=invtriangle, color=brown];
14969[label="20.19.134.134;1pkt 1fpkt", shape=invtriangle, color=brown];
16087[label="27.10.19.31;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.90.148.253:15000}[30.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (19.7674%)&lt;BR/&gt; 28213: (7.55814%)&lt;BR/&gt; 3893: (5.23256%)&lt;BR/&gt; 3898: (4.65116%)&lt;BR/&gt; 0: (4.65116%)&gt;];
}
954--1127[label="1;1pkt 1fpkt"];
954--1965[label="1;1pkt 1fpkt"];
954--7007[label="1;1pkt 1fpkt"];
954--9375[label="0.75;3pkt 3fpkt"];
954--9407[label="1;1pkt 1fpkt"];
954--9991[label="1;1pkt 1fpkt"];
954--11522[label="1;1pkt 1fpkt"];
954--12736[label="1;3pkt 3fpkt"];
954--12961[label="1;5pkt 5fpkt"];
954--13987[label="1;1pkt 1fpkt"];
954--14969[label="1;1pkt 1fpkt"];
954--16087[label="1;1pkt 1fpkt"];
1965--7007[label="1;1pkt 1fpkt"];
9407--13987[label="1;1pkt 1fpkt"];
9407--16087[label="1;1pkt 1fpkt"];
11522--14969[label="1;1pkt 1fpkt"];
13987--16087[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.148.253" dst_port="15000"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.30.31.31"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
9442[label="219.18.120.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14000[label="219.18.120.32;1pkt 1fpkt", shape=invtriangle, color=brown];
16097[label="219.18.120.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.120.32:80, 205.100.245.157:49585}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49585: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9442--14000[label="1;1pkt 1fpkt"];
9442--16097[label="1;1pkt 1fpkt"];
14000--16097[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.245.157" dst_port="49585" src_ip="219.18.120.32" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
9444[label="170.81.131.32;164pkt 164fpkt", shape=pentagon, color=darkviolet];
14001[label="170.81.131.32;164pkt 164fpkt", shape=invtriangle, color=brown];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.81.131.32:36141, *:*}[99.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36141: (49.6951%)&lt;BR/&gt; 65259: (0.304878%)&lt;BR/&gt; 64274: (0.304878%)&lt;BR/&gt; 63878: (0.304878%)&lt;BR/&gt; 63646: (0.304878%)&gt;];
}
9444--14001[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter src_ip="170.81.131.32" src_port="36141"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
9447[label="16.18.162.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14002[label="16.18.162.32;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.18.162.32:4582, 205.100.250.68:18069}[50%]&lt;BR/&gt;{16.18.162.32:11000, 205.100.250.68:63384}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63384: (25%)&lt;BR/&gt; 18069: (25%)&lt;BR/&gt; 11000: (25%)&lt;BR/&gt; 4582: (25%)&gt;];
}
9447--14002[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="63384" src_ip="16.18.162.32" src_port="11000"/>
      <filter dst_ip="205.100.250.68" dst_port="18069" src_ip="16.18.162.32" src_port="4582"/>
    </slice>
    <from sec="1246943631" usec="0"/>
    <to sec="1246943641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.116.165.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.20.182.32"/>
    </slice>
    <from sec="1246943503" usec="0"/>
    <to sec="1246943576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.23.218.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.100.240.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
9459[label="155.192.39.33;107pkt 107fpkt", shape=pentagon, color=darkviolet];
14009[label="155.192.39.33;107pkt 107fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.39.33:47611, 204.242.199.119:*}[73.8318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47611: (49.5327%)&lt;BR/&gt; 64481: (0.46729%)&lt;BR/&gt; 64295: (0.46729%)&lt;BR/&gt; 64100: (0.46729%)&lt;BR/&gt; 63281: (0.46729%)&gt;];
}
9459--14009[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="204.242.199.119" src_ip="155.192.39.33" src_port="47611"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
9460[label="63.54.52.33;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14010[label="63.54.52.33;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.54.52.33:80, 141.5.89.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3827: (3.57143%)&lt;BR/&gt; 3826: (3.57143%)&lt;BR/&gt; 3825: (3.57143%)&lt;BR/&gt; 3824: (3.57143%)&gt;];
}
9460--14010[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="141.5.89.0" src_ip="63.54.52.33" src_port="80"/>
    </slice>
    <from sec="1246943394" usec="0"/>
    <to sec="1246943413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
9479[label="203.70.211.33;29pkt 29fpkt", shape=pentagon, color=darkviolet];
14016[label="203.70.211.33;29pkt 29fpkt", shape=invtriangle, color=brown];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.70.211.33:21, 172.133.71.4:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 63759: (1.72414%)&lt;BR/&gt; 63757: (1.72414%)&lt;BR/&gt; 63755: (1.72414%)&lt;BR/&gt; 63752: (1.72414%)&gt;];
}
9479--14016[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.71.4" src_ip="203.70.211.33" src_port="21"/>
    </slice>
    <from sec="1246943190" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
9483[label="210.80.241.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14018[label="210.80.241.33;2pkt 2fpkt", shape=invtriangle, color=brown];
16105[label="210.80.241.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.80.241.33:80, 204.91.6.64:43586}[50%]&lt;BR/&gt;{210.80.241.33:80, 204.91.6.64:43587}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43587: (25%)&lt;BR/&gt; 43586: (25%)&gt;];
}
9483--14018[label="1;2pkt 2fpkt"];
9483--16105[label="1;2pkt 2fpkt"];
14018--16105[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.6.64" dst_port="43587" src_ip="210.80.241.33" src_port="80"/>
      <filter dst_ip="204.91.6.64" dst_port="43586" src_ip="210.80.241.33" src_port="80"/>
    </slice>
    <from sec="1246943673" usec="0"/>
    <to sec="1246943675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.16.160.34"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
9525[label="141.161.62.36;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14035[label="141.161.62.36;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.62.36:*, 193.18.31.10:80}[60%]&lt;BR/&gt;{141.161.62.36:*, 193.18.31.184:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34010: (5%)&lt;BR/&gt; 33879: (5%)&lt;BR/&gt; 33010: (5%)&lt;BR/&gt; 32974: (5%)&gt;];
}
9525--14035[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="193.18.31.10" dst_port="80" src_ip="141.161.62.36"/>
      <filter dst_ip="193.18.31.184" dst_port="80" src_ip="141.161.62.36"/>
    </slice>
    <from sec="1246942868" usec="0"/>
    <to sec="1246942985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
9526[label="23.80.63.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14036[label="23.80.63.36;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.80.63.36:80, 169.185.207.23:1232}[50%]&lt;BR/&gt;{23.80.63.36:80, 169.185.207.23:1234}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1234: (25%)&lt;BR/&gt; 1232: (25%)&gt;];
}
9526--14036[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.207.23" dst_port="1234" src_ip="23.80.63.36" src_port="80"/>
      <filter dst_ip="169.185.207.23" dst_port="1232" src_ip="23.80.63.36" src_port="80"/>
    </slice>
    <from sec="1246943156" usec="0"/>
    <to sec="1246943170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
9533[label="219.18.120.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14039[label="219.18.120.36;1pkt 1fpkt", shape=invtriangle, color=brown];
16113[label="219.18.120.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.120.36:80, 169.185.153.218:55974}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55974: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9533--14039[label="1;1pkt 1fpkt"];
9533--16113[label="1;1pkt 1fpkt"];
14039--16113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.153.218" dst_port="55974" src_ip="219.18.120.36" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
9543[label="141.161.37.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14044[label="141.161.37.37;2pkt 2fpkt", shape=invtriangle, color=brown];
16115[label="141.161.37.37;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.37.37:25, 93.26.55.186:4917}[50%]&lt;BR/&gt;{141.161.37.37:25, 93.26.55.186:4924}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4924: (25%)&lt;BR/&gt; 4917: (25%)&gt;];
}
9543--14044[label="1;2pkt 2fpkt"];
9543--16115[label="1;2pkt 2fpkt"];
14044--16115[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="93.26.55.186" dst_port="4924" src_ip="141.161.37.37" src_port="25"/>
      <filter dst_ip="93.26.55.186" dst_port="4917" src_ip="141.161.37.37" src_port="25"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.76.63.39"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.170.73.39"/>
    </slice>
    <from sec="1246943011" usec="0"/>
    <to sec="1246943017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
9601[label="205.97.13.40;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14067[label="205.97.13.40;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.97.13.40:25948, 141.179.243.122:53}[20%]&lt;BR/&gt;{205.97.13.40:13160, 136.90.90.115:80}[20%]&lt;BR/&gt;{205.97.13.40:13164, 136.90.90.115:80}[20%]&lt;BR/&gt;{205.97.13.40:13226, 136.90.90.115:80}[20%]&lt;BR/&gt;{205.97.13.40:13227, 136.90.90.115:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 25948: (10%)&lt;BR/&gt; 13227: (10%)&lt;BR/&gt; 13226: (10%)&lt;BR/&gt; 13164: (10%)&gt;];
}
9601--14067[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.90.115" dst_port="80" src_ip="205.97.13.40" src_port="13227"/>
      <filter dst_ip="136.90.90.115" dst_port="80" src_ip="205.97.13.40" src_port="13226"/>
      <filter dst_ip="136.90.90.115" dst_port="80" src_ip="205.97.13.40" src_port="13164"/>
      <filter dst_ip="136.90.90.115" dst_port="80" src_ip="205.97.13.40" src_port="13160"/>
      <filter dst_ip="141.179.243.122" dst_port="53" src_ip="205.97.13.40" src_port="25948"/>
    </slice>
    <from sec="1246943670" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
9606[label="136.90.45.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14069[label="136.90.45.40;2pkt 2fpkt", shape=invtriangle, color=brown];
16127[label="136.90.45.40;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.45.40:49741, 200.108.217.17:80}[50%]&lt;BR/&gt;{136.90.45.40:49742, 200.108.217.17:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49742: (25%)&lt;BR/&gt; 49741: (25%)&gt;];
}
9606--14069[label="1;2pkt 2fpkt"];
9606--16127[label="1;2pkt 2fpkt"];
14069--16127[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.108.217.17" dst_port="80" src_ip="136.90.45.40" src_port="49742"/>
      <filter dst_ip="200.108.217.17" dst_port="80" src_ip="136.90.45.40" src_port="49741"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
9621[label="203.70.176.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14077[label="203.70.176.40;1pkt 1fpkt", shape=invtriangle, color=brown];
16134[label="203.70.176.40;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.70.176.40:80, 172.133.113.250:65122}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65122: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9621--14077[label="1;1pkt 1fpkt"];
9621--16134[label="1;1pkt 1fpkt"];
14077--16134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.113.250" dst_port="65122" src_ip="203.70.176.40" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.80.231.40"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.114.74.41"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.35.85.41"/>
    </slice>
    <from sec="1246943119" usec="0"/>
    <to sec="1246943575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
9632[label="219.18.120.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14084[label="219.18.120.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.120.41:80, 204.80.42.67:23496}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23496: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9632--14084[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.42.67" dst_port="23496" src_ip="219.18.120.41" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
9659[label="169.185.129.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14092[label="169.185.129.42;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.129.42:51916, 219.167.156.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51916: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9659--14092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.167.156.24" dst_port="80" src_ip="169.185.129.42" src_port="51916"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
9660[label="136.90.140.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14093[label="136.90.140.42;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.140.42:2667, 137.11.78.15:12350}[50%]&lt;BR/&gt;{136.90.140.42:48274, 213.108.78.68:20035}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48274: (25%)&lt;BR/&gt; 20035: (25%)&lt;BR/&gt; 12350: (25%)&lt;BR/&gt; 2667: (25%)&gt;];
}
9660--14093[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.108.78.68" dst_port="20035" src_ip="136.90.140.42" src_port="48274"/>
      <filter dst_ip="137.11.78.15" dst_port="12350" src_ip="136.90.140.42" src_port="2667"/>
    </slice>
    <from sec="1246943249" usec="0"/>
    <to sec="1246943278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.190.140.42"/>
    </slice>
    <from sec="1246943137" usec="0"/>
    <to sec="1246943140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
9687[label="136.90.70.43;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14106[label="136.90.70.43;14pkt 14fpkt", shape=invtriangle, color=brown];
16149[label="136.90.70.43;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.70.43:80, 43.129.109.132:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53836: (3.57143%)&lt;BR/&gt; 53835: (3.57143%)&lt;BR/&gt; 53832: (3.57143%)&lt;BR/&gt; 53830: (3.57143%)&gt;];
}
9687--14106[label="1;14pkt 14fpkt"];
9687--16149[label="1;14pkt 14fpkt"];
14106--16149[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="43.129.109.132" src_ip="136.90.70.43" src_port="80"/>
    </slice>
    <from sec="1246943041" usec="0"/>
    <to sec="1246943357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
9719[label="182.122.136.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14119[label="182.122.136.44;1pkt 1fpkt", shape=invtriangle, color=brown];
16159[label="182.122.136.44;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.122.136.44:2673, 205.100.248.190:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2673: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9719--14119[label="1;1pkt 1fpkt"];
9719--16159[label="1;1pkt 1fpkt"];
14119--16159[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.248.190" dst_port="80" src_ip="182.122.136.44" src_port="2673"/>
    </slice>
    <from sec="1246943006" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
9723[label="55.18.159.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14121[label="55.18.159.44;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.18.159.44:3044, 205.100.251.49:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 3044: (50%)&gt;];
}
9723--14121[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="3128" src_ip="55.18.159.44" src_port="3044"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.32.211.44"/>
    </slice>
    <from sec="1246942865" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
9733[label="204.80.1.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14124[label="204.80.1.45;1pkt 1fpkt", shape=invtriangle, color=brown];
16161[label="204.80.1.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.80.1.45:51899, 214.53.118.242:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51899: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
9733--14124[label="1;1pkt 1fpkt"];
9733--16161[label="1;1pkt 1fpkt"];
14124--16161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.53.118.242" dst_port="53" src_ip="204.80.1.45" src_port="51899"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
9762[label="219.18.120.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14132[label="219.18.120.46;1pkt 1fpkt", shape=invtriangle, color=brown];
16165[label="219.18.120.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.120.46:80, 204.91.174.161:50704}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50704: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9762--14132[label="1;1pkt 1fpkt"];
9762--16165[label="1;1pkt 1fpkt"];
14132--16165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.174.161" dst_port="50704" src_ip="219.18.120.46" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.24.176.46"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
9766[label="137.58.200.46;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14135[label="137.58.200.46;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.58.200.46:80, 42.30.217.119:*}[64.2857%]&lt;BR/&gt;{137.58.200.46:80, 218.170.96.218:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65257: (3.57143%)&lt;BR/&gt; 62943: (3.57143%)&lt;BR/&gt; 61426: (3.57143%)&lt;BR/&gt; 57261: (3.57143%)&gt;];
}
9766--14135[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.217.119" src_ip="137.58.200.46" src_port="80"/>
      <filter dst_ip="218.170.96.218" src_ip="137.58.200.46" src_port="80"/>
    </slice>
    <from sec="1246942917" usec="0"/>
    <to sec="1246943639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.19.129.47"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
9790[label="141.42.51.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14146[label="141.42.51.48;2pkt 2fpkt", shape=invtriangle, color=brown];
16172[label="141.42.51.48;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.42.51.48:1774, 192.61.178.16:25}[50%]&lt;BR/&gt;{141.42.51.48:17812, 209.144.204.162:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 17812: (25%)&lt;BR/&gt; 1774: (25%)&gt;];
}
9790--14146[label="1;2pkt 2fpkt"];
9790--16172[label="1;2pkt 2fpkt"];
14146--16172[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.144.204.162" dst_port="25" src_ip="141.42.51.48" src_port="17812"/>
      <filter dst_ip="192.61.178.16" dst_port="25" src_ip="141.42.51.48" src_port="1774"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.115.2.49"/>
    </slice>
    <from sec="1246943523" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
9812[label="213.149.41.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14159[label="213.149.41.49;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.149.41.49:80, 205.100.250.68:62136}[50%]&lt;BR/&gt;{213.149.41.49:80, 205.100.250.68:62222}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62222: (25%)&lt;BR/&gt; 62136: (25%)&gt;];
}
9812--14159[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="62222" src_ip="213.149.41.49" src_port="80"/>
      <filter dst_ip="205.100.250.68" dst_port="62136" src_ip="213.149.41.49" src_port="80"/>
    </slice>
    <from sec="1246943638" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
9833[label="90.72.96.50;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14169[label="90.72.96.50;3pkt 3fpkt", shape=invtriangle, color=brown];
16181[label="90.72.96.50;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.72.96.50:80, 136.90.83.154:49561}[33.3333%]&lt;BR/&gt;{90.72.96.50:80, 136.90.83.154:49563}[33.3333%]&lt;BR/&gt;{90.72.96.50:80, 136.90.83.154:49564}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49564: (16.6667%)&lt;BR/&gt; 49563: (16.6667%)&lt;BR/&gt; 49561: (16.6667%)&gt;];
}
9833--14169[label="1;3pkt 3fpkt"];
9833--16181[label="1;3pkt 3fpkt"];
14169--16181[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.83.154" dst_port="49564" src_ip="90.72.96.50" src_port="80"/>
      <filter dst_ip="136.90.83.154" dst_port="49563" src_ip="90.72.96.50" src_port="80"/>
      <filter dst_ip="136.90.83.154" dst_port="49561" src_ip="90.72.96.50" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.139.3.51"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
9873[label="136.90.44.52;69pkt 69fpkt", shape=pentagon, color=darkviolet];
14188[label="136.90.44.52;69pkt 69fpkt", shape=invtriangle, color=brown];
16187[label="136.90.44.52;69pkt 69fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.44.52:9186, *:*}[98.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9186: (49.2754%)&lt;BR/&gt; 65330: (0.724638%)&lt;BR/&gt; 62393: (0.724638%)&lt;BR/&gt; 62296: (0.724638%)&lt;BR/&gt; 61485: (0.724638%)&gt;];
}
9873--14188[label="1;69pkt 69fpkt"];
9873--16187[label="1;69pkt 69fpkt"];
14188--16187[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.44.52" src_port="9186"/>
    </slice>
    <from sec="1246942838" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
9884[label="93.48.140.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14192[label="93.48.140.52;2pkt 2fpkt", shape=invtriangle, color=brown];
16190[label="93.48.140.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.48.140.52:2097, 205.100.253.31:21}[50%]&lt;BR/&gt;{93.48.140.52:58910, 205.100.253.31:56737}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58910: (25%)&lt;BR/&gt; 56737: (25%)&lt;BR/&gt; 2097: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
9884--14192[label="1;2pkt 2fpkt"];
9884--16190[label="1;2pkt 2fpkt"];
14192--16190[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.31" dst_port="56737" src_ip="93.48.140.52" src_port="58910"/>
      <filter dst_ip="205.100.253.31" dst_port="21" src_ip="93.48.140.52" src_port="2097"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.40.185.52"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.164.216.52"/>
    </slice>
    <from sec="1246942971" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.220.161.53"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
9913[label="17.121.58.54;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14207[label="17.121.58.54;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.121.58.54:80, 136.90.236.246:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29710: (3.84615%)&lt;BR/&gt; 29709: (3.84615%)&lt;BR/&gt; 29708: (3.84615%)&lt;BR/&gt; 29707: (3.84615%)&gt;];
}
9913--14207[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.236.246" src_ip="17.121.58.54" src_port="80"/>
    </slice>
    <from sec="1246943583" usec="0"/>
    <to sec="1246943671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.33.89.54"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.28.146.54"/>
    </slice>
    <from sec="1246942814" usec="0"/>
    <to sec="1246942944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.174.137.56"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
9972[label="169.185.130.57;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14239[label="169.185.130.57;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.130.57:56813, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56813: (50%)&lt;BR/&gt; 63894: (3.125%)&lt;BR/&gt; 62360: (3.125%)&lt;BR/&gt; 60665: (3.125%)&lt;BR/&gt; 60459: (3.125%)&gt;];
}
9972--14239[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="169.185.130.57" src_port="56813"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
1939[label="169.185.74.111;d;161pkt 161fpkt", shape=diamond, color=yellow];
1942[label="42.30.222.148;s;88pkt 88fpkt", shape=diamond, color=yellow];
3549[label="42.30.217.26;s;43pkt 43fpkt", shape=diamond, color=yellow];
5991[label="218.170.96.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
6292[label="169.185.100.69;d;39pkt 39fpkt", shape=diamond, color=yellow];
6826[label="42.30.222.148;s;60pkt 60fpkt", shape=hexagon, color=black];
11448[label="218.170.96.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11813[label="42.30.222.148;96pkt 96fpkt", shape=pentagon, color=darkviolet];
14938[label="218.170.96.131;2pkt 2fpkt", shape=invtriangle, color=brown];
15111[label="42.30.222.148;96pkt 96fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.30.222.148:*, 169.185.74.111:80}[45.2381%]&lt;BR/&gt;{42.30.217.26:*, *:80}[20.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8115%)&lt;BR/&gt; 12200: (0.509338%)&lt;BR/&gt; 63901: (0.424448%)&lt;BR/&gt; 62688: (0.424448%)&lt;BR/&gt; 61911: (0.424448%)&gt;];
}
1939--1942[label="0.988636;87pkt 87fpkt"];
1939--3123[label="0.00621118;1pkt 1fpkt"];
1939--3549[label="0.953488;41pkt 41fpkt"];
1939--4345[label="0.00621118;1pkt 1fpkt"];
1939--6544[label="0.00621118;1pkt 1fpkt"];
1939--6826[label="0.983333;59pkt 59fpkt"];
1939--7401[label="0.00621118;1pkt 1fpkt"];
1939--8086[label="0.00621118;1pkt 1fpkt"];
1939--8360[label="0.00621118;1pkt 1fpkt"];
1939--8427[label="0.00621118;1pkt 1fpkt"];
1939--8514[label="0.0559006;9pkt 9fpkt"];
1939--8603[label="0.0559006;9pkt 9fpkt"];
1939--8680[label="0.0559006;9pkt 9fpkt"];
1939--9176[label="0.00621118;1pkt 1fpkt"];
1939--10448[label="0.00621118;1pkt 1fpkt"];
1939--11120[label="0.0124224;2pkt 2fpkt"];
1939--11813[label="0.90625;87pkt 87fpkt"];
1939--15111[label="0.90625;87pkt 87fpkt"];
1942--6292[label="0.025641;1pkt 1fpkt"];
1942--6826[label="1;60pkt 60fpkt"];
1942--8514[label="0.0568182;5pkt 5fpkt"];
1942--8603[label="0.0568182;5pkt 5fpkt"];
1942--8680[label="0.0568182;5pkt 5fpkt"];
1942--11813[label="1;88pkt 88fpkt"];
1942--15111[label="1;88pkt 88fpkt"];
3549--8514[label="0.0465116;2pkt 2fpkt"];
3549--8603[label="0.0465116;2pkt 2fpkt"];
3549--8680[label="0.0465116;2pkt 2fpkt"];
5991--6292[label="1;2pkt 2fpkt"];
5991--11448[label="1;2pkt 2fpkt"];
5991--14938[label="1;2pkt 2fpkt"];
6292--6544[label="0.025641;1pkt 1fpkt"];
6292--6826[label="0.025641;1pkt 1fpkt"];
6292--8360[label="0.025641;1pkt 1fpkt"];
6292--8427[label="0.025641;1pkt 1fpkt"];
6292--8514[label="0.0512821;2pkt 2fpkt"];
6292--8603[label="0.0512821;2pkt 2fpkt"];
6292--8680[label="0.0512821;2pkt 2fpkt"];
6292--9868[label="0.0322581;1pkt 1fpkt"];
6292--10448[label="0.025641;1pkt 1fpkt"];
6292--11448[label="1;2pkt 2fpkt"];
6292--11813[label="0.025641;1pkt 1fpkt"];
6292--14938[label="1;2pkt 2fpkt"];
6292--15111[label="0.025641;1pkt 1fpkt"];
6826--8514[label="0.0333333;2pkt 2fpkt"];
6826--8603[label="0.0333333;2pkt 2fpkt"];
6826--8680[label="0.0333333;2pkt 2fpkt"];
6826--11813[label="1;60pkt 60fpkt"];
6826--15111[label="1;60pkt 60fpkt"];
11448--14938[label="1;2pkt 2fpkt"];
11813--15111[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="42.30.217.26"/>
      <filter dst_ip="169.185.74.111" dst_port="80" src_ip="42.30.222.148"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.0.182.57"/>
    </slice>
    <from sec="1246943538" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
9984[label="209.34.17.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14246[label="209.34.17.58;1pkt 1fpkt", shape=invtriangle, color=brown];
16206[label="209.34.17.58;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.34.17.58:38271, 205.100.240.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9984--14246[label="1;1pkt 1fpkt"];
9984--16206[label="1;1pkt 1fpkt"];
14246--16206[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.132" dst_port="80" src_ip="209.34.17.58" src_port="38271"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.42.51.58"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.42.88.61"/>
    </slice>
    <from sec="1246942933" usec="0"/>
    <to sec="1246943472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
10090[label="17.56.176.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14292[label="17.56.176.62;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.56.176.62:7596, 205.100.253.30:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7596: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10090--14292[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.30" dst_port="80" src_ip="17.56.176.62" src_port="7596"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
10095[label="92.103.228.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14295[label="92.103.228.62;5pkt 5fpkt", shape=invtriangle, color=brown];
16227[label="92.103.228.62;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.103.228.62:1084, 141.179.243.125:25}[20%]&lt;BR/&gt;{92.103.228.62:1174, 141.179.243.125:25}[20%]&lt;BR/&gt;{92.103.228.62:1177, 141.179.243.125:25}[20%]&lt;BR/&gt;{92.103.228.62:1206, 141.179.243.125:25}[20%]&lt;BR/&gt;{92.103.228.62:1216, 141.179.243.125:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1216: (10%)&lt;BR/&gt; 1206: (10%)&lt;BR/&gt; 1177: (10%)&lt;BR/&gt; 1174: (10%)&gt;];
}
10095--14295[label="1;5pkt 5fpkt"];
10095--16227[label="1;5pkt 5fpkt"];
14295--16227[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.243.125" dst_port="25" src_ip="92.103.228.62" src_port="1216"/>
      <filter dst_ip="141.179.243.125" dst_port="25" src_ip="92.103.228.62" src_port="1206"/>
      <filter dst_ip="141.179.243.125" dst_port="25" src_ip="92.103.228.62" src_port="1177"/>
      <filter dst_ip="141.179.243.125" dst_port="25" src_ip="92.103.228.62" src_port="1174"/>
      <filter dst_ip="141.179.243.125" dst_port="25" src_ip="92.103.228.62" src_port="1084"/>
    </slice>
    <from sec="1246943690" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.106.14.64"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
10117[label="136.90.112.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14300[label="136.90.112.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.112.64:4982, 90.73.214.211:80}[50%]&lt;BR/&gt;{136.90.112.64:4984, 90.73.214.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4984: (25%)&lt;BR/&gt; 4982: (25%)&gt;];
}
10117--14300[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="90.73.214.211" dst_port="80" src_ip="136.90.112.64" src_port="4984"/>
      <filter dst_ip="90.73.214.211" dst_port="80" src_ip="136.90.112.64" src_port="4982"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
10125[label="136.90.166.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14303[label="136.90.166.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.166.64:25, 56.152.129.37:12689}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12689: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10125--14303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="56.152.129.37" dst_port="12689" src_ip="136.90.166.64" src_port="25"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
10128[label="169.185.200.64;49pkt 49fpkt", shape=pentagon, color=darkviolet];
14305[label="169.185.200.64;49pkt 49fpkt", shape=invtriangle, color=brown];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.200.64:*, 155.2.28.81:80}[24.4898%]&lt;BR/&gt;{169.185.200.64:*, 155.2.4.191:80}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61035: (1.02041%)&lt;BR/&gt; 61034: (1.02041%)&lt;BR/&gt; 61031: (1.02041%)&lt;BR/&gt; 61030: (1.02041%)&gt;];
}
10128--14305[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="155.2.4.191" dst_port="80" src_ip="169.185.200.64"/>
      <filter dst_ip="155.2.28.81" dst_port="80" src_ip="169.185.200.64"/>
    </slice>
    <from sec="1246942931" usec="0"/>
    <to sec="1246943671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.132.213.64"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
10136[label="42.226.36.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14310[label="42.226.36.65;1pkt 1fpkt", shape=invtriangle, color=brown];
16232[label="42.226.36.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.226.36.65:80, 136.90.66.101:51929}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51929: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10136--14310[label="1;1pkt 1fpkt"];
10136--16232[label="1;1pkt 1fpkt"];
14310--16232[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.66.101" dst_port="51929" src_ip="42.226.36.65" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
10137[label="136.90.64.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14311[label="136.90.64.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.64.65:80, 75.160.163.5:53734}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53734: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10137--14311[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.160.163.5" dst_port="53734" src_ip="136.90.64.65" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
10158[label="44.193.44.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14322[label="44.193.44.66;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.193.44.66:80, 172.133.113.251:61053}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61053: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10158--14322[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.113.251" dst_port="61053" src_ip="44.193.44.66" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.201.58.66"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.42.0.67"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
10191[label="214.167.210.67;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14339[label="214.167.210.67;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.167.210.67:80, 136.90.66.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3243: (8.33333%)&lt;BR/&gt; 3242: (8.33333%)&lt;BR/&gt; 3241: (8.33333%)&lt;BR/&gt; 3225: (8.33333%)&gt;];
}
10191--14339[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.66.98" src_ip="214.167.210.67" src_port="80"/>
    </slice>
    <from sec="1246943578" usec="0"/>
    <to sec="1246943595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
10197[label="136.90.15.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14341[label="136.90.15.68;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.15.68:49694, 42.3.244.7:80}[50%]&lt;BR/&gt;{136.90.15.68:56761, 172.23.17.94:515}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56761: (25%)&lt;BR/&gt; 49694: (25%)&lt;BR/&gt; 515: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
10197--14341[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.23.17.94" dst_port="515" src_ip="136.90.15.68" src_port="56761"/>
      <filter dst_ip="42.3.244.7" dst_port="80" src_ip="136.90.15.68" src_port="49694"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.114.36.68"/>
    </slice>
    <from sec="1246943112" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
10208[label="136.90.112.68;28pkt 28fpkt", shape=pentagon, color=darkviolet];
14346[label="136.90.112.68;28pkt 28fpkt", shape=invtriangle, color=brown];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.112.68:*, 37.138.215.53:80}[60.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1568: (1.78571%)&lt;BR/&gt; 1564: (1.78571%)&lt;BR/&gt; 1562: (1.78571%)&lt;BR/&gt; 1560: (1.78571%)&gt;];
}
10208--14346[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="37.138.215.53" dst_port="80" src_ip="136.90.112.68"/>
    </slice>
    <from sec="1246943642" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.128.202.68"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246942861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.64.242.68"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
10232[label="136.90.105.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14360[label="136.90.105.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.105.69:1870, 47.10.16.159:80}[50%]&lt;BR/&gt;{136.90.105.69:1862, 47.10.17.198:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1870: (25%)&lt;BR/&gt; 1862: (25%)&gt;];
}
10232--14360[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="47.10.17.198" dst_port="80" src_ip="136.90.105.69" src_port="1862"/>
      <filter dst_ip="47.10.16.159" dst_port="80" src_ip="136.90.105.69" src_port="1870"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.38.16.70"/>
    </slice>
    <from sec="1246943000" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.222.13.71"/>
    </slice>
    <from sec="1246943270" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.27.77.71"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
10289[label="75.151.158.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14386[label="75.151.158.71;2pkt 2fpkt", shape=invtriangle, color=brown];
16259[label="75.151.158.71;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.151.158.71:64357, 205.100.251.49:3128}[50%]&lt;BR/&gt;{75.151.158.71:64358, 205.100.251.49:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 64358: (25%)&lt;BR/&gt; 64357: (25%)&gt;];
}
10289--14386[label="1;2pkt 2fpkt"];
10289--16259[label="1;2pkt 2fpkt"];
14386--16259[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="3128" src_ip="75.151.158.71" src_port="64358"/>
      <filter dst_ip="205.100.251.49" dst_port="3128" src_ip="75.151.158.71" src_port="64357"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
10303[label="136.90.67.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14392[label="136.90.67.72;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.67.72:1116, 200.108.220.199:80}[50%]&lt;BR/&gt;{136.90.67.72:1117, 200.108.220.199:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1117: (25%)&lt;BR/&gt; 1116: (25%)&gt;];
}
10303--14392[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.108.220.199" dst_port="80" src_ip="136.90.67.72" src_port="1117"/>
      <filter dst_ip="200.108.220.199" dst_port="80" src_ip="136.90.67.72" src_port="1116"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
10327[label="17.121.22.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14400[label="17.121.22.73;2pkt 2fpkt", shape=invtriangle, color=brown];
16265[label="17.121.22.73;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.121.22.73:80, 136.90.67.202:4189}[50%]&lt;BR/&gt;{17.121.22.73:80, 136.90.67.202:4190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4190: (25%)&lt;BR/&gt; 4189: (25%)&gt;];
}
10327--14400[label="1;2pkt 2fpkt"];
10327--16265[label="1;2pkt 2fpkt"];
14400--16265[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.67.202" dst_port="4190" src_ip="17.121.22.73" src_port="80"/>
      <filter dst_ip="136.90.67.202" dst_port="4189" src_ip="17.121.22.73" src_port="80"/>
    </slice>
    <from sec="1246942973" usec="0"/>
    <to sec="1246942991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.47.43.73"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.83.15.74"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
10347[label="217.198.21.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14413[label="217.198.21.74;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.198.21.74:2578, 205.100.248.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2578: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10347--14413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.248.139" dst_port="80" src_ip="217.198.21.74" src_port="2578"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.58.1.75"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
10373[label="169.185.144.75;23pkt 23fpkt", shape=pentagon, color=darkviolet];
14426[label="169.185.144.75;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.144.75:*, 218.170.232.245:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2423: (2.17391%)&lt;BR/&gt; 2422: (2.17391%)&lt;BR/&gt; 2421: (2.17391%)&lt;BR/&gt; 2420: (2.17391%)&gt;];
}
10373--14426[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="218.170.232.245" dst_port="80" src_ip="169.185.144.75"/>
    </slice>
    <from sec="1246942914" usec="0"/>
    <to sec="1246942995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
5984[label="92.86.93.175;s;39pkt 39fpkt", shape=diamond, color=yellow];
6358[label="204.91.172.28;d;66pkt 66fpkt", shape=diamond, color=yellow];
10375[label="93.128.170.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12329[label="92.86.93.175;39pkt 39fpkt", shape=pentagon, color=darkviolet];
14427[label="93.128.170.75;2pkt 2fpkt", shape=invtriangle, color=brown];
16272[label="93.128.170.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.86.93.175:80, 204.91.172.28:*}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1087: (1.33333%)&lt;BR/&gt; 1085: (1.33333%)&lt;BR/&gt; 4999: (1%)&lt;BR/&gt; 4997: (1%)&gt;];
}
5984--6358[label="1;39pkt 39fpkt"];
5984--12329[label="1;39pkt 39fpkt"];
6358--8093[label="0.263158;5pkt 5fpkt"];
6358--10175[label="0.166667;5pkt 5fpkt"];
6358--10375[label="1;2pkt 2fpkt"];
6358--12329[label="1;39pkt 39fpkt"];
6358--14331[label="0.166667;5pkt 5fpkt"];
6358--14427[label="1;2pkt 2fpkt"];
6358--16237[label="0.166667;5pkt 5fpkt"];
6358--16272[label="1;2pkt 2fpkt"];
10375--14427[label="1;2pkt 2fpkt"];
10375--16272[label="1;2pkt 2fpkt"];
14427--16272[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.172.28" src_ip="92.86.93.175" src_port="80"/>
    </slice>
    <from sec="1246943057" usec="0"/>
    <to sec="1246943621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
10381[label="212.24.203.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14429[label="212.24.203.75;2pkt 2fpkt", shape=invtriangle, color=brown];
16274[label="212.24.203.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.203.75:57817, 205.100.253.30:80}[50%]&lt;BR/&gt;{212.24.203.75:58191, 205.100.253.31:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58191: (25%)&lt;BR/&gt; 57817: (25%)&gt;];
}
10381--14429[label="1;2pkt 2fpkt"];
10381--16274[label="1;2pkt 2fpkt"];
14429--16274[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.31" dst_port="80" src_ip="212.24.203.75" src_port="58191"/>
      <filter dst_ip="205.100.253.30" dst_port="80" src_ip="212.24.203.75" src_port="57817"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
10396[label="71.37.106.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14435[label="71.37.106.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.37.106.76:80, 141.179.8.122:4092}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4092: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10396--14435[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.8.122" dst_port="4092" src_ip="71.37.106.76" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1109{
style=filled;
color=gray75;
10420[label="211.190.135.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14441[label="211.190.135.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1109[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.190.135.77:62821, 205.100.251.49:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62821: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
10420--14441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="3127" src_ip="211.190.135.77" src_port="62821"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
10425[label="212.1.192.77;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14443[label="212.1.192.77;13pkt 13fpkt", shape=invtriangle, color=brown];
16282[label="212.1.192.77;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.1.192.77:*, 205.100.253.30:80}[61.5385%]&lt;BR/&gt;{212.1.192.77:*, 205.100.253.31:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3160: (3.84615%)&lt;BR/&gt; 3152: (3.84615%)&lt;BR/&gt; 2943: (3.84615%)&lt;BR/&gt; 2941: (3.84615%)&gt;];
}
10425--14443[label="1;13pkt 13fpkt"];
10425--16282[label="1;13pkt 13fpkt"];
14443--16282[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.30" dst_port="80" src_ip="212.1.192.77"/>
      <filter dst_ip="205.100.253.31" dst_port="80" src_ip="212.1.192.77"/>
    </slice>
    <from sec="1246943630" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.140.226.78"/>
    </slice>
    <from sec="1246943101" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.153.33.79"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.109.164.79"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246942964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.144.96.80"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.10.182.80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
10491[label="213.149.16.81;38pkt 38fpkt", shape=pentagon, color=darkviolet];
14475[label="213.149.16.81;38pkt 38fpkt", shape=invtriangle, color=brown];
16294[label="213.149.16.81;38pkt 38fpkt", shape=invhouse, color=bisque];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.149.16.81:80, 136.90.66.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3531: (1.31579%)&lt;BR/&gt; 3526: (1.31579%)&lt;BR/&gt; 3524: (1.31579%)&lt;BR/&gt; 3513: (1.31579%)&gt;];
}
10491--14475[label="1;38pkt 38fpkt"];
10491--16294[label="1;38pkt 38fpkt"];
14475--16294[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.66.98" src_ip="213.149.16.81" src_port="80"/>
    </slice>
    <from sec="1246943624" usec="0"/>
    <to sec="1246943651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
10494[label="205.151.61.81;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14477[label="205.151.61.81;7pkt 7fpkt", shape=invtriangle, color=brown];
16295[label="205.151.61.81;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.151.61.81:80, 136.90.146.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3659: (7.14286%)&lt;BR/&gt; 3257: (7.14286%)&lt;BR/&gt; 2892: (7.14286%)&lt;BR/&gt; 2388: (7.14286%)&gt;];
}
10494--14477[label="1;7pkt 7fpkt"];
10494--16295[label="1;7pkt 7fpkt"];
14477--16295[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.146.43" src_ip="205.151.61.81" src_port="80"/>
    </slice>
    <from sec="1246943423" usec="0"/>
    <to sec="1246943444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
10499[label="46.168.107.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14480[label="46.168.107.81;2pkt 2fpkt", shape=invtriangle, color=brown];
16296[label="46.168.107.81;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.168.107.81:80, 204.80.30.250:61024}[50%]&lt;BR/&gt;{46.168.107.81:80, 204.80.30.250:61025}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61025: (25%)&lt;BR/&gt; 61024: (25%)&gt;];
}
10499--14480[label="1;2pkt 2fpkt"];
10499--16296[label="1;2pkt 2fpkt"];
14480--16296[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" dst_port="61025" src_ip="46.168.107.81" src_port="80"/>
      <filter dst_ip="204.80.30.250" dst_port="61024" src_ip="46.168.107.81" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
10513[label="63.203.66.82;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14488[label="63.203.66.82;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.203.66.82:80, 169.185.128.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2193: (5.55556%)&lt;BR/&gt; 2191: (5.55556%)&lt;BR/&gt; 2189: (5.55556%)&lt;BR/&gt; 2188: (5.55556%)&gt;];
}
10513--14488[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.128.177" src_ip="63.203.66.82" src_port="80"/>
    </slice>
    <from sec="1246943027" usec="0"/>
    <to sec="1246943172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.209.90.82"/>
    </slice>
    <from sec="1246943574" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
10529[label="90.48.223.82;15pkt 15fpkt", shape=pentagon, color=darkviolet];
14496[label="90.48.223.82;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.48.223.82:80, 169.185.200.128:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63389: (3.33333%)&lt;BR/&gt; 33707: (3.33333%)&lt;BR/&gt; 33661: (3.33333%)&lt;BR/&gt; 33602: (3.33333%)&gt;];
}
10529--14496[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.200.128" src_ip="90.48.223.82" src_port="80"/>
    </slice>
    <from sec="1246942991" usec="0"/>
    <to sec="1246943673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.28.187.83"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.177.30.84"/>
    </slice>
    <from sec="1246942945" usec="0"/>
    <to sec="1246942953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.85.178.84"/>
    </slice>
    <from sec="1246943099" usec="0"/>
    <to sec="1246943126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
10579[label="21.69.195.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14526[label="21.69.195.84;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.69.195.84:7100, 170.81.20.69:2580}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7100: (50%)&lt;BR/&gt; 2580: (50%)&gt;];
}
10579--14526[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.20.69" dst_port="2580" src_ip="21.69.195.84" src_port="7100"/>
    </slice>
    <from sec="1246942962" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1127{
style=filled;
color=gray75;
10582[label="141.179.213.84;51pkt 51fpkt", shape=pentagon, color=darkviolet];
14528[label="141.179.213.84;51pkt 51fpkt", shape=invtriangle, color=brown];
stat1127[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.213.84:20429, *:*}[90.1961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20429: (45.098%)&lt;BR/&gt; 49887: (1.96078%)&lt;BR/&gt; 41864: (1.96078%)&lt;BR/&gt; 80: (1.96078%)&lt;BR/&gt; 62211: (0.980392%)&gt;];
}
10582--14528[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.213.84" src_port="20429"/>
    </slice>
    <from sec="1246942854" usec="0"/>
    <to sec="1246943485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.100.240.84"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.90.26.85"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.199.120.85"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
10609[label="22.111.70.86;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14543[label="22.111.70.86;6pkt 6fpkt", shape=invtriangle, color=brown];
16320[label="22.111.70.86;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.111.70.86:*, 205.100.251.49:3124}[33.3333%]&lt;BR/&gt;{22.111.70.86:*, 205.100.251.49:3127}[33.3333%]&lt;BR/&gt;{22.111.70.86:*, *:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.6667%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 3124: (16.6667%)&lt;BR/&gt; 50169: (8.33333%)&lt;BR/&gt; 50060: (8.33333%)&gt;];
}
10609--14543[label="1;6pkt 6fpkt"];
10609--16320[label="1;6pkt 6fpkt"];
14543--16320[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="22.111.70.86"/>
      <filter dst_ip="205.100.251.49" dst_port="3127" src_ip="22.111.70.86"/>
      <filter dst_ip="205.100.251.49" dst_port="3124" src_ip="22.111.70.86"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1132{
style=filled;
color=gray75;
10619[label="136.90.70.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14548[label="136.90.70.87;1pkt 1fpkt", shape=invtriangle, color=brown];
16324[label="136.90.70.87;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1132[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.70.87:80, 42.30.220.171:39858}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39858: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10619--14548[label="1;1pkt 1fpkt"];
10619--16324[label="1;1pkt 1fpkt"];
14548--16324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.220.171" dst_port="39858" src_ip="136.90.70.87" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.42.158.87"/>
    </slice>
    <from sec="1246942994" usec="0"/>
    <to sec="1246943190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.90.189.87"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
10633[label="90.214.3.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14557[label="90.214.3.88;1pkt 1fpkt", shape=invtriangle, color=brown];
16329[label="90.214.3.88;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.214.3.88:4837, 205.100.251.49:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4837: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10633--14557[label="1;1pkt 1fpkt"];
10633--16329[label="1;1pkt 1fpkt"];
14557--16329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="80" src_ip="90.214.3.88" src_port="4837"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
10648[label="136.90.147.88;147pkt 147fpkt", shape=pentagon, color=darkviolet];
14561[label="136.90.147.88;147pkt 147fpkt", shape=invtriangle, color=brown];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.147.88:33661, *:53}[56.4626%]&lt;BR/&gt;{136.90.147.88:53, *:*}[25.8503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.4966%)&lt;BR/&gt; 33661: (28.2313%)&lt;BR/&gt; 25: (7.82313%)&lt;BR/&gt; 0: (0.680272%)&lt;BR/&gt; 64254: (0.340136%)&gt;];
}
10648--14561[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.147.88" src_port="53"/>
      <filter dst_port="53" src_ip="136.90.147.88" src_port="33661"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
10685[label="71.35.40.90;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14574[label="71.35.40.90;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.35.40.90:*, 136.90.0.144:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60813: (5.55556%)&lt;BR/&gt; 54037: (5.55556%)&lt;BR/&gt; 53229: (5.55556%)&lt;BR/&gt; 53193: (5.55556%)&gt;];
}
10685--14574[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.0.144" dst_port="80" src_ip="71.35.40.90"/>
    </slice>
    <from sec="1246943415" usec="0"/>
    <to sec="1246943468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
10691[label="25.26.102.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14578[label="25.26.102.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.26.102.90:35953, 205.100.251.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35953: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10691--14578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.56" dst_port="80" src_ip="25.26.102.90" src_port="35953"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.23.227.90"/>
    </slice>
    <from sec="1246943504" usec="0"/>
    <to sec="1246943637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
10718[label="43.119.20.92;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14593[label="43.119.20.92;5pkt 5fpkt", shape=invtriangle, color=brown];
16344[label="43.119.20.92;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.119.20.92:53, 204.80.30.230:56616}[20%]&lt;BR/&gt;{43.119.20.92:80, 204.80.31.60:44484}[20%]&lt;BR/&gt;{43.119.20.92:80, 204.80.31.60:52248}[20%]&lt;BR/&gt;{43.119.20.92:53, 204.80.31.74:50632}[20%]&lt;BR/&gt;{43.119.20.92:53, 204.80.31.74:57686}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 57686: (10%)&lt;BR/&gt; 56616: (10%)&lt;BR/&gt; 52248: (10%)&gt;];
}
10718--14593[label="1;5pkt 5fpkt"];
10718--16344[label="1;5pkt 5fpkt"];
14593--16344[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.31.74" dst_port="57686" src_ip="43.119.20.92" src_port="53"/>
      <filter dst_ip="204.80.31.74" dst_port="50632" src_ip="43.119.20.92" src_port="53"/>
      <filter dst_ip="204.80.31.60" dst_port="52248" src_ip="43.119.20.92" src_port="80"/>
      <filter dst_ip="204.80.31.60" dst_port="44484" src_ip="43.119.20.92" src_port="80"/>
      <filter dst_ip="204.80.30.230" dst_port="56616" src_ip="43.119.20.92" src_port="53"/>
    </slice>
    <from sec="1246943680" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.204.112.92"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.129.31.95"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
10779[label="205.130.180.95;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14618[label="205.130.180.95;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.130.180.95:54518, 205.100.240.132:80}[50%]&lt;BR/&gt;{205.130.180.95:54521, 205.100.240.132:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54521: (25%)&lt;BR/&gt; 54518: (25%)&gt;];
}
10779--14618[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.240.132" dst_port="80" src_ip="205.130.180.95" src_port="54521"/>
      <filter dst_ip="205.100.240.132" dst_port="80" src_ip="205.130.180.95" src_port="54518"/>
    </slice>
    <from sec="1246943637" usec="0"/>
    <to sec="1246943649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
10783[label="169.185.9.96;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14621[label="169.185.9.96;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.9.96:*, 193.152.5.118:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4592: (6.25%)&lt;BR/&gt; 4591: (6.25%)&lt;BR/&gt; 4590: (6.25%)&lt;BR/&gt; 4589: (6.25%)&gt;];
}
10783--14621[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="193.152.5.118" dst_port="80" src_ip="169.185.9.96"/>
    </slice>
    <from sec="1246943648" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.35.36.96"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.149.67.97"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.100.244.97"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.13.249.97"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.44.132.98"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.33.143.99"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
10901[label="136.90.66.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14671[label="136.90.66.101;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.66.101:51929, 42.226.36.65:80}[50%]&lt;BR/&gt;{136.90.66.101:2068, 42.3.248.106:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51929: (25%)&lt;BR/&gt; 2068: (25%)&gt;];
}
10901--14671[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.3.248.106" dst_port="80" src_ip="136.90.66.101" src_port="2068"/>
      <filter dst_ip="42.226.36.65" dst_port="80" src_ip="136.90.66.101" src_port="51929"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.82.4.104"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.134.4.104"/>
    </slice>
    <from sec="1246943004" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
10951[label="90.128.21.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14694[label="90.128.21.104;2pkt 2fpkt", shape=invtriangle, color=brown];
16382[label="90.128.21.104;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.128.21.104:1859, 170.81.191.26:1434}[50%]&lt;BR/&gt;{90.128.21.104:1859, 193.33.238.162:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1859: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
10951--14694[label="1;2pkt 2fpkt"];
10951--16382[label="1;2pkt 2fpkt"];
14694--16382[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.33.238.162" dst_port="1434" src_ip="90.128.21.104" src_port="1859"/>
      <filter dst_ip="170.81.191.26" dst_port="1434" src_ip="90.128.21.104" src_port="1859"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.5.100.104"/>
    </slice>
    <from sec="1246942964" usec="0"/>
    <to sec="1246943207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.156.155.104"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
10968[label="195.98.0.105;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14702[label="195.98.0.105;5pkt 5fpkt", shape=invtriangle, color=brown];
16386[label="195.98.0.105;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.98.0.105:80, 136.90.133.156:16178}[20%]&lt;BR/&gt;{195.98.0.105:80, 136.90.133.156:16179}[20%]&lt;BR/&gt;{195.98.0.105:80, 136.90.133.156:16180}[20%]&lt;BR/&gt;{195.98.0.105:80, 136.90.133.156:16185}[20%]&lt;BR/&gt;{195.98.0.105:80, 136.90.133.156:16190}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16190: (10%)&lt;BR/&gt; 16185: (10%)&lt;BR/&gt; 16180: (10%)&lt;BR/&gt; 16179: (10%)&gt;];
}
10968--14702[label="1;5pkt 5fpkt"];
10968--16386[label="1;5pkt 5fpkt"];
14702--16386[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.133.156" dst_port="16190" src_ip="195.98.0.105" src_port="80"/>
      <filter dst_ip="136.90.133.156" dst_port="16185" src_ip="195.98.0.105" src_port="80"/>
      <filter dst_ip="136.90.133.156" dst_port="16180" src_ip="195.98.0.105" src_port="80"/>
      <filter dst_ip="136.90.133.156" dst_port="16179" src_ip="195.98.0.105" src_port="80"/>
      <filter dst_ip="136.90.133.156" dst_port="16178" src_ip="195.98.0.105" src_port="80"/>
    </slice>
    <from sec="1246943667" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.136.204.105"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1160{
style=filled;
color=gray75;
10981[label="141.179.211.105;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14710[label="141.179.211.105;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1160[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.211.105:*, 47.164.147.9:80}[59.0909%]&lt;BR/&gt;{141.179.211.105:*, *:2869}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0909%)&lt;BR/&gt; 2869: (11.3636%)&lt;BR/&gt; 30000: (4.54545%)&lt;BR/&gt; 4094: (2.27273%)&lt;BR/&gt; 4058: (2.27273%)&gt;];
}
10981--14710[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="2869" src_ip="141.179.211.105"/>
      <filter dst_ip="47.164.147.9" dst_port="80" src_ip="141.179.211.105"/>
    </slice>
    <from sec="1246942845" usec="0"/>
    <to sec="1246943503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.22.222.105"/>
    </slice>
    <from sec="1246942817" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.96.131.106"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.22.6.107"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
11015[label="44.188.37.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14726[label="44.188.37.107;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.188.37.107:60817, 205.100.251.57:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60817: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
11015--14726[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.57" dst_port="3127" src_ip="44.188.37.107" src_port="60817"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
11017[label="23.151.46.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14728[label="23.151.46.107;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.151.46.107:46997, 205.100.253.30:80}[50%]&lt;BR/&gt;{23.151.46.107:46922, 205.100.253.31:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46997: (25%)&lt;BR/&gt; 46922: (25%)&gt;];
}
11017--14728[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.31" dst_port="80" src_ip="23.151.46.107" src_port="46922"/>
      <filter dst_ip="205.100.253.30" dst_port="80" src_ip="23.151.46.107" src_port="46997"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
11031[label="27.83.33.108;24pkt 24fpkt", shape=pentagon, color=darkviolet];
14735[label="27.83.33.108;24pkt 24fpkt", shape=invtriangle, color=brown];
16399[label="27.83.33.108;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.83.33.108:*, 169.185.74.26:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3285: (2.08333%)&lt;BR/&gt; 3283: (2.08333%)&lt;BR/&gt; 3281: (2.08333%)&lt;BR/&gt; 3279: (2.08333%)&gt;];
}
11031--14735[label="1;24pkt 24fpkt"];
11031--16399[label="1;24pkt 24fpkt"];
14735--16399[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.26" dst_port="80" src_ip="27.83.33.108"/>
    </slice>
    <from sec="1246943661" usec="0"/>
    <to sec="1246943668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.133.90.108"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.68.197.109"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.21.60.110"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.154.73.110"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1171{
style=filled;
color=gray75;
11103[label="208.214.64.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14764[label="208.214.64.111;1pkt 1fpkt", shape=invtriangle, color=brown];
16413[label="208.214.64.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1171[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.214.64.111:2978, 205.100.250.68:19525}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19525: (50%)&lt;BR/&gt; 2978: (50%)&gt;];
}
11103--14764[label="1;1pkt 1fpkt"];
11103--16413[label="1;1pkt 1fpkt"];
14764--16413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="19525" src_ip="208.214.64.111" src_port="2978"/>
    </slice>
    <from sec="1246943464" usec="0"/>
    <to sec="1246943664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.177.165.111"/>
    </slice>
    <from sec="1246943084" usec="0"/>
    <to sec="1246943112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
11142[label="209.45.107.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14783[label="209.45.107.113;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.45.107.113:30842, 205.100.248.190:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30842: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11142--14783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.248.190" dst_port="80" src_ip="209.45.107.113" src_port="30842"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1174{
style=filled;
color=gray75;
11152[label="29.41.65.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14789[label="29.41.65.114;1pkt 1fpkt", shape=invtriangle, color=brown];
16423[label="29.41.65.114;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1174[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.41.65.114:18241, 205.100.250.68:63062}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63062: (50%)&lt;BR/&gt; 18241: (50%)&gt;];
}
11152--14789[label="1;1pkt 1fpkt"];
11152--16423[label="1;1pkt 1fpkt"];
14789--16423[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="63062" src_ip="29.41.65.114" src_port="18241"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.230.116.114"/>
    </slice>
    <from sec="1246943616" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.50.218.114"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
11178[label="57.18.194.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14802[label="57.18.194.115;1pkt 1fpkt", shape=invtriangle, color=brown];
16428[label="57.18.194.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.18.194.115:3227, 205.100.251.49:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3227: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
11178--14802[label="1;1pkt 1fpkt"];
11178--16428[label="1;1pkt 1fpkt"];
14802--16428[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="3128" src_ip="57.18.194.115" src_port="3227"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
11194[label="200.108.217.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14810[label="200.108.217.116;1pkt 1fpkt", shape=invtriangle, color=brown];
16434[label="200.108.217.116;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.108.217.116:80, 204.91.5.141:57751}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57751: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11194--14810[label="1;1pkt 1fpkt"];
11194--16434[label="1;1pkt 1fpkt"];
14810--16434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.5.141" dst_port="57751" src_ip="200.108.217.116" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.37.91.118"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1180{
style=filled;
color=gray75;
3393[label="204.80.31.85;d;166pkt 166fpkt", shape=diamond, color=yellow];
4080[label="136.90.144.144;d;170pkt 170fpkt", shape=diamond, color=yellow];
5716[label="205.100.243.120;d;176pkt 176fpkt", shape=diamond, color=yellow];
7805[label="136.90.144.144;d;151pkt 151fpkt", shape=hexagon, color=black];
8202[label="205.100.243.120;d;176pkt 176fpkt", shape=hexagon, color=black];
8846[label="219.58.199.5;45pkt 45fpkt", shape=pentagon, color=darkviolet];
11214[label="219.58.198.118;31pkt 31fpkt", shape=pentagon, color=darkviolet];
13731[label="219.58.199.5;46pkt 46fpkt", shape=invtriangle, color=brown];
14820[label="219.58.198.118;31pkt 31fpkt", shape=invtriangle, color=brown];
15980[label="219.58.199.5;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1180[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2703, *:*}[34.7328%]&lt;BR/&gt;{*:*, 136.90.144.144:*}[32.4427%]&lt;BR/&gt;{*:*, 204.80.31.85:*}[32.0611%]&lt;BR/&gt;{*:*, *:25}[25.7634%]&lt;BR/&gt;{*:*, 205.100.243.120:53}[23.2824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (22.0829%)&lt;BR/&gt; 53: (17.7435%)&lt;BR/&gt; 25: (9.45034%)&lt;BR/&gt; 63393: (5.1109%)&lt;BR/&gt; 0: (1.54291%)&gt;];
}
3393--8449[label="0.0060241;1pkt 1fpkt"];
3393--8491[label="0.0301205;5pkt 5fpkt"];
3393--8539[label="0.0060241;1pkt 1fpkt"];
3393--8581[label="0.0301205;5pkt 5fpkt"];
3393--8624[label="0.0060241;1pkt 1fpkt"];
3393--8846[label="0.222222;10pkt 10fpkt"];
3393--11214[label="0.580645;18pkt 18fpkt"];
3393--13731[label="0.217391;10pkt 10fpkt"];
3393--14820[label="0.580645;18pkt 18fpkt"];
3393--15980[label="0.222222;10pkt 10fpkt"];
4080--4470[label="0.00588235;1pkt 1fpkt"];
4080--4477[label="0.00588235;1pkt 1fpkt"];
4080--5558[label="0.00588235;1pkt 1fpkt"];
4080--7702[label="0.00588235;1pkt 1fpkt"];
4080--7805[label="1;151pkt 151fpkt"];
4080--8450[label="0.0411765;7pkt 7fpkt"];
4080--8459[label="0.0235294;4pkt 4fpkt"];
4080--8491[label="0.0176471;3pkt 3fpkt"];
4080--8540[label="0.0411765;7pkt 7fpkt"];
4080--8549[label="0.0235294;4pkt 4fpkt"];
4080--8581[label="0.0176471;3pkt 3fpkt"];
4080--8625[label="0.0411765;7pkt 7fpkt"];
4080--8634[label="0.0235294;4pkt 4fpkt"];
4080--8776[label="0.00588235;1pkt 1fpkt"];
4080--8819[label="0.00793651;1pkt 1fpkt"];
4080--8846[label="0.6;27pkt 27fpkt"];
4080--9783[label="0.00588235;1pkt 1fpkt"];
4080--9846[label="0.00588235;1pkt 1fpkt"];
4080--10154[label="0.0117647;1pkt 1fpkt"];
4080--11014[label="0.00588235;1pkt 1fpkt"];
4080--11620[label="0.0555556;1pkt 1fpkt"];
4080--11708[label="0.00588235;1pkt 1fpkt"];
4080--12540[label="0.00588235;1pkt 1fpkt"];
4080--12583[label="0.00588235;1pkt 1fpkt"];
4080--12860[label="0.00588235;1pkt 1fpkt"];
4080--12904[label="0.00588235;1pkt 1fpkt"];
4080--13309[label="0.00588235;1pkt 1fpkt"];
4080--13731[label="0.608696;28pkt 28fpkt"];
4080--14725[label="0.00588235;1pkt 1fpkt"];
4080--15053[label="0.00588235;1pkt 1fpkt"];
4080--15447[label="0.00588235;1pkt 1fpkt"];
4080--15603[label="0.00588235;1pkt 1fpkt"];
4080--15786[label="0.00588235;1pkt 1fpkt"];
4080--15980[label="0.6;27pkt 27fpkt"];
4080--16693[label="0.00588235;1pkt 1fpkt"];
5716--8202[label="1;176pkt 176fpkt"];
5716--8449[label="0.0227273;4pkt 4fpkt"];
5716--8459[label="0.0738636;13pkt 13fpkt"];
5716--8539[label="0.0227273;4pkt 4fpkt"];
5716--8549[label="0.0738636;13pkt 13fpkt"];
5716--8624[label="0.0227273;4pkt 4fpkt"];
5716--8634[label="0.0738636;13pkt 13fpkt"];
5716--9105[label="0.0555556;1pkt 1fpkt"];
5716--9803[label="0.0833333;1pkt 1fpkt"];
5716--10227[label="0.00735294;1pkt 1fpkt"];
5716--10315[label="0.0397727;7pkt 7fpkt"];
5716--10387[label="0.0170455;3pkt 3fpkt"];
5716--11214[label="0.290323;9pkt 9fpkt"];
5716--13358[label="0.00636943;1pkt 1fpkt"];
5716--14153[label="0.0833333;1pkt 1fpkt"];
5716--14820[label="0.290323;9pkt 9fpkt"];
7805--8450[label="0.0463576;7pkt 7fpkt"];
7805--8459[label="0.0264901;4pkt 4fpkt"];
7805--8491[label="0.0198675;3pkt 3fpkt"];
7805--8540[label="0.0463576;7pkt 7fpkt"];
7805--8549[label="0.0264901;4pkt 4fpkt"];
7805--8581[label="0.0198675;3pkt 3fpkt"];
7805--8625[label="0.0463576;7pkt 7fpkt"];
7805--8634[label="0.0264901;4pkt 4fpkt"];
7805--8776[label="0.00662252;1pkt 1fpkt"];
7805--8846[label="0.511111;23pkt 23fpkt"];
7805--9783[label="0.00662252;1pkt 1fpkt"];
7805--9846[label="0.00662252;1pkt 1fpkt"];
7805--10154[label="0.0117647;1pkt 1fpkt"];
7805--11014[label="0.00662252;1pkt 1fpkt"];
7805--11708[label="0.00662252;1pkt 1fpkt"];
7805--12540[label="0.00662252;1pkt 1fpkt"];
7805--12583[label="0.00662252;1pkt 1fpkt"];
7805--12860[label="0.00662252;1pkt 1fpkt"];
7805--12904[label="0.00662252;1pkt 1fpkt"];
7805--13309[label="0.00662252;1pkt 1fpkt"];
7805--13731[label="0.521739;24pkt 24fpkt"];
7805--14725[label="0.00662252;1pkt 1fpkt"];
7805--15053[label="0.00662252;1pkt 1fpkt"];
7805--15447[label="0.00662252;1pkt 1fpkt"];
7805--15603[label="0.00662252;1pkt 1fpkt"];
7805--15786[label="0.00662252;1pkt 1fpkt"];
7805--15980[label="0.511111;23pkt 23fpkt"];
7805--16693[label="0.00662252;1pkt 1fpkt"];
8202--8449[label="0.0227273;4pkt 4fpkt"];
8202--8459[label="0.0738636;13pkt 13fpkt"];
8202--8539[label="0.0227273;4pkt 4fpkt"];
8202--8549[label="0.0738636;13pkt 13fpkt"];
8202--8624[label="0.0227273;4pkt 4fpkt"];
8202--8634[label="0.0738636;13pkt 13fpkt"];
8202--9105[label="0.0555556;1pkt 1fpkt"];
8202--9803[label="0.0833333;1pkt 1fpkt"];
8202--10227[label="0.00735294;1pkt 1fpkt"];
8202--10315[label="0.0397727;7pkt 7fpkt"];
8202--10387[label="0.0170455;3pkt 3fpkt"];
8202--11214[label="0.290323;9pkt 9fpkt"];
8202--13358[label="0.00636943;1pkt 1fpkt"];
8202--14153[label="0.0833333;1pkt 1fpkt"];
8202--14820[label="0.290323;9pkt 9fpkt"];
8846--13731[label="1;45pkt 45fpkt"];
8846--15980[label="1;45pkt 45fpkt"];
11214--14820[label="1;31pkt 31fpkt"];
13731--15980[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.144.144"/>
      <filter dst_ip="204.80.31.85"/>
      <filter src_port="2703"/>
      <filter dst_port="25"/>
      <filter dst_ip="205.100.243.120" dst_port="53"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.163.137.120"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.10.184.120"/>
    </slice>
    <from sec="1246943686" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.32.194.121"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1184{
style=filled;
color=gray75;
11281[label="104.205.180.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14852[label="104.205.180.122;1pkt 1fpkt", shape=invtriangle, color=brown];
16453[label="104.205.180.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1184[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.205.180.122:80, 204.80.42.67:24277}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24277: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11281--14852[label="1;1pkt 1fpkt"];
11281--16453[label="1;1pkt 1fpkt"];
14852--16453[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.42.67" dst_port="24277" src_ip="104.205.180.122" src_port="80"/>
    </slice>
    <from sec="1246943691" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.69.188.123"/>
    </slice>
    <from sec="1246943288" usec="0"/>
    <to sec="1246943293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
11323[label="205.100.243.124;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14872[label="205.100.243.124;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.243.124:80, 43.129.49.17:34297}[33.3333%]&lt;BR/&gt;{205.100.243.124:80, 43.129.49.17:34304}[33.3333%]&lt;BR/&gt;{205.100.243.124:80, 43.129.49.17:34306}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34306: (16.6667%)&lt;BR/&gt; 34304: (16.6667%)&lt;BR/&gt; 34297: (16.6667%)&gt;];
}
11323--14872[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="43.129.49.17" dst_port="34306" src_ip="205.100.243.124" src_port="80"/>
      <filter dst_ip="43.129.49.17" dst_port="34304" src_ip="205.100.243.124" src_port="80"/>
      <filter dst_ip="43.129.49.17" dst_port="34297" src_ip="205.100.243.124" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1187{
style=filled;
color=gray75;
11343[label="136.90.12.126;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14879[label="136.90.12.126;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1187[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.12.126:4971, 38.163.26.203:80}[20%]&lt;BR/&gt;{136.90.12.126:4972, 38.163.26.203:80}[20%]&lt;BR/&gt;{136.90.12.126:4948, 200.108.208.245:80}[20%]&lt;BR/&gt;{136.90.12.126:4951, 200.108.208.245:80}[20%]&lt;BR/&gt;{136.90.12.126:4952, 200.108.208.245:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4972: (10%)&lt;BR/&gt; 4971: (10%)&lt;BR/&gt; 4952: (10%)&lt;BR/&gt; 4951: (10%)&gt;];
}
11343--14879[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.108.208.245" dst_port="80" src_ip="136.90.12.126" src_port="4952"/>
      <filter dst_ip="200.108.208.245" dst_port="80" src_ip="136.90.12.126" src_port="4951"/>
      <filter dst_ip="200.108.208.245" dst_port="80" src_ip="136.90.12.126" src_port="4948"/>
      <filter dst_ip="38.163.26.203" dst_port="80" src_ip="136.90.12.126" src_port="4972"/>
      <filter dst_ip="38.163.26.203" dst_port="80" src_ip="136.90.12.126" src_port="4971"/>
    </slice>
    <from sec="1246943397" usec="0"/>
    <to sec="1246943470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.65.73.126"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
11349[label="160.72.98.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14883[label="160.72.98.126;1pkt 1fpkt", shape=invtriangle, color=brown];
16469[label="160.72.98.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.72.98.126:53, 136.90.179.184:62139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62139: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
11349--14883[label="1;1pkt 1fpkt"];
11349--16469[label="1;1pkt 1fpkt"];
14883--16469[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.179.184" dst_port="62139" src_ip="160.72.98.126" src_port="53"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
11351[label="136.90.112.126;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14885[label="136.90.112.126;2pkt 2fpkt", shape=invtriangle, color=brown];
16471[label="136.90.112.126;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.112.126:2417, 196.235.67.113:80}[50%]&lt;BR/&gt;{136.90.112.126:2419, 196.235.67.113:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2419: (25%)&lt;BR/&gt; 2417: (25%)&gt;];
}
11351--14885[label="1;2pkt 2fpkt"];
11351--16471[label="1;2pkt 2fpkt"];
14885--16471[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.235.67.113" dst_port="80" src_ip="136.90.112.126" src_port="2419"/>
      <filter dst_ip="196.235.67.113" dst_port="80" src_ip="136.90.112.126" src_port="2417"/>
    </slice>
    <from sec="1246943688" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.155.191.126"/>
    </slice>
    <from sec="1246943496" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.19.117.127"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.3.1.128"/>
    </slice>
    <from sec="1246943347" usec="0"/>
    <to sec="1246943351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1194{
style=filled;
color=gray75;
11378[label="204.240.39.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14902[label="204.240.39.128;2pkt 2fpkt", shape=invtriangle, color=brown];
16477[label="204.240.39.128;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1194[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.240.39.128:80, 136.90.65.157:2043}[50%]&lt;BR/&gt;{204.240.39.128:80, 136.90.65.157:2045}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2045: (25%)&lt;BR/&gt; 2043: (25%)&gt;];
}
11378--14902[label="1;2pkt 2fpkt"];
11378--16477[label="1;2pkt 2fpkt"];
14902--16477[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.65.157" dst_port="2045" src_ip="204.240.39.128" src_port="80"/>
      <filter dst_ip="136.90.65.157" dst_port="2043" src_ip="204.240.39.128" src_port="80"/>
    </slice>
    <from sec="1246943638" usec="0"/>
    <to sec="1246943656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.98.130.129"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
11433[label="46.61.154.130;25pkt 25fpkt", shape=pentagon, color=darkviolet];
14926[label="46.61.154.130;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.61.154.130:443, 204.91.5.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1755: (2%)&lt;BR/&gt; 1754: (2%)&lt;BR/&gt; 1747: (2%)&lt;BR/&gt; 1746: (2%)&gt;];
}
11433--14926[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.5.219" src_ip="46.61.154.130" src_port="443"/>
    </slice>
    <from sec="1246943087" usec="0"/>
    <to sec="1246943460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.120.162.130"/>
    </slice>
    <from sec="1246943686" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.88.238.130"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
11446[label="147.22.70.131;223pkt 223fpkt", shape=pentagon, color=darkviolet];
14936[label="147.22.70.131;223pkt 223fpkt", shape=invtriangle, color=brown];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.22.70.131:14179, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14179: (50%)&lt;BR/&gt; 6881: (0.44843%)&lt;BR/&gt; 65041: (0.224215%)&lt;BR/&gt; 64260: (0.224215%)&lt;BR/&gt; 63783: (0.224215%)&gt;];
}
11446--14936[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter src_ip="147.22.70.131" src_port="14179"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.18.120.131"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1201{
style=filled;
color=gray75;
404[label="172.133.126.171;d;69pkt 69fpkt", shape=diamond, color=yellow];
405[label="60.238.66.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
7930[label="60.238.66.82;s;1pkt 1fpkt", shape=hexagon, color=black];
10514[label="60.238.66.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11457[label="52.91.165.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14489[label="60.238.66.82;1pkt 1fpkt", shape=invtriangle, color=brown];
14944[label="52.91.165.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.133.126.171:21}[66.6667%]&lt;BR/&gt;{*:*, 172.133.126.171:20}[27.5362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (34.6667%)&lt;BR/&gt; 20: (12.6667%)&lt;BR/&gt; 0: (5.33333%)&lt;BR/&gt; 55648: (3.33333%)&lt;BR/&gt; 3791: (2%)&gt;];
}
404--405[label="1;1pkt 1fpkt"];
404--7930[label="1;1pkt 1fpkt"];
404--10430[label="0.5;1pkt 1fpkt"];
404--10514[label="1;1pkt 1fpkt"];
404--11457[label="1;1pkt 1fpkt"];
404--14489[label="1;1pkt 1fpkt"];
404--14944[label="1;1pkt 1fpkt"];
405--7930[label="1;1pkt 1fpkt"];
405--10514[label="1;1pkt 1fpkt"];
405--14489[label="1;1pkt 1fpkt"];
7930--10514[label="1;1pkt 1fpkt"];
7930--14489[label="1;1pkt 1fpkt"];
10514--14489[label="1;1pkt 1fpkt"];
11457--14944[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.126.171" dst_port="21"/>
      <filter dst_ip="172.133.126.171" dst_port="20"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.30.174.131"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.99.70.132"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
3436[label="136.90.110.195;d;39pkt 39fpkt", shape=diamond, color=yellow];
3557[label="204.195.193.148;s;23pkt 23fpkt", shape=diamond, color=yellow];
5024[label="136.90.144.235;d;44pkt 44fpkt", shape=diamond, color=yellow];
5445[label="212.3.104.58;s;2pkt 2fpkt", shape=diamond, color=yellow];
7364[label="204.195.193.148;s;23pkt 23fpkt", shape=hexagon, color=black];
9994[label="212.3.104.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11482[label="204.195.193.132;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11809[label="204.195.193.148;23pkt 23fpkt", shape=pentagon, color=darkviolet];
14249[label="212.3.104.58;2pkt 2fpkt", shape=invtriangle, color=brown];
14955[label="204.195.193.132;21pkt 21fpkt", shape=invtriangle, color=brown];
15110[label="204.195.193.148;23pkt 23fpkt", shape=invtriangle, color=brown];
16555[label="204.195.193.148;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.90.144.235:*}[48.8636%]&lt;BR/&gt;{204.195.193.148:80, *:*}[26.1364%]&lt;BR/&gt;{204.195.193.132:80, 136.90.110.195:*}[23.8636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7967%)&lt;BR/&gt; 59088: (1.21951%)&lt;BR/&gt; 59087: (1.21951%)&lt;BR/&gt; 59086: (1.21951%)&lt;BR/&gt; 59085: (1.21951%)&gt;];
}
3436--3557[label="0.521739;12pkt 12fpkt"];
3436--7364[label="0.521739;12pkt 12fpkt"];
3436--8451[label="0.0512821;2pkt 2fpkt"];
3436--8458[label="0.0512821;2pkt 2fpkt"];
3436--8484[label="0.153846;6pkt 6fpkt"];
3436--8541[label="0.0512821;2pkt 2fpkt"];
3436--8548[label="0.0512821;2pkt 2fpkt"];
3436--8574[label="0.153846;6pkt 6fpkt"];
3436--8626[label="0.0512821;2pkt 2fpkt"];
3436--8633[label="0.0512821;2pkt 2fpkt"];
3436--8656[label="0.153846;6pkt 6fpkt"];
3436--10768[label="1;2pkt 2fpkt"];
3436--11482[label="1;21pkt 21fpkt"];
3436--11809[label="0.521739;12pkt 12fpkt"];
3436--14955[label="1;21pkt 21fpkt"];
3436--15110[label="0.521739;12pkt 12fpkt"];
3436--16555[label="0.521739;12pkt 12fpkt"];
3557--5024[label="0.26087;6pkt 6fpkt"];
3557--6599[label="0.217391;5pkt 5fpkt"];
3557--7364[label="1;23pkt 23fpkt"];
3557--8364[label="0.217391;5pkt 5fpkt"];
3557--8434[label="0.0434783;1pkt 1fpkt"];
3557--8445[label="0.0434783;1pkt 1fpkt"];
3557--8451[label="0.0434783;1pkt 1fpkt"];
3557--8458[label="0.0869565;2pkt 2fpkt"];
3557--8484[label="0.173913;4pkt 4fpkt"];
3557--8524[label="0.0434783;1pkt 1fpkt"];
3557--8535[label="0.0434783;1pkt 1fpkt"];
3557--8541[label="0.0434783;1pkt 1fpkt"];
3557--8548[label="0.0869565;2pkt 2fpkt"];
3557--8574[label="0.173913;4pkt 4fpkt"];
3557--8613[label="0.0434783;1pkt 1fpkt"];
3557--8626[label="0.0434783;1pkt 1fpkt"];
3557--8633[label="0.0869565;2pkt 2fpkt"];
3557--8656[label="0.173913;4pkt 4fpkt"];
3557--11809[label="1;23pkt 23fpkt"];
3557--15110[label="1;23pkt 23fpkt"];
3557--16555[label="1;23pkt 23fpkt"];
5024--5445[label="1;2pkt 2fpkt"];
5024--7364[label="0.26087;6pkt 6fpkt"];
5024--8451[label="0.136364;6pkt 6fpkt"];
5024--8458[label="0.0681818;3pkt 3fpkt"];
5024--8484[label="0.0909091;4pkt 4fpkt"];
5024--8541[label="0.136364;6pkt 6fpkt"];
5024--8548[label="0.0681818;3pkt 3fpkt"];
5024--8574[label="0.0909091;4pkt 4fpkt"];
5024--8626[label="0.136364;6pkt 6fpkt"];
5024--8633[label="0.0681818;3pkt 3fpkt"];
5024--8656[label="0.0909091;4pkt 4fpkt"];
5024--9994[label="1;2pkt 2fpkt"];
5024--11809[label="0.26087;6pkt 6fpkt"];
5024--14249[label="1;2pkt 2fpkt"];
5024--15110[label="0.26087;6pkt 6fpkt"];
5024--16555[label="0.26087;6pkt 6fpkt"];
5445--9994[label="1;2pkt 2fpkt"];
5445--14249[label="1;2pkt 2fpkt"];
7364--8364[label="0.217391;5pkt 5fpkt"];
7364--8434[label="0.0434783;1pkt 1fpkt"];
7364--8445[label="0.0434783;1pkt 1fpkt"];
7364--8451[label="0.0434783;1pkt 1fpkt"];
7364--8458[label="0.0869565;2pkt 2fpkt"];
7364--8484[label="0.173913;4pkt 4fpkt"];
7364--8524[label="0.0434783;1pkt 1fpkt"];
7364--8535[label="0.0434783;1pkt 1fpkt"];
7364--8541[label="0.0434783;1pkt 1fpkt"];
7364--8548[label="0.0869565;2pkt 2fpkt"];
7364--8574[label="0.173913;4pkt 4fpkt"];
7364--8613[label="0.0434783;1pkt 1fpkt"];
7364--8626[label="0.0434783;1pkt 1fpkt"];
7364--8633[label="0.0869565;2pkt 2fpkt"];
7364--8656[label="0.173913;4pkt 4fpkt"];
7364--11809[label="1;23pkt 23fpkt"];
7364--15110[label="1;23pkt 23fpkt"];
7364--16555[label="1;23pkt 23fpkt"];
9994--14249[label="1;2pkt 2fpkt"];
11482--14955[label="1;21pkt 21fpkt"];
11809--15110[label="1;23pkt 23fpkt"];
11809--16555[label="1;23pkt 23fpkt"];
15110--16555[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="204.195.193.148" src_port="80"/>
      <filter dst_ip="136.90.144.235" src_port="80"/>
      <filter dst_ip="136.90.110.195" src_ip="204.195.193.132" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1205{
style=filled;
color=gray75;
506[label="204.91.174.91;d;187pkt 187fpkt", shape=diamond, color=yellow];
1570[label="136.90.44.166;d;345pkt 345fpkt", shape=diamond, color=yellow];
1593[label="20.19.10.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
1970[label="22.90.27.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
2139[label="2.114.191.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
2148[label="90.154.74.160;s;33pkt 33fpkt", shape=diamond, color=yellow];
2663[label="136.90.146.165;d;348pkt 348fpkt", shape=diamond, color=yellow];
2700[label="204.91.4.193;d;174pkt 174fpkt", shape=diamond, color=yellow];
3023[label="91.27.11.24;s;5pkt 5fpkt", shape=diamond, color=yellow];
3609[label="91.27.25.125;s;10pkt 10fpkt", shape=diamond, color=yellow];
3782[label="90.154.74.140;s;62pkt 62fpkt", shape=diamond, color=yellow];
4340[label="90.60.39.24;s;22pkt 22fpkt", shape=diamond, color=yellow];
5384[label="30.92.216.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
5863[label="17.181.32.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
6011[label="91.27.7.153;s;4pkt 4fpkt", shape=diamond, color=yellow];
6052[label="216.218.163.118;s;73pkt 73fpkt", shape=diamond, color=yellow];
6739[label="20.19.10.205;s;1pkt 1fpkt", shape=hexagon, color=black];
7386[label="91.27.11.24;s;5pkt 5fpkt", shape=hexagon, color=black];
8246[label="90.60.39.24;s;22pkt 22fpkt", shape=hexagon, color=black];
8277[label="216.218.163.118;s;73pkt 73fpkt", shape=hexagon, color=black];
8770[label="91.145.225.2;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8902[label="216.218.28.8;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9275[label="91.27.11.24;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9277[label="90.60.39.24;22pkt 22fpkt", shape=pentagon, color=darkviolet];
9443[label="91.130.128.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9627[label="91.27.11.41;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10489[label="91.27.7.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11328[label="91.27.25.125;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11492[label="91.27.7.133;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11499[label="93.133.82.133;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11597[label="90.154.74.138;31pkt 31fpkt", shape=pentagon, color=darkviolet];
11636[label="90.154.74.140;82pkt 82fpkt", shape=pentagon, color=darkviolet];
11898[label="91.27.7.153;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11947[label="204.195.21.156;54pkt 54fpkt", shape=pentagon, color=darkviolet];
12009[label="90.154.74.160;39pkt 39fpkt", shape=pentagon, color=darkviolet];
13473[label="214.17.78.242;56pkt 56fpkt", shape=pentagon, color=darkviolet];
13560[label="23.223.131.248;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13567[label="204.195.21.249;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13698[label="91.145.225.2;16pkt 16fpkt", shape=invtriangle, color=brown];
13755[label="216.218.28.8;22pkt 22fpkt", shape=invtriangle, color=brown];
13933[label="90.60.39.24;21pkt 21fpkt", shape=invtriangle, color=brown];
14080[label="91.27.11.41;8pkt 8fpkt", shape=invtriangle, color=brown];
14874[label="91.27.25.125;9pkt 9fpkt", shape=invtriangle, color=brown];
14958[label="91.27.7.133;10pkt 10fpkt", shape=invtriangle, color=brown];
14960[label="93.133.82.133;14pkt 14fpkt", shape=invtriangle, color=brown];
15000[label="90.154.74.138;31pkt 31fpkt", shape=invtriangle, color=brown];
15851[label="214.17.78.242;56pkt 56fpkt", shape=invtriangle, color=brown];
15892[label="23.223.131.248;13pkt 13fpkt", shape=invtriangle, color=brown];
15963[label="91.145.225.2;15pkt 15fpkt", shape=invhouse, color=bisque];
16056[label="90.60.39.24;22pkt 22fpkt", shape=invhouse, color=bisque];
16136[label="91.27.11.41;8pkt 8fpkt", shape=invhouse, color=bisque];
16494[label="93.133.82.133;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1205[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.90.146.165:*}[30.583%]&lt;BR/&gt;{*:80, 136.90.44.166:*}[23.6771%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3145%)&lt;BR/&gt; 17368: (1.40049%)&lt;BR/&gt; 2238: (0.859951%)&lt;BR/&gt; 443: (0.4914%)&lt;BR/&gt; 17788: (0.39312%)&gt;];
}
506--1593[label="1;1pkt 1fpkt"];
506--1970[label="1;1pkt 1fpkt"];
506--2139[label="1;1pkt 1fpkt"];
506--2147[label="0.0148148;2pkt 2fpkt"];
506--5384[label="1;1pkt 1fpkt"];
506--5863[label="1;1pkt 1fpkt"];
506--6739[label="1;1pkt 1fpkt"];
506--7565[label="0.021978;2pkt 2fpkt"];
506--8484[label="0.0748663;14pkt 14fpkt"];
506--8574[label="0.0748663;14pkt 14fpkt"];
506--8656[label="0.0748663;14pkt 14fpkt"];
506--9512[label="0.34375;11pkt 11fpkt"];
506--9631[label="0.4;4pkt 4fpkt"];
506--11597[label="0.709677;22pkt 22fpkt"];
506--11636[label="0.146341;12pkt 12fpkt"];
506--11947[label="0.185185;10pkt 10fpkt"];
506--12408[label="0.176471;3pkt 3fpkt"];
506--13063[label="0.012987;2pkt 2fpkt"];
506--13171[label="0.333333;2pkt 2fpkt"];
506--14030[label="0.34375;11pkt 11fpkt"];
506--15000[label="0.709677;22pkt 22fpkt"];
506--15390[label="0.176471;3pkt 3fpkt"];
506--16666[label="0.176471;3pkt 3fpkt"];
1570--2148[label="1;33pkt 33fpkt"];
1570--3609[label="1;10pkt 10fpkt"];
1570--3782[label="1;62pkt 62fpkt"];
1570--3973[label="0.0181818;3pkt 3fpkt"];
1570--4340[label="0.318182;7pkt 7fpkt"];
1570--8009[label="0.0208333;3pkt 3fpkt"];
1570--8246[label="0.318182;7pkt 7fpkt"];
1570--8451[label="0.0202899;7pkt 7fpkt"];
1570--8458[label="0.0956522;33pkt 33fpkt"];
1570--8484[label="0.0173913;6pkt 6fpkt"];
1570--8541[label="0.0202899;7pkt 7fpkt"];
1570--8548[label="0.0956522;33pkt 33fpkt"];
1570--8574[label="0.0173913;6pkt 6fpkt"];
1570--8626[label="0.0202899;7pkt 7fpkt"];
1570--8633[label="0.0956522;33pkt 33fpkt"];
1570--8656[label="0.0173913;6pkt 6fpkt"];
1570--9277[label="0.318182;7pkt 7fpkt"];
1570--9631[label="0.6;6pkt 6fpkt"];
1570--10164[label="0.0128205;1pkt 1fpkt"];
1570--10887[label="0.0454545;3pkt 3fpkt"];
1570--11328[label="1;9pkt 9fpkt"];
1570--11458[label="0.0833333;1pkt 1fpkt"];
1570--11499[label="1;14pkt 14fpkt"];
1570--11597[label="0.290323;9pkt 9fpkt"];
1570--11636[label="0.853659;70pkt 70fpkt"];
1570--11947[label="0.148148;8pkt 8fpkt"];
1570--12009[label="0.846154;33pkt 33fpkt"];
1570--12408[label="0.352941;6pkt 6fpkt"];
1570--12443[label="0.148148;4pkt 4fpkt"];
1570--13332[label="0.0487805;2pkt 2fpkt"];
1570--13567[label="0.166667;2pkt 2fpkt"];
1570--13933[label="0.285714;6pkt 6fpkt"];
1570--14326[label="0.0128205;1pkt 1fpkt"];
1570--14874[label="1;9pkt 9fpkt"];
1570--14945[label="0.0833333;1pkt 1fpkt"];
1570--14960[label="1;14pkt 14fpkt"];
1570--15000[label="0.290323;9pkt 9fpkt"];
1570--15390[label="0.352941;6pkt 6fpkt"];
1570--16056[label="0.318182;7pkt 7fpkt"];
1570--16236[label="0.0128205;1pkt 1fpkt"];
1570--16494[label="1;14pkt 14fpkt"];
1570--16666[label="0.352941;6pkt 6fpkt"];
1593--6739[label="1;1pkt 1fpkt"];
2148--8458[label="0.030303;1pkt 1fpkt"];
2148--8548[label="0.030303;1pkt 1fpkt"];
2148--8633[label="0.030303;1pkt 1fpkt"];
2148--12009[label="1;33pkt 33fpkt"];
2663--2761[label="0.00287356;1pkt 1fpkt"];
2663--6052[label="1;73pkt 73fpkt"];
2663--8277[label="1;73pkt 73fpkt"];
2663--8458[label="0.00574713;2pkt 2fpkt"];
2663--8484[label="0.00287356;1pkt 1fpkt"];
2663--8548[label="0.00574713;2pkt 2fpkt"];
2663--8574[label="0.00287356;1pkt 1fpkt"];
2663--8633[label="0.00574713;2pkt 2fpkt"];
2663--8656[label="0.00287356;1pkt 1fpkt"];
2663--8770[label="0.666667;10pkt 10fpkt"];
2663--8776[label="0.00574713;2pkt 2fpkt"];
2663--8902[label="1;21pkt 21fpkt"];
2663--9443[label="0.5;4pkt 4fpkt"];
2663--9512[label="0.21875;7pkt 7fpkt"];
2663--10175[label="0.133333;4pkt 4fpkt"];
2663--10842[label="0.00436681;1pkt 1fpkt"];
2663--11492[label="1;10pkt 10fpkt"];
2663--11513[label="0.176471;6pkt 6fpkt"];
2663--11947[label="0.148148;8pkt 8fpkt"];
2663--12009[label="0.153846;6pkt 6fpkt"];
2663--12179[label="0.0149254;2pkt 2fpkt"];
2663--12408[label="0.117647;2pkt 2fpkt"];
2663--12860[label="0.00287356;1pkt 1fpkt"];
2663--13560[label="1;13pkt 13fpkt"];
2663--13567[label="0.416667;5pkt 5fpkt"];
2663--13698[label="0.625;10pkt 10fpkt"];
2663--13755[label="1;22pkt 22fpkt"];
2663--14030[label="0.21875;7pkt 7fpkt"];
2663--14331[label="0.133333;4pkt 4fpkt"];
2663--14958[label="1;10pkt 10fpkt"];
2663--15278[label="0.0149254;2pkt 2fpkt"];
2663--15390[label="0.117647;2pkt 2fpkt"];
2663--15892[label="1;13pkt 13fpkt"];
2663--15963[label="0.666667;10pkt 10fpkt"];
2663--16237[label="0.133333;4pkt 4fpkt"];
2663--16666[label="0.117647;2pkt 2fpkt"];
2700--3023[label="1;5pkt 5fpkt"];
2700--4340[label="0.681818;15pkt 15fpkt"];
2700--5099[label="1;2pkt 2fpkt"];
2700--6011[label="1;4pkt 4fpkt"];
2700--7386[label="1;5pkt 5fpkt"];
2700--8246[label="0.681818;15pkt 15fpkt"];
2700--8451[label="0.0574713;10pkt 10fpkt"];
2700--8458[label="0.0517241;9pkt 9fpkt"];
2700--8484[label="0.0804598;14pkt 14fpkt"];
2700--8541[label="0.0574713;10pkt 10fpkt"];
2700--8548[label="0.0517241;9pkt 9fpkt"];
2700--8574[label="0.0804598;14pkt 14fpkt"];
2700--8626[label="0.0574713;10pkt 10fpkt"];
2700--8633[label="0.0517241;9pkt 9fpkt"];
2700--8656[label="0.0804598;14pkt 14fpkt"];
2700--9275[label="1;5pkt 5fpkt"];
2700--9277[label="0.681818;15pkt 15fpkt"];
2700--9627[label="0.125;1pkt 1fpkt"];
2700--10489[label="1;1pkt 1fpkt"];
2700--11898[label="1;7pkt 7fpkt"];
2700--13473[label="0.803571;45pkt 45fpkt"];
2700--13933[label="0.714286;15pkt 15fpkt"];
2700--14080[label="0.125;1pkt 1fpkt"];
2700--15851[label="0.803571;45pkt 45fpkt"];
2700--16056[label="0.681818;15pkt 15fpkt"];
2700--16136[label="0.125;1pkt 1fpkt"];
3023--7386[label="1;5pkt 5fpkt"];
3023--9275[label="1;5pkt 5fpkt"];
3609--11328[label="1;9pkt 9fpkt"];
3609--14874[label="1;9pkt 9fpkt"];
3782--11636[label="1;62pkt 62fpkt"];
4340--8246[label="1;22pkt 22fpkt"];
4340--8484[label="0.318182;7pkt 7fpkt"];
4340--8574[label="0.318182;7pkt 7fpkt"];
4340--8656[label="0.318182;7pkt 7fpkt"];
4340--9277[label="1;22pkt 22fpkt"];
4340--13933[label="1;21pkt 21fpkt"];
4340--16056[label="1;22pkt 22fpkt"];
6011--11898[label="1;4pkt 4fpkt"];
6052--8277[label="1;73pkt 73fpkt"];
7386--9275[label="1;5pkt 5fpkt"];
8246--8484[label="0.318182;7pkt 7fpkt"];
8246--8574[label="0.318182;7pkt 7fpkt"];
8246--8656[label="0.318182;7pkt 7fpkt"];
8246--9277[label="1;22pkt 22fpkt"];
8246--13933[label="1;21pkt 21fpkt"];
8246--16056[label="1;22pkt 22fpkt"];
8770--13698[label="1;15pkt 15fpkt"];
8770--15963[label="1;15pkt 15fpkt"];
8902--13755[label="1;21pkt 21fpkt"];
9277--13933[label="1;21pkt 21fpkt"];
9277--16056[label="1;22pkt 22fpkt"];
9627--14080[label="1;8pkt 8fpkt"];
9627--16136[label="1;8pkt 8fpkt"];
11328--14874[label="1;9pkt 9fpkt"];
11492--14958[label="1;10pkt 10fpkt"];
11499--14960[label="1;14pkt 14fpkt"];
11499--16494[label="1;14pkt 14fpkt"];
11597--15000[label="1;31pkt 31fpkt"];
13473--15851[label="1;56pkt 56fpkt"];
13560--15892[label="1;13pkt 13fpkt"];
13698--15963[label="1;15pkt 15fpkt"];
13933--16056[label="1;21pkt 21fpkt"];
14080--16136[label="1;8pkt 8fpkt"];
14960--16494[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.146.165" src_port="80"/>
      <filter dst_ip="136.90.44.166" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
11528[label="26.117.221.134;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14974[label="26.117.221.134;7pkt 7fpkt", shape=invtriangle, color=brown];
16498[label="26.117.221.134;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.117.221.134:*, 205.100.251.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4777: (7.14286%)&lt;BR/&gt; 4776: (7.14286%)&lt;BR/&gt; 4775: (7.14286%)&lt;BR/&gt; 4774: (7.14286%)&gt;];
}
11528--14974[label="1;7pkt 7fpkt"];
11528--16498[label="1;7pkt 7fpkt"];
14974--16498[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.56" dst_port="80" src_ip="26.117.221.134"/>
    </slice>
    <from sec="1246943662" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.88.229.134"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
11532[label="141.5.10.135;28pkt 28fpkt", shape=pentagon, color=darkviolet];
14978[label="141.5.10.135;28pkt 28fpkt", shape=invtriangle, color=brown];
16500[label="141.5.10.135;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.5.10.135:*, 209.67.97.4:80}[60.7143%]&lt;BR/&gt;{141.5.10.135:*, 92.155.109.107:80}[39.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2476: (1.78571%)&lt;BR/&gt; 2467: (1.78571%)&lt;BR/&gt; 2464: (1.78571%)&lt;BR/&gt; 2428: (1.78571%)&gt;];
}
11532--14978[label="1;28pkt 28fpkt"];
11532--16500[label="1;28pkt 28fpkt"];
14978--16500[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="209.67.97.4" dst_port="80" src_ip="141.5.10.135"/>
      <filter dst_ip="92.155.109.107" dst_port="80" src_ip="141.5.10.135"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.234.89.135"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1210{
style=filled;
color=gray75;
11544[label="22.234.184.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14984[label="22.234.184.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1210[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.234.184.135:2940, 169.185.74.27:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 2940: (50%)&gt;];
}
11544--14984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.27" dst_port="3128" src_ip="22.234.184.135" src_port="2940"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
11545[label="204.70.5.136;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14985[label="204.70.5.136;14pkt 14fpkt", shape=invtriangle, color=brown];
16503[label="204.70.5.136;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.5.136:110, 169.185.138.32:*}[21.4286%]&lt;BR/&gt;{204.70.5.136:995, 204.80.42.67:*}[21.4286%]&lt;BR/&gt;{204.70.5.136:995, 205.100.250.68:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (28.5714%)&lt;BR/&gt; 995: (21.4286%)&lt;BR/&gt; 62261: (3.57143%)&lt;BR/&gt; 62172: (3.57143%)&lt;BR/&gt; 62077: (3.57143%)&gt;];
}
11545--14985[label="1;14pkt 14fpkt"];
11545--16503[label="1;14pkt 14fpkt"];
14985--16503[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" src_ip="204.70.5.136" src_port="995"/>
      <filter dst_ip="204.80.42.67" src_ip="204.70.5.136" src_port="995"/>
      <filter dst_ip="169.185.138.32" src_ip="204.70.5.136" src_port="110"/>
    </slice>
    <from sec="1246942840" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1212{
style=filled;
color=gray75;
6411[label="169.185.9.9;d;104pkt 104fpkt", shape=diamond, color=yellow];
6515[label="192.48.18.147;s;70pkt 70fpkt", shape=diamond, color=yellow];
11547[label="192.48.18.136;27pkt 27fpkt", shape=pentagon, color=darkviolet];
14986[label="192.48.18.136;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1212[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.48.18.147:80, 169.185.9.9:*}[66.0377%]&lt;BR/&gt;{192.48.18.136:80, 169.185.9.9:*}[25.4717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6842%)&lt;BR/&gt; 443: (1.31579%)&lt;BR/&gt; 49459: (0.657895%)&lt;BR/&gt; 49458: (0.657895%)&lt;BR/&gt; 49430: (0.657895%)&gt;];
}
6411--6515[label="1;70pkt 70fpkt"];
6411--9027[label="0.0526316;1pkt 1fpkt"];
6411--11547[label="0.925926;25pkt 25fpkt"];
6411--13814[label="0.0526316;1pkt 1fpkt"];
6411--14986[label="0.925926;25pkt 25fpkt"];
11547--14986[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.9.9" src_ip="192.48.18.147" src_port="80"/>
      <filter dst_ip="169.185.9.9" src_ip="192.48.18.136" src_port="80"/>
    </slice>
    <from sec="1246943283" usec="0"/>
    <to sec="1246943659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.69.234.137"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.14.62.138"/>
    </slice>
    <from sec="1246943089" usec="0"/>
    <to sec="1246943433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1215{
style=filled;
color=gray75;
11608[label="205.100.249.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15006[label="205.100.249.138;2pkt 2fpkt", shape=invtriangle, color=brown];
16511[label="205.100.249.138;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1215[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.249.138:3063, 10.7.0.21:53}[50%]&lt;BR/&gt;{205.100.249.138:2530, 206.200.48.215:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3063: (25%)&lt;BR/&gt; 2530: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
11608--15006[label="1;2pkt 2fpkt"];
11608--16511[label="1;2pkt 2fpkt"];
15006--16511[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.200.48.215" dst_port="25" src_ip="205.100.249.138" src_port="2530"/>
      <filter dst_ip="10.7.0.21" dst_port="53" src_ip="205.100.249.138" src_port="3063"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
11615[label="136.90.26.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15010[label="136.90.26.139;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.26.139:2169, 164.211.52.205:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2169: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
11615--15010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.211.52.205" dst_port="443" src_ip="136.90.26.139" src_port="2169"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.90.128.139"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
11635[label="136.90.74.140;40pkt 40fpkt", shape=pentagon, color=darkviolet];
15019[label="136.90.74.140;40pkt 40fpkt", shape=invtriangle, color=brown];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.74.140:*, 140.65.18.84:80}[50%]&lt;BR/&gt;{136.90.74.140:*, 40.20.46.160:80}[32.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2897: (1.25%)&lt;BR/&gt; 2889: (1.25%)&lt;BR/&gt; 2887: (1.25%)&lt;BR/&gt; 2883: (1.25%)&gt;];
}
11635--15019[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="140.65.18.84" dst_port="80" src_ip="136.90.74.140"/>
      <filter dst_ip="40.20.46.160" dst_port="80" src_ip="136.90.74.140"/>
    </slice>
    <from sec="1246943480" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
11666[label="26.177.165.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15032[label="26.177.165.141;1pkt 1fpkt", shape=invtriangle, color=brown];
16522[label="26.177.165.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.177.165.141:3061, 169.185.74.94:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3061: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11666--15032[label="1;1pkt 1fpkt"];
11666--16522[label="1;1pkt 1fpkt"];
15032--16522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.94" dst_port="80" src_ip="26.177.165.141" src_port="3061"/>
    </slice>
    <from sec="1246943023" usec="0"/>
    <to sec="1246943656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1221{
style=filled;
color=gray75;
4518[label="169.185.244.36;d;89pkt 89fpkt", shape=diamond, color=yellow];
5868[label="169.185.9.37;d;85pkt 85fpkt", shape=diamond, color=yellow];
6114[label="58.107.41.144;s;9pkt 9fpkt", shape=diamond, color=yellow];
9102[label="194.244.181.15;69pkt 69fpkt", shape=pentagon, color=darkviolet];
9611[label="43.119.84.40;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10432[label="211.183.8.78;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11097[label="37.32.2.111;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11681[label="209.67.109.142;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11720[label="58.107.41.144;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13250[label="40.255.169.228;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13856[label="194.244.181.15;68pkt 68fpkt", shape=invtriangle, color=brown];
14072[label="43.119.84.40;5pkt 5fpkt", shape=invtriangle, color=brown];
14447[label="211.183.8.78;5pkt 5fpkt", shape=invtriangle, color=brown];
15038[label="209.67.109.142;8pkt 8fpkt", shape=invtriangle, color=brown];
15061[label="58.107.41.144;9pkt 9fpkt", shape=invtriangle, color=brown];
15754[label="40.255.169.228;5pkt 5fpkt", shape=invtriangle, color=brown];
16025[label="194.244.181.15;69pkt 69fpkt", shape=invhouse, color=bisque];
16130[label="43.119.84.40;5pkt 5fpkt", shape=invhouse, color=bisque];
16284[label="211.183.8.78;5pkt 5fpkt", shape=invhouse, color=bisque];
16532[label="58.107.41.144;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1221[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 169.185.244.36:*}[42.5234%]&lt;BR/&gt;{*:80, 169.185.9.37:*}[40.1869%]&lt;BR/&gt;{194.244.181.15:80, *:*}[29.9065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0208%)&lt;BR/&gt; 443: (1.5625%)&lt;BR/&gt; 55064: (0.520833%)&lt;BR/&gt; 55063: (0.520833%)&lt;BR/&gt; 55061: (0.520833%)&gt;];
}
4518--4614[label="0.0224719;2pkt 2fpkt"];
4518--8451[label="0.011236;1pkt 1fpkt"];
4518--8458[label="0.0224719;2pkt 2fpkt"];
4518--8484[label="0.0561798;5pkt 5fpkt"];
4518--8541[label="0.011236;1pkt 1fpkt"];
4518--8548[label="0.0224719;2pkt 2fpkt"];
4518--8574[label="0.0561798;5pkt 5fpkt"];
4518--8626[label="0.011236;1pkt 1fpkt"];
4518--8633[label="0.0224719;2pkt 2fpkt"];
4518--8656[label="0.0561798;5pkt 5fpkt"];
4518--9102[label="0.347826;24pkt 24fpkt"];
4518--9611[label="1;5pkt 5fpkt"];
4518--10276[label="0.0140845;1pkt 1fpkt"];
4518--10432[label="1;5pkt 5fpkt"];
4518--11979[label="0.0869565;2pkt 2fpkt"];
4518--13250[label="1;5pkt 5fpkt"];
4518--13856[label="0.352941;24pkt 24fpkt"];
4518--14072[label="1;5pkt 5fpkt"];
4518--14447[label="1;5pkt 5fpkt"];
4518--15190[label="0.0869565;2pkt 2fpkt"];
4518--15754[label="1;5pkt 5fpkt"];
4518--16025[label="0.347826;24pkt 24fpkt"];
4518--16130[label="1;5pkt 5fpkt"];
4518--16284[label="1;5pkt 5fpkt"];
4518--16590[label="0.0869565;2pkt 2fpkt"];
5868--6114[label="1;9pkt 9fpkt"];
5868--8484[label="0.141176;12pkt 12fpkt"];
5868--8574[label="0.141176;12pkt 12fpkt"];
5868--8656[label="0.141176;12pkt 12fpkt"];
5868--9102[label="0.101449;7pkt 7fpkt"];
5868--11019[label="0.0470588;4pkt 4fpkt"];
5868--11097[label="1;8pkt 8fpkt"];
5868--11681[label="0.75;6pkt 6fpkt"];
5868--11720[label="1;9pkt 9fpkt"];
5868--13029[label="0.0588235;5pkt 5fpkt"];
5868--13856[label="0.102941;7pkt 7fpkt"];
5868--15038[label="0.75;6pkt 6fpkt"];
5868--15061[label="1;9pkt 9fpkt"];
5868--15658[label="0.0588235;5pkt 5fpkt"];
5868--16025[label="0.101449;7pkt 7fpkt"];
5868--16532[label="1;9pkt 9fpkt"];
5868--16793[label="0.0588235;5pkt 5fpkt"];
6114--11720[label="1;9pkt 9fpkt"];
6114--15061[label="1;9pkt 9fpkt"];
6114--16532[label="1;9pkt 9fpkt"];
9102--13856[label="1;68pkt 68fpkt"];
9102--16025[label="1;69pkt 69fpkt"];
9611--14072[label="1;5pkt 5fpkt"];
9611--16130[label="1;5pkt 5fpkt"];
10432--14447[label="1;5pkt 5fpkt"];
10432--16284[label="1;5pkt 5fpkt"];
11681--15038[label="1;8pkt 8fpkt"];
11720--15061[label="1;9pkt 9fpkt"];
11720--16532[label="1;9pkt 9fpkt"];
13250--15754[label="1;5pkt 5fpkt"];
13856--16025[label="1;68pkt 68fpkt"];
14072--16130[label="1;5pkt 5fpkt"];
14447--16284[label="1;5pkt 5fpkt"];
15061--16532[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="194.244.181.15" src_port="80"/>
      <filter dst_ip="169.185.244.36" src_port="80"/>
      <filter dst_ip="169.185.9.37" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.133.140.142"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
11691[label="136.90.221.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15044[label="136.90.221.142;2pkt 2fpkt", shape=invtriangle, color=brown];
16526[label="136.90.221.142;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.221.142:30450, 193.4.240.102:53}[50%]&lt;BR/&gt;{136.90.221.142:61977, 89.36.24.103:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 61977: (25%)&lt;BR/&gt; 30450: (25%)&gt;];
}
11691--15044[label="1;2pkt 2fpkt"];
11691--16526[label="1;2pkt 2fpkt"];
15044--16526[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="89.36.24.103" dst_port="53" src_ip="136.90.221.142" src_port="61977"/>
      <filter dst_ip="193.4.240.102" dst_port="53" src_ip="136.90.221.142" src_port="30450"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.114.2.143"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.184.56.143"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.18.120.143"/>
    </slice>
    <from sec="1246942894" usec="0"/>
    <to sec="1246942928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.221.19.144"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1228{
style=filled;
color=gray75;
654[label="136.90.66.101;d;107pkt 107fpkt", shape=diamond, color=yellow];
655[label="212.95.64.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
6565[label="42.226.36.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
6626[label="212.95.64.95;s;1pkt 1fpkt", shape=hexagon, color=black];
9317[label="213.149.16.26;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10775[label="212.95.64.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11719[label="91.42.40.144;12pkt 12fpkt", shape=pentagon, color=darkviolet];
14616[label="212.95.64.95;1pkt 1fpkt", shape=invtriangle, color=brown];
15060[label="91.42.40.144;12pkt 12fpkt", shape=invtriangle, color=brown];
16351[label="212.95.64.95;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1228[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.90.66.101:*}[47.8992%]&lt;BR/&gt;{*:*, 136.90.66.101:43891}[26.0504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3448%)&lt;BR/&gt; 43891: (10.6897%)&lt;BR/&gt; 443: (4.48276%)&lt;BR/&gt; 34155: (3.7931%)&lt;BR/&gt; 2122: (2.06897%)&gt;];
}
654--655[label="1;1pkt 1fpkt"];
654--1111[label="0.0280374;3pkt 3fpkt"];
654--1176[label="0.130841;14pkt 14fpkt"];
654--2613[label="0.0373832;4pkt 4fpkt"];
654--4758[label="0.03125;1pkt 1fpkt"];
654--6565[label="1;1pkt 1fpkt"];
654--6626[label="1;1pkt 1fpkt"];
654--7501[label="0.00934579;1pkt 1fpkt"];
654--8451[label="0.0186916;2pkt 2fpkt"];
654--8484[label="0.0186916;2pkt 2fpkt"];
654--8541[label="0.0186916;2pkt 2fpkt"];
654--8574[label="0.0186916;2pkt 2fpkt"];
654--8626[label="0.0186916;2pkt 2fpkt"];
654--8656[label="0.0186916;2pkt 2fpkt"];
654--9317[label="0.75;6pkt 6fpkt"];
654--10309[label="0.0444444;2pkt 2fpkt"];
654--10775[label="1;1pkt 1fpkt"];
654--11255[label="0.0280374;3pkt 3fpkt"];
654--11719[label="0.166667;2pkt 2fpkt"];
654--12211[label="0.0373832;4pkt 4fpkt"];
654--12277[label="0.00934579;1pkt 1fpkt"];
654--14616[label="1;1pkt 1fpkt"];
654--14837[label="0.0280374;3pkt 3fpkt"];
654--15060[label="0.166667;2pkt 2fpkt"];
654--15296[label="0.0373832;4pkt 4fpkt"];
654--16351[label="1;1pkt 1fpkt"];
655--6626[label="1;1pkt 1fpkt"];
655--10775[label="1;1pkt 1fpkt"];
655--14616[label="1;1pkt 1fpkt"];
655--16351[label="1;1pkt 1fpkt"];
6626--10775[label="1;1pkt 1fpkt"];
6626--14616[label="1;1pkt 1fpkt"];
6626--16351[label="1;1pkt 1fpkt"];
10775--14616[label="1;1pkt 1fpkt"];
10775--16351[label="1;1pkt 1fpkt"];
11719--15060[label="1;12pkt 12fpkt"];
14616--16351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.66.101" src_port="80"/>
      <filter dst_ip="136.90.66.101" dst_port="43891"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
11728[label="136.90.144.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15065[label="136.90.144.144;1pkt 1fpkt", shape=invtriangle, color=brown];
16534[label="136.90.144.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.144.144:63393, 210.61.132.142:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63393: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
11728--15065[label="1;1pkt 1fpkt"];
11728--16534[label="1;1pkt 1fpkt"];
15065--16534[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.61.132.142" dst_port="53" src_ip="136.90.144.144" src_port="63393"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.12.165.144"/>
    </slice>
    <from sec="1246943503" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1231{
style=filled;
color=gray75;
11737[label="43.82.209.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15071[label="43.82.209.144;1pkt 1fpkt", shape=invtriangle, color=brown];
16538[label="43.82.209.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1231[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.82.209.144:80, 169.185.250.226:59413}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59413: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11737--15071[label="1;1pkt 1fpkt"];
11737--16538[label="1;1pkt 1fpkt"];
15071--16538[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.250.226" dst_port="59413" src_ip="43.82.209.144" src_port="80"/>
    </slice>
    <from sec="1246943681" usec="0"/>
    <to sec="1246943684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1232{
style=filled;
color=gray75;
11742[label="42.3.240.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15074[label="42.3.240.144;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1232[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.3.240.144:443, 141.179.228.117:3738}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3738: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
11742--15074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.228.117" dst_port="3738" src_ip="42.3.240.144" src_port="443"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.5.84.145"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1235{
style=filled;
color=gray75;
11774[label="93.89.182.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15092[label="93.89.182.146;4pkt 4fpkt", shape=invtriangle, color=brown];
16548[label="93.89.182.146;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1235[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.89.182.146:80, 136.90.112.32:1617}[25%]&lt;BR/&gt;{93.89.182.146:80, 136.90.112.32:1620}[25%]&lt;BR/&gt;{93.89.182.146:80, 136.90.112.32:1621}[25%]&lt;BR/&gt;{93.89.182.146:80, 136.90.112.32:1625}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1625: (12.5%)&lt;BR/&gt; 1621: (12.5%)&lt;BR/&gt; 1620: (12.5%)&lt;BR/&gt; 1617: (12.5%)&gt;];
}
11774--15092[label="1;4pkt 4fpkt"];
11774--16548[label="1;4pkt 4fpkt"];
15092--16548[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.112.32" dst_port="1625" src_ip="93.89.182.146" src_port="80"/>
      <filter dst_ip="136.90.112.32" dst_port="1621" src_ip="93.89.182.146" src_port="80"/>
      <filter dst_ip="136.90.112.32" dst_port="1620" src_ip="93.89.182.146" src_port="80"/>
      <filter dst_ip="136.90.112.32" dst_port="1617" src_ip="93.89.182.146" src_port="80"/>
    </slice>
    <from sec="1246943672" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.145.199.146"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.129.203.146"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10526,2.12541,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
702[label="192.66.182.29;d;25pkt 25fpkt", shape=diamond, color=yellow];
703[label="141.179.131.141;s;23pkt 23fpkt", shape=diamond, color=yellow];
6632[label="192.66.182.29;d;3pkt 3fpkt", shape=hexagon, color=black];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.131.141:*, 192.66.182.29:80}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51085: (2.94118%)&lt;BR/&gt; 51079: (2.94118%)&lt;BR/&gt; 50830: (2.94118%)&lt;BR/&gt; 51150: (1.96078%)&gt;];
}
702--703[label="0.956522;22pkt 22fpkt"];
702--6632[label="1;3pkt 3fpkt"];
702--8514[label="0.04;1pkt 1fpkt"];
702--8603[label="0.04;1pkt 1fpkt"];
702--8680[label="0.04;1pkt 1fpkt"];
703--4570[label="0.0434783;1pkt 1fpkt"];
703--6632[label="1;3pkt 3fpkt"];
703--8514[label="0.0434783;1pkt 1fpkt"];
703--8603[label="0.0434783;1pkt 1fpkt"];
703--8680[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.66.182.29" dst_port="80" src_ip="141.179.131.141"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.54.140.148"/>
    </slice>
    <from sec="1246942942" usec="0"/>
    <to sec="1246942972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.49.222.148"/>
    </slice>
    <from sec="1246943591" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.76.243.148"/>
    </slice>
    <from sec="1246943003" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1242{
style=filled;
color=gray75;
11856[label="204.240.39.151;8pkt 8fpkt", shape=pentagon, color=darkviolet];
15131[label="204.240.39.151;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1242[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.240.39.151:80, 136.90.108.145:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4717: (6.25%)&lt;BR/&gt; 4716: (6.25%)&lt;BR/&gt; 4713: (6.25%)&lt;BR/&gt; 4711: (6.25%)&gt;];
}
11856--15131[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.108.145" src_ip="204.240.39.151" src_port="80"/>
    </slice>
    <from sec="1246943109" usec="0"/>
    <to sec="1246943481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1243{
style=filled;
color=gray75;
1195[label="205.100.243.124;d;625pkt 625fpkt", shape=diamond, color=yellow];
1775[label="136.90.100.127;d;60pkt 60fpkt", shape=diamond, color=yellow];
2468[label="136.90.242.109;d;263pkt 263fpkt", shape=diamond, color=yellow];
2527[label="136.90.69.14;d;70pkt 70fpkt", shape=diamond, color=yellow];
2989[label="172.133.61.132;d;8pkt 8fpkt", shape=diamond, color=yellow];
3067[label="209.164.149.63;s;206pkt 206fpkt", shape=diamond, color=yellow];
3204[label="141.179.243.36;d;113pkt 113fpkt", shape=diamond, color=yellow];
3416[label="38.170.145.112;s;103pkt 103fpkt", shape=diamond, color=yellow];
3529[label="172.133.50.56;d;204pkt 204fpkt", shape=diamond, color=yellow];
3867[label="141.179.243.37;d;79pkt 79fpkt", shape=diamond, color=yellow];
4698[label="53.31.99.103;s;65pkt 65fpkt", shape=diamond, color=yellow];
5215[label="36.23.34.58;s;44pkt 44fpkt", shape=diamond, color=yellow];
5648[label="136.90.64.65;d;49pkt 49fpkt", shape=diamond, color=yellow];
6423[label="53.31.99.97;s;47pkt 47fpkt", shape=diamond, color=yellow];
7350[label="172.133.50.56;d;143pkt 143fpkt", shape=hexagon, color=black];
8971[label="180.166.198.10;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9664[label="62.210.146.42;37pkt 37fpkt", shape=pentagon, color=darkviolet];
9863[label="213.46.207.51;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9985[label="36.23.34.58;46pkt 46fpkt", shape=pentagon, color=darkviolet];
9989[label="27.167.64.58;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10104[label="209.164.149.63;206pkt 206fpkt", shape=pentagon, color=darkviolet];
10346[label="180.166.21.74;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10787[label="180.138.36.96;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10815[label="53.31.99.97;78pkt 78fpkt", shape=pentagon, color=darkviolet];
10941[label="53.31.99.103;65pkt 65fpkt", shape=pentagon, color=darkviolet];
11127[label="38.170.145.112;115pkt 115fpkt", shape=pentagon, color=darkviolet];
11353[label="180.167.141.126;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11676[label="63.0.40.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11857[label="205.65.73.151;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12112[label="205.116.118.164;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12117[label="72.68.179.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12428[label="200.23.139.180;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12500[label="38.172.156.184;34pkt 34fpkt", shape=pentagon, color=darkviolet];
12563[label="204.204.232.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12948[label="52.53.106.211;52pkt 52fpkt", shape=pentagon, color=darkviolet];
13280[label="42.30.217.230;61pkt 61fpkt", shape=pentagon, color=darkviolet];
13787[label="180.166.198.10;5pkt 5fpkt", shape=invtriangle, color=brown];
14095[label="62.210.146.42;37pkt 37fpkt", shape=invtriangle, color=brown];
14184[label="213.46.207.51;4pkt 4fpkt", shape=invtriangle, color=brown];
14247[label="36.23.34.58;46pkt 46fpkt", shape=invtriangle, color=brown];
14635[label="53.31.99.97;78pkt 78fpkt", shape=invtriangle, color=brown];
14689[label="53.31.99.103;65pkt 65fpkt", shape=invtriangle, color=brown];
14777[label="38.170.145.112;115pkt 115fpkt", shape=invtriangle, color=brown];
14887[label="180.167.141.126;2pkt 2fpkt", shape=invtriangle, color=brown];
15035[label="63.0.40.142;17pkt 17fpkt", shape=invtriangle, color=brown];
15132[label="205.65.73.151;13pkt 13fpkt", shape=invtriangle, color=brown];
15246[label="205.116.118.164;4pkt 4fpkt", shape=invtriangle, color=brown];
15397[label="200.23.139.180;18pkt 18fpkt", shape=invtriangle, color=brown];
16003[label="180.166.198.10;5pkt 5fpkt", shape=invhouse, color=bisque];
16568[label="205.65.73.151;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1243[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.100.243.124:80}[41.8485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0918%)&lt;BR/&gt; 53: (2.18978%)&lt;BR/&gt; 3297: (0.821168%)&lt;BR/&gt; 443: (0.501825%)&lt;BR/&gt; 25: (0.440998%)&gt;];
}
1195--3416[label="0.883495;91pkt 91fpkt"];
1195--3674[label="0.00689655;1pkt 1fpkt"];
1195--4698[label="0.307692;20pkt 20fpkt"];
1195--5215[label="0.159091;7pkt 7fpkt"];
1195--5289[label="0.015625;1pkt 1fpkt"];
1195--6423[label="0.297872;14pkt 14fpkt"];
1195--8514[label="0.0688;43pkt 43fpkt"];
1195--8603[label="0.0688;43pkt 43fpkt"];
1195--8680[label="0.0688;43pkt 43fpkt"];
1195--9664[label="0.837838;31pkt 31fpkt"];
1195--9985[label="0.152174;7pkt 7fpkt"];
1195--10815[label="0.564103;44pkt 44fpkt"];
1195--10941[label="0.307692;20pkt 20fpkt"];
1195--11072[label="0.015625;1pkt 1fpkt"];
1195--11127[label="0.791304;91pkt 91fpkt"];
1195--11857[label="1;13pkt 13fpkt"];
1195--12112[label="0.25;1pkt 1fpkt"];
1195--12500[label="0.852941;29pkt 29fpkt"];
1195--12563[label="0.333333;1pkt 1fpkt"];
1195--12948[label="0.730769;38pkt 38fpkt"];
1195--13280[label="0.918033;56pkt 56fpkt"];
1195--14095[label="0.837838;31pkt 31fpkt"];
1195--14247[label="0.152174;7pkt 7fpkt"];
1195--14635[label="0.564103;44pkt 44fpkt"];
1195--14689[label="0.307692;20pkt 20fpkt"];
1195--14777[label="0.791304;91pkt 91fpkt"];
1195--15132[label="1;13pkt 13fpkt"];
1195--15246[label="0.25;1pkt 1fpkt"];
1195--16568[label="1;13pkt 13fpkt"];
1775--3674[label="0.0166667;1pkt 1fpkt"];
1775--4698[label="0.05;3pkt 3fpkt"];
1775--6423[label="0.0212766;1pkt 1fpkt"];
1775--8971[label="1;6pkt 6fpkt"];
1775--10346[label="1;6pkt 6fpkt"];
1775--10787[label="1;9pkt 9fpkt"];
1775--10815[label="0.0166667;1pkt 1fpkt"];
1775--10941[label="0.05;3pkt 3fpkt"];
1775--11353[label="1;2pkt 2fpkt"];
1775--13787[label="1;5pkt 5fpkt"];
1775--14635[label="0.0166667;1pkt 1fpkt"];
1775--14689[label="0.05;3pkt 3fpkt"];
1775--14887[label="1;2pkt 2fpkt"];
1775--16003[label="1;5pkt 5fpkt"];
2468--2761[label="0.00380228;1pkt 1fpkt"];
2468--2767[label="0.00666667;1pkt 1fpkt"];
2468--3381[label="0.00380228;1pkt 1fpkt"];
2468--3419[label="0.00380228;1pkt 1fpkt"];
2468--3526[label="0.0634921;16pkt 16fpkt"];
2468--4470[label="0.00380228;1pkt 1fpkt"];
2468--4477[label="0.00380228;1pkt 1fpkt"];
2468--4614[label="0.0044843;1pkt 1fpkt"];
2468--5111[label="0.00760456;2pkt 2fpkt"];
2468--5112[label="0.0844156;13pkt 13fpkt"];
2468--5215[label="0.113636;5pkt 5fpkt"];
2468--5548[label="0.018018;2pkt 2fpkt"];
2468--5558[label="0.00380228;1pkt 1fpkt"];
2468--6746[label="0.0114068;3pkt 3fpkt"];
2468--7702[label="0.00380228;1pkt 1fpkt"];
2468--7964[label="0.00396825;1pkt 1fpkt"];
2468--8449[label="0.00380228;1pkt 1fpkt"];
2468--8450[label="0.0456274;12pkt 12fpkt"];
2468--8451[label="0.0342205;9pkt 9fpkt"];
2468--8458[label="0.026616;7pkt 7fpkt"];
2468--8483[label="0.00380228;1pkt 1fpkt"];
2468--8484[label="0.0494297;13pkt 13fpkt"];
2468--8539[label="0.00380228;1pkt 1fpkt"];
2468--8540[label="0.0456274;12pkt 12fpkt"];
2468--8541[label="0.0342205;9pkt 9fpkt"];
2468--8548[label="0.026616;7pkt 7fpkt"];
2468--8573[label="0.00380228;1pkt 1fpkt"];
2468--8574[label="0.0494297;13pkt 13fpkt"];
2468--8624[label="0.00380228;1pkt 1fpkt"];
2468--8625[label="0.0456274;12pkt 12fpkt"];
2468--8626[label="0.0342205;9pkt 9fpkt"];
2468--8633[label="0.026616;7pkt 7fpkt"];
2468--8655[label="0.00380228;1pkt 1fpkt"];
2468--8656[label="0.0494297;13pkt 13fpkt"];
2468--9098[label="0.0608365;16pkt 16fpkt"];
2468--9846[label="0.00380228;1pkt 1fpkt"];
2468--9985[label="0.108696;5pkt 5fpkt"];
2468--10036[label="0.125;1pkt 1fpkt"];
2468--10182[label="0.00490196;1pkt 1fpkt"];
2468--10315[label="0.00497512;1pkt 1fpkt"];
2468--10384[label="0.0769231;1pkt 1fpkt"];
2468--10842[label="0.00436681;1pkt 1fpkt"];
2468--11014[label="0.00380228;1pkt 1fpkt"];
2468--11061[label="0.00763359;1pkt 1fpkt"];
2468--11261[label="0.0114068;3pkt 3fpkt"];
2468--11676[label="1;17pkt 17fpkt"];
2468--11708[label="0.00380228;1pkt 1fpkt"];
2468--11715[label="0.0169492;1pkt 1fpkt"];
2468--12029[label="0.00537634;1pkt 1fpkt"];
2468--12074[label="0.0133333;1pkt 1fpkt"];
2468--12319[label="0.0163934;2pkt 2fpkt"];
2468--12428[label="0.166667;3pkt 3fpkt"];
2468--12540[label="0.00380228;1pkt 1fpkt"];
2468--12563[label="0.333333;1pkt 1fpkt"];
2468--12583[label="0.00380228;1pkt 1fpkt"];
2468--12771[label="0.00757576;1pkt 1fpkt"];
2468--12860[label="0.00380228;1pkt 1fpkt"];
2468--12904[label="0.00380228;1pkt 1fpkt"];
2468--13049[label="0.00380228;1pkt 1fpkt"];
2468--13188[label="0.00469484;1pkt 1fpkt"];
2468--13309[label="0.00380228;1pkt 1fpkt"];
2468--14247[label="0.108696;5pkt 5fpkt"];
2468--14725[label="0.00380228;1pkt 1fpkt"];
2468--15035[label="1;17pkt 17fpkt"];
2468--15053[label="0.00380228;1pkt 1fpkt"];
2468--15058[label="0.0169492;1pkt 1fpkt"];
2468--15217[label="0.00537634;1pkt 1fpkt"];
2468--15350[label="0.0163934;2pkt 2fpkt"];
2468--15397[label="0.166667;3pkt 3fpkt"];
2468--15447[label="0.00380228;1pkt 1fpkt"];
2468--15603[label="0.00380228;1pkt 1fpkt"];
2468--15786[label="0.00380228;1pkt 1fpkt"];
2468--16693[label="0.00380228;1pkt 1fpkt"];
2527--3674[label="0.0142857;1pkt 1fpkt"];
2527--4698[label="0.0153846;1pkt 1fpkt"];
2527--5215[label="0.227273;10pkt 10fpkt"];
2527--6423[label="0.425532;20pkt 20fpkt"];
2527--9863[label="0.5;2pkt 2fpkt"];
2527--9985[label="0.217391;10pkt 10fpkt"];
2527--9989[label="0.222222;2pkt 2fpkt"];
2527--10815[label="0.285714;20pkt 20fpkt"];
2527--10941[label="0.0153846;1pkt 1fpkt"];
2527--12117[label="1;2pkt 2fpkt"];
2527--12428[label="0.166667;3pkt 3fpkt"];
2527--12563[label="0.333333;1pkt 1fpkt"];
2527--14184[label="0.5;2pkt 2fpkt"];
2527--14247[label="0.217391;10pkt 10fpkt"];
2527--14635[label="0.285714;20pkt 20fpkt"];
2527--14689[label="0.0153846;1pkt 1fpkt"];
2527--15397[label="0.166667;3pkt 3fpkt"];
2989--3067[label="0.75;6pkt 6fpkt"];
2989--4698[label="0.25;2pkt 2fpkt"];
2989--10104[label="0.75;6pkt 6fpkt"];
2989--10941[label="0.25;2pkt 2fpkt"];
2989--14689[label="0.25;2pkt 2fpkt"];
3067--3529[label="0.97549;199pkt 199fpkt"];
3067--7350[label="0.972028;139pkt 139fpkt"];
3067--10104[label="1;206pkt 206fpkt"];
3204--3674[label="0.00884956;1pkt 1fpkt"];
3204--4698[label="0.523077;34pkt 34fpkt"];
3204--5215[label="0.113636;5pkt 5fpkt"];
3204--6423[label="0.0851064;4pkt 4fpkt"];
3204--8514[label="0.0442478;5pkt 5fpkt"];
3204--8603[label="0.0442478;5pkt 5fpkt"];
3204--8680[label="0.0442478;5pkt 5fpkt"];
3204--9863[label="0.5;2pkt 2fpkt"];
3204--9985[label="0.108696;5pkt 5fpkt"];
3204--9989[label="0.222222;2pkt 2fpkt"];
3204--10815[label="0.0512821;4pkt 4fpkt"];
3204--10941[label="0.523077;34pkt 34fpkt"];
3204--12428[label="0.166667;3pkt 3fpkt"];
3204--14184[label="0.5;2pkt 2fpkt"];
3204--14247[label="0.108696;5pkt 5fpkt"];
3204--14635[label="0.0512821;4pkt 4fpkt"];
3204--14689[label="0.523077;34pkt 34fpkt"];
3204--15397[label="0.166667;3pkt 3fpkt"];
3416--7424[label="0.0776699;8pkt 8fpkt"];
3416--8393[label="0.0485437;5pkt 5fpkt"];
3416--8459[label="0.00970874;1pkt 1fpkt"];
3416--8508[label="0.00970874;1pkt 1fpkt"];
3416--8514[label="0.038835;4pkt 4fpkt"];
3416--8517[label="0.00970874;1pkt 1fpkt"];
3416--8549[label="0.00970874;1pkt 1fpkt"];
3416--8598[label="0.00970874;1pkt 1fpkt"];
3416--8603[label="0.038835;4pkt 4fpkt"];
3416--8606[label="0.00970874;1pkt 1fpkt"];
3416--8634[label="0.00970874;1pkt 1fpkt"];
3416--8674[label="0.00970874;1pkt 1fpkt"];
3416--8680[label="0.038835;4pkt 4fpkt"];
3416--8683[label="0.00970874;1pkt 1fpkt"];
3416--11127[label="1;103pkt 103fpkt"];
3416--14777[label="1;103pkt 103fpkt"];
3529--7350[label="1;143pkt 143fpkt"];
3529--10104[label="0.97549;199pkt 199fpkt"];
3867--4698[label="0.0461538;3pkt 3fpkt"];
3867--6423[label="0.106383;5pkt 5fpkt"];
3867--8514[label="0.0759494;6pkt 6fpkt"];
3867--8603[label="0.0759494;6pkt 6fpkt"];
3867--8680[label="0.0759494;6pkt 6fpkt"];
3867--10815[label="0.0641026;5pkt 5fpkt"];
3867--10941[label="0.0461538;3pkt 3fpkt"];
3867--11262[label="0.111111;1pkt 1fpkt"];
3867--12428[label="0.111111;2pkt 2fpkt"];
3867--14635[label="0.0641026;5pkt 5fpkt"];
3867--14689[label="0.0461538;3pkt 3fpkt"];
3867--15397[label="0.111111;2pkt 2fpkt"];
4698--10941[label="1;65pkt 65fpkt"];
4698--14689[label="1;65pkt 65fpkt"];
5215--5648[label="0.0681818;3pkt 3fpkt"];
5215--8514[label="0.0454545;2pkt 2fpkt"];
5215--8603[label="0.0454545;2pkt 2fpkt"];
5215--8680[label="0.0454545;2pkt 2fpkt"];
5215--9985[label="1;44pkt 44fpkt"];
5215--14247[label="1;44pkt 44fpkt"];
5648--7702[label="0.0204082;1pkt 1fpkt"];
5648--8450[label="0.0204082;1pkt 1fpkt"];
5648--8540[label="0.0204082;1pkt 1fpkt"];
5648--8625[label="0.0204082;1pkt 1fpkt"];
5648--9887[label="0.0204082;1pkt 1fpkt"];
5648--9985[label="0.0652174;3pkt 3fpkt"];
5648--12112[label="0.5;2pkt 2fpkt"];
5648--12428[label="0.166667;3pkt 3fpkt"];
5648--12904[label="0.0204082;1pkt 1fpkt"];
5648--14247[label="0.0652174;3pkt 3fpkt"];
5648--15246[label="0.5;2pkt 2fpkt"];
5648--15397[label="0.166667;3pkt 3fpkt"];
5648--15603[label="0.0204082;1pkt 1fpkt"];
6423--10815[label="1;47pkt 47fpkt"];
6423--14635[label="1;47pkt 47fpkt"];
7350--10104[label="0.972028;139pkt 139fpkt"];
8971--13787[label="1;5pkt 5fpkt"];
8971--16003[label="1;5pkt 5fpkt"];
9664--14095[label="1;37pkt 37fpkt"];
9863--14184[label="1;4pkt 4fpkt"];
9985--14247[label="1;46pkt 46fpkt"];
10815--14635[label="1;78pkt 78fpkt"];
10941--14689[label="1;65pkt 65fpkt"];
11127--14777[label="1;115pkt 115fpkt"];
11353--14887[label="1;2pkt 2fpkt"];
11676--15035[label="1;17pkt 17fpkt"];
11857--15132[label="1;13pkt 13fpkt"];
11857--16568[label="1;13pkt 13fpkt"];
12112--15246[label="1;4pkt 4fpkt"];
12428--15397[label="1;18pkt 18fpkt"];
13787--16003[label="1;5pkt 5fpkt"];
15132--16568[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.243.124" dst_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.138.143.151"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.21.96.153"/>
    </slice>
    <from sec="1246943218" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.39.139.153"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1248{
style=filled;
color=gray75;
11924[label="141.179.128.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15167[label="141.179.128.154;2pkt 2fpkt", shape=invtriangle, color=brown];
16582[label="141.179.128.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1248[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.128.154:50637, 209.71.119.62:28221}[50%]&lt;BR/&gt;{141.179.128.154:50638, 60.208.172.250:4661}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50638: (25%)&lt;BR/&gt; 50637: (25%)&lt;BR/&gt; 28221: (25%)&lt;BR/&gt; 4661: (25%)&gt;];
}
11924--15167[label="1;2pkt 2fpkt"];
11924--16582[label="1;2pkt 2fpkt"];
15167--16582[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="60.208.172.250" dst_port="4661" src_ip="141.179.128.154" src_port="50638"/>
      <filter dst_ip="209.71.119.62" dst_port="28221" src_ip="141.179.128.154" src_port="50637"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.102.236.154"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
1066[label="141.166.221.35;d;250pkt 250fpkt", shape=diamond, color=yellow];
1067[label="16.105.218.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
1993[label="136.90.167.73;d;269pkt 269fpkt", shape=diamond, color=yellow];
3031[label="91.46.145.212;s;10pkt 10fpkt", shape=diamond, color=yellow];
5477[label="204.240.33.3;s;5pkt 5fpkt", shape=diamond, color=yellow];
5480[label="204.100.230.22;s;165pkt 165fpkt", shape=diamond, color=yellow];
5955[label="90.225.60.3;s;4pkt 4fpkt", shape=diamond, color=yellow];
6475[label="17.121.59.32;s;3pkt 3fpkt", shape=diamond, color=yellow];
7709[label="141.166.221.35;d;102pkt 102fpkt", shape=hexagon, color=black];
8355[label="17.121.59.32;s;3pkt 3fpkt", shape=hexagon, color=black];
8777[label="204.240.33.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9431[label="17.121.59.32;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9874[label="90.225.60.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11600[label="214.167.87.138;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11729[label="91.46.145.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11954[label="91.46.145.156;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12389[label="218.211.145.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12451[label="91.46.145.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13254[label="16.105.218.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14189[label="90.225.60.52;2pkt 2fpkt", shape=invtriangle, color=brown];
15001[label="214.167.87.138;9pkt 9fpkt", shape=invtriangle, color=brown];
15180[label="91.46.145.156;3pkt 3fpkt", shape=invtriangle, color=brown];
15408[label="91.46.145.181;4pkt 4fpkt", shape=invtriangle, color=brown];
15757[label="16.105.218.228;1pkt 1fpkt", shape=invtriangle, color=brown];
16188[label="90.225.60.52;2pkt 2fpkt", shape=invhouse, color=bisque];
16585[label="91.46.145.156;3pkt 3fpkt", shape=invhouse, color=bisque];
16673[label="91.46.145.181;4pkt 4fpkt", shape=invhouse, color=bisque];
16829[label="16.105.218.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.166.221.35:*}[42.0608%]&lt;BR/&gt;{*:53, 136.90.167.73:*}[31.4189%]&lt;BR/&gt;{204.100.230.22:80, *:*}[27.8716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.2286%)&lt;BR/&gt; 53: (10.7429%)&lt;BR/&gt; 443: (0.628571%)&lt;BR/&gt; 57802: (0.342857%)&lt;BR/&gt; 6359: (0.342857%)&gt;];
}
1066--1067[label="1;1pkt 1fpkt"];
1066--1767[label="0.008;2pkt 2fpkt"];
1066--1865[label="0.333333;2pkt 2fpkt"];
1066--2037[label="0.032;8pkt 8fpkt"];
1066--2097[label="0.5;2pkt 2fpkt"];
1066--2784[label="0.0206186;2pkt 2fpkt"];
1066--3031[label="1;10pkt 10fpkt"];
1066--3198[label="0.09375;3pkt 3fpkt"];
1066--3421[label="0.0267857;6pkt 6fpkt"];
1066--3495[label="0.255814;11pkt 11fpkt"];
1066--3584[label="0.0434783;1pkt 1fpkt"];
1066--3907[label="0.00735294;1pkt 1fpkt"];
1066--4553[label="0.111111;2pkt 2fpkt"];
1066--4683[label="0.0078125;1pkt 1fpkt"];
1066--4876[label="0.0666667;1pkt 1fpkt"];
1066--5437[label="0.333333;2pkt 2fpkt"];
1066--5477[label="1;5pkt 5fpkt"];
1066--5480[label="0.642424;106pkt 106fpkt"];
1066--5955[label="0.75;3pkt 3fpkt"];
1066--6475[label="0.666667;2pkt 2fpkt"];
1066--7340[label="0.318182;7pkt 7fpkt"];
1066--7709[label="1;102pkt 102fpkt"];
1066--7785[label="0.0416667;6pkt 6fpkt"];
1066--7964[label="0.004;1pkt 1fpkt"];
1066--8224[label="0.047619;1pkt 1fpkt"];
1066--8355[label="0.666667;2pkt 2fpkt"];
1066--8451[label="0.032;8pkt 8fpkt"];
1066--8458[label="0.024;6pkt 6fpkt"];
1066--8484[label="0.016;4pkt 4fpkt"];
1066--8541[label="0.032;8pkt 8fpkt"];
1066--8548[label="0.024;6pkt 6fpkt"];
1066--8574[label="0.016;4pkt 4fpkt"];
1066--8626[label="0.032;8pkt 8fpkt"];
1066--8633[label="0.024;6pkt 6fpkt"];
1066--8656[label="0.016;4pkt 4fpkt"];
1066--8777[label="1;4pkt 4fpkt"];
1066--8928[label="0.25;2pkt 2fpkt"];
1066--9431[label="0.285714;2pkt 2fpkt"];
1066--9874[label="1;2pkt 2fpkt"];
1066--11019[label="0.00680272;1pkt 1fpkt"];
1066--11600[label="0.111111;1pkt 1fpkt"];
1066--11624[label="0.333333;2pkt 2fpkt"];
1066--11729[label="1;2pkt 2fpkt"];
1066--11954[label="1;3pkt 3fpkt"];
1066--12186[label="0.147059;5pkt 5fpkt"];
1066--12224[label="0.00657895;1pkt 1fpkt"];
1066--12451[label="1;4pkt 4fpkt"];
1066--12746[label="0.0666667;1pkt 1fpkt"];
1066--13049[label="0.008;2pkt 2fpkt"];
1066--13066[label="0.5;1pkt 1fpkt"];
1066--13118[label="0.222222;2pkt 2fpkt"];
1066--13164[label="0.004;1pkt 1fpkt"];
1066--13254[label="1;1pkt 1fpkt"];
1066--13767[label="0.25;2pkt 2fpkt"];
1066--14189[label="1;2pkt 2fpkt"];
1066--15001[label="0.111111;1pkt 1fpkt"];
1066--15180[label="1;3pkt 3fpkt"];
1066--15282[label="0.147059;5pkt 5fpkt"];
1066--15304[label="0.00657895;1pkt 1fpkt"];
1066--15408[label="1;4pkt 4fpkt"];
1066--15538[label="0.0666667;1pkt 1fpkt"];
1066--15698[label="0.222222;2pkt 2fpkt"];
1066--15718[label="0.004;1pkt 1fpkt"];
1066--15757[label="1;1pkt 1fpkt"];
1066--16188[label="1;2pkt 2fpkt"];
1066--16585[label="1;3pkt 3fpkt"];
1066--16626[label="0.0526316;1pkt 1fpkt"];
1066--16627[label="0.147059;5pkt 5fpkt"];
1066--16673[label="1;4pkt 4fpkt"];
1066--16744[label="0.0666667;1pkt 1fpkt"];
1066--16816[label="0.004;1pkt 1fpkt"];
1066--16829[label="1;1pkt 1fpkt"];
1067--7709[label="1;1pkt 1fpkt"];
1067--13254[label="1;1pkt 1fpkt"];
1067--15757[label="1;1pkt 1fpkt"];
1067--16829[label="1;1pkt 1fpkt"];
1993--2037[label="0.0148699;4pkt 4fpkt"];
1993--2166[label="0.0223048;6pkt 6fpkt"];
1993--2255[label="0.23913;11pkt 11fpkt"];
1993--2761[label="0.0223048;6pkt 6fpkt"];
1993--4143[label="0.037594;5pkt 5fpkt"];
1993--4470[label="0.00743494;2pkt 2fpkt"];
1993--4477[label="0.00743494;2pkt 2fpkt"];
1993--4507[label="0.0136986;2pkt 2fpkt"];
1993--4614[label="0.0179372;4pkt 4fpkt"];
1993--5558[label="0.00371747;1pkt 1fpkt"];
1993--6475[label="0.333333;1pkt 1fpkt"];
1993--6607[label="0.115385;3pkt 3fpkt"];
1993--6895[label="0.0185874;5pkt 5fpkt"];
1993--7334[label="0.0576923;3pkt 3fpkt"];
1993--7373[label="0.5;11pkt 11fpkt"];
1993--7501[label="0.00743494;2pkt 2fpkt"];
1993--7702[label="0.137546;37pkt 37fpkt"];
1993--7716[label="0.0176991;2pkt 2fpkt"];
1993--7829[label="0.0520833;5pkt 5fpkt"];
1993--8355[label="0.333333;1pkt 1fpkt"];
1993--8450[label="0.063197;17pkt 17fpkt"];
1993--8451[label="0.0111524;3pkt 3fpkt"];
1993--8458[label="0.0743494;20pkt 20fpkt"];
1993--8484[label="0.0111524;3pkt 3fpkt"];
1993--8540[label="0.063197;17pkt 17fpkt"];
1993--8541[label="0.0111524;3pkt 3fpkt"];
1993--8548[label="0.0743494;20pkt 20fpkt"];
1993--8574[label="0.0111524;3pkt 3fpkt"];
1993--8625[label="0.063197;17pkt 17fpkt"];
1993--8626[label="0.0111524;3pkt 3fpkt"];
1993--8633[label="0.0743494;20pkt 20fpkt"];
1993--8656[label="0.0111524;3pkt 3fpkt"];
1993--8776[label="0.0223048;6pkt 6fpkt"];
1993--9431[label="0.142857;1pkt 1fpkt"];
1993--9846[label="0.00743494;2pkt 2fpkt"];
1993--10842[label="0.00436681;1pkt 1fpkt"];
1993--11025[label="0.00371747;1pkt 1fpkt"];
1993--11255[label="0.00743494;2pkt 2fpkt"];
1993--11404[label="0.173913;24pkt 24fpkt"];
1993--11708[label="0.0111524;3pkt 3fpkt"];
1993--12022[label="0.0162162;3pkt 3fpkt"];
1993--12029[label="0.0107527;2pkt 2fpkt"];
1993--12074[label="0.0133333;1pkt 1fpkt"];
1993--12190[label="0.0223048;6pkt 6fpkt"];
1993--12255[label="0.037037;3pkt 3fpkt"];
1993--12299[label="0.0190114;5pkt 5fpkt"];
1993--12389[label="0.5;1pkt 1fpkt"];
1993--12771[label="0.00757576;1pkt 1fpkt"];
1993--12860[label="0.0223048;6pkt 6fpkt"];
1993--12904[label="0.063197;17pkt 17fpkt"];
1993--13188[label="0.00938967;2pkt 2fpkt"];
1993--13309[label="0.00371747;1pkt 1fpkt"];
1993--13340[label="0.0185874;5pkt 5fpkt"];
1993--14837[label="0.00743494;2pkt 2fpkt"];
1993--15053[label="0.0111524;3pkt 3fpkt"];
1993--15212[label="0.0162162;3pkt 3fpkt"];
1993--15217[label="0.0107527;2pkt 2fpkt"];
1993--15283[label="0.0223048;6pkt 6fpkt"];
1993--15320[label="0.037037;3pkt 3fpkt"];
1993--15341[label="0.0190114;5pkt 5fpkt"];
1993--15603[label="0.063197;17pkt 17fpkt"];
1993--15786[label="0.00371747;1pkt 1fpkt"];
1993--15798[label="0.0185874;5pkt 5fpkt"];
1993--16647[label="0.0190114;5pkt 5fpkt"];
1993--16842[label="0.0185874;5pkt 5fpkt"];
3031--7709[label="1;10pkt 10fpkt"];
5477--8777[label="1;4pkt 4fpkt"];
6475--8355[label="1;3pkt 3fpkt"];
6475--9431[label="1;3pkt 3fpkt"];
7709--7785[label="0.0588235;6pkt 6fpkt"];
7709--7964[label="0.00980392;1pkt 1fpkt"];
7709--8451[label="0.0784314;8pkt 8fpkt"];
7709--8458[label="0.0588235;6pkt 6fpkt"];
7709--8484[label="0.0392157;4pkt 4fpkt"];
7709--8541[label="0.0784314;8pkt 8fpkt"];
7709--8548[label="0.0588235;6pkt 6fpkt"];
7709--8574[label="0.0392157;4pkt 4fpkt"];
7709--8626[label="0.0784314;8pkt 8fpkt"];
7709--8633[label="0.0588235;6pkt 6fpkt"];
7709--8656[label="0.0392157;4pkt 4fpkt"];
7709--11019[label="0.00980392;1pkt 1fpkt"];
7709--11624[label="0.333333;2pkt 2fpkt"];
7709--11729[label="1;2pkt 2fpkt"];
7709--11954[label="1;3pkt 3fpkt"];
7709--12186[label="0.0882353;3pkt 3fpkt"];
7709--12451[label="1;4pkt 4fpkt"];
7709--12746[label="0.0666667;1pkt 1fpkt"];
7709--13049[label="0.00980392;1pkt 1fpkt"];
7709--13066[label="0.5;1pkt 1fpkt"];
7709--13118[label="0.222222;2pkt 2fpkt"];
7709--13254[label="1;1pkt 1fpkt"];
7709--15180[label="1;3pkt 3fpkt"];
7709--15282[label="0.0882353;3pkt 3fpkt"];
7709--15408[label="1;4pkt 4fpkt"];
7709--15538[label="0.0666667;1pkt 1fpkt"];
7709--15698[label="0.222222;2pkt 2fpkt"];
7709--15757[label="1;1pkt 1fpkt"];
7709--16585[label="1;3pkt 3fpkt"];
7709--16626[label="0.0526316;1pkt 1fpkt"];
7709--16627[label="0.0882353;3pkt 3fpkt"];
7709--16673[label="1;4pkt 4fpkt"];
7709--16744[label="0.0666667;1pkt 1fpkt"];
7709--16829[label="1;1pkt 1fpkt"];
8355--9431[label="1;3pkt 3fpkt"];
9874--14189[label="1;2pkt 2fpkt"];
9874--16188[label="1;2pkt 2fpkt"];
11600--15001[label="1;9pkt 9fpkt"];
11954--15180[label="1;3pkt 3fpkt"];
11954--16585[label="1;3pkt 3fpkt"];
12451--15408[label="1;4pkt 4fpkt"];
12451--16673[label="1;4pkt 4fpkt"];
13254--15757[label="1;1pkt 1fpkt"];
13254--16829[label="1;1pkt 1fpkt"];
14189--16188[label="1;2pkt 2fpkt"];
15180--16585[label="1;3pkt 3fpkt"];
15408--16673[label="1;4pkt 4fpkt"];
15757--16829[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.100.230.22" src_port="80"/>
      <filter dst_ip="136.90.167.73" src_port="53"/>
      <filter dst_ip="141.166.221.35" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1252{
style=filled;
color=gray75;
11959[label="216.218.8.157;24pkt 24fpkt", shape=pentagon, color=darkviolet];
15182[label="216.218.8.157;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1252[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.218.8.157:80, 169.185.0.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59088: (2.08333%)&lt;BR/&gt; 59087: (2.08333%)&lt;BR/&gt; 59085: (2.08333%)&lt;BR/&gt; 59084: (2.08333%)&gt;];
}
11959--15182[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.0.180" src_ip="216.218.8.157" src_port="80"/>
    </slice>
    <from sec="1246943076" usec="0"/>
    <to sec="1246943078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
11960[label="137.58.10.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15183[label="137.58.10.157;1pkt 1fpkt", shape=invtriangle, color=brown];
16586[label="137.58.10.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.58.10.157:80, 42.30.222.88:56975}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56975: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11960--15183[label="1;1pkt 1fpkt"];
11960--16586[label="1;1pkt 1fpkt"];
15183--16586[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.222.88" dst_port="56975" src_ip="137.58.10.157" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
11972[label="136.90.213.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15187[label="136.90.213.157;1pkt 1fpkt", shape=invtriangle, color=brown];
16588[label="136.90.213.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.213.157:3331, 208.181.24.56:6359}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6359: (50%)&lt;BR/&gt; 3331: (50%)&gt;];
}
11972--15187[label="1;1pkt 1fpkt"];
11972--16588[label="1;1pkt 1fpkt"];
15187--16588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.181.24.56" dst_port="6359" src_ip="136.90.213.157" src_port="3331"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
11974[label="205.100.245.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15188[label="205.100.245.157;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.245.157:49585, 219.18.120.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49585: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11974--15188[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.32" dst_port="80" src_ip="205.100.245.157" src_port="49585"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753467,2.09017,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1256{
style=filled;
color=gray75;
6129[label="164.211.52.202;s;56pkt 56fpkt", shape=diamond, color=yellow];
12796[label="164.211.52.202;60pkt 60fpkt", shape=pentagon, color=darkviolet];
15561[label="164.211.52.202;60pkt 60fpkt", shape=invtriangle, color=brown];
stat1256[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.211.52.202:443, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63989: (0.852273%)&lt;BR/&gt; 60841: (0.852273%)&lt;BR/&gt; 59599: (0.852273%)&lt;BR/&gt; 59598: (0.852273%)&gt;];
}
6129--12796[label="1;56pkt 56fpkt"];
6129--15561[label="1;56pkt 56fpkt"];
12796--15561[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="164.211.52.202" src_port="443"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1257{
style=filled;
color=gray75;
11994[label="29.107.84.159;10pkt 10fpkt", shape=pentagon, color=darkviolet];
15197[label="29.107.84.159;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1257[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.107.84.159:*, 205.100.251.48:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3729: (5%)&lt;BR/&gt; 3728: (5%)&lt;BR/&gt; 3726: (5%)&lt;BR/&gt; 3725: (5%)&gt;];
}
11994--15197[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.48" dst_port="80" src_ip="29.107.84.159"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.29.135.159"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.60.196.159"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.192.226.159"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1261{
style=filled;
color=gray75;
12007[label="201.141.49.160;23pkt 23fpkt", shape=pentagon, color=darkviolet];
15204[label="201.141.49.160;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1261[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.141.49.160:80, 169.185.178.117:*}[47.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54558: (2.17391%)&lt;BR/&gt; 54557: (2.17391%)&lt;BR/&gt; 54555: (2.17391%)&lt;BR/&gt; 54552: (2.17391%)&gt;];
}
12007--15204[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.178.117" src_ip="201.141.49.160" src_port="80"/>
    </slice>
    <from sec="1246942874" usec="0"/>
    <to sec="1246943629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.27.61.160"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
12042[label="204.91.174.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15220[label="204.91.174.161;1pkt 1fpkt", shape=invtriangle, color=brown];
16599[label="204.91.174.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.91.174.161:50704, 219.18.120.46:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50704: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12042--15220[label="1;1pkt 1fpkt"];
12042--16599[label="1;1pkt 1fpkt"];
15220--16599[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.46" dst_port="80" src_ip="204.91.174.161" src_port="50704"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1264{
style=filled;
color=gray75;
12045[label="37.144.182.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15221[label="37.144.182.161;1pkt 1fpkt", shape=invtriangle, color=brown];
16600[label="37.144.182.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1264[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.144.182.161:80, 136.90.26.33:60319}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60319: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12045--15221[label="1;1pkt 1fpkt"];
12045--16600[label="1;1pkt 1fpkt"];
15221--16600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.26.33" dst_port="60319" src_ip="37.144.182.161" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1265{
style=filled;
color=gray75;
12120[label="141.179.214.164;19pkt 19fpkt", shape=pentagon, color=darkviolet];
15250[label="141.179.214.164;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1265[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.214.164:*, 43.118.98.248:80}[78.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 2869: (2.63158%)&lt;BR/&gt; 1969: (2.63158%)&lt;BR/&gt; 1966: (2.63158%)&lt;BR/&gt; 1963: (2.63158%)&gt;];
}
12120--15250[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="43.118.98.248" dst_port="80" src_ip="141.179.214.164"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.27.251.167"/>
    </slice>
    <from sec="1246943104" usec="0"/>
    <to sec="1246943109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.146.153.168"/>
    </slice>
    <from sec="1246943042" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
12204[label="92.89.17.169;21pkt 21fpkt", shape=pentagon, color=darkviolet];
15293[label="92.89.17.169;21pkt 21fpkt", shape=invtriangle, color=brown];
16630[label="92.89.17.169;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.89.17.169:*, 169.185.74.20:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60591: (2.38095%)&lt;BR/&gt; 60589: (2.38095%)&lt;BR/&gt; 60588: (2.38095%)&lt;BR/&gt; 60587: (2.38095%)&gt;];
}
12204--15293[label="1;21pkt 21fpkt"];
12204--16630[label="1;21pkt 21fpkt"];
15293--16630[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.20" dst_port="80" src_ip="92.89.17.169"/>
    </slice>
    <from sec="1246943690" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
12208[label="90.225.57.169;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15295[label="90.225.57.169;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.225.57.169:80, 141.166.221.35:*}[66.6667%]&lt;BR/&gt;{90.225.57.169:80, 136.90.67.51:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62544: (8.33333%)&lt;BR/&gt; 62543: (8.33333%)&lt;BR/&gt; 62542: (8.33333%)&lt;BR/&gt; 62541: (8.33333%)&gt;];
}
12208--15295[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.166.221.35" src_ip="90.225.57.169" src_port="80"/>
      <filter dst_ip="136.90.67.51" src_ip="90.225.57.169" src_port="80"/>
    </slice>
    <from sec="1246943454" usec="0"/>
    <to sec="1246943643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.142.1.170"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.112.29.171"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.134.188.171"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.20.224.171"/>
    </slice>
    <from sec="1246943083" usec="0"/>
    <to sec="1246943093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
12259[label="141.161.37.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15321[label="141.161.37.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.37.172:11690, 219.18.120.214:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11690: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12259--15321[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.214" dst_port="80" src_ip="141.161.37.172" src_port="11690"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1276{
style=filled;
color=gray75;
12270[label="212.141.201.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15324[label="212.141.201.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1276[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.141.201.172:1299, 205.100.253.30:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1299: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12270--15324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.253.30" dst_port="80" src_ip="212.141.201.172" src_port="1299"/>
    </slice>
    <from sec="1246943642" usec="0"/>
    <to sec="1246943674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.219.220.172"/>
    </slice>
    <from sec="1246942823" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.90.0.174"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1279{
style=filled;
color=gray75;
12305[label="141.161.37.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15345[label="141.161.37.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1279[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.37.174:57122, 219.18.120.239:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57122: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12305--15345[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.239" dst_port="80" src_ip="141.161.37.174" src_port="57122"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.22.133.175"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
12343[label="26.116.247.175;121pkt 121fpkt", shape=pentagon, color=darkviolet];
15363[label="26.116.247.175;121pkt 121fpkt", shape=invtriangle, color=brown];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.116.247.175:*, *:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 4924: (0.413223%)&lt;BR/&gt; 4472: (0.413223%)&lt;BR/&gt; 4109: (0.413223%)&lt;BR/&gt; 3979: (0.413223%)&gt;];
}
12343--15363[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="8080" src_ip="26.116.247.175"/>
    </slice>
    <from sec="1246943457" usec="0"/>
    <to sec="1246943475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1282{
style=filled;
color=gray75;
12363[label="17.121.61.177;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15370[label="17.121.61.177;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1282[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.121.61.177:80, 169.185.238.132:*}[66.6667%]&lt;BR/&gt;{17.121.61.177:80, 136.90.74.64:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51557: (8.33333%)&lt;BR/&gt; 51556: (8.33333%)&lt;BR/&gt; 51555: (8.33333%)&lt;BR/&gt; 51554: (8.33333%)&gt;];
}
12363--15370[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.238.132" src_ip="17.121.61.177" src_port="80"/>
      <filter dst_ip="136.90.74.64" src_ip="17.121.61.177" src_port="80"/>
    </slice>
    <from sec="1246943613" usec="0"/>
    <to sec="1246943676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.100.82.177"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.22.160.177"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.40.9.178"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
1222[label="205.151.43.46;d;678pkt 678fpkt", shape=diamond, color=yellow];
2006[label="205.100.241.69;d;461pkt 461fpkt", shape=diamond, color=yellow];
2525[label="205.100.241.131;d;461pkt 461fpkt", shape=diamond, color=yellow];
4482[label="141.179.244.71;d;120pkt 120fpkt", shape=diamond, color=yellow];
5053[label="136.90.176.195;d;123pkt 123fpkt", shape=diamond, color=yellow];
6978[label="205.100.241.131;d;409pkt 409fpkt", shape=hexagon, color=black];
8161[label="136.90.176.195;d;123pkt 123fpkt", shape=hexagon, color=black];
9387[label="213.144.156.29;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11648[label="90.225.2.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12381[label="17.121.32.178;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15378[label="17.121.32.178;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 205.151.43.46:0}[36.6251%]&lt;BR/&gt;{*:0, 205.100.241.69:0}[25.0136%]&lt;BR/&gt;{*:0, 205.100.241.131:0}[25.0136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7912%)&lt;BR/&gt; 1403: (0.0417537%)&lt;BR/&gt; 445: (0.0417537%)&lt;BR/&gt; 56405: (0.0208768%)&lt;BR/&gt; 46235: (0.0208768%)&gt;];
}
1222--2465[label="0.00147493;1pkt 1fpkt"];
1222--7693[label="0.0434783;1pkt 1fpkt"];
1222--9387[label="0.2;1pkt 1fpkt"];
1222--9704[label="0.037037;1pkt 1fpkt"];
1222--10971[label="0.00147493;1pkt 1fpkt"];
1222--11648[label="0.2;1pkt 1fpkt"];
1222--12381[label="0.2;1pkt 1fpkt"];
1222--14113[label="0.037037;1pkt 1fpkt"];
1222--14704[label="0.00147493;1pkt 1fpkt"];
1222--15378[label="0.2;1pkt 1fpkt"];
1222--16155[label="0.037037;1pkt 1fpkt"];
2006--9387[label="0.2;1pkt 1fpkt"];
2006--11648[label="0.2;1pkt 1fpkt"];
2006--12381[label="0.2;1pkt 1fpkt"];
2006--15378[label="0.2;1pkt 1fpkt"];
2525--6978[label="1;409pkt 409fpkt"];
2525--9387[label="0.2;1pkt 1fpkt"];
2525--11648[label="0.2;1pkt 1fpkt"];
2525--12381[label="0.2;1pkt 1fpkt"];
2525--15378[label="0.2;1pkt 1fpkt"];
4482--9387[label="0.2;1pkt 1fpkt"];
4482--11648[label="0.2;1pkt 1fpkt"];
4482--12381[label="0.2;1pkt 1fpkt"];
4482--15378[label="0.2;1pkt 1fpkt"];
5053--8161[label="1;123pkt 123fpkt"];
5053--8460[label="0.00813008;1pkt 1fpkt"];
5053--8550[label="0.00813008;1pkt 1fpkt"];
5053--8635[label="0.00813008;1pkt 1fpkt"];
5053--9387[label="0.2;1pkt 1fpkt"];
5053--11648[label="0.2;1pkt 1fpkt"];
5053--12381[label="0.2;1pkt 1fpkt"];
5053--15378[label="0.2;1pkt 1fpkt"];
6978--9387[label="0.2;1pkt 1fpkt"];
6978--11648[label="0.2;1pkt 1fpkt"];
6978--12381[label="0.2;1pkt 1fpkt"];
6978--15378[label="0.2;1pkt 1fpkt"];
8161--8460[label="0.00813008;1pkt 1fpkt"];
8161--8550[label="0.00813008;1pkt 1fpkt"];
8161--8635[label="0.00813008;1pkt 1fpkt"];
8161--9387[label="0.2;1pkt 1fpkt"];
8161--11648[label="0.2;1pkt 1fpkt"];
8161--12381[label="0.2;1pkt 1fpkt"];
8161--15378[label="0.2;1pkt 1fpkt"];
12381--15378[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="205.151.43.46"/>
      <filter dst_ip="205.100.241.131"/>
      <filter dst_ip="205.100.241.69"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.17.51.179"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.12.63.180"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.81.138.180"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1290{
style=filled;
color=gray75;
12441[label="141.161.37.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15402[label="141.161.37.181;1pkt 1fpkt", shape=invtriangle, color=brown];
16671[label="141.161.37.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1290[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.37.181:44039, 219.18.120.209:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44039: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12441--15402[label="1;1pkt 1fpkt"];
12441--16671[label="1;1pkt 1fpkt"];
15402--16671[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.18.120.209" dst_port="80" src_ip="141.161.37.181" src_port="44039"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1291{
style=filled;
color=gray75;
12445[label="210.139.98.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15403[label="210.139.98.181;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1291[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.139.98.181:80, 204.80.30.250:61030}[50%]&lt;BR/&gt;{210.139.98.181:80, 204.80.30.250:61031}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61031: (25%)&lt;BR/&gt; 61030: (25%)&gt;];
}
12445--15403[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" dst_port="61031" src_ip="210.139.98.181" src_port="80"/>
      <filter dst_ip="204.80.30.250" dst_port="61030" src_ip="210.139.98.181" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.21.200.181"/>
    </slice>
    <from sec="1246942874" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.112.143.182"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1294{
style=filled;
color=gray75;
12470[label="208.0.185.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15417[label="208.0.185.182;1pkt 1fpkt", shape=invtriangle, color=brown];
16679[label="208.0.185.182;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1294[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.0.185.182:2145, 204.91.171.76:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2145: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
12470--15417[label="1;1pkt 1fpkt"];
12470--16679[label="1;1pkt 1fpkt"];
15417--16679[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.171.76" dst_port="1434" src_ip="208.0.185.182" src_port="2145"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1295{
style=filled;
color=gray75;
12473[label="136.90.206.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15418[label="136.90.206.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1295[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.206.182:2304, 200.173.135.161:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2304: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
12473--15418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.135.161" dst_port="443" src_ip="136.90.206.182" src_port="2304"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.11.104.183"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.146.7.184"/>
    </slice>
    <from sec="1246943409" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.51.208.185"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1299{
style=filled;
color=gray75;
12531[label="136.90.44.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15441[label="136.90.44.186;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1299[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.44.186:56517, 104.131.76.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56517: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12531--15441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="104.131.76.97" dst_port="80" src_ip="136.90.44.186" src_port="56517"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1300{
style=filled;
color=gray75;
12542[label="25.16.40.187;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15448[label="25.16.40.187;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1300[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.16.40.187:17138, 205.100.251.57:80}[33.3333%]&lt;BR/&gt;{25.16.40.187:17148, 205.100.251.57:80}[33.3333%]&lt;BR/&gt;{25.16.40.187:17149, 205.100.251.57:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17149: (16.6667%)&lt;BR/&gt; 17148: (16.6667%)&lt;BR/&gt; 17138: (16.6667%)&gt;];
}
12542--15448[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.57" dst_port="80" src_ip="25.16.40.187" src_port="17149"/>
      <filter dst_ip="205.100.251.57" dst_port="80" src_ip="25.16.40.187" src_port="17148"/>
      <filter dst_ip="205.100.251.57" dst_port="80" src_ip="25.16.40.187" src_port="17138"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.205.60.188"/>
    </slice>
    <from sec="1246943178" usec="0"/>
    <to sec="1246943220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1302{
style=filled;
color=gray75;
12562[label="93.174.221.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15453[label="93.174.221.188;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1302[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.174.221.188:21258, 205.100.250.68:62716}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62716: (50%)&lt;BR/&gt; 21258: (50%)&gt;];
}
12562--15453[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="62716" src_ip="93.174.221.188" src_port="21258"/>
    </slice>
    <from sec="1246943623" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1303{
style=filled;
color=gray75;
12568[label="72.68.66.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15456[label="72.68.66.189;1pkt 1fpkt", shape=invtriangle, color=brown];
16697[label="72.68.66.189;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1303[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.68.66.189:31342, 141.179.243.149:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31342: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
12568--15456[label="1;1pkt 1fpkt"];
12568--16697[label="1;1pkt 1fpkt"];
15456--16697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.243.149" dst_port="443" src_ip="72.68.66.189" src_port="31342"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1304{
style=filled;
color=gray75;
12575[label="205.100.243.189;241pkt 241fpkt", shape=pentagon, color=darkviolet];
15461[label="205.100.243.189;241pkt 241fpkt", shape=invtriangle, color=brown];
16702[label="205.100.243.189;241pkt 241fpkt", shape=invhouse, color=bisque];
stat1304[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.243.189:*, *:53}[99.5851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7925%)&lt;BR/&gt; 60080: (0.207469%)&lt;BR/&gt; 55671: (0.207469%)&lt;BR/&gt; 55669: (0.207469%)&lt;BR/&gt; 55667: (0.207469%)&gt;];
}
12575--15461[label="1;241pkt 241fpkt"];
12575--16702[label="1;241pkt 241fpkt"];
15461--16702[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="205.100.243.189"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1305{
style=filled;
color=gray75;
12577[label="38.163.4.190;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15462[label="38.163.4.190;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1305[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.163.4.190:80, 205.100.255.64:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55177: (8.33333%)&lt;BR/&gt; 55176: (8.33333%)&lt;BR/&gt; 55175: (8.33333%)&lt;BR/&gt; 55174: (8.33333%)&gt;];
}
12577--15462[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.255.64" src_ip="38.163.4.190" src_port="80"/>
    </slice>
    <from sec="1246943442" usec="0"/>
    <to sec="1246943668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.20.25.190"/>
    </slice>
    <from sec="1246942929" usec="0"/>
    <to sec="1246943283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.80.58.191"/>
    </slice>
    <from sec="1246943255" usec="0"/>
    <to sec="1246943289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.202.122.191"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.200.128.191"/>
    </slice>
    <from sec="1246943675" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1310{
style=filled;
color=gray75;
12606[label="208.168.213.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15481[label="208.168.213.191;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1310[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.168.213.191:20100, 205.100.243.124:80}[50%]&lt;BR/&gt;{208.168.213.191:20101, 205.100.243.124:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20101: (25%)&lt;BR/&gt; 20100: (25%)&gt;];
}
12606--15481[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.243.124" dst_port="80" src_ip="208.168.213.191" src_port="20101"/>
      <filter dst_ip="205.100.243.124" dst_port="80" src_ip="208.168.213.191" src_port="20100"/>
    </slice>
    <from sec="1246943668" usec="0"/>
    <to sec="1246943688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.64.97.195"/>
    </slice>
    <from sec="1246943103" usec="0"/>
    <to sec="1246943110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.117.130.195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.97.177.195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
12693[label="214.19.172.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15522[label="214.19.172.196;2pkt 2fpkt", shape=invtriangle, color=brown];
16737[label="214.19.172.196;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.19.172.196:2358, 169.185.74.24:80}[50%]&lt;BR/&gt;{214.19.172.196:2361, 169.185.74.24:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2361: (25%)&lt;BR/&gt; 2358: (25%)&gt;];
}
12693--15522[label="1;2pkt 2fpkt"];
12693--16737[label="1;2pkt 2fpkt"];
15522--16737[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.24" dst_port="80" src_ip="214.19.172.196" src_port="2361"/>
      <filter dst_ip="169.185.74.24" dst_port="80" src_ip="214.19.172.196" src_port="2358"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
12724[label="37.150.13.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15530[label="37.150.13.199;1pkt 1fpkt", shape=invtriangle, color=brown];
16741[label="37.150.13.199;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.150.13.199:80, 204.80.30.250:60784}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60784: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12724--15530[label="1;1pkt 1fpkt"];
12724--16741[label="1;1pkt 1fpkt"];
15530--16741[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" dst_port="60784" src_ip="37.150.13.199" src_port="80"/>
    </slice>
    <from sec="1246943677" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.139.66.199"/>
    </slice>
    <from sec="1246943556" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1318{
style=filled;
color=gray75;
12732[label="26.123.70.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15534[label="26.123.70.199;1pkt 1fpkt", shape=invtriangle, color=brown];
16742[label="26.123.70.199;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1318[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.123.70.199:2272, 169.185.74.27:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 2272: (50%)&gt;];
}
12732--15534[label="1;1pkt 1fpkt"];
12732--16742[label="1;1pkt 1fpkt"];
15534--16742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.27" dst_port="3124" src_ip="26.123.70.199" src_port="2272"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.132.2.200"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1320{
style=filled;
color=gray75;
12753[label="136.90.80.200;16pkt 16fpkt", shape=pentagon, color=darkviolet];
15542[label="136.90.80.200;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1320[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.80.200:*, *:25}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 58274: (3.125%)&lt;BR/&gt; 58267: (3.125%)&lt;BR/&gt; 11327: (3.125%)&lt;BR/&gt; 11280: (3.125%)&gt;];
}
12753--15542[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.90.80.200"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.154.46.201"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.106.25.202"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.86.178.202"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246942886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1324{
style=filled;
color=gray75;
12834[label="149.116.89.204;7pkt 7fpkt", shape=pentagon, color=darkviolet];
15575[label="149.116.89.204;7pkt 7fpkt", shape=invtriangle, color=brown];
16759[label="149.116.89.204;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1324[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.116.89.204:*, 169.185.74.6:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52238: (7.14286%)&lt;BR/&gt; 34677: (7.14286%)&lt;BR/&gt; 33987: (7.14286%)&lt;BR/&gt; 26230: (7.14286%)&gt;];
}
12834--15575[label="1;7pkt 7fpkt"];
12834--16759[label="1;7pkt 7fpkt"];
15575--16759[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.74.6" dst_port="80" src_ip="149.116.89.204"/>
    </slice>
    <from sec="1246943178" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
12835[label="46.168.96.204;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15576[label="46.168.96.204;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.168.96.204:80, 204.80.31.60:59636}[50%]&lt;BR/&gt;{46.168.96.204:80, 204.80.31.60:60634}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60634: (25%)&lt;BR/&gt; 59636: (25%)&gt;];
}
12835--15576[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.31.60" dst_port="60634" src_ip="46.168.96.204" src_port="80"/>
      <filter dst_ip="204.80.31.60" dst_port="59636" src_ip="46.168.96.204" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.19.10.205"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.47.110.205"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1328{
style=filled;
color=gray75;
12856[label="136.90.148.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15586[label="136.90.148.205;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1328[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.148.205:6652, 221.79.123.0:80}[50%]&lt;BR/&gt;{136.90.148.205:6765, 221.79.123.0:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6765: (25%)&lt;BR/&gt; 6652: (25%)&gt;];
}
12856--15586[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="221.79.123.0" dst_port="80" src_ip="136.90.148.205" src_port="6765"/>
      <filter dst_ip="221.79.123.0" dst_port="80" src_ip="136.90.148.205" src_port="6652"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
12864[label="41.69.115.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15588[label="41.69.115.206;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.69.115.206:80, 172.133.56.11:1217}[50%]&lt;BR/&gt;{41.69.115.206:80, 172.133.56.11:1219}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1219: (25%)&lt;BR/&gt; 1217: (25%)&gt;];
}
12864--15588[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.56.11" dst_port="1219" src_ip="41.69.115.206" src_port="80"/>
      <filter dst_ip="172.133.56.11" dst_port="1217" src_ip="41.69.115.206" src_port="80"/>
    </slice>
    <from sec="1246943623" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1330{
style=filled;
color=gray75;
12871[label="211.113.239.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15592[label="211.113.239.206;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1330[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.113.239.206:59103, 205.100.250.68:61839}[50%]&lt;BR/&gt;{211.113.239.206:59103, 205.100.250.68:62864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59103: (50%)&lt;BR/&gt; 62864: (25%)&lt;BR/&gt; 61839: (25%)&gt;];
}
12871--15592[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.68" dst_port="62864" src_ip="211.113.239.206" src_port="59103"/>
      <filter dst_ip="205.100.250.68" dst_port="61839" src_ip="211.113.239.206" src_port="59103"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1331{
style=filled;
color=gray75;
12882[label="141.179.133.207;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15594[label="141.179.133.207;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1331[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.133.207:51119, 139.170.101.120:80}[33.3333%]&lt;BR/&gt;{141.179.133.207:51120, 200.108.220.136:80}[33.3333%]&lt;BR/&gt;{141.179.133.207:51121, 200.108.220.136:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51121: (16.6667%)&lt;BR/&gt; 51120: (16.6667%)&lt;BR/&gt; 51119: (16.6667%)&gt;];
}
12882--15594[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.108.220.136" dst_port="80" src_ip="141.179.133.207" src_port="51121"/>
      <filter dst_ip="200.108.220.136" dst_port="80" src_ip="141.179.133.207" src_port="51120"/>
      <filter dst_ip="139.170.101.120" dst_port="80" src_ip="141.179.133.207" src_port="51119"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1332{
style=filled;
color=gray75;
12898[label="141.179.128.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15600[label="141.179.128.208;2pkt 2fpkt", shape=invtriangle, color=brown];
16768[label="141.179.128.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1332[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.128.208:50195, 47.164.5.10:80}[50%]&lt;BR/&gt;{141.179.128.208:50203, 104.205.180.80:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50203: (25%)&lt;BR/&gt; 50195: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
12898--15600[label="1;2pkt 2fpkt"];
12898--16768[label="1;2pkt 2fpkt"];
15600--16768[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="104.205.180.80" dst_port="443" src_ip="141.179.128.208" src_port="50203"/>
      <filter dst_ip="47.164.5.10" dst_port="80" src_ip="141.179.128.208" src_port="50195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1333{
style=filled;
color=gray75;
1059[label="205.100.245.146;d;126pkt 126fpkt", shape=diamond, color=yellow];
11027[label="91.55.211.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11042[label="16.20.152.108;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12906[label="213.163.240.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13594[label="27.209.145.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14732[label="91.55.211.107;2pkt 2fpkt", shape=invtriangle, color=brown];
15604[label="213.163.240.208;2pkt 2fpkt", shape=invtriangle, color=brown];
15908[label="27.209.145.250;2pkt 2fpkt", shape=invtriangle, color=brown];
16397[label="91.55.211.107;2pkt 2fpkt", shape=invhouse, color=bisque];
16770[label="213.163.240.208;2pkt 2fpkt", shape=invhouse, color=bisque];
16892[label="27.209.145.250;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1333[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 205.100.245.146:0}[57.9365%]&lt;BR/&gt;{*:*, 205.100.245.146:2000}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 2000: (12.6712%)&lt;BR/&gt; 44418: (1.36986%)&lt;BR/&gt; 29644: (1.36986%)&lt;BR/&gt; 23693: (1.36986%)&gt;];
}
1059--7693[label="0.0434783;1pkt 1fpkt"];
1059--9704[label="0.037037;1pkt 1fpkt"];
1059--11027[label="1;2pkt 2fpkt"];
1059--11042[label="1;2pkt 2fpkt"];
1059--11822[label="0.0833333;1pkt 1fpkt"];
1059--12906[label="1;2pkt 2fpkt"];
1059--13594[label="1;2pkt 2fpkt"];
1059--14113[label="0.037037;1pkt 1fpkt"];
1059--14732[label="1;2pkt 2fpkt"];
1059--15604[label="1;2pkt 2fpkt"];
1059--15908[label="1;2pkt 2fpkt"];
1059--16155[label="0.037037;1pkt 1fpkt"];
1059--16397[label="1;2pkt 2fpkt"];
1059--16770[label="1;2pkt 2fpkt"];
1059--16892[label="1;2pkt 2fpkt"];
11027--14732[label="1;2pkt 2fpkt"];
11027--16397[label="1;2pkt 2fpkt"];
12906--15604[label="1;2pkt 2fpkt"];
12906--16770[label="1;2pkt 2fpkt"];
13594--15908[label="1;2pkt 2fpkt"];
13594--16892[label="1;2pkt 2fpkt"];
14732--16397[label="1;2pkt 2fpkt"];
15604--16770[label="1;2pkt 2fpkt"];
15908--16892[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.245.146" dst_port="2000"/>
      <filter dst_ip="205.100.245.146"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.90.168.209"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.229.147.210"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.232.139.211"/>
    </slice>
    <from sec="1246943395" usec="0"/>
    <to sec="1246943557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.246.158.211"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
12963[label="141.161.250.211;27pkt 27fpkt", shape=pentagon, color=darkviolet];
15628[label="141.161.250.211;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.161.250.211:80, 42.30.216.89:*}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65123: (1.85185%)&lt;BR/&gt; 63226: (1.85185%)&lt;BR/&gt; 62268: (1.85185%)&lt;BR/&gt; 61280: (1.85185%)&gt;];
}
12963--15628[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="42.30.216.89" src_ip="141.161.250.211" src_port="80"/>
    </slice>
    <from sec="1246942813" usec="0"/>
    <to sec="1246943639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.161.52.212"/>
    </slice>
    <from sec="1246942842" usec="0"/>
    <to sec="1246943680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.116.17.213"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1342{
style=filled;
color=gray75;
5323[label="170.81.28.117;d;63pkt 63fpkt", shape=diamond, color=yellow];
6450[label="46.184.153.11;s;7pkt 7fpkt", shape=diamond, color=yellow];
8962[label="32.152.136.10;65pkt 65fpkt", shape=pentagon, color=darkviolet];
12992[label="37.137.53.213;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13783[label="32.152.136.10;64pkt 64fpkt", shape=invtriangle, color=brown];
15642[label="37.137.53.213;4pkt 4fpkt", shape=invtriangle, color=brown];
16002[label="32.152.136.10;64pkt 64fpkt", shape=invhouse, color=bisque];
16788[label="37.137.53.213;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1342[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.152.136.10:80, 170.81.28.117:*}[65.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8182%)&lt;BR/&gt; 2239: (0.727273%)&lt;BR/&gt; 2235: (0.727273%)&lt;BR/&gt; 2234: (0.727273%)&lt;BR/&gt; 2180: (0.727273%)&gt;];
}
5323--6450[label="1;7pkt 7fpkt"];
5323--8484[label="0.206349;13pkt 13fpkt"];
5323--8574[label="0.206349;13pkt 13fpkt"];
5323--8656[label="0.206349;13pkt 13fpkt"];
5323--8962[label="0.809524;51pkt 51fpkt"];
5323--12992[label="0.75;3pkt 3fpkt"];
5323--13783[label="0.793651;50pkt 50fpkt"];
5323--15642[label="0.75;3pkt 3fpkt"];
5323--16002[label="0.793651;50pkt 50fpkt"];
5323--16788[label="0.75;3pkt 3fpkt"];
8962--13783[label="1;64pkt 64fpkt"];
8962--16002[label="1;64pkt 64fpkt"];
12992--15642[label="1;4pkt 4fpkt"];
12992--16788[label="1;4pkt 4fpkt"];
13783--16002[label="1;64pkt 64fpkt"];
15642--16788[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.28.117" src_ip="32.152.136.10" src_port="80"/>
    </slice>
    <from sec="1246943077" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.200.53.213"/>
    </slice>
    <from sec="1246942819" usec="0"/>
    <to sec="1246943483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10959,2.03927,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1344{
style=filled;
color=gray75;
630[label="205.100.250.82;d;1365pkt 1365fpkt", shape=diamond, color=yellow];
660[label="210.21.152.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
1249[label="169.185.250.226;d;577pkt 577fpkt", shape=diamond, color=yellow];
1874[label="27.210.225.127;s;8pkt 8fpkt", shape=diamond, color=yellow];
2015[label="218.170.2.193;s;74pkt 74fpkt", shape=diamond, color=yellow];
2405[label="169.185.244.11;d;16pkt 16fpkt", shape=diamond, color=yellow];
3130[label="43.140.19.12;s;17pkt 17fpkt", shape=diamond, color=yellow];
3178[label="169.185.48.56;d;3pkt 3fpkt", shape=diamond, color=yellow];
4526[label="141.90.153.64;s;29pkt 29fpkt", shape=diamond, color=yellow];
7165[label="210.21.152.223;s;1pkt 1fpkt", shape=hexagon, color=black];
7524[label="218.170.2.193;s;55pkt 55fpkt", shape=hexagon, color=black];
7606[label="169.185.244.11;d;16pkt 16fpkt", shape=hexagon, color=black];
9012[label="43.140.19.12;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10123[label="141.90.153.64;29pkt 29fpkt", shape=pentagon, color=darkviolet];
12110[label="40.133.73.164;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13001[label="200.108.211.213;25pkt 25fpkt", shape=pentagon, color=darkviolet];
13153[label="210.21.152.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13807[label="43.140.19.12;16pkt 16fpkt", shape=invtriangle, color=brown];
14302[label="141.90.153.64;29pkt 29fpkt", shape=invtriangle, color=brown];
15245[label="40.133.73.164;3pkt 3fpkt", shape=invtriangle, color=brown];
15645[label="200.108.211.213;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1344[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.100.250.82:63592}[42.0874%]&lt;BR/&gt;{35.88.147.236:80, 169.185.250.226:*}[23.835%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.0476%)&lt;BR/&gt; 63592: (18.7662%)&lt;BR/&gt; 53: (3.72294%)&lt;BR/&gt; 995: (1.94805%)&lt;BR/&gt; 64325: (1.70996%)&gt;];
}
630--1111[label="0.0182002;18pkt 18fpkt"];
630--1150[label="0.0126103;10pkt 10fpkt"];
630--1874[label="1;8pkt 8fpkt"];
630--2015[label="0.0135135;1pkt 1fpkt"];
630--2166[label="0.0107527;3pkt 3fpkt"];
630--2761[label="0.00469484;6pkt 6fpkt"];
630--3123[label="0.000732601;1pkt 1fpkt"];
630--4470[label="0.00413223;3pkt 3fpkt"];
630--4666[label="0.0555556;4pkt 4fpkt"];
630--5567[label="0.00251256;1pkt 1fpkt"];
630--6150[label="0.00203666;1pkt 1fpkt"];
630--6288[label="0.147059;5pkt 5fpkt"];
630--6895[label="0.0161943;16pkt 16fpkt"];
630--7401[label="0.000732601;1pkt 1fpkt"];
630--7501[label="0.0187394;11pkt 11fpkt"];
630--8450[label="0.00879121;12pkt 12fpkt"];
630--8451[label="0.0029304;4pkt 4fpkt"];
630--8458[label="0.0014652;2pkt 2fpkt"];
630--8484[label="0.0029304;4pkt 4fpkt"];
630--8540[label="0.00879121;12pkt 12fpkt"];
630--8541[label="0.0029304;4pkt 4fpkt"];
630--8548[label="0.0014652;2pkt 2fpkt"];
630--8574[label="0.0029304;4pkt 4fpkt"];
630--8625[label="0.00879121;12pkt 12fpkt"];
630--8626[label="0.0029304;4pkt 4fpkt"];
630--8633[label="0.0014652;2pkt 2fpkt"];
630--8656[label="0.0029304;4pkt 4fpkt"];
630--9176[label="0.000732601;1pkt 1fpkt"];
630--9491[label="0.0714286;1pkt 1fpkt"];
630--10126[label="0.00378788;1pkt 1fpkt"];
630--10150[label="0.0606061;2pkt 2fpkt"];
630--10296[label="0.125;4pkt 4fpkt"];
630--10322[label="0.00873362;2pkt 2fpkt"];
630--10842[label="0.0131004;3pkt 3fpkt"];
630--11025[label="0.0140351;4pkt 4fpkt"];
630--11129[label="0.00546448;1pkt 1fpkt"];
630--11255[label="0.0185676;21pkt 21fpkt"];
630--11393[label="0.0540541;4pkt 4fpkt"];
630--12029[label="0.0107527;2pkt 2fpkt"];
630--12110[label="0.333333;1pkt 1fpkt"];
630--12190[label="0.00874636;3pkt 3fpkt"];
630--12267[label="0.0275862;4pkt 4fpkt"];
630--12304[label="0.2;1pkt 1fpkt"];
630--12494[label="0.0434783;6pkt 6fpkt"];
630--12802[label="0.0425532;6pkt 6fpkt"];
630--12860[label="0.0043956;6pkt 6fpkt"];
630--13001[label="0.28;7pkt 7fpkt"];
630--13030[label="0.0227273;2pkt 2fpkt"];
630--13340[label="0.0147465;16pkt 16fpkt"];
630--13498[label="0.031746;2pkt 2fpkt"];
630--14317[label="0.0606061;2pkt 2fpkt"];
630--14388[label="0.125;4pkt 4fpkt"];
630--14397[label="0.00873362;2pkt 2fpkt"];
630--14779[label="0.00546448;1pkt 1fpkt"];
630--14837[label="0.0185676;21pkt 21fpkt"];
630--14910[label="0.0540541;4pkt 4fpkt"];
630--15217[label="0.0107527;2pkt 2fpkt"];
630--15245[label="0.333333;1pkt 1fpkt"];
630--15283[label="0.00874636;3pkt 3fpkt"];
630--15562[label="0.0425532;6pkt 6fpkt"];
630--15645[label="0.28;7pkt 7fpkt"];
630--15659[label="0.0227273;2pkt 2fpkt"];
630--15798[label="0.0147465;16pkt 16fpkt"];
630--15864[label="0.031746;2pkt 2fpkt"];
630--16419[label="0.00546448;1pkt 1fpkt"];
630--16481[label="0.0540541;4pkt 4fpkt"];
630--16753[label="0.0425532;6pkt 6fpkt"];
630--16842[label="0.0147465;16pkt 16fpkt"];
630--16877[label="0.031746;2pkt 2fpkt"];
660--3178[label="1;1pkt 1fpkt"];
660--7165[label="1;1pkt 1fpkt"];
660--13153[label="1;1pkt 1fpkt"];
1249--1327[label="0.0526316;1pkt 1fpkt"];
1249--1371[label="1;491pkt 491fpkt"];
1249--1615[label="0.00662252;1pkt 1fpkt"];
1249--2617[label="0.162162;6pkt 6fpkt"];
1249--2783[label="0.25;6pkt 6fpkt"];
1249--3130[label="1;17pkt 17fpkt"];
1249--4240[label="0.00543478;1pkt 1fpkt"];
1249--4700[label="0.00416667;1pkt 1fpkt"];
1249--6743[label="0.00917431;1pkt 1fpkt"];
1249--6852[label="0.0555556;1pkt 1fpkt"];
1249--7826[label="0.0384615;1pkt 1fpkt"];
1249--7990[label="0.26087;6pkt 6fpkt"];
1249--8451[label="0.292894;169pkt 169fpkt"];
1249--8458[label="0.135182;78pkt 78fpkt"];
1249--8484[label="0.0017331;1pkt 1fpkt"];
1249--8541[label="0.292894;169pkt 169fpkt"];
1249--8548[label="0.135182;78pkt 78fpkt"];
1249--8574[label="0.0017331;1pkt 1fpkt"];
1249--8626[label="0.292894;169pkt 169fpkt"];
1249--8633[label="0.135182;78pkt 78fpkt"];
1249--8656[label="0.0017331;1pkt 1fpkt"];
1249--8761[label="0.0434783;1pkt 1fpkt"];
1249--9012[label="1;17pkt 17fpkt"];
1249--10054[label="0.00543478;1pkt 1fpkt"];
1249--11426[label="0.142857;1pkt 1fpkt"];
1249--12088[label="0.00416667;1pkt 1fpkt"];
1249--13001[label="0.6;15pkt 15fpkt"];
1249--13694[label="0.0454545;1pkt 1fpkt"];
1249--13807[label="1;16pkt 16fpkt"];
1249--15645[label="0.6;15pkt 15fpkt"];
1249--15961[label="0.0454545;1pkt 1fpkt"];
2015--2405[label="0.1875;3pkt 3fpkt"];
2015--2488[label="0.0405405;3pkt 3fpkt"];
2015--3368[label="0.0769231;2pkt 2fpkt"];
2015--4093[label="0.0135135;1pkt 1fpkt"];
2015--4656[label="0.027027;2pkt 2fpkt"];
2015--4686[label="0.0363636;2pkt 2fpkt"];
2015--6597[label="0.0405405;3pkt 3fpkt"];
2015--6599[label="0.0540541;4pkt 4fpkt"];
2015--7199[label="0.0135135;1pkt 1fpkt"];
2015--7434[label="0.0405405;3pkt 3fpkt"];
2015--7524[label="1;55pkt 55fpkt"];
2015--7606[label="0.1875;3pkt 3fpkt"];
2015--8032[label="0.027027;2pkt 2fpkt"];
2015--8362[label="0.0135135;1pkt 1fpkt"];
2015--8364[label="0.0540541;4pkt 4fpkt"];
2015--8445[label="0.0135135;1pkt 1fpkt"];
2015--8446[label="0.0135135;1pkt 1fpkt"];
2015--8535[label="0.0135135;1pkt 1fpkt"];
2015--8536[label="0.0135135;1pkt 1fpkt"];
2405--4526[label="0.25;4pkt 4fpkt"];
2405--5556[label="0.25;4pkt 4fpkt"];
2405--7524[label="0.1875;3pkt 3fpkt"];
2405--7606[label="1;16pkt 16fpkt"];
2405--10123[label="0.25;4pkt 4fpkt"];
2405--14302[label="0.25;4pkt 4fpkt"];
3130--9012[label="1;17pkt 17fpkt"];
3130--13807[label="1;16pkt 16fpkt"];
3178--4526[label="0.333333;1pkt 1fpkt"];
3178--7165[label="1;1pkt 1fpkt"];
3178--10123[label="0.333333;1pkt 1fpkt"];
3178--13153[label="1;1pkt 1fpkt"];
3178--14302[label="0.333333;1pkt 1fpkt"];
4526--5542[label="0.0344828;1pkt 1fpkt"];
4526--7606[label="0.25;4pkt 4fpkt"];
4526--8484[label="0.0344828;1pkt 1fpkt"];
4526--8574[label="0.0344828;1pkt 1fpkt"];
4526--8656[label="0.0344828;1pkt 1fpkt"];
4526--10123[label="1;29pkt 29fpkt"];
4526--14302[label="1;29pkt 29fpkt"];
7165--13153[label="1;1pkt 1fpkt"];
7524--7606[label="0.1875;3pkt 3fpkt"];
7524--8032[label="0.0181818;1pkt 1fpkt"];
7524--8362[label="0.0181818;1pkt 1fpkt"];
7524--8364[label="0.0545455;3pkt 3fpkt"];
7524--8445[label="0.0181818;1pkt 1fpkt"];
7524--8446[label="0.0181818;1pkt 1fpkt"];
7524--8535[label="0.0181818;1pkt 1fpkt"];
7524--8536[label="0.0181818;1pkt 1fpkt"];
7606--10123[label="0.25;4pkt 4fpkt"];
7606--14302[label="0.25;4pkt 4fpkt"];
9012--13807[label="1;16pkt 16fpkt"];
10123--14302[label="1;29pkt 29fpkt"];
12110--15245[label="1;3pkt 3fpkt"];
13001--15645[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.250.82" dst_port="63592"/>
      <filter dst_ip="169.185.250.226" src_ip="35.88.147.236" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1345{
style=filled;
color=gray75;
13012[label="136.90.160.214;103pkt 103fpkt", shape=pentagon, color=darkviolet];
15651[label="136.90.160.214;103pkt 103fpkt", shape=invtriangle, color=brown];
stat1345[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.160.214:*, 172.21.193.64:19540}[49.5146%]&lt;BR/&gt;{136.90.160.214:*, 172.21.193.178:19540}[49.5146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19540: (49.5146%)&lt;BR/&gt; 0: (0.970874%)&lt;BR/&gt; 5000: (0.485437%)&lt;BR/&gt; 4999: (0.485437%)&lt;BR/&gt; 4998: (0.485437%)&gt;];
}
13012--15651[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="172.21.193.178" dst_port="19540" src_ip="136.90.160.214"/>
      <filter dst_ip="172.21.193.64" dst_port="19540" src_ip="136.90.160.214"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1346{
style=filled;
color=gray75;
13022[label="169.185.0.215;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15655[label="169.185.0.215;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1346[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.0.215:80, 47.99.109.203:49534}[50%]&lt;BR/&gt;{169.185.0.215:80, 47.99.109.203:49535}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49535: (25%)&lt;BR/&gt; 49534: (25%)&gt;];
}
13022--15655[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="47.99.109.203" dst_port="49535" src_ip="169.185.0.215" src_port="80"/>
      <filter dst_ip="47.99.109.203" dst_port="49534" src_ip="169.185.0.215" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.184.28.215"/>
    </slice>
    <from sec="1246942896" usec="0"/>
    <to sec="1246942906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.116.131.216"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
13056[label="169.185.153.216;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15671[label="169.185.153.216;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.185.153.216:50221, 142.53.12.90:443}[33.3333%]&lt;BR/&gt;{169.185.153.216:50222, 142.53.12.90:443}[33.3333%]&lt;BR/&gt;{169.185.153.216:50223, 142.53.12.90:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 50223: (16.6667%)&lt;BR/&gt; 50222: (16.6667%)&lt;BR/&gt; 50221: (16.6667%)&gt;];
}
13056--15671[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.53.12.90" dst_port="443" src_ip="169.185.153.216" src_port="50223"/>
      <filter dst_ip="142.53.12.90" dst_port="443" src_ip="169.185.153.216" src_port="50222"/>
      <filter dst_ip="142.53.12.90" dst_port="443" src_ip="169.185.153.216" src_port="50221"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.141.230.217"/>
    </slice>
    <from sec="1246942961" usec="0"/>
    <to sec="1246943679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.16.28.218"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.185.153.218"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
13089[label="99.157.226.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15685[label="99.157.226.218;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.157.226.218:61373, 205.100.251.49:80}[50%]&lt;BR/&gt;{99.157.226.218:62783, 205.100.251.49:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62783: (25%)&lt;BR/&gt; 61373: (25%)&gt;];
}
13089--15685[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="80" src_ip="99.157.226.218" src_port="62783"/>
      <filter dst_ip="205.100.251.49" dst_port="80" src_ip="99.157.226.218" src_port="61373"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.48.28.220"/>
    </slice>
    <from sec="1246942924" usec="0"/>
    <to sec="1246942939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1356{
style=filled;
color=gray75;
4457[label="219.38.166.4;d;82pkt 82fpkt", shape=diamond, color=yellow];
13139[label="141.179.128.222;67pkt 67fpkt", shape=pentagon, color=darkviolet];
15706[label="141.179.128.222;67pkt 67fpkt", shape=invtriangle, color=brown];
16811[label="141.179.128.222;67pkt 67fpkt", shape=invhouse, color=bisque];
stat1356[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.128.222:*, 219.38.166.4:80}[46.0784%]&lt;BR/&gt;{141.179.53.225:*, 219.38.166.4:80}[34.3137%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3993%)&lt;BR/&gt; 35832: (10.6007%)&lt;BR/&gt; 50828: (0.706714%)&lt;BR/&gt; 50826: (0.706714%)&lt;BR/&gt; 50824: (0.706714%)&gt;];
}
4457--8514[label="0.0487805;4pkt 4fpkt"];
4457--8603[label="0.0487805;4pkt 4fpkt"];
4457--8680[label="0.0487805;4pkt 4fpkt"];
4457--13139[label="0.701493;47pkt 47fpkt"];
4457--15706[label="0.701493;47pkt 47fpkt"];
4457--16811[label="0.701493;47pkt 47fpkt"];
13139--15706[label="1;67pkt 67fpkt"];
13139--16811[label="1;67pkt 67fpkt"];
15706--16811[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="219.38.166.4" dst_port="80" src_ip="141.179.128.222"/>
      <filter dst_ip="219.38.166.4" dst_port="80" src_ip="141.179.53.225"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.114.225.223"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.58.20.224"/>
    </slice>
    <from sec="1246942991" usec="0"/>
    <to sec="1246943579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1359{
style=filled;
color=gray75;
13173[label="137.34.198.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15722[label="137.34.198.224;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1359[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.34.198.224:12700, 205.100.251.48:38369}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38369: (50%)&lt;BR/&gt; 12700: (50%)&gt;];
}
13173--15722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.48" dst_port="38369" src_ip="137.34.198.224" src_port="12700"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1360{
style=filled;
color=gray75;
13180[label="141.179.22.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15725[label="141.179.22.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1360[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.22.225:443, 50.196.148.2:60060}[50%]&lt;BR/&gt;{141.179.22.225:443, 50.196.148.6:54122}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60060: (25%)&lt;BR/&gt; 54122: (25%)&gt;];
}
13180--15725[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="50.196.148.6" dst_port="54122" src_ip="141.179.22.225" src_port="443"/>
      <filter dst_ip="50.196.148.2" dst_port="60060" src_ip="141.179.22.225" src_port="443"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1361{
style=filled;
color=gray75;
13205[label="136.90.100.226;16pkt 16fpkt", shape=pentagon, color=darkviolet];
15732[label="136.90.100.226;16pkt 16fpkt", shape=invtriangle, color=brown];
16819[label="136.90.100.226;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1361[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.100.226:*, 42.92.165.226:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4878: (3.125%)&lt;BR/&gt; 1144: (3.125%)&lt;BR/&gt; 1141: (3.125%)&lt;BR/&gt; 1136: (3.125%)&gt;];
}
13205--15732[label="1;16pkt 16fpkt"];
13205--16819[label="1;16pkt 16fpkt"];
15732--16819[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="42.92.165.226" dst_port="80" src_ip="136.90.100.226"/>
    </slice>
    <from sec="1246942962" usec="0"/>
    <to sec="1246943133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
13230[label="22.232.167.227;165pkt 165fpkt", shape=pentagon, color=darkviolet];
15746[label="22.232.167.227;165pkt 165fpkt", shape=invtriangle, color=brown];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.232.167.227:*, 141.5.138.29:9750}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9750: (50%)&lt;BR/&gt; 4247: (0.30303%)&lt;BR/&gt; 4245: (0.30303%)&lt;BR/&gt; 4238: (0.30303%)&lt;BR/&gt; 4236: (0.30303%)&gt;];
}
13230--15746[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="141.5.138.29" dst_port="9750" src_ip="22.232.167.227"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
2259[label="136.90.67.116;d;34pkt 34fpkt", shape=diamond, color=yellow];
2919[label="42.50.23.4;s;11pkt 11fpkt", shape=diamond, color=yellow];
8802[label="42.50.23.4;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13239[label="40.238.52.228;10pkt 10fpkt", shape=pentagon, color=darkviolet];
15750[label="40.238.52.228;10pkt 10fpkt", shape=invtriangle, color=brown];
16827[label="40.238.52.228;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.50.23.4:80, 136.90.67.116:*}[32.3529%]&lt;BR/&gt;{90.225.8.233:80, 136.90.67.116:*}[32.3529%]&lt;BR/&gt;{40.238.52.228:80, 136.90.67.116:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1973: (2.32558%)&lt;BR/&gt; 1972: (2.32558%)&lt;BR/&gt; 1969: (2.32558%)&lt;BR/&gt; 1967: (2.32558%)&gt;];
}
2259--2919[label="1;11pkt 11fpkt"];
2259--8451[label="0.0588235;2pkt 2fpkt"];
2259--8458[label="0.0294118;1pkt 1fpkt"];
2259--8484[label="0.0294118;1pkt 1fpkt"];
2259--8541[label="0.0588235;2pkt 2fpkt"];
2259--8548[label="0.0294118;1pkt 1fpkt"];
2259--8574[label="0.0294118;1pkt 1fpkt"];
2259--8626[label="0.0588235;2pkt 2fpkt"];
2259--8633[label="0.0294118;1pkt 1fpkt"];
2259--8656[label="0.0294118;1pkt 1fpkt"];
2259--8802[label="1;11pkt 11fpkt"];
2259--13239[label="1;10pkt 10fpkt"];
2259--15750[label="1;10pkt 10fpkt"];
2259--16827[label="1;10pkt 10fpkt"];
2919--8451[label="0.181818;2pkt 2fpkt"];
2919--8458[label="0.0909091;1pkt 1fpkt"];
2919--8484[label="0.0909091;1pkt 1fpkt"];
2919--8541[label="0.181818;2pkt 2fpkt"];
2919--8548[label="0.0909091;1pkt 1fpkt"];
2919--8574[label="0.0909091;1pkt 1fpkt"];
2919--8626[label="0.181818;2pkt 2fpkt"];
2919--8633[label="0.0909091;1pkt 1fpkt"];
2919--8656[label="0.0909091;1pkt 1fpkt"];
2919--8802[label="1;11pkt 11fpkt"];
13239--15750[label="1;10pkt 10fpkt"];
13239--16827[label="1;10pkt 10fpkt"];
15750--16827[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="136.90.67.116" src_ip="90.225.8.233" src_port="80"/>
      <filter dst_ip="136.90.67.116" src_ip="42.50.23.4" src_port="80"/>
      <filter dst_ip="136.90.67.116" src_ip="40.238.52.228" src_port="80"/>
    </slice>
    <from sec="1246942861" usec="0"/>
    <to sec="1246943596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.71.148.229"/>
    </slice>
    <from sec="1246942968" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1366{
style=filled;
color=gray75;
13276[label="219.18.125.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15768[label="219.18.125.230;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1366[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.125.230:80, 204.91.2.205:55109}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55109: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13276--15768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.2.205" dst_port="55109" src_ip="219.18.125.230" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.153.130.231"/>
    </slice>
    <from sec="1246942915" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.161.153.231"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.23.96.232"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
5635[label="155.192.33.233;s;159pkt 159fpkt", shape=diamond, color=yellow];
13317[label="155.192.33.233;174pkt 174fpkt", shape=pentagon, color=darkviolet];
15788[label="155.192.33.233;174pkt 174fpkt", shape=invtriangle, color=brown];
16837[label="155.192.33.233;174pkt 174fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.192.33.233:47117, *:*}[93.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47117: (46.4758%)&lt;BR/&gt; 443: (2.64317%)&lt;BR/&gt; 80: (0.881057%)&lt;BR/&gt; 42567: (0.587372%)&lt;BR/&gt; 65248: (0.293686%)&gt;];
}
5635--13317[label="0.993711;158pkt 158fpkt"];
5635--15788[label="0.993711;158pkt 158fpkt"];
5635--16837[label="0.993711;158pkt 158fpkt"];
13317--15788[label="1;174pkt 174fpkt"];
13317--16837[label="1;174pkt 174fpkt"];
15788--16837[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter src_ip="155.192.33.233" src_port="47117"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.48.155.233"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1372{
style=filled;
color=gray75;
13356[label="93.128.81.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15803[label="93.128.81.235;1pkt 1fpkt", shape=invtriangle, color=brown];
16847[label="93.128.81.235;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1372[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.128.81.235:1288, 205.100.251.49:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1288: (50%)&gt;];
}
13356--15803[label="1;1pkt 1fpkt"];
13356--16847[label="1;1pkt 1fpkt"];
15803--16847[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.251.49" dst_port="3127" src_ip="93.128.81.235" src_port="1288"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.143.89.235"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.230.231.235"/>
    </slice>
    <from sec="1246942822" usec="0"/>
    <to sec="1246943271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1375{
style=filled;
color=gray75;
13385[label="141.179.210.236;128pkt 128fpkt", shape=pentagon, color=darkviolet];
15814[label="141.179.210.236;128pkt 128fpkt", shape=invtriangle, color=brown];
16850[label="141.179.210.236;128pkt 128fpkt", shape=invhouse, color=bisque];
stat1375[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.210.236:28662, *:*}[68.75%]&lt;BR/&gt;{141.179.210.236:45575, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28662: (34.375%)&lt;BR/&gt; 45575: (12.5%)&lt;BR/&gt; 53284: (0.78125%)&lt;BR/&gt; 49185: (0.78125%)&lt;BR/&gt; 42620: (0.78125%)&gt;];
}
13385--15814[label="1;128pkt 128fpkt"];
13385--16850[label="1;128pkt 128fpkt"];
15814--16850[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="141.179.210.236" src_port="28662"/>
      <filter src_ip="141.179.210.236" src_port="45575"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.56.239.236"/>
    </slice>
    <from sec="1246943589" usec="0"/>
    <to sec="1246943591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1377{
style=filled;
color=gray75;
13395[label="219.18.120.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15818[label="219.18.120.237;1pkt 1fpkt", shape=invtriangle, color=brown];
16853[label="219.18.120.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1377[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.18.120.237:80, 141.179.209.55:1384}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13395--15818[label="1;1pkt 1fpkt"];
13395--16853[label="1;1pkt 1fpkt"];
15818--16853[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.179.209.55" dst_port="1384" src_ip="219.18.120.237" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,004,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1378{
style=filled;
color=gray75;
1755[label="170.81.105.127;d;1048pkt 1048fpkt", shape=diamond, color=yellow];
10249[label="92.22.44.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14368[label="92.22.44.70;2pkt 2fpkt", shape=invtriangle, color=brown];
16248[label="92.22.44.70;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1378[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 170.81.105.127:0}[53.4351%]&lt;BR/&gt;{*:445, 170.81.105.127:*}[42.6527%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (53.1309%)&lt;BR/&gt; 445: (21.3472%)&lt;BR/&gt; 139: (1.70778%)&lt;BR/&gt; 3487: (0.189753%)&lt;BR/&gt; 3486: (0.189753%)&gt;];
}
1755--8496[label="0.000954198;1pkt 1fpkt"];
1755--8586[label="0.000954198;1pkt 1fpkt"];
1755--10249[label="1;2pkt 2fpkt"];
1755--13402[label="0.333333;1pkt 1fpkt"];
1755--14368[label="1;2pkt 2fpkt"];
1755--15821[label="0.333333;1pkt 1fpkt"];
1755--16248[label="1;2pkt 2fpkt"];
10249--14368[label="1;2pkt 2fpkt"];
10249--16248[label="1;2pkt 2fpkt"];
14368--16248[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.105.127" src_port="445"/>
      <filter dst_ip="170.81.105.127"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1379{
style=filled;
color=gray75;
939[label="218.170.90.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
940[label="136.90.0.132;s;66pkt 66fpkt", shape=diamond, color=yellow];
1288[label="141.179.243.126;s;158pkt 158fpkt", shape=diamond, color=yellow];
1324[label="141.179.243.149;s;117pkt 117fpkt", shape=diamond, color=yellow];
1432[label="218.170.92.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
1738[label="16.20.51.167;d;4pkt 4fpkt", shape=diamond, color=yellow];
1739[label="136.90.25.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
1932[label="205.100.248.230;s;361pkt 361fpkt", shape=diamond, color=yellow];
2221[label="218.170.92.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
2930[label="213.108.18.10;d;43pkt 43fpkt", shape=diamond, color=yellow];
3737[label="218.170.92.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
4300[label="218.170.92.170;d;2pkt 2fpkt", shape=diamond, color=yellow];
4362[label="218.170.70.64;d;3pkt 3fpkt", shape=diamond, color=yellow];
4958[label="218.170.70.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
4986[label="218.170.92.94;d;2pkt 2fpkt", shape=diamond, color=yellow];
5274[label="147.17.32.224;d;34pkt 34fpkt", shape=diamond, color=yellow];
5475[label="136.90.200.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
6038[label="218.170.92.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
6500[label="218.170.92.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
6530[label="218.170.28.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
7264[label="205.100.248.230;s;325pkt 325fpkt", shape=hexagon, color=black];
7632[label="218.170.92.170;d;2pkt 2fpkt", shape=hexagon, color=black];
10127[label="136.90.200.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10155[label="136.90.25.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11465[label="136.90.0.132;71pkt 71fpkt", shape=pentagon, color=darkviolet];
11831[label="141.179.243.149;127pkt 127fpkt", shape=pentagon, color=darkviolet];
13282[label="205.100.248.230;372pkt 372fpkt", shape=pentagon, color=darkviolet];
13403[label="136.90.206.237;102pkt 102fpkt", shape=pentagon, color=darkviolet];
14304[label="136.90.200.64;1pkt 1fpkt", shape=invtriangle, color=brown];
14319[label="136.90.25.66;1pkt 1fpkt", shape=invtriangle, color=brown];
15123[label="141.179.243.149;127pkt 127fpkt", shape=invtriangle, color=brown];
15822[label="136.90.206.237;102pkt 102fpkt", shape=invtriangle, color=brown];
16230[label="136.90.200.64;1pkt 1fpkt", shape=invhouse, color=bisque];
16234[label="136.90.25.66;1pkt 1fpkt", shape=invhouse, color=bisque];
16562[label="141.179.243.149;127pkt 127fpkt", shape=invhouse, color=bisque];
16855[label="136.90.206.237;102pkt 102fpkt", shape=invhouse, color=bisque];
stat1379[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.248.230:*, *:53}[30.5202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (22.2737%)&lt;BR/&gt; 443: (12.1413%)&lt;BR/&gt; 995: (5.71744%)&lt;BR/&gt; 25: (3.02428%)&lt;BR/&gt; 123: (2.62693%)&gt;];
}
939--940[label="1;1pkt 1fpkt"];
939--11465[label="1;1pkt 1fpkt"];
940--1738[label="0.75;3pkt 3fpkt"];
940--4986[label="0.5;1pkt 1fpkt"];
940--11465[label="1;66pkt 66fpkt"];
1288--2807[label="0.0540541;2pkt 2fpkt"];
1288--3225[label="0.00763359;1pkt 1fpkt"];
1288--3655[label="0.2;1pkt 1fpkt"];
1288--3788[label="0.5;1pkt 1fpkt"];
1288--4300[label="0.5;1pkt 1fpkt"];
1288--4362[label="0.666667;2pkt 2fpkt"];
1288--4958[label="1;1pkt 1fpkt"];
1288--5274[label="0.0588235;2pkt 2fpkt"];
1288--6430[label="0.2;1pkt 1fpkt"];
1288--6500[label="0.5;1pkt 1fpkt"];
1288--6530[label="1;1pkt 1fpkt"];
1288--7327[label="0.0952381;2pkt 2fpkt"];
1288--7632[label="0.5;1pkt 1fpkt"];
1288--7867[label="0.2;1pkt 1fpkt"];
1324--1437[label="0.285714;2pkt 2fpkt"];
1324--2930[label="0.883721;38pkt 38fpkt"];
1324--5274[label="0.117647;4pkt 4fpkt"];
1324--8451[label="0.00854701;1pkt 1fpkt"];
1324--8541[label="0.00854701;1pkt 1fpkt"];
1324--8626[label="0.00854701;1pkt 1fpkt"];
1324--11831[label="1;117pkt 117fpkt"];
1324--15123[label="1;117pkt 117fpkt"];
1324--16562[label="1;117pkt 117fpkt"];
1432--1932[label="1;1pkt 1fpkt"];
1432--7264[label="1;1pkt 1fpkt"];
1432--13282[label="1;1pkt 1fpkt"];
1738--1739[label="1;1pkt 1fpkt"];
1738--10155[label="1;1pkt 1fpkt"];
1738--11465[label="0.75;3pkt 3fpkt"];
1738--14319[label="1;1pkt 1fpkt"];
1738--16234[label="1;1pkt 1fpkt"];
1739--10155[label="1;1pkt 1fpkt"];
1739--14319[label="1;1pkt 1fpkt"];
1739--16234[label="1;1pkt 1fpkt"];
1932--2221[label="0.5;1pkt 1fpkt"];
1932--2447[label="0.00831025;3pkt 3fpkt"];
1932--3274[label="0.0166205;6pkt 6fpkt"];
1932--3287[label="0.00277008;1pkt 1fpkt"];
1932--3737[label="1;1pkt 1fpkt"];
1932--3879[label="0.00277008;1pkt 1fpkt"];
1932--3881[label="0.0221607;8pkt 8fpkt"];
1932--3884[label="0.00277008;1pkt 1fpkt"];
1932--3932[label="0.00277008;1pkt 1fpkt"];
1932--3953[label="0.00277008;1pkt 1fpkt"];
1932--4300[label="0.5;1pkt 1fpkt"];
1932--4481[label="0.00277008;1pkt 1fpkt"];
1932--4499[label="0.0277008;10pkt 10fpkt"];
1932--4546[label="0.033241;12pkt 12fpkt"];
1932--4564[label="0.00277008;1pkt 1fpkt"];
1932--4986[label="0.5;1pkt 1fpkt"];
1932--5008[label="0.00277008;1pkt 1fpkt"];
1932--5029[label="0.00277008;1pkt 1fpkt"];
1932--5039[label="0.00554017;2pkt 2fpkt"];
1932--5051[label="0.0110803;4pkt 4fpkt"];
1932--5517[label="0.00277008;1pkt 1fpkt"];
1932--5577[label="0.00277008;1pkt 1fpkt"];
1932--5600[label="0.00277008;1pkt 1fpkt"];
1932--5641[label="0.00554017;2pkt 2fpkt"];
1932--6038[label="1;1pkt 1fpkt"];
1932--6152[label="0.00277008;1pkt 1fpkt"];
1932--6180[label="0.0277008;10pkt 10fpkt"];
1932--6226[label="0.00831025;3pkt 3fpkt"];
1932--6500[label="0.5;1pkt 1fpkt"];
1932--7264[label="1;325pkt 325fpkt"];
1932--7494[label="0.0166205;6pkt 6fpkt"];
1932--7632[label="0.5;1pkt 1fpkt"];
1932--8181[label="0.00554017;2pkt 2fpkt"];
1932--8307[label="0.0277008;10pkt 10fpkt"];
1932--8449[label="0.00277008;1pkt 1fpkt"];
1932--8450[label="0.00277008;1pkt 1fpkt"];
1932--8459[label="0.00277008;1pkt 1fpkt"];
1932--8539[label="0.00277008;1pkt 1fpkt"];
1932--8540[label="0.00277008;1pkt 1fpkt"];
1932--8549[label="0.00277008;1pkt 1fpkt"];
1932--8624[label="0.00277008;1pkt 1fpkt"];
1932--8625[label="0.00277008;1pkt 1fpkt"];
1932--8634[label="0.00277008;1pkt 1fpkt"];
1932--13282[label="1;361pkt 361fpkt"];
2221--7264[label="0.5;1pkt 1fpkt"];
2221--13282[label="0.5;1pkt 1fpkt"];
2221--13403[label="0.5;1pkt 1fpkt"];
2221--15822[label="0.5;1pkt 1fpkt"];
2221--16855[label="0.5;1pkt 1fpkt"];
2930--4039[label="0.0465116;2pkt 2fpkt"];
2930--11831[label="0.883721;38pkt 38fpkt"];
2930--12824[label="0.0465116;2pkt 2fpkt"];
2930--15123[label="0.883721;38pkt 38fpkt"];
2930--15570[label="0.0465116;2pkt 2fpkt"];
2930--16562[label="0.883721;38pkt 38fpkt"];
2930--16757[label="0.0465116;2pkt 2fpkt"];
3737--7264[label="1;1pkt 1fpkt"];
3737--13282[label="1;1pkt 1fpkt"];
4300--7264[label="0.5;1pkt 1fpkt"];
4300--7632[label="1;2pkt 2fpkt"];
4300--13282[label="0.5;1pkt 1fpkt"];
4986--7264[label="0.5;1pkt 1fpkt"];
4986--11465[label="0.5;1pkt 1fpkt"];
4986--13282[label="0.5;1pkt 1fpkt"];
5274--5475[label="1;1pkt 1fpkt"];
5274--6641[label="0.0588235;2pkt 2fpkt"];
5274--7211[label="0.0294118;1pkt 1fpkt"];
5274--7435[label="0.0882353;3pkt 3fpkt"];
5274--8046[label="0.0294118;1pkt 1fpkt"];
5274--9893[label="0.0294118;1pkt 1fpkt"];
5274--9948[label="0.0588235;2pkt 2fpkt"];
5274--10061[label="0.0294118;1pkt 1fpkt"];
5274--10127[label="1;1pkt 1fpkt"];
5274--10847[label="0.0294118;1pkt 1fpkt"];
5274--11288[label="0.0294118;1pkt 1fpkt"];
5274--11831[label="0.117647;4pkt 4fpkt"];
5274--12098[label="0.0882353;3pkt 3fpkt"];
5274--14197[label="0.0294118;1pkt 1fpkt"];
5274--14226[label="0.0588235;2pkt 2fpkt"];
5274--14304[label="1;1pkt 1fpkt"];
5274--14857[label="0.0294118;1pkt 1fpkt"];
5274--15123[label="0.117647;4pkt 4fpkt"];
5274--16193[label="0.0294118;1pkt 1fpkt"];
5274--16230[label="1;1pkt 1fpkt"];
5274--16457[label="0.0294118;1pkt 1fpkt"];
5274--16562[label="0.117647;4pkt 4fpkt"];
5475--10127[label="1;1pkt 1fpkt"];
5475--14304[label="1;1pkt 1fpkt"];
5475--16230[label="1;1pkt 1fpkt"];
6038--13282[label="1;1pkt 1fpkt"];
6500--13282[label="0.5;1pkt 1fpkt"];
7264--7494[label="0.0184615;6pkt 6fpkt"];
7264--7632[label="0.5;1pkt 1fpkt"];
7264--8181[label="0.00615385;2pkt 2fpkt"];
7264--8307[label="0.0307692;10pkt 10fpkt"];
7264--8449[label="0.00307692;1pkt 1fpkt"];
7264--8450[label="0.00307692;1pkt 1fpkt"];
7264--8459[label="0.00307692;1pkt 1fpkt"];
7264--8539[label="0.00307692;1pkt 1fpkt"];
7264--8540[label="0.00307692;1pkt 1fpkt"];
7264--8549[label="0.00307692;1pkt 1fpkt"];
7264--8624[label="0.00307692;1pkt 1fpkt"];
7264--8625[label="0.00307692;1pkt 1fpkt"];
7264--8634[label="0.00307692;1pkt 1fpkt"];
7264--13282[label="1;325pkt 325fpkt"];
7632--13282[label="0.5;1pkt 1fpkt"];
10127--14304[label="1;1pkt 1fpkt"];
10127--16230[label="1;1pkt 1fpkt"];
10155--14319[label="1;1pkt 1fpkt"];
10155--16234[label="1;1pkt 1fpkt"];
11831--15123[label="1;127pkt 127fpkt"];
11831--16562[label="1;127pkt 127fpkt"];
13403--15822[label="1;102pkt 102fpkt"];
13403--16855[label="1;102pkt 102fpkt"];
14304--16230[label="1;1pkt 1fpkt"];
14319--16234[label="1;1pkt 1fpkt"];
15123--16562[label="1;127pkt 127fpkt"];
15822--16855[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="205.100.248.230"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
13426[label="136.90.92.239;91pkt 91fpkt", shape=pentagon, color=darkviolet];
15830[label="136.90.92.239;91pkt 91fpkt", shape=invtriangle, color=brown];
16858[label="136.90.92.239;91pkt 91fpkt", shape=invhouse, color=bisque];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.92.239:25, *:*}[48.3516%]&lt;BR/&gt;{136.90.92.239:*, *:25}[25.2747%]&lt;BR/&gt;{136.90.92.239:*, *:113}[21.978%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.8132%)&lt;BR/&gt; 113: (11.5385%)&lt;BR/&gt; 110: (1.0989%)&lt;BR/&gt; 63431: (0.549451%)&lt;BR/&gt; 52115: (0.549451%)&gt;];
}
13426--15830[label="1;91pkt 91fpkt"];
13426--16858[label="1;91pkt 91fpkt"];
15830--16858[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.92.239" src_port="25"/>
      <filter dst_port="25" src_ip="136.90.92.239"/>
      <filter dst_port="113" src_ip="136.90.92.239"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.197.188.239"/>
    </slice>
    <from sec="1246943049" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.82.226.239"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
13448[label="89.38.196.240;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15840[label="89.38.196.240;5pkt 5fpkt", shape=invtriangle, color=brown];
16863[label="89.38.196.240;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.38.196.240:80, 169.185.103.26:59268}[20%]&lt;BR/&gt;{89.38.196.240:80, 169.185.103.26:59269}[20%]&lt;BR/&gt;{89.38.196.240:80, 169.185.103.26:59270}[20%]&lt;BR/&gt;{89.38.196.240:80, 169.185.103.26:59275}[20%]&lt;BR/&gt;{89.38.196.240:80, 169.185.103.26:59276}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59276: (10%)&lt;BR/&gt; 59275: (10%)&lt;BR/&gt; 59270: (10%)&lt;BR/&gt; 59269: (10%)&gt;];
}
13448--15840[label="1;5pkt 5fpkt"];
13448--16863[label="1;5pkt 5fpkt"];
15840--16863[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.185.103.26" dst_port="59276" src_ip="89.38.196.240" src_port="80"/>
      <filter dst_ip="169.185.103.26" dst_port="59275" src_ip="89.38.196.240" src_port="80"/>
      <filter dst_ip="169.185.103.26" dst_port="59270" src_ip="89.38.196.240" src_port="80"/>
      <filter dst_ip="169.185.103.26" dst_port="59269" src_ip="89.38.196.240" src_port="80"/>
      <filter dst_ip="169.185.103.26" dst_port="59268" src_ip="89.38.196.240" src_port="80"/>
    </slice>
    <from sec="1246943020" usec="0"/>
    <to sec="1246943054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.160.227.242"/>
    </slice>
    <from sec="1246942901" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.40.34.243"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757293,2.11786,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1386{
style=filled;
color=gray75;
13484[label="41.73.73.243;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15858[label="41.73.73.243;2pkt 2fpkt", shape=invtriangle, color=brown];
16873[label="41.73.73.243;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1386[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.73.73.243:80, 204.80.30.250:60868}[50%]&lt;BR/&gt;{41.73.73.243:80, 204.80.30.250:61026}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61026: (25%)&lt;BR/&gt; 60868: (25%)&gt;];
}
13484--15858[label="1;2pkt 2fpkt"];
13484--16873[label="1;2pkt 2fpkt"];
15858--16873[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.30.250" dst_port="61026" src_ip="41.73.73.243" src_port="80"/>
      <filter dst_ip="204.80.30.250" dst_port="60868" src_ip="41.73.73.243" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
13517[label="49.108.189.245;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15873[label="49.108.189.245;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.108.189.245:18893, 193.137.56.227:53}[33.3333%]&lt;BR/&gt;{49.108.189.245:48027, 193.137.56.227:53}[33.3333%]&lt;BR/&gt;{49.108.189.245:55411, 193.137.56.227:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 55411: (16.6667%)&lt;BR/&gt; 48027: (16.6667%)&lt;BR/&gt; 18893: (16.6667%)&gt;];
}
13517--15873[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.137.56.227" dst_port="53" src_ip="49.108.189.245" src_port="55411"/>
      <filter dst_ip="193.137.56.227" dst_port="53" src_ip="49.108.189.245" src_port="48027"/>
      <filter dst_ip="193.137.56.227" dst_port="53" src_ip="49.108.189.245" src_port="18893"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.154.9.247"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1389{
style=filled;
color=gray75;
13597[label="219.53.154.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15909[label="219.53.154.250;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1389[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.53.154.250:80, 204.80.31.60:52007}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52007: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13597--15909[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.31.60" dst_port="52007" src_ip="219.53.154.250" src_port="80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
13599[label="141.179.209.250;7pkt 7fpkt", shape=pentagon, color=darkviolet];
15910[label="141.179.209.250;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.179.209.250:*, 204.81.223.43:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2142: (7.14286%)&lt;BR/&gt; 2140: (7.14286%)&lt;BR/&gt; 2139: (7.14286%)&lt;BR/&gt; 2138: (7.14286%)&gt;];
}
13599--15910[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="204.81.223.43" dst_port="80" src_ip="141.179.209.250"/>
    </slice>
    <from sec="1246943652" usec="0"/>
    <to sec="1246943677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1391{
style=filled;
color=gray75;
13600[label="136.90.217.250;11pkt 11fpkt", shape=pentagon, color=darkviolet];
15911[label="136.90.217.250;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1391[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.90.217.250:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54266: (4.54545%)&lt;BR/&gt; 54264: (4.54545%)&lt;BR/&gt; 53436: (4.54545%)&lt;BR/&gt; 50715: (4.54545%)&gt;];
}
13600--15911[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="136.90.217.250" src_port="25"/>
    </slice>
    <from sec="1246942835" usec="0"/>
    <to sec="1246943665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.103.82.252"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.108.131.253"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586264,2.19793,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.96.175.253"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.493448,2.147,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1395{
style=filled;
color=gray75;
13648[label="16.17.82.255;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15932[label="16.17.82.255;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1395[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.17.82.255:1813, 170.81.96.1:80}[25%]&lt;BR/&gt;{16.17.82.255:1814, 170.81.96.1:80}[25%]&lt;BR/&gt;{16.17.82.255:1815, 170.81.96.1:80}[25%]&lt;BR/&gt;{16.17.82.255:1817, 170.81.96.1:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1817: (12.5%)&lt;BR/&gt; 1815: (12.5%)&lt;BR/&gt; 1814: (12.5%)&lt;BR/&gt; 1813: (12.5%)&gt;];
}
13648--15932[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="170.81.96.1" dst_port="80" src_ip="16.17.82.255" src_port="1817"/>
      <filter dst_ip="170.81.96.1" dst_port="80" src_ip="16.17.82.255" src_port="1815"/>
      <filter dst_ip="170.81.96.1" dst_port="80" src_ip="16.17.82.255" src_port="1814"/>
      <filter dst_ip="170.81.96.1" dst_port="80" src_ip="16.17.82.255" src_port="1813"/>
    </slice>
    <from sec="1246943406" usec="0"/>
    <to sec="1246943451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.947478,2.06022,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1396{
style=filled;
color=gray75;
6375[label="204.91.177.173;d;22pkt 22fpkt", shape=diamond, color=yellow];
9250[label="139.170.181.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13925[label="139.170.181.22;2pkt 2fpkt", shape=invtriangle, color=brown];
16050[label="139.170.181.22;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1396[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 204.91.177.173:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3333%)&lt;BR/&gt; 3668: (6.66667%)&lt;BR/&gt; 3666: (6.66667%)&lt;BR/&gt; 3665: (5%)&lt;BR/&gt; 18058: (1.66667%)&gt;];
}
6375--7135[label="0.0454545;1pkt 1fpkt"];
6375--8484[label="0.136364;3pkt 3fpkt"];
6375--8574[label="0.136364;3pkt 3fpkt"];
6375--8656[label="0.136364;3pkt 3fpkt"];
6375--9250[label="1;3pkt 3fpkt"];
6375--12003[label="0.136364;3pkt 3fpkt"];
6375--12050[label="0.0454545;1pkt 1fpkt"];
6375--13419[label="0.047619;1pkt 1fpkt"];
6375--13925[label="1;2pkt 2fpkt"];
6375--15202[label="0.136364;3pkt 3fpkt"];
6375--15224[label="0.0454545;1pkt 1fpkt"];
6375--16050[label="1;3pkt 3fpkt"];
6375--16602[label="0.0454545;1pkt 1fpkt"];
9250--13925[label="1;2pkt 2fpkt"];
9250--16050[label="1;3pkt 3fpkt"];
13925--16050[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.177.173" src_port="80"/>
    </slice>
    <from sec="1246943146" usec="0"/>
    <to sec="1246943608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.43.37.0"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.3.135.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.53.154.0"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.208.196.0"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.18.120.1"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.101.25.2"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.7.129.2"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.32.82.3"/>
    </slice>
    <from sec="1246943554" usec="0"/>
    <to sec="1246943604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.156.119.3"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.25.181.5"/>
    </slice>
    <from sec="1246943521" usec="0"/>
    <to sec="1246943526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.142.10.6"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.22.168.7"/>
    </slice>
    <from sec="1246942956" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.72.101.8"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.116.58.12"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.212.122.12"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.86.147.15"/>
    </slice>
    <from sec="1246942821" usec="0"/>
    <to sec="1246942942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.188.129.17"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.217.151.21"/>
    </slice>
    <from sec="1246943002" usec="0"/>
    <to sec="1246943138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.116.164.26"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.176.63.28"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.30.31.31"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.164.43.31"/>
    </slice>
    <from sec="1246943118" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.116.165.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.100.240.32"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.16.160.34"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.170.73.39"/>
    </slice>
    <from sec="1246943011" usec="0"/>
    <to sec="1246943017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.80.231.40"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.114.74.41"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.190.140.42"/>
    </slice>
    <from sec="1246943137" usec="0"/>
    <to sec="1246943140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.24.176.46"/>
    </slice>
    <from sec="1246943254" usec="0"/>
    <to sec="1246943279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.19.129.47"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.115.2.49"/>
    </slice>
    <from sec="1246943523" usec="0"/>
    <to sec="1246943648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.164.216.52"/>
    </slice>
    <from sec="1246942971" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.220.161.53"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.33.89.54"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="141.42.51.58"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.106.14.64"/>
    </slice>
    <from sec="1246942803" usec="0"/>
    <to sec="1246943626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.201.58.66"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.42.0.67"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.38.16.70"/>
    </slice>
    <from sec="1246943000" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
1328[label="204.80.13.10;d;401pkt 401fpkt", shape=diamond, color=yellow];
1886[label="91.54.95.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
1887[label="205.100.229.48;d;2pkt 2fpkt", shape=diamond, color=yellow];
1966[label="205.100.244.107;d;172pkt 172fpkt", shape=diamond, color=yellow];
3102[label="220.214.229.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
3117[label="219.10.120.222;s;21pkt 21fpkt", shape=diamond, color=yellow];
3118[label="141.5.10.149;d;47pkt 47fpkt", shape=diamond, color=yellow];
3715[label="204.137.213.10;s;6pkt 6fpkt", shape=diamond, color=yellow];
4283[label="141.179.132.245;d;8pkt 8fpkt", shape=diamond, color=yellow];
5316[label="141.5.72.11;d;7pkt 7fpkt", shape=diamond, color=yellow];
5452[label="203.226.13.49;s;2pkt 2fpkt", shape=diamond, color=yellow];
8085[label="141.5.72.11;d;7pkt 7fpkt", shape=hexagon, color=black];
8973[label="204.137.213.10;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9636[label="218.64.174.41;53pkt 53fpkt", shape=pentagon, color=darkviolet];
9808[label="203.226.13.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10348[label="201.141.57.74;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10354[label="91.54.95.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10672[label="201.217.113.89;40pkt 40fpkt", shape=pentagon, color=darkviolet];
10827[label="42.3.248.97;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10990[label="40.42.8.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10991[label="32.152.21.106;35pkt 35fpkt", shape=pentagon, color=darkviolet];
11338[label="193.205.153.125;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11360[label="203.77.18.127;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11510[label="220.214.229.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11855[label="43.163.34.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12436[label="37.85.220.180;370pkt 370fpkt", shape=pentagon, color=darkviolet];
14414[label="201.141.57.74;5pkt 5fpkt", shape=invtriangle, color=brown];
14416[label="91.54.95.74;2pkt 2fpkt", shape=invtriangle, color=brown];
14568[label="201.217.113.89;40pkt 40fpkt", shape=invtriangle, color=brown];
14640[label="42.3.248.97;25pkt 25fpkt", shape=invtriangle, color=brown];
14715[label="40.42.8.106;6pkt 6fpkt", shape=invtriangle, color=brown];
14891[label="203.77.18.127;9pkt 9fpkt", shape=invtriangle, color=brown];
14964[label="220.214.229.133;1pkt 1fpkt", shape=invtriangle, color=brown];
15130[label="43.163.34.151;3pkt 3fpkt", shape=invtriangle, color=brown];
16336[label="201.217.113.89;40pkt 40fpkt", shape=invhouse, color=bisque];
16392[label="40.42.8.106;6pkt 6fpkt", shape=invhouse, color=bisque];
16474[label="203.77.18.127;9pkt 9fpkt", shape=invhouse, color=bisque];
16567[label="43.163.34.151;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.85.220.180:60001, *:*}[32.3427%]&lt;BR/&gt;{*:80, 204.80.13.10:*}[30.9441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4245%)&lt;BR/&gt; 60001: (13.3453%)&lt;BR/&gt; 10222: (6.83453%)&lt;BR/&gt; 12270: (6.51079%)&lt;BR/&gt; 443: (3.45324%)&gt;];
}
1328--1410[label="0.0416667;1pkt 1fpkt"];
1328--1565[label="0.004329;1pkt 1fpkt"];
1328--1641[label="0.0275862;8pkt 8fpkt"];
1328--1673[label="0.0333333;1pkt 1fpkt"];
1328--2037[label="0.0124688;5pkt 5fpkt"];
1328--2038[label="0.0821918;24pkt 24fpkt"];
1328--2209[label="0.136364;3pkt 3fpkt"];
1328--2613[label="0.00591716;1pkt 1fpkt"];
1328--3102[label="1;2pkt 2fpkt"];
1328--3421[label="0.00892857;2pkt 2fpkt"];
1328--3937[label="0.0285714;1pkt 1fpkt"];
1328--4143[label="0.0150376;2pkt 2fpkt"];
1328--4495[label="0.03125;3pkt 3fpkt"];
1328--4507[label="0.00684932;1pkt 1fpkt"];
1328--4614[label="0.00896861;2pkt 2fpkt"];
1328--4666[label="0.125;9pkt 9fpkt"];
1328--5047[label="0.0296296;4pkt 4fpkt"];
1328--5090[label="0.0227273;1pkt 1fpkt"];
1328--5799[label="0.0909091;1pkt 1fpkt"];
1328--6244[label="0.0384615;1pkt 1fpkt"];
1328--6729[label="0.0326087;12pkt 12fpkt"];
1328--6746[label="0.00743494;2pkt 2fpkt"];
1328--6895[label="0.00997506;4pkt 4fpkt"];
1328--6913[label="0.166667;1pkt 1fpkt"];
1328--6995[label="0.0116279;1pkt 1fpkt"];
1328--7501[label="0.00498753;2pkt 2fpkt"];
1328--7531[label="0.0599078;13pkt 13fpkt"];
1328--7716[label="0.00884956;1pkt 1fpkt"];
1328--7734[label="0.0357143;1pkt 1fpkt"];
1328--7829[label="0.0208333;2pkt 2fpkt"];
1328--7988[label="0.0470588;4pkt 4fpkt"];
1328--8451[label="0.0448878;18pkt 18fpkt"];
1328--8458[label="0.074813;30pkt 30fpkt"];
1328--8484[label="0.0473815;19pkt 19fpkt"];
1328--8541[label="0.0448878;18pkt 18fpkt"];
1328--8548[label="0.074813;30pkt 30fpkt"];
1328--8574[label="0.0473815;19pkt 19fpkt"];
1328--8626[label="0.0448878;18pkt 18fpkt"];
1328--8633[label="0.074813;30pkt 30fpkt"];
1328--8656[label="0.0473815;19pkt 19fpkt"];
1328--8760[label="0.0285714;1pkt 1fpkt"];
1328--8791[label="0.0769231;1pkt 1fpkt"];
1328--8799[label="0.0196078;1pkt 1fpkt"];
1328--8812[label="0.107143;3pkt 3fpkt"];
1328--8865[label="0.0761905;24pkt 24fpkt"];
1328--8878[label="0.0138889;1pkt 1fpkt"];
1328--8896[label="0.0540541;2pkt 2fpkt"];
1328--9636[label="0.264151;14pkt 14fpkt"];
1328--9657[label="0.0555556;1pkt 1fpkt"];
1328--9923[label="0.0261628;9pkt 9fpkt"];
1328--10348[label="0.2;1pkt 1fpkt"];
1328--10672[label="0.05;2pkt 2fpkt"];
1328--10814[label="0.102564;4pkt 4fpkt"];
1328--10827[label="0.04;1pkt 1fpkt"];
1328--10928[label="0.15;15pkt 15fpkt"];
1328--10965[label="0.0952381;2pkt 2fpkt"];
1328--10990[label="1;6pkt 6fpkt"];
1328--10991[label="0.257143;9pkt 9fpkt"];
1328--11007[label="0.0344828;1pkt 1fpkt"];
1328--11255[label="0.00498753;2pkt 2fpkt"];
1328--11261[label="0.00687285;2pkt 2fpkt"];
1328--11307[label="0.0322581;1pkt 1fpkt"];
1328--11360[label="0.222222;2pkt 2fpkt"];
1328--11393[label="0.121622;9pkt 9fpkt"];
1328--11510[label="1;1pkt 1fpkt"];
1328--11855[label="1;3pkt 3fpkt"];
1328--12003[label="0.00381679;1pkt 1fpkt"];
1328--12022[label="0.00540541;1pkt 1fpkt"];
1328--12097[label="0.311111;14pkt 14fpkt"];
1328--12211[label="0.00526316;1pkt 1fpkt"];
1328--12257[label="0.0434783;1pkt 1fpkt"];
1328--12360[label="0.111111;3pkt 3fpkt"];
1328--12742[label="0.0192308;1pkt 1fpkt"];
1328--12787[label="0.0561798;5pkt 5fpkt"];
1328--13127[label="0.0666667;1pkt 1fpkt"];
1328--13234[label="0.0357143;1pkt 1fpkt"];
1328--13331[label="0.027027;1pkt 1fpkt"];
1328--13340[label="0.00997506;4pkt 4fpkt"];
1328--13349[label="0.0526316;1pkt 1fpkt"];
1328--13707[label="0.0833333;1pkt 1fpkt"];
1328--13712[label="0.0192308;1pkt 1fpkt"];
1328--13717[label="0.107143;3pkt 3fpkt"];
1328--14215[label="0.0261628;9pkt 9fpkt"];
1328--14414[label="0.2;1pkt 1fpkt"];
1328--14568[label="0.05;2pkt 2fpkt"];
1328--14634[label="0.102564;4pkt 4fpkt"];
1328--14640[label="0.04;1pkt 1fpkt"];
1328--14715[label="1;6pkt 6fpkt"];
1328--14837[label="0.00498753;2pkt 2fpkt"];
1328--14866[label="0.0322581;1pkt 1fpkt"];
1328--14891[label="0.222222;2pkt 2fpkt"];
1328--14910[label="0.121622;9pkt 9fpkt"];
1328--14964[label="1;1pkt 1fpkt"];
1328--15130[label="1;3pkt 3fpkt"];
1328--15202[label="0.00381679;1pkt 1fpkt"];
1328--15212[label="0.00540541;1pkt 1fpkt"];
1328--15296[label="0.00526316;1pkt 1fpkt"];
1328--15700[label="0.0666667;1pkt 1fpkt"];
1328--15798[label="0.00997506;4pkt 4fpkt"];
1328--15968[label="0.0769231;1pkt 1fpkt"];
1328--15974[label="0.103448;3pkt 3fpkt"];
1328--16252[label="0.111111;1pkt 1fpkt"];
1328--16336[label="0.05;2pkt 2fpkt"];
1328--16392[label="1;6pkt 6fpkt"];
1328--16462[label="0.0322581;1pkt 1fpkt"];
1328--16474[label="0.222222;2pkt 2fpkt"];
1328--16481[label="0.121622;9pkt 9fpkt"];
1328--16567[label="1;3pkt 3fpkt"];
1328--16842[label="0.00997506;4pkt 4fpkt"];
1886--1887[label="0.5;1pkt 1fpkt"];
1886--1966[label="0.5;1pkt 1fpkt"];
1886--10354[label="1;2pkt 2fpkt"];
1886--14416[label="1;2pkt 2fpkt"];
1887--10354[label="0.5;1pkt 1fpkt"];
1887--12436[label="0.5;1pkt 1fpkt"];
1887--14416[label="0.5;1pkt 1fpkt"];
1966--2037[label="0.0116279;2pkt 2fpkt"];
1966--2038[label="0.0639535;11pkt 11fpkt"];
1966--2761[label="0.00581395;1pkt 1fpkt"];
1966--2877[label="0.0526316;1pkt 1fpkt"];
1966--4514[label="0.05;1pkt 1fpkt"];
1966--5558[label="0.00581395;1pkt 1fpkt"];
1966--5567[label="0.0116279;2pkt 2fpkt"];
1966--6150[label="0.00581395;1pkt 1fpkt"];
1966--6746[label="0.0523256;9pkt 9fpkt"];
1966--6942[label="0.166667;1pkt 1fpkt"];
1966--7531[label="0.0465116;8pkt 8fpkt"];
1966--7702[label="0.0174419;3pkt 3fpkt"];
1966--7833[label="0.0526316;1pkt 1fpkt"];
1966--8451[label="0.0232558;4pkt 4fpkt"];
1966--8458[label="0.104651;18pkt 18fpkt"];
1966--8484[label="0.0174419;3pkt 3fpkt"];
1966--8541[label="0.0232558;4pkt 4fpkt"];
1966--8548[label="0.104651;18pkt 18fpkt"];
1966--8574[label="0.0174419;3pkt 3fpkt"];
1966--8626[label="0.0232558;4pkt 4fpkt"];
1966--8633[label="0.104651;18pkt 18fpkt"];
1966--8656[label="0.0174419;3pkt 3fpkt"];
1966--8776[label="0.00581395;1pkt 1fpkt"];
1966--8865[label="0.0639535;11pkt 11fpkt"];
1966--9039[label="0.00581395;1pkt 1fpkt"];
1966--9197[label="0.0192308;1pkt 1fpkt"];
1966--9740[label="0.0454545;1pkt 1fpkt"];
1966--9923[label="0.0523256;9pkt 9fpkt"];
1966--10126[label="0.0174419;3pkt 3fpkt"];
1966--10354[label="0.5;1pkt 1fpkt"];
1966--10386[label="0.0143885;2pkt 2fpkt"];
1966--10620[label="0.00581395;1pkt 1fpkt"];
1966--10694[label="0.00584795;1pkt 1fpkt"];
1966--10827[label="0.04;1pkt 1fpkt"];
1966--10842[label="0.00581395;1pkt 1fpkt"];
1966--10928[label="0.01;1pkt 1fpkt"];
1966--11007[label="0.0344828;1pkt 1fpkt"];
1966--11129[label="0.00581395;1pkt 1fpkt"];
1966--11261[label="0.0523256;9pkt 9fpkt"];
1966--11338[label="0.714286;5pkt 5fpkt"];
1966--11536[label="0.00934579;1pkt 1fpkt"];
1966--12179[label="0.00746269;1pkt 1fpkt"];
1966--12239[label="0.00671141;1pkt 1fpkt"];
1966--12267[label="0.00689655;1pkt 1fpkt"];
1966--12494[label="0.00724638;1pkt 1fpkt"];
1966--12646[label="0.00581395;1pkt 1fpkt"];
1966--12751[label="0.25;2pkt 2fpkt"];
1966--12787[label="0.011236;1pkt 1fpkt"];
1966--12802[label="0.0070922;1pkt 1fpkt"];
1966--12860[label="0.00581395;1pkt 1fpkt"];
1966--13071[label="0.111111;1pkt 1fpkt"];
1966--13166[label="0.2;1pkt 1fpkt"];
1966--13188[label="0.00581395;1pkt 1fpkt"];
1966--13227[label="0.125;1pkt 1fpkt"];
1966--13309[label="0.00581395;1pkt 1fpkt"];
1966--13331[label="0.0540541;2pkt 2fpkt"];
1966--13349[label="0.0526316;1pkt 1fpkt"];
1966--13821[label="0.00581395;1pkt 1fpkt"];
1966--14215[label="0.0523256;9pkt 9fpkt"];
1966--14416[label="0.5;1pkt 1fpkt"];
1966--14549[label="0.00581395;1pkt 1fpkt"];
1966--14580[label="0.00584795;1pkt 1fpkt"];
1966--14640[label="0.04;1pkt 1fpkt"];
1966--14779[label="0.00581395;1pkt 1fpkt"];
1966--15278[label="0.00746269;1pkt 1fpkt"];
1966--15309[label="0.00671141;1pkt 1fpkt"];
1966--15496[label="0.00581395;1pkt 1fpkt"];
1966--15562[label="0.0070922;1pkt 1fpkt"];
1966--15719[label="0.2;1pkt 1fpkt"];
1966--15786[label="0.00581395;1pkt 1fpkt"];
1966--16325[label="0.00581395;1pkt 1fpkt"];
1966--16419[label="0.00581395;1pkt 1fpkt"];
1966--16719[label="0.00581395;1pkt 1fpkt"];
1966--16753[label="0.0070922;1pkt 1fpkt"];
3102--11510[label="1;1pkt 1fpkt"];
3102--14964[label="1;1pkt 1fpkt"];
3117--3118[label="0.904762;19pkt 19fpkt"];
3118--5090[label="0.0227273;1pkt 1fpkt"];
3118--7531[label="0.0212766;1pkt 1fpkt"];
3118--8799[label="0.0212766;1pkt 1fpkt"];
3118--8865[label="0.0212766;1pkt 1fpkt"];
3118--10672[label="0.025;1pkt 1fpkt"];
3118--12787[label="0.0212766;1pkt 1fpkt"];
3118--13712[label="0.0212766;1pkt 1fpkt"];
3118--14568[label="0.025;1pkt 1fpkt"];
3118--16336[label="0.025;1pkt 1fpkt"];
3715--4283[label="1;6pkt 6fpkt"];
3715--8973[label="1;6pkt 6fpkt"];
4283--8973[label="1;6pkt 6fpkt"];
4283--10827[label="0.125;1pkt 1fpkt"];
4283--11007[label="0.125;1pkt 1fpkt"];
4283--14640[label="0.125;1pkt 1fpkt"];
5316--5452[label="1;2pkt 2fpkt"];
5316--7531[label="0.142857;1pkt 1fpkt"];
5316--8085[label="1;7pkt 7fpkt"];
5316--9808[label="1;2pkt 2fpkt"];
5316--9923[label="0.142857;1pkt 1fpkt"];
5316--10672[label="0.142857;1pkt 1fpkt"];
5316--14215[label="0.142857;1pkt 1fpkt"];
5316--14568[label="0.142857;1pkt 1fpkt"];
5316--16336[label="0.142857;1pkt 1fpkt"];
5452--8085[label="1;2pkt 2fpkt"];
5452--9808[label="1;2pkt 2fpkt"];
8085--9808[label="1;2pkt 2fpkt"];
8085--9923[label="0.142857;1pkt 1fpkt"];
8085--10672[label="0.142857;1pkt 1fpkt"];
8085--14215[label="0.142857;1pkt 1fpkt"];
8085--14568[label="0.142857;1pkt 1fpkt"];
8085--16336[label="0.142857;1pkt 1fpkt"];
10348--14414[label="1;5pkt 5fpkt"];
10354--14416[label="1;2pkt 2fpkt"];
10672--14568[label="1;40pkt 40fpkt"];
10672--16336[label="1;40pkt 40fpkt"];
10827--14640[label="1;25pkt 25fpkt"];
10990--14715[label="1;6pkt 6fpkt"];
10990--16392[label="1;6pkt 6fpkt"];
11360--14891[label="1;9pkt 9fpkt"];
11360--16474[label="1;9pkt 9fpkt"];
11510--14964[label="1;1pkt 1fpkt"];
11855--15130[label="1;3pkt 3fpkt"];
11855--16567[label="1;3pkt 3fpkt"];
14568--16336[label="1;40pkt 40fpkt"];
14715--16392[label="1;6pkt 6fpkt"];
14891--16474[label="1;9pkt 9fpkt"];
15130--16567[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="37.85.220.180" src_port="60001"/>
      <filter dst_ip="204.80.13.10" src_port="80"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.27.77.71"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.58.1.75"/>
    </slice>
    <from sec="1246943223" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.140.226.78"/>
    </slice>
    <from sec="1246943101" usec="0"/>
    <to sec="1246943232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.153.33.79"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.10.182.80"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.28.187.83"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.177.30.84"/>
    </slice>
    <from sec="1246942945" usec="0"/>
    <to sec="1246942953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.42.158.87"/>
    </slice>
    <from sec="1246942994" usec="0"/>
    <to sec="1246943190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.90.189.87"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.23.227.90"/>
    </slice>
    <from sec="1246943504" usec="0"/>
    <to sec="1246943637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.204.112.92"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.35.36.96"/>
    </slice>
    <from sec="1246943070" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.100.244.97"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.13.249.97"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.33.143.99"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.15.107.100"/>
    </slice>
    <from sec="1246943272" usec="0"/>
    <to sec="1246943360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.82.4.104"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.96.131.106"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.21.60.110"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.50.218.114"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.163.137.120"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.32.194.121"/>
    </slice>
    <from sec="1246942811" usec="0"/>
    <to sec="1246943661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.98.130.129"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.18.120.131"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.30.174.131"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.69.234.137"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.90.128.139"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.221.19.144"/>
    </slice>
    <from sec="1246942810" usec="0"/>
    <to sec="1246943697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.12.165.144"/>
    </slice>
    <from sec="1246943503" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.145.199.146"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.129.203.146"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.54.140.148"/>
    </slice>
    <from sec="1246942942" usec="0"/>
    <to sec="1246942972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.49.222.148"/>
    </slice>
    <from sec="1246943591" usec="0"/>
    <to sec="1246943647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.76.243.148"/>
    </slice>
    <from sec="1246943003" usec="0"/>
    <to sec="1246943538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.39.139.153"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.102.236.154"/>
    </slice>
    <from sec="1246942804" usec="0"/>
    <to sec="1246943654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.27.61.160"/>
    </slice>
    <from sec="1246942808" usec="0"/>
    <to sec="1246943662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.27.251.167"/>
    </slice>
    <from sec="1246943104" usec="0"/>
    <to sec="1246943109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.112.29.171"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.90.0.174"/>
    </slice>
    <from sec="1246942829" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.100.82.177"/>
    </slice>
    <from sec="1246942806" usec="0"/>
    <to sec="1246943694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.40.9.178"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.17.51.179"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.12.63.180"/>
    </slice>
    <from sec="1246942805" usec="0"/>
    <to sec="1246943687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.21.200.181"/>
    </slice>
    <from sec="1246942874" usec="0"/>
    <to sec="1246943050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.112.143.182"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.146.7.184"/>
    </slice>
    <from sec="1246943409" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.51.208.185"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.205.60.188"/>
    </slice>
    <from sec="1246943180" usec="0"/>
    <to sec="1246943220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.200.128.191"/>
    </slice>
    <from sec="1246943675" usec="0"/>
    <to sec="1246943685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.64.97.195"/>
    </slice>
    <from sec="1246943103" usec="0"/>
    <to sec="1246943110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.97.177.195"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24948,2.00857,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
859[label="204.91.174.80;d;665pkt 665fpkt", shape=diamond, color=yellow];
2509[label="213.12.175.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
3242[label="16.178.184.207;s;23pkt 23fpkt", shape=diamond, color=yellow];
3390[label="23.68.85.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
4091[label="93.128.170.179;s;26pkt 26fpkt", shape=diamond, color=yellow];
5177[label="93.128.10.132;s;28pkt 28fpkt", shape=diamond, color=yellow];
6648[label="204.91.174.80;d;539pkt 539fpkt", shape=hexagon, color=black];
7811[label="93.128.170.179;s;18pkt 18fpkt", shape=hexagon, color=black];
10670[label="213.17.97.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11467[label="93.128.10.132;30pkt 30fpkt", shape=pentagon, color=darkviolet];
12382[label="93.168.33.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12886[label="16.178.184.207;23pkt 23fpkt", shape=pentagon, color=darkviolet];
14949[label="93.128.10.132;30pkt 30fpkt", shape=invtriangle, color=brown];
15596[label="16.178.184.207;23pkt 23fpkt", shape=invtriangle, color=brown];
16491[label="93.128.10.132;30pkt 30fpkt", shape=invhouse, color=bisque];
16734[label="23.68.85.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.91.174.80:1863}[53.8922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25.2431%)&lt;BR/&gt; 443: (9.0625%)&lt;BR/&gt; 80: (6.11111%)&lt;BR/&gt; 1972: (5.45139%)&lt;BR/&gt; 30433: (3.19444%)&gt;];
}
859--2509[label="1;1pkt 1fpkt"];
859--3242[label="1;23pkt 23fpkt"];
859--3390[label="1;1pkt 1fpkt"];
859--4091[label="1;26pkt 26fpkt"];
859--5177[label="1;28pkt 28fpkt"];
859--6648[label="1;539pkt 539fpkt"];
859--7811[label="1;18pkt 18fpkt"];
859--8451[label="0.0105263;7pkt 7fpkt"];
859--8458[label="0.0075188;5pkt 5fpkt"];
859--8484[label="0.00601504;4pkt 4fpkt"];
859--8541[label="0.0105263;7pkt 7fpkt"];
859--8548[label="0.0075188;5pkt 5fpkt"];
859--8574[label="0.00601504;4pkt 4fpkt"];
859--8626[label="0.0105263;7pkt 7fpkt"];
859--8633[label="0.0075188;5pkt 5fpkt"];
859--8656[label="0.00601504;4pkt 4fpkt"];
859--10670[label="1;1pkt 1fpkt"];
859--11467[label="0.933333;28pkt 28fpkt"];
859--11941[label="0.0769231;1pkt 1fpkt"];
859--12382[label="1;1pkt 1fpkt"];
859--12886[label="0.956522;22pkt 22fpkt"];
859--14949[label="0.933333;28pkt 28fpkt"];
859--15596[label="0.956522;22pkt 22fpkt"];
859--16491[label="0.933333;28pkt 28fpkt"];
859--16734[label="1;1pkt 1fpkt"];
2509--6648[label="1;1pkt 1fpkt"];
3242--6648[label="0.695652;16pkt 16fpkt"];
3242--8451[label="0.217391;5pkt 5fpkt"];
3242--8458[label="0.0869565;2pkt 2fpkt"];
3242--8484[label="0.130435;3pkt 3fpkt"];
3242--8541[label="0.217391;5pkt 5fpkt"];
3242--8548[label="0.0869565;2pkt 2fpkt"];
3242--8574[label="0.130435;3pkt 3fpkt"];
3242--8626[label="0.217391;5pkt 5fpkt"];
3242--8633[label="0.0869565;2pkt 2fpkt"];
3242--8656[label="0.130435;3pkt 3fpkt"];
3242--12886[label="0.956522;22pkt 22fpkt"];
3242--15596[label="0.956522;22pkt 22fpkt"];
3390--6648[label="1;1pkt 1fpkt"];
3390--16734[label="1;1pkt 1fpkt"];
4091--6648[label="0.692308;18pkt 18fpkt"];
4091--7811[label="1;18pkt 18fpkt"];
5177--6648[label="0.75;21pkt 21fpkt"];
5177--11467[label="1;28pkt 28fpkt"];
5177--14949[label="1;28pkt 28fpkt"];
5177--16491[label="1;28pkt 28fpkt"];
6648--7811[label="1;18pkt 18fpkt"];
6648--8451[label="0.012987;7pkt 7fpkt"];
6648--8458[label="0.00927644;5pkt 5fpkt"];
6648--8484[label="0.00742115;4pkt 4fpkt"];
6648--8541[label="0.012987;7pkt 7fpkt"];
6648--8548[label="0.00927644;5pkt 5fpkt"];
6648--8574[label="0.00742115;4pkt 4fpkt"];
6648--8626[label="0.012987;7pkt 7fpkt"];
6648--8633[label="0.00927644;5pkt 5fpkt"];
6648--8656[label="0.00742115;4pkt 4fpkt"];
6648--10670[label="1;1pkt 1fpkt"];
6648--11467[label="0.7;21pkt 21fpkt"];
6648--11941[label="0.0769231;1pkt 1fpkt"];
6648--12382[label="1;1pkt 1fpkt"];
6648--12886[label="0.652174;15pkt 15fpkt"];
6648--14949[label="0.7;21pkt 21fpkt"];
6648--15596[label="0.652174;15pkt 15fpkt"];
6648--16491[label="0.7;21pkt 21fpkt"];
6648--16734[label="1;1pkt 1fpkt"];
11467--14949[label="1;30pkt 30fpkt"];
11467--16491[label="1;30pkt 30fpkt"];
12886--15596[label="1;23pkt 23fpkt"];
14949--16491[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="204.91.174.80" dst_port="1863"/>
    </slice>
    <from sec="1246942801" usec="0"/>
    <to sec="1246943696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.132.2.200"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.154.46.201"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.106.25.202"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.47.110.205"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="169.185.138.208"/>
    </slice>
    <from sec="1246942973" usec="0"/>
    <to sec="1246942978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.229.147.210"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.246.158.211"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.184.28.215"/>
    </slice>
    <from sec="1246942896" usec="0"/>
    <to sec="1246942906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.16.28.218"/>
    </slice>
    <from sec="1246942812" usec="0"/>
    <to sec="1246943507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.48.28.220"/>
    </slice>
    <from sec="1246942924" usec="0"/>
    <to sec="1246942939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.196.172.222"/>
    </slice>
    <from sec="1246942844" usec="0"/>
    <to sec="1246943701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.58.20.224"/>
    </slice>
    <from sec="1246942991" usec="0"/>
    <to sec="1246943579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="141.161.153.231"/>
    </slice>
    <from sec="1246942802" usec="0"/>
    <to sec="1246943497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.23.96.232"/>
    </slice>
    <from sec="1246942807" usec="0"/>
    <to sec="1246943700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="71.56.239.236"/>
    </slice>
    <from sec="1246943589" usec="0"/>
    <to sec="1246943591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.82.226.239"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.160.227.242"/>
    </slice>
    <from sec="1246942901" usec="0"/>
    <to sec="1246942929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.154.9.247"/>
    </slice>
    <from sec="1246942809" usec="0"/>
    <to sec="1246943695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.750933,2.20092,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.103.82.252"/>
    </slice>
    <from sec="1246943701" usec="0"/>
    <to sec="1246943702" usec="0"/>
  </anomaly>

</admd:annotation>
