<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.975599,1.83857,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.121.96.13" dst_port="80" proto="tcp" src_ip="195.96.1.143"/>
      <from sec="1260594236" usec="0"/>
      <to sec="1260594818" usec="0"/>
    </slice>
    <from sec="1260594236" usec="0"/>
    <to sec="1260594818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.200.207.108" dst_port="80" proto="tcp" src_ip="195.106.157.223" src_port="53770"/>
      <from sec="1260594029" usec="0"/>
      <to sec="1260594853" usec="0"/>
    </slice>
    <from sec="1260594029" usec="0"/>
    <to sec="1260594853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.220.197.240" dst_port="22" proto="tcp" src_ip="17.213.205.47"/>
      <filter dst_ip="200.220.197.240" dst_port="22" proto="udp" src_ip="17.213.205.47"/>
      <filter dst_ip="200.220.197.240" dst_port="53" proto="tcp" src_ip="17.213.205.47"/>
      <filter dst_ip="200.220.197.240" dst_port="53" proto="udp" src_ip="17.213.205.47"/>
      <from sec="1260594792" usec="0"/>
      <to sec="1260594798" usec="0"/>
    </slice>
    <from sec="1260594792" usec="0"/>
    <to sec="1260594798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.75.145.156" dst_port="443" proto="tcp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="443" proto="udp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="80" proto="tcp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="80" proto="udp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="53" proto="tcp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="53" proto="udp" src_ip="130.108.41.195" src_port="54574"/>
      <filter dst_ip="195.75.145.156" dst_port="443" proto="tcp" src_ip="130.108.41.195" src_port="54575"/>
      <filter dst_ip="195.75.145.156" dst_port="443" proto="udp" src_ip="130.108.41.195" src_port="54575"/>
      <filter dst_ip="195.75.145.156" dst_port="80" proto="tcp" src_ip="130.108.41.195" src_port="54575"/>
      <filter dst_ip="195.75.145.156" dst_port="80" proto="udp" src_ip="130.108.41.195" src_port="54575"/>
      <filter dst_ip="195.75.145.156" dst_port="53" proto="tcp" src_ip="130.108.41.195" src_port="54575"/>
      <filter dst_ip="195.75.145.156" dst_port="53" proto="udp" src_ip="130.108.41.195" src_port="54575"/>
      <from sec="1260594799" usec="0"/>
      <to sec="1260594802" usec="0"/>
    </slice>
    <from sec="1260594799" usec="0"/>
    <to sec="1260594802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="tcp" src_ip="172.216.18.213" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="udp" src_ip="172.216.18.213" src_port="52545"/>
      <from sec="1260594152" usec="0"/>
      <to sec="1260594155" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="tcp" src_ip="172.216.201.52" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="udp" src_ip="172.216.201.52" src_port="52545"/>
      <from sec="1260594152" usec="0"/>
      <to sec="1260594156" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="80" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="53" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="100.10.189.133" dst_port="23" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="80" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="53" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="214.69.113.119" dst_port="23" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="80" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="53" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="tcp" src_ip="7.156.180.98" src_port="52545"/>
      <filter dst_ip="194.121.105.88" dst_port="23" proto="udp" src_ip="7.156.180.98" src_port="52545"/>
      <from sec="1260594152" usec="0"/>
      <to sec="1260594155" usec="0"/>
    </slice>
    <from sec="1260594152" usec="0"/>
    <to sec="1260594156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="87.75.68.227" src_port="43886"/>
      <from sec="1260594679" usec="0"/>
      <to sec="1260594686" usec="0"/>
    </slice>
    <from sec="1260594679" usec="0"/>
    <to sec="1260594686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="150.87.183.37"/>
      <from sec="1260594239" usec="0"/>
      <to sec="1260594246" usec="0"/>
    </slice>
    <from sec="1260594239" usec="0"/>
    <to sec="1260594247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="150.133.181.44"/>
      <from sec="1260594654" usec="0"/>
      <to sec="1260594659" usec="0"/>
    </slice>
    <from sec="1260594654" usec="0"/>
    <to sec="1260594659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="144.0.193.72"/>
      <from sec="1260594248" usec="0"/>
      <to sec="1260594257" usec="0"/>
    </slice>
    <from sec="1260594248" usec="0"/>
    <to sec="1260594257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="26.204.246.98"/>
      <filter dst_port="80" proto="tcp" src_ip="26.204.246.98"/>
      <from sec="1260594199" usec="0"/>
      <to sec="1260594210" usec="0"/>
    </slice>
    <from sec="1260594199" usec="0"/>
    <to sec="1260594210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="150.135.203.113"/>
      <filter dst_port="80" proto="tcp" src_ip="150.135.203.113"/>
      <from sec="1260594828" usec="0"/>
      <to sec="1260594837" usec="0"/>
    </slice>
    <from sec="1260594828" usec="0"/>
    <to sec="1260594837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="150.78.161.114"/>
      <from sec="1260594793" usec="0"/>
      <to sec="1260594803" usec="0"/>
    </slice>
    <from sec="1260594793" usec="0"/>
    <to sec="1260594803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.140.80.140" dst_port="23" proto="tcp" src_ip="150.133.57.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="23" proto="udp" src_ip="150.133.57.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="80" proto="tcp" src_ip="150.133.57.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="80" proto="udp" src_ip="150.133.57.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="53" proto="tcp" src_ip="150.133.57.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="53" proto="udp" src_ip="150.133.57.162" src_port="80"/>
      <from sec="1260594834" usec="0"/>
      <to sec="1260594838" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="168.140.80.140" dst_port="23" proto="tcp" src_ip="140.157.93.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="23" proto="udp" src_ip="140.157.93.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="80" proto="tcp" src_ip="140.157.93.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="80" proto="udp" src_ip="140.157.93.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="53" proto="tcp" src_ip="140.157.93.162" src_port="80"/>
      <filter dst_ip="168.140.80.140" dst_port="53" proto="udp" src_ip="140.157.93.162" src_port="80"/>
      <from sec="1260594835" usec="0"/>
      <to sec="1260594838" usec="0"/>
    </slice>
    <from sec="1260594834" usec="0"/>
    <to sec="1260594838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="150.84.83.184"/>
      <from sec="1260594028" usec="0"/>
      <to sec="1260594032" usec="0"/>
    </slice>
    <from sec="1260594028" usec="0"/>
    <to sec="1260594032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.975599,1.83857,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="215.240.52.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <from sec="1260594652" usec="0"/>
      <to sec="1260594846" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="150.133.181.44" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="168.140.81.91" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="80" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="23" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="tcp" src_ip="215.240.52.106" src_port="1693"/>
      <filter dst_ip="22.66.12.106" dst_port="53" proto="udp" src_ip="215.240.52.106" src_port="1693"/>
      <from sec="1260594652" usec="0"/>
      <to sec="1260594654" usec="0"/>
    </slice>
    <from sec="1260594652" usec="0"/>
    <to sec="1260594846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02082,1.74297,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
172[label="216.77.13.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
173[label="172.216.142.212;s;129pkt 129fpkt", shape=diamond, color=yellow];
1383[label="85.64.68.54;d;115pkt 115fpkt", shape=diamond, color=yellow];
6553[label="172.216.142.212;186pkt 186fpkt", shape=pentagon, color=darkviolet];
7135[label="172.216.142.212;186pkt 186fpkt", shape=invtriangle, color=brown];
7348[label="172.216.142.212;186pkt 186fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.142.212:*, 85.64.68.54:80}[80.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6887%)&lt;BR/&gt; 50210: (0.311333%)&lt;BR/&gt; 50208: (0.311333%)&lt;BR/&gt; 50196: (0.311333%)&lt;BR/&gt; 50194: (0.311333%)&gt;];
}
172--173[label="1;1pkt 1fpkt"];
172--6553[label="1;1pkt 1fpkt"];
172--7135[label="1;1pkt 1fpkt"];
172--7348[label="1;1pkt 1fpkt"];
173--1383[label="1;115pkt 115fpkt"];
173--5510[label="0.00775194;1pkt 1fpkt"];
173--5516[label="0.00775194;1pkt 1fpkt"];
173--6553[label="1;129pkt 129fpkt"];
173--7135[label="1;129pkt 129fpkt"];
173--7348[label="1;129pkt 129fpkt"];
1383--6553[label="1;115pkt 115fpkt"];
1383--7135[label="1;115pkt 115fpkt"];
1383--7348[label="1;115pkt 115fpkt"];
6553--7135[label="1;186pkt 186fpkt"];
6553--7348[label="1;186pkt 186fpkt"];
7135--7348[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_ip="85.64.68.54" dst_port="80" src_ip="172.216.142.212"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
187[label="37.90.162.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
189[label="130.108.41.105;s;8pkt 8fpkt", shape=diamond, color=yellow];
3684[label="130.108.41.105;s;8pkt 8fpkt", shape=hexagon, color=black];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.41.105:3074, *:3074}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3074: (73.5294%)&lt;BR/&gt; 1890: (8.82353%)&lt;BR/&gt; 61754: (5.88235%)&lt;BR/&gt; 57771: (5.88235%)&lt;BR/&gt; 2005: (5.88235%)&gt;];
}
187--189[label="1;1pkt 1fpkt"];
187--3684[label="1;1pkt 1fpkt"];
189--3684[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="3074" src_ip="130.108.41.105" src_port="3074"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
250[label="222.103.65.98;d;30pkt 30fpkt", shape=diamond, color=yellow];
251[label="172.216.225.145;s;30pkt 30fpkt", shape=diamond, color=yellow];
3882[label="222.103.65.98;d;27pkt 27fpkt", shape=hexagon, color=black];
4211[label="172.216.225.145;s;18pkt 18fpkt", shape=hexagon, color=black];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.225.145:110, 222.103.65.98:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (44.2857%)&lt;BR/&gt; 8103: (5.71429%)&lt;BR/&gt; 60145: (1.90476%)&lt;BR/&gt; 60136: (1.90476%)&lt;BR/&gt; 60121: (1.90476%)&gt;];
}
250--251[label="1;30pkt 30fpkt"];
250--3882[label="1;27pkt 27fpkt"];
250--4211[label="1;18pkt 18fpkt"];
251--3882[label="1;27pkt 27fpkt"];
251--4211[label="1;18pkt 18fpkt"];
3882--4211[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="222.103.65.98" src_ip="172.216.225.145" src_port="110"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
279[label="194.121.96.170;s;8pkt 8fpkt", shape=diamond, color=yellow];
280[label="201.113.154.238;d;7pkt 7fpkt", shape=diamond, color=yellow];
4214[label="201.113.154.238;d;7pkt 7fpkt", shape=hexagon, color=black];
6373[label="194.121.96.170;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7047[label="194.121.96.170;8pkt 8fpkt", shape=invtriangle, color=brown];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.96.170:*, 201.113.154.238:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63578: (6.57895%)&lt;BR/&gt; 63172: (6.57895%)&lt;BR/&gt; 58320: (6.57895%)&lt;BR/&gt; 55676: (6.57895%)&lt;BR/&gt; 54682: (6.57895%)&gt;];
}
279--280[label="1;7pkt 7fpkt"];
279--4214[label="1;7pkt 7fpkt"];
279--6373[label="0.875;7pkt 7fpkt"];
279--7047[label="0.875;7pkt 7fpkt"];
280--4214[label="1;7pkt 7fpkt"];
280--6373[label="1;7pkt 7fpkt"];
280--7047[label="1;7pkt 7fpkt"];
4214--6373[label="1;7pkt 7fpkt"];
4214--7047[label="1;7pkt 7fpkt"];
6373--7047[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="201.113.154.238" src_ip="194.121.96.170"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="47244088" usec="0"/>
    <to sec="47244088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="47244088" usec="0"/>
    <to sec="47244088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
396[label="86.2.249.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
397[label="172.216.113.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
4711[label="86.2.249.244;d;1pkt 1fpkt", shape=hexagon, color=black];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.113.4:8080, 86.2.249.244:41886}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41886: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
396--397[label="1;1pkt 1fpkt"];
396--4711[label="1;1pkt 1fpkt"];
397--4711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.2.249.244" dst_port="41886" src_ip="172.216.113.4" src_port="8080"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13597,1.75265,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
104[label="130.108.45.227s;1pkt 1fpkt", shape=rectangle, color=red];
410[label="130.108.45.227;s;37pkt 37fpkt", shape=diamond, color=yellow];
411[label="214.189.17.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
3086[label="207.174.248.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
3739[label="214.189.17.169;d;1pkt 1fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.45.227:65145, *:*}[45.9459%]&lt;BR/&gt;{130.108.45.227:*, *:80}[37.8378%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65145: (20.7317%)&lt;BR/&gt; 80: (17.0732%)&lt;BR/&gt; 443: (6.09756%)&lt;BR/&gt; 49326: (4.87805%)&lt;BR/&gt; 1935: (4.87805%)&gt;];
}
104--410[label="1;1pkt 1fpkt"];
104--411[label="1;1pkt 1fpkt"];
104--3739[label="1;1pkt 1fpkt"];
410--411[label="1;1pkt 1fpkt"];
410--3086[label="1;1pkt 1fpkt"];
410--3739[label="1;1pkt 1fpkt"];
410--5510[label="0.027027;1pkt 1fpkt"];
410--5516[label="0.027027;1pkt 1fpkt"];
411--3739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.45.227" src_port="65145"/>
      <filter dst_port="80" src_ip="130.108.45.227"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
484[label="43.113.112.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
485[label="172.216.40.58;s;81pkt 81fpkt", shape=diamond, color=yellow];
2853[label="43.105.68.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
3103[label="32.128.235.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
3920[label="172.216.40.58;s;73pkt 73fpkt", shape=hexagon, color=black];
4996[label="32.128.235.156;d;1pkt 1fpkt", shape=hexagon, color=black];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.40.58:*, *:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6709%)&lt;BR/&gt; 4433: (5.06329%)&lt;BR/&gt; 7122: (1.26582%)&lt;BR/&gt; 52764: (0.949367%)&lt;BR/&gt; 41524: (0.949367%)&gt;];
}
484--485[label="1;1pkt 1fpkt"];
484--3920[label="1;1pkt 1fpkt"];
485--2853[label="1;1pkt 1fpkt"];
485--3103[label="1;1pkt 1fpkt"];
485--3920[label="1;73pkt 73fpkt"];
485--4996[label="1;1pkt 1fpkt"];
485--5510[label="0.0246914;2pkt 2fpkt"];
485--5516[label="0.0246914;2pkt 2fpkt"];
485--5530[label="0.0740741;6pkt 6fpkt"];
2853--3920[label="1;1pkt 1fpkt"];
3103--3920[label="1;1pkt 1fpkt"];
3103--4996[label="1;1pkt 1fpkt"];
3920--4996[label="1;1pkt 1fpkt"];
3920--5510[label="0.0273973;2pkt 2fpkt"];
3920--5516[label="0.0273973;2pkt 2fpkt"];
3920--5530[label="0.0821918;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.216.40.58"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
527[label="195.96.52.78;d;5pkt 5fpkt", shape=diamond, color=yellow];
528[label="47.83.36.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
3769[label="47.83.36.219;s;1pkt 1fpkt", shape=hexagon, color=black];
4724[label="195.96.52.78;d;1pkt 1fpkt", shape=hexagon, color=black];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.83.36.219:0, 195.96.52.78:0}[20%]&lt;BR/&gt;{18.122.69.4:21855, 195.96.52.78:80}[20%]&lt;BR/&gt;{18.122.69.4:33059, 195.96.52.78:80}[20%]&lt;BR/&gt;{18.122.69.4:41356, 195.96.52.78:80}[20%]&lt;BR/&gt;{18.122.69.4:0, 195.96.52.78:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (62.5%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 41356: (6.25%)&lt;BR/&gt; 33059: (6.25%)&lt;BR/&gt; 21855: (6.25%)&gt;];
}
527--528[label="1;1pkt 1fpkt"];
527--3769[label="1;1pkt 1fpkt"];
527--4724[label="1;1pkt 1fpkt"];
528--3769[label="1;1pkt 1fpkt"];
528--4724[label="1;1pkt 1fpkt"];
3769--4724[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.96.52.78" src_ip="18.122.69.4"/>
      <filter dst_ip="195.96.52.78" dst_port="80" src_ip="18.122.69.4" src_port="41356"/>
      <filter dst_ip="195.96.52.78" dst_port="80" src_ip="18.122.69.4" src_port="33059"/>
      <filter dst_ip="195.96.52.78" dst_port="80" src_ip="18.122.69.4" src_port="21855"/>
      <filter dst_ip="195.96.52.78" src_ip="47.83.36.219"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
532[label="200.193.82.189;s;526pkt 526fpkt", shape=diamond, color=yellow];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.82.189:6667, *:*}[23.7643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (11.8821%)&lt;BR/&gt; 6665: (3.89734%)&lt;BR/&gt; 6662: (3.80228%)&lt;BR/&gt; 6660: (3.327%)&lt;BR/&gt; 6664: (3.23194%)&gt;];
}
532--5510[label="0.00760456;4pkt 4fpkt"];
532--5530[label="0.00190114;1pkt 1fpkt"];
532--5541[label="0.00190114;1pkt 1fpkt"];
532--5556[label="0.00190114;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.193.82.189" src_port="6667"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.137.169.193"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594716" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.24.220.78"/>
      <from sec="1260594411" usec="0"/>
      <to sec="1260594566" usec="0"/>
    </slice>
    <from sec="1260594411" usec="0"/>
    <to sec="1260594566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.108.66.40"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594040" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
629[label="130.108.66.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
630[label="215.200.202.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.66.40:2356, 215.200.202.90:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2356: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
629--630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.200.202.90" dst_port="80" src_ip="130.108.66.40" src_port="2356"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
590[label="130.108.41.69;s;1234pkt 1234fpkt", shape=diamond, color=yellow];
649[label="12.24.21.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
3787[label="130.108.41.69;s;212pkt 212fpkt", shape=hexagon, color=black];
4545[label="12.24.21.60;d;1pkt 1fpkt", shape=hexagon, color=black];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.41.69:47197, *:*}[94.2464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47197: (47.2721%)&lt;BR/&gt; 80: (2.24448%)&lt;BR/&gt; 16001: (1.24309%)&lt;BR/&gt; 4041: (0.345304%)&lt;BR/&gt; 6881: (0.241713%)&gt;];
}
590--649[label="1;1pkt 1fpkt"];
590--952[label="0.0075188;1pkt 1fpkt"];
590--3787[label="1;212pkt 212fpkt"];
590--4545[label="1;1pkt 1fpkt"];
590--5510[label="0.00162075;2pkt 2fpkt"];
590--5516[label="0.00162075;2pkt 2fpkt"];
649--3787[label="1;1pkt 1fpkt"];
649--4545[label="1;1pkt 1fpkt"];
3787--4545[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.41.69" src_port="47197"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
706[label="172.216.181.34;d;8pkt 8fpkt", shape=diamond, color=yellow];
707[label="194.164.179.105;s;8pkt 8fpkt", shape=diamond, color=yellow];
3812[label="172.216.181.34;d;8pkt 8fpkt", shape=hexagon, color=black];
3813[label="194.164.179.105;s;8pkt 8fpkt", shape=hexagon, color=black];
6083[label="194.164.179.105;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6917[label="194.164.179.105;7pkt 7fpkt", shape=invtriangle, color=brown];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.164.179.105:80, 172.216.181.34:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1115: (6.38298%)&lt;BR/&gt; 1109: (6.38298%)&lt;BR/&gt; 1108: (6.38298%)&lt;BR/&gt; 1107: (6.38298%)&gt;];
}
706--707[label="1;8pkt 8fpkt"];
706--3812[label="1;8pkt 8fpkt"];
706--3813[label="1;8pkt 8fpkt"];
706--6083[label="1;8pkt 8fpkt"];
706--6917[label="1;7pkt 7fpkt"];
707--3812[label="1;8pkt 8fpkt"];
707--3813[label="1;8pkt 8fpkt"];
707--6083[label="1;8pkt 8fpkt"];
707--6917[label="1;7pkt 7fpkt"];
3812--3813[label="1;8pkt 8fpkt"];
3812--6083[label="1;8pkt 8fpkt"];
3812--6917[label="1;7pkt 7fpkt"];
3813--6083[label="1;8pkt 8fpkt"];
3813--6917[label="1;7pkt 7fpkt"];
6083--6917[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.181.34" src_ip="194.164.179.105" src_port="80"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
688[label="172.216.176.59;d;9pkt 9fpkt", shape=diamond, color=yellow];
760[label="216.204.248.84;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.216.176.59:64655}[55.5556%]&lt;BR/&gt;{216.204.248.84:80, 172.216.176.59:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7692%)&lt;BR/&gt; 64655: (19.2308%)&lt;BR/&gt; 2076: (7.69231%)&lt;BR/&gt; 2075: (7.69231%)&lt;BR/&gt; 2074: (7.69231%)&gt;];
}
688--760[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.176.59" dst_port="64655"/>
      <filter dst_ip="172.216.176.59" src_ip="216.204.248.84" src_port="80"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
344[label="172.216.149.184;d;55pkt 55fpkt", shape=diamond, color=yellow];
861[label="212.170.117.80;s;20pkt 20fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.170.117.80:80, 172.216.149.184:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2617: (1.33333%)&lt;BR/&gt; 2563: (1.33333%)&lt;BR/&gt; 2560: (1.33333%)&lt;BR/&gt; 2548: (1.33333%)&gt;];
}
344--861[label="1;20pkt 20fpkt"];
344--5532[label="0.0909091;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.149.184" src_ip="212.170.117.80" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
334[label="36.53.36.124;d;5pkt 5fpkt", shape=diamond, color=yellow];
953[label="172.216.225.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
2691[label="172.216.225.214;s;2pkt 2fpkt", shape=diamond, color=yellow];
4226[label="36.53.36.124;d;4pkt 4fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.225.212:41072, 36.53.36.124:57032}[20%]&lt;BR/&gt;{172.216.225.92:143, 36.53.36.124:57033}[20%]&lt;BR/&gt;{172.216.225.92:993, 36.53.36.124:62467}[20%]&lt;BR/&gt;{172.216.225.214:41072, 36.53.36.124:58182}[20%]&lt;BR/&gt;{172.216.225.214:41072, 36.53.36.124:58669}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41072: (37.5%)&lt;BR/&gt; 58669: (12.5%)&lt;BR/&gt; 58182: (12.5%)&lt;BR/&gt; 57032: (12.5%)&lt;BR/&gt; 57033: (8.33333%)&gt;];
}
334--953[label="1;1pkt 1fpkt"];
334--2691[label="1;2pkt 2fpkt"];
334--4226[label="1;4pkt 4fpkt"];
953--4226[label="1;1pkt 1fpkt"];
2691--4226[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.53.36.124" dst_port="58669" src_ip="172.216.225.214" src_port="41072"/>
      <filter dst_ip="36.53.36.124" dst_port="58182" src_ip="172.216.225.214" src_port="41072"/>
      <filter dst_ip="36.53.36.124" dst_port="62467" src_ip="172.216.225.92" src_port="993"/>
      <filter dst_ip="36.53.36.124" dst_port="57033" src_ip="172.216.225.92" src_port="143"/>
      <filter dst_ip="36.53.36.124" dst_port="57032" src_ip="172.216.225.212" src_port="41072"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
1140[label="195.96.44.24;d;201pkt 201fpkt", shape=diamond, color=yellow];
1141[label="86.240.19.10;s;201pkt 201fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.240.19.10:*, 195.96.44.24:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 45780: (0.248756%)&lt;BR/&gt; 45751: (0.248756%)&lt;BR/&gt; 45726: (0.248756%)&lt;BR/&gt; 45695: (0.248756%)&gt;];
}
1140--1141[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_ip="195.96.44.24" dst_port="22" src_ip="86.240.19.10"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
769[label="172.216.40.223;s;40pkt 40fpkt", shape=diamond, color=yellow];
1216[label="209.162.47.127;d;40pkt 40fpkt", shape=diamond, color=yellow];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.40.223:*, 209.162.47.127:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49979: (1.25%)&lt;BR/&gt; 49978: (1.25%)&lt;BR/&gt; 49977: (1.25%)&lt;BR/&gt; 49976: (1.25%)&gt;];
}
769--1216[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="209.162.47.127" dst_port="80" src_ip="172.216.40.223"/>
    </slice>
    <from sec="1260594562" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.156.113.13"/>
      <from sec="1260594494" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594494" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.156.113.13"/>
      <from sec="1260594494" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594494" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.146.108.243"/>
      <from sec="1260594040" usec="0"/>
      <to sec="1260594373" usec="0"/>
    </slice>
    <from sec="1260594040" usec="0"/>
    <to sec="1260594373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.37.212.211"/>
      <from sec="1260594710" usec="0"/>
      <to sec="1260594758" usec="0"/>
    </slice>
    <from sec="1260594710" usec="0"/>
    <to sec="1260594758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
961[label="194.121.108.174;s;38pkt 38fpkt", shape=diamond, color=yellow];
1311[label="42.62.134.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
3893[label="194.121.108.174;s;34pkt 34fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.108.174:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24062: (2.05479%)&lt;BR/&gt; 4682: (2.05479%)&lt;BR/&gt; 3926: (2.05479%)&lt;BR/&gt; 60012: (1.36986%)&lt;BR/&gt; 55555: (1.36986%)&gt;];
}
961--1311[label="1;1pkt 1fpkt"];
961--3893[label="1;34pkt 34fpkt"];
1311--3893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.121.108.174"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
1249[label="172.216.201.59;s;213pkt 213fpkt", shape=diamond, color=yellow];
1350[label="208.39.214.2;d;49pkt 49fpkt", shape=diamond, color=yellow];
3987[label="172.216.201.59;s;209pkt 209fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.201.59:44556, *:*}[29.108%]&lt;BR/&gt;{172.216.201.59:*, 208.39.214.2:80}[23.0047%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1932%)&lt;BR/&gt; 44556: (13.1635%)&lt;BR/&gt; 123: (2.2293%)&lt;BR/&gt; 39523: (1.27389%)&lt;BR/&gt; 39235: (1.27389%)&gt;];
}
1249--1350[label="1;49pkt 49fpkt"];
1249--3987[label="1;209pkt 209fpkt"];
1350--3987[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="172.216.201.59" src_port="44556"/>
      <filter dst_ip="208.39.214.2" dst_port="80" src_ip="172.216.201.59"/>
    </slice>
    <from sec="1260594016" usec="0"/>
    <to sec="1260594820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="25.76.64.189"/>
      <from sec="1260594337" usec="0"/>
      <to sec="1260594354" usec="0"/>
    </slice>
    <from sec="1260594337" usec="0"/>
    <to sec="1260594354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
1365[label="168.15.113.244;d;4pkt 4fpkt", shape=diamond, color=yellow];
1372[label="32.229.73.160;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.222.5.164:37421, 168.15.113.244:80}[25%]&lt;BR/&gt;{80.224.112.221:2095, 168.15.113.244:80}[25%]&lt;BR/&gt;{32.229.73.160:2082, 168.15.113.244:80}[25%]&lt;BR/&gt;{32.229.73.160:2083, 168.15.113.244:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2083: (16.6667%)&lt;BR/&gt; 2082: (16.6667%)&lt;BR/&gt; 37421: (8.33333%)&lt;BR/&gt; 2095: (8.33333%)&gt;];
}
1365--1372[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.15.113.244" dst_port="80" src_ip="32.229.73.160" src_port="2083"/>
      <filter dst_ip="168.15.113.244" dst_port="80" src_ip="32.229.73.160" src_port="2082"/>
      <filter dst_ip="168.15.113.244" dst_port="80" src_ip="80.224.112.221" src_port="2095"/>
      <filter dst_ip="168.15.113.244" dst_port="80" src_ip="22.222.5.164" src_port="37421"/>
    </slice>
    <from sec="1260594164" usec="0"/>
    <to sec="1260594181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
911[label="172.216.142.212;d;127pkt 127fpkt", shape=diamond, color=yellow];
1384[label="85.64.68.54;s;115pkt 115fpkt", shape=diamond, color=yellow];
5848[label="85.64.68.54;150pkt 150fpkt", shape=pentagon, color=darkviolet];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.64.68.54:80, 172.216.142.212:*}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50210: (0.382653%)&lt;BR/&gt; 50208: (0.382653%)&lt;BR/&gt; 50196: (0.382653%)&lt;BR/&gt; 50194: (0.382653%)&gt;];
}
911--1384[label="1;115pkt 115fpkt"];
911--5507[label="0.023622;3pkt 3fpkt"];
911--5848[label="0.905512;115pkt 115fpkt"];
1384--5848[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.142.212" src_ip="85.64.68.54" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
962[label="0.191.245.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1422[label="179.38.214.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
4048[label="0.191.245.19;d;1pkt 1fpkt", shape=hexagon, color=black];
4467[label="179.38.214.4;s;1pkt 1fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.38.214.4:1054, 0.191.245.19:49491}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49491: (50%)&lt;BR/&gt; 1054: (50%)&gt;];
}
962--1422[label="1;1pkt 1fpkt"];
962--4048[label="1;1pkt 1fpkt"];
962--4467[label="1;1pkt 1fpkt"];
1422--4048[label="1;1pkt 1fpkt"];
1422--4467[label="1;1pkt 1fpkt"];
4048--4467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.191.245.19" dst_port="49491" src_ip="179.38.214.4" src_port="1054"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.16.64.5"/>
      <from sec="1260594001" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="7.229.93.39"/>
      <from sec="1260594114" usec="0"/>
      <to sec="1260594151" usec="0"/>
    </slice>
    <from sec="1260594114" usec="0"/>
    <to sec="1260594151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02082,1.74297,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1319[label="172.216.81.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
1738[label="20.173.172.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
5849[label="172.216.81.54;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6825[label="172.216.81.54;4pkt 4fpkt", shape=invtriangle, color=brown];
7245[label="172.216.81.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.81.54:80, 213.7.64.42:65525}[25%]&lt;BR/&gt;{172.216.81.54:80, 20.173.172.227:36079}[25%]&lt;BR/&gt;{172.216.81.54:80, 20.173.172.227:52095}[25%]&lt;BR/&gt;{172.216.81.54:80, 20.173.172.227:55102}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52095: (19.2308%)&lt;BR/&gt; 55102: (11.5385%)&lt;BR/&gt; 36079: (11.5385%)&lt;BR/&gt; 65525: (7.69231%)&gt;];
}
1319--1738[label="1;1pkt 1fpkt"];
1319--5849[label="1;1pkt 1fpkt"];
1319--6825[label="1;1pkt 1fpkt"];
1319--7245[label="1;1pkt 1fpkt"];
1738--5849[label="1;1pkt 1fpkt"];
1738--6825[label="1;1pkt 1fpkt"];
1738--7245[label="1;1pkt 1fpkt"];
5849--6825[label="1;4pkt 4fpkt"];
5849--7245[label="1;3pkt 3fpkt"];
6825--7245[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.172.227" dst_port="55102" src_ip="172.216.81.54" src_port="80"/>
      <filter dst_ip="20.173.172.227" dst_port="52095" src_ip="172.216.81.54" src_port="80"/>
      <filter dst_ip="20.173.172.227" dst_port="36079" src_ip="172.216.81.54" src_port="80"/>
      <filter dst_ip="213.7.64.42" dst_port="65525" src_ip="172.216.81.54" src_port="80"/>
    </slice>
    <from sec="1260594123" usec="0"/>
    <to sec="1260594769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="179.38.140.180"/>
      <from sec="1260594135" usec="0"/>
      <to sec="1260594325" usec="0"/>
    </slice>
    <from sec="1260594135" usec="0"/>
    <to sec="1260594325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.173.172.6"/>
      <from sec="1260594217" usec="0"/>
      <to sec="1260594237" usec="0"/>
    </slice>
    <from sec="1260594217" usec="0"/>
    <to sec="1260594237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.205.194.50"/>
      <from sec="1260594661" usec="0"/>
      <to sec="1260594717" usec="0"/>
    </slice>
    <from sec="1260594661" usec="0"/>
    <to sec="1260594717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.227.144.164"/>
      <from sec="1260594275" usec="0"/>
      <to sec="1260594319" usec="0"/>
    </slice>
    <from sec="1260594275" usec="0"/>
    <to sec="1260594319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.216.92.9"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594815" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
432[label="195.106.50.83;d;355pkt 355fpkt", shape=diamond, color=yellow];
434[label="34.224.187.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
1908[label="25.18.186.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
2238[label="44.211.147.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
3909[label="34.224.187.142;s;1pkt 1fpkt", shape=hexagon, color=black];
4060[label="195.106.50.83;d;271pkt 271fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.106.50.83:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8858: (5.63492%)&lt;BR/&gt; 6969: (4.36508%)&lt;BR/&gt; 2710: (4.36508%)&lt;BR/&gt; 3277: (2.22222%)&lt;BR/&gt; 5834: (1.74603%)&gt;];
}
432--434[label="1;1pkt 1fpkt"];
432--1908[label="1;1pkt 1fpkt"];
432--2238[label="1;1pkt 1fpkt"];
432--3909[label="1;1pkt 1fpkt"];
432--4060[label="1;271pkt 271fpkt"];
434--3909[label="1;1pkt 1fpkt"];
434--4060[label="1;1pkt 1fpkt"];
1908--4060[label="1;1pkt 1fpkt"];
2238--4060[label="1;1pkt 1fpkt"];
3909--4060[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.106.50.83"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1947[label="219.124.54.60;s;1435pkt 1435fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.124.54.60:1222, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1222: (50%)&gt;];
}
1947--2266[label="0.000960615;1pkt 1fpkt"];
1947--3394[label="0.00352113;1pkt 1fpkt"];
1947--4549[label="0.000960615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.124.54.60" src_port="1222"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
1958[label="172.216.77.17;s;85pkt 85fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.77.17:25, *:*}[98.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4118%)&lt;BR/&gt; 64024: (0.588235%)&lt;BR/&gt; 60407: (0.588235%)&lt;BR/&gt; 59959: (0.588235%)&lt;BR/&gt; 59101: (0.588235%)&gt;];
}
</description>
    <slice>
      <filter src_ip="172.216.77.17" src_port="25"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.96.27.90"/>
      <from sec="1260594001" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
2018[label="194.121.105.82;s;115pkt 115fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.105.82:25, *:*}[44.3478%]&lt;BR/&gt;{194.121.105.82:*, *:113}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (22.1739%)&lt;BR/&gt; 113: (21.7391%)&lt;BR/&gt; 995: (4.78261%)&lt;BR/&gt; 500: (0.869565%)&lt;BR/&gt; 63869: (0.434783%)&gt;];
}
2018--5035[label="0.00869565;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.121.105.82" src_port="25"/>
      <filter dst_port="113" src_ip="194.121.105.82"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02082,1.74297,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1625[label="130.108.205.138;d;7pkt 7fpkt", shape=diamond, color=yellow];
2105[label="21.227.144.164;s;2pkt 2fpkt", shape=diamond, color=yellow];
6340[label="21.227.144.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7032[label="21.227.144.164;2pkt 2fpkt", shape=invtriangle, color=brown];
7314[label="21.227.144.164;2pkt 2fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.227.144.164:*, 130.108.205.138:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56869: (16.6667%)&lt;BR/&gt; 56549: (16.6667%)&lt;BR/&gt; 63561: (3.33333%)&lt;BR/&gt; 56435: (3.33333%)&gt;];
}
1625--2105[label="1;2pkt 2fpkt"];
1625--6340[label="1;2pkt 2fpkt"];
1625--7032[label="1;2pkt 2fpkt"];
1625--7314[label="1;2pkt 2fpkt"];
2105--6340[label="1;2pkt 2fpkt"];
2105--7032[label="1;2pkt 2fpkt"];
2105--7314[label="1;2pkt 2fpkt"];
6340--7032[label="1;2pkt 2fpkt"];
6340--7314[label="1;2pkt 2fpkt"];
7032--7314[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.205.138" dst_port="80" src_ip="21.227.144.164"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
2123[label="172.216.130.213;d;130pkt 130fpkt", shape=diamond, color=yellow];
2124[label="128.232.232.43;s;130pkt 130fpkt", shape=diamond, color=yellow];
5793[label="128.232.232.43;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.232.232.43:80, 172.216.130.213:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3711: (0.384615%)&lt;BR/&gt; 3709: (0.384615%)&lt;BR/&gt; 3707: (0.384615%)&lt;BR/&gt; 3706: (0.384615%)&gt;];
}
2123--2124[label="1;130pkt 130fpkt"];
2123--5793[label="1;130pkt 130fpkt"];
2124--5793[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.130.213" src_ip="128.232.232.43" src_port="80"/>
    </slice>
    <from sec="1260594303" usec="0"/>
    <to sec="1260594355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
2150[label="172.216.228.40;d;3pkt 3fpkt", shape=diamond, color=yellow];
2176[label="215.231.162.212;s;3pkt 3fpkt", shape=diamond, color=yellow];
4412[label="172.216.228.40;d;3pkt 3fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.231.162.212:80, 172.216.228.40:2522}[33.3333%]&lt;BR/&gt;{215.231.162.212:80, 172.216.228.40:2524}[33.3333%]&lt;BR/&gt;{215.231.162.212:80, 172.216.228.40:2534}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2534: (16.6667%)&lt;BR/&gt; 2524: (16.6667%)&lt;BR/&gt; 2522: (16.6667%)&gt;];
}
2150--2176[label="1;3pkt 3fpkt"];
2150--4412[label="1;3pkt 3fpkt"];
2176--4412[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.228.40" dst_port="2534" src_ip="215.231.162.212" src_port="80"/>
      <filter dst_ip="172.216.228.40" dst_port="2524" src_ip="215.231.162.212" src_port="80"/>
      <filter dst_ip="172.216.228.40" dst_port="2522" src_ip="215.231.162.212" src_port="80"/>
    </slice>
    <from sec="1260594330" usec="0"/>
    <to sec="1260594408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
2064[label="20.173.174.154;d;8pkt 8fpkt", shape=diamond, color=yellow];
2177[label="168.146.166.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
3451[label="168.146.102.134;s;47pkt 47fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.102.134:80, 20.173.168.236:*}[63.2653%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4286%)&lt;BR/&gt; 443: (2.67857%)&lt;BR/&gt; 60527: (1.78571%)&lt;BR/&gt; 59734: (1.78571%)&lt;BR/&gt; 55761: (1.78571%)&gt;];
}
2064--2177[label="1;1pkt 1fpkt"];
2064--3451[label="0.75;6pkt 6fpkt"];
2064--5507[label="0.125;1pkt 1fpkt"];
2064--5528[label="0.125;1pkt 1fpkt"];
3451--5507[label="0.0425532;2pkt 2fpkt"];
3451--5528[label="0.0638298;3pkt 3fpkt"];
3451--5532[label="0.0212766;1pkt 1fpkt"];
3451--5535[label="0.0638298;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.168.236" src_ip="168.146.102.134" src_port="80"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
2226[label="168.140.164.42;s;1062pkt 1062fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.164.42:64718, *:*}[99.9058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64718: (49.9529%)&lt;BR/&gt; 16001: (0.423729%)&lt;BR/&gt; 6881: (0.282486%)&lt;BR/&gt; 4041: (0.282486%)&lt;BR/&gt; 16881: (0.235405%)&gt;];
}
2226--4256[label="0.00425532;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.164.42" src_port="64718"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="2.213.74.20"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.140.147.71"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594827" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.140.188.230"/>
      <from sec="1260594001" usec="0"/>
      <to sec="1260594826" usec="0"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.216.192.169"/>
      <from sec="1260594024" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594024" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
2157[label="172.216.80.32;s;3pkt 3fpkt", shape=diamond, color=yellow];
2451[label="23.89.236.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.80.32:2548, 203.112.205.88:7024}[33.3333%]&lt;BR/&gt;{172.216.80.32:2547, 23.89.236.242:80}[33.3333%]&lt;BR/&gt;{172.216.80.32:2551, 23.89.236.242:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 2551: (20%)&lt;BR/&gt; 2547: (20%)&lt;BR/&gt; 7024: (10%)&lt;BR/&gt; 2548: (10%)&gt;];
}
2157--2451[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="23.89.236.242" dst_port="80" src_ip="172.216.80.32" src_port="2551"/>
      <filter dst_ip="23.89.236.242" dst_port="80" src_ip="172.216.80.32" src_port="2547"/>
      <filter dst_ip="203.112.205.88" dst_port="7024" src_ip="172.216.80.32" src_port="2548"/>
    </slice>
    <from sec="1260594335" usec="0"/>
    <to sec="1260594356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
2526[label="21.177.80.25;d;10pkt 10fpkt", shape=diamond, color=yellow];
2527[label="179.38.142.156;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.38.142.156:80, 21.177.80.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61607: (5%)&lt;BR/&gt; 61606: (5%)&lt;BR/&gt; 61605: (5%)&lt;BR/&gt; 61604: (5%)&gt;];
}
2526--2527[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="21.177.80.25" src_ip="179.38.142.156" src_port="80"/>
    </slice>
    <from sec="1260594430" usec="0"/>
    <to sec="1260594464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
572[label="194.121.109.68;s;502pkt 502fpkt", shape=diamond, color=yellow];
2646[label="209.171.60.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
4729[label="194.121.109.68;s;424pkt 424fpkt", shape=hexagon, color=black];
4750[label="209.171.60.9;d;1pkt 1fpkt", shape=hexagon, color=black];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.109.68:59098, *:*}[99.4024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59098: (49.7306%)&lt;BR/&gt; 3544: (0.431034%)&lt;BR/&gt; 57032: (0.215517%)&lt;BR/&gt; 1025: (0.215517%)&lt;BR/&gt; 57399: (0.161638%)&gt;];
}
572--1388[label="0.00199203;1pkt 1fpkt"];
572--2646[label="1;1pkt 1fpkt"];
572--3620[label="0.00199203;1pkt 1fpkt"];
572--4729[label="1;424pkt 424fpkt"];
572--4750[label="1;1pkt 1fpkt"];
572--5328[label="0.00199203;1pkt 1fpkt"];
572--5493[label="0.00199203;1pkt 1fpkt"];
572--5506[label="0.00199203;1pkt 1fpkt"];
2646--4729[label="1;1pkt 1fpkt"];
2646--4750[label="1;1pkt 1fpkt"];
4729--4750[label="1;1pkt 1fpkt"];
4729--5506[label="0.00235849;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.121.109.68" src_port="59098"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.216.195.150"/>
      <from sec="1260594002" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
2685[label="194.121.100.112;s;689pkt 689fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.100.112:*, *:8612}[93.4688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8612: (46.7344%)&lt;BR/&gt; 4520: (3.12046%)&lt;BR/&gt; 4466: (1.59652%)&lt;BR/&gt; 4429: (1.59652%)&lt;BR/&gt; 4360: (1.59652%)&gt;];
}
2685--4929[label="0.00290698;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8612" src_ip="194.121.100.112"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
2806[label="20.173.170.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
2807[label="168.146.110.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.110.223:80, 20.173.170.129:35008}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35008: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2806--2807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.170.129" dst_port="35008" src_ip="168.146.110.223" src_port="80"/>
    </slice>
    <from sec="1260594479" usec="0"/>
    <to sec="1260594488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.108.42.67"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594820" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
379[label="168.140.206.125;s;9166pkt 9166fpkt", shape=diamond, color=yellow];
2943[label="219.105.76.175;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.206.125:9124, *:*}[98.0362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9124: (49.0129%)&lt;BR/&gt; 443: (0.790794%)&lt;BR/&gt; 80: (0.21815%)&lt;BR/&gt; 54045: (0.0490838%)&lt;BR/&gt; 1024: (0.0381763%)&gt;];
}
379--2943[label="1;2pkt 2fpkt"];
379--5507[label="0.000654593;6pkt 6fpkt"];
379--5516[label="0.000203874;1pkt 1fpkt"];
379--5528[label="0.00098189;9pkt 9fpkt"];
379--5532[label="0.000763692;7pkt 7fpkt"];
379--5535[label="0.000545494;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.206.125" src_port="9124"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="179.91.134.147"/>
      <from sec="1260594002" usec="0"/>
      <to sec="1260594819" usec="0"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.146.102.8"/>
      <from sec="1260594002" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.121.109.116"/>
      <from sec="1260594003" usec="0"/>
      <to sec="1260594738" usec="0"/>
    </slice>
    <from sec="1260594003" usec="0"/>
    <to sec="1260594738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
2977[label="194.121.109.108;s;160pkt 160fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.109.108:25, *:*}[96.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.75%)&lt;BR/&gt; 443: (0.9375%)&lt;BR/&gt; 0: (0.625%)&lt;BR/&gt; 65351: (0.3125%)&lt;BR/&gt; 65237: (0.3125%)&gt;];
}
2977--4929[label="0.00625;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.121.109.108" src_port="25"/>
    </slice>
    <from sec="1260594018" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.22.120.73"/>
      <from sec="1260594382" usec="0"/>
      <to sec="1260594694" usec="0"/>
    </slice>
    <from sec="1260594382" usec="0"/>
    <to sec="1260594694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.162.165.47"/>
      <from sec="1260594513" usec="0"/>
      <to sec="1260594674" usec="0"/>
    </slice>
    <from sec="1260594513" usec="0"/>
    <to sec="1260594674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
2135[label="195.97.198.227;d;184pkt 184fpkt", shape=diamond, color=yellow];
3091[label="172.216.84.85;s;184pkt 184fpkt", shape=diamond, color=yellow];
4407[label="195.97.198.227;d;184pkt 184fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.84.85:*, 195.97.198.227:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4767: (0.271739%)&lt;BR/&gt; 4765: (0.271739%)&lt;BR/&gt; 4760: (0.271739%)&lt;BR/&gt; 4758: (0.271739%)&gt;];
}
2135--3091[label="1;184pkt 184fpkt"];
2135--4407[label="1;184pkt 184fpkt"];
3091--4407[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_ip="195.97.198.227" dst_port="80" src_ip="172.216.84.85"/>
    </slice>
    <from sec="1260594578" usec="0"/>
    <to sec="1260594698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.57.1.227"/>
      <from sec="1260594583" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594583" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.149.181.74"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1144[label="130.108.235.219;s;221pkt 221fpkt", shape=diamond, color=yellow];
3147[label="86.230.247.111;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.235.219:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44975: (0.446429%)&lt;BR/&gt; 44389: (0.446429%)&lt;BR/&gt; 33790: (0.446429%)&lt;BR/&gt; 26211: (0.446429%)&gt;];
}
1144--3147[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.235.219" src_port="25"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1583[label="130.108.235.219;d;137pkt 137fpkt", shape=diamond, color=yellow];
3148[label="86.230.247.111;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.108.235.219:25}[99.2701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6429%)&lt;BR/&gt; 44975: (0.714286%)&lt;BR/&gt; 44389: (0.714286%)&lt;BR/&gt; 33790: (0.714286%)&lt;BR/&gt; 64983: (0.357143%)&gt;];
}
1583--2817[label="0.00729927;1pkt 1fpkt"];
1583--3148[label="1;3pkt 3fpkt"];
1583--4678[label="0.00729927;1pkt 1fpkt"];
1583--5431[label="0.00729927;1pkt 1fpkt"];
1583--5517[label="0.00729927;1pkt 1fpkt"];
1583--5541[label="0.00729927;1pkt 1fpkt"];
1583--5556[label="0.00729927;1pkt 1fpkt"];
1583--5999[label="0.00729927;1pkt 1fpkt"];
1583--6884[label="0.00729927;1pkt 1fpkt"];
1583--7267[label="0.00729927;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.235.219" dst_port="25"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.162.165.47"/>
      <from sec="1260594513" usec="0"/>
      <to sec="1260594674" usec="0"/>
    </slice>
    <from sec="1260594513" usec="0"/>
    <to sec="1260594674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
3264[label="219.90.162.85;d;9pkt 9fpkt", shape=diamond, color=yellow];
3265[label="172.216.112.161;s;9pkt 9fpkt", shape=diamond, color=yellow];
6317[label="172.216.112.161;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.112.161:*, 219.90.162.85:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1268: (5.55556%)&lt;BR/&gt; 1262: (5.55556%)&lt;BR/&gt; 1260: (5.55556%)&lt;BR/&gt; 1258: (5.55556%)&gt;];
}
3264--3265[label="1;9pkt 9fpkt"];
3264--6317[label="1;9pkt 9fpkt"];
3265--6317[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.90.162.85" dst_port="80" src_ip="172.216.112.161"/>
    </slice>
    <from sec="1260594585" usec="0"/>
    <to sec="1260594880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
3284[label="137.47.143.154;d;7pkt 7fpkt", shape=diamond, color=yellow];
3285[label="172.216.149.186;s;7pkt 7fpkt", shape=diamond, color=yellow];
6445[label="172.216.149.186;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.149.186:*, 137.47.143.154:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 59821: (7.5%)&lt;BR/&gt; 59765: (7.5%)&lt;BR/&gt; 59763: (7.5%)&lt;BR/&gt; 59756: (7.5%)&gt;];
}
3284--3285[label="1;7pkt 7fpkt"];
3284--6445[label="1;6pkt 6fpkt"];
3285--6445[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="137.47.143.154" dst_port="443" src_ip="172.216.149.186"/>
    </slice>
    <from sec="1260594628" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="81.225.188.2"/>
      <from sec="1260594645" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594645" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
2146[label="185.20.40.11;s;4pkt 4fpkt", shape=diamond, color=yellow];
2443[label="20.173.174.170;d;6pkt 6fpkt", shape=diamond, color=yellow];
5630[label="185.20.40.11;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.20.40.11:80, 20.173.174.170:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62715: (6.81818%)&lt;BR/&gt; 45649: (6.81818%)&lt;BR/&gt; 45318: (6.81818%)&lt;BR/&gt; 38402: (6.81818%)&gt;];
}
2146--2443[label="1;4pkt 4fpkt"];
2146--5630[label="1;4pkt 4fpkt"];
2443--3202[label="0.166667;1pkt 1fpkt"];
2443--3697[label="0.166667;1pkt 1fpkt"];
2443--5344[label="0.166667;1pkt 1fpkt"];
2443--5630[label="0.666667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.174.170" src_ip="185.20.40.11" src_port="80"/>
    </slice>
    <from sec="1260594065" usec="0"/>
    <to sec="1260594846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.1.70.12"/>
      <from sec="1260594670" usec="0"/>
      <to sec="1260594751" usec="0"/>
    </slice>
    <from sec="1260594670" usec="0"/>
    <to sec="1260594751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
947[label="128.193.203.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
3327[label="25.76.64.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
6451[label="25.76.64.187;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.76.64.187:80, 128.193.156.152:1130}[33.3333%]&lt;BR/&gt;{25.76.64.187:80, 128.193.203.232:4865}[33.3333%]&lt;BR/&gt;{25.76.64.187:80, 128.193.203.232:4891}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4891: (30%)&lt;BR/&gt; 4865: (10%)&lt;BR/&gt; 1130: (10%)&gt;];
}
947--3327[label="1;1pkt 1fpkt"];
947--6451[label="1;1pkt 1fpkt"];
3327--6451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.193.203.232" dst_port="4891" src_ip="25.76.64.187" src_port="80"/>
      <filter dst_ip="128.193.203.232" dst_port="4865" src_ip="25.76.64.187" src_port="80"/>
      <filter dst_ip="128.193.156.152" dst_port="1130" src_ip="25.76.64.187" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
3237[label="172.216.95.189;s;17pkt 17fpkt", shape=diamond, color=yellow];
3328[label="17.104.237.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
5010[label="17.104.237.42;d;1pkt 1fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.95.189:*, 17.104.234.154:80}[58.8235%]&lt;BR/&gt;{172.216.95.189:*, 17.104.225.117:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 4592: (7.89474%)&lt;BR/&gt; 4657: (2.63158%)&lt;BR/&gt; 4649: (2.63158%)&lt;BR/&gt; 4623: (2.63158%)&gt;];
}
3237--3328[label="1;1pkt 1fpkt"];
3237--5010[label="1;1pkt 1fpkt"];
3237--5530[label="0.235294;4pkt 4fpkt"];
3328--5010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.104.234.154" dst_port="80" src_ip="172.216.95.189"/>
      <filter dst_ip="17.104.225.117" dst_port="80" src_ip="172.216.95.189"/>
    </slice>
    <from sec="1260594503" usec="0"/>
    <to sec="1260594805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
3339[label="20.173.170.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
3340[label="168.146.124.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
5302[label="20.173.170.108;d;1pkt 1fpkt", shape=hexagon, color=black];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.124.154:80, 20.173.170.108:54941}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54941: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3339--3340[label="1;1pkt 1fpkt"];
3339--5302[label="1;1pkt 1fpkt"];
3340--5302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.170.108" dst_port="54941" src_ip="168.146.124.154" src_port="80"/>
    </slice>
    <from sec="1260594699" usec="0"/>
    <to sec="1260594719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
3122[label="172.216.116.238;d;149pkt 149fpkt", shape=diamond, color=yellow];
3370[label="174.31.87.200;s;96pkt 96fpkt", shape=diamond, color=yellow];
5030[label="172.216.116.238;d;149pkt 149fpkt", shape=hexagon, color=black];
6503[label="174.31.87.200;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.31.87.200:80, 172.216.116.238:*}[64.4295%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.319%)&lt;BR/&gt; 34481: (1.63599%)&lt;BR/&gt; 46194: (1.02249%)&lt;BR/&gt; 49345: (0.408998%)&lt;BR/&gt; 49344: (0.408998%)&gt;];
}
3122--3370[label="1;96pkt 96fpkt"];
3122--3476[label="0.0108696;1pkt 1fpkt"];
3122--5030[label="1;149pkt 149fpkt"];
3122--5507[label="0.0738255;11pkt 11fpkt"];
3122--5535[label="0.00671141;1pkt 1fpkt"];
3122--5816[label="0.0138889;1pkt 1fpkt"];
3122--6503[label="1;95pkt 95fpkt"];
3370--5030[label="1;96pkt 96fpkt"];
3370--6503[label="1;95pkt 95fpkt"];
5030--5507[label="0.0738255;11pkt 11fpkt"];
5030--5535[label="0.00671141;1pkt 1fpkt"];
5030--5816[label="0.0138889;1pkt 1fpkt"];
5030--6503[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.116.238" src_ip="174.31.87.200" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="86.205.40.112"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594827" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.80.6.110"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
3429[label="172.216.40.136;d;170pkt 170fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.216.40.136:18781}[87.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18781: (43.8235%)&lt;BR/&gt; 443: (3.23529%)&lt;BR/&gt; 8000: (1.47059%)&lt;BR/&gt; 80: (0.882353%)&lt;BR/&gt; 9000: (0.588235%)&gt;];
}
3429--5510[label="0.00588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.40.136" dst_port="18781"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
2289[label="194.121.107.101;d;179pkt 179fpkt", shape=diamond, color=yellow];
3453[label="20.173.174.209;s;119pkt 119fpkt", shape=diamond, color=yellow];
5150[label="194.121.107.101;d;179pkt 179fpkt", shape=hexagon, color=black];
5668[label="75.31.12.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6746[label="75.31.12.18;2pkt 2fpkt", shape=invtriangle, color=brown];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.173.174.209:*, 194.121.107.101:80}[66.4804%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3763%)&lt;BR/&gt; 52877: (0.4158%)&lt;BR/&gt; 40599: (0.4158%)&lt;BR/&gt; 6000: (0.4158%)&lt;BR/&gt; 65409: (0.31185%)&gt;];
}
2289--2717[label="0.0909091;1pkt 1fpkt"];
2289--3453[label="1;119pkt 119fpkt"];
2289--3847[label="0.00558659;1pkt 1fpkt"];
2289--4173[label="0.00558659;1pkt 1fpkt"];
2289--5150[label="1;179pkt 179fpkt"];
2289--5353[label="0.00558659;1pkt 1fpkt"];
2289--5384[label="0.00558659;1pkt 1fpkt"];
2289--5510[label="0.0335196;6pkt 6fpkt"];
2289--5511[label="0.00558659;1pkt 1fpkt"];
2289--5516[label="0.0335196;6pkt 6fpkt"];
2289--5528[label="0.00558659;1pkt 1fpkt"];
2289--5530[label="0.0335196;6pkt 6fpkt"];
2289--5668[label="1;2pkt 2fpkt"];
2289--5928[label="0.00558659;1pkt 1fpkt"];
2289--6059[label="0.00558659;1pkt 1fpkt"];
2289--6669[label="0.0416667;1pkt 1fpkt"];
2289--6746[label="1;2pkt 2fpkt"];
2289--6854[label="0.00558659;1pkt 1fpkt"];
2289--7255[label="0.00558659;1pkt 1fpkt"];
3453--5150[label="1;119pkt 119fpkt"];
3453--5510[label="0.0336134;4pkt 4fpkt"];
3453--5516[label="0.0420168;5pkt 5fpkt"];
3453--5530[label="0.0420168;5pkt 5fpkt"];
5150--5353[label="0.00558659;1pkt 1fpkt"];
5150--5384[label="0.00558659;1pkt 1fpkt"];
5150--5510[label="0.0335196;6pkt 6fpkt"];
5150--5511[label="0.00558659;1pkt 1fpkt"];
5150--5516[label="0.0335196;6pkt 6fpkt"];
5150--5528[label="0.00558659;1pkt 1fpkt"];
5150--5530[label="0.0335196;6pkt 6fpkt"];
5150--5668[label="1;2pkt 2fpkt"];
5150--5928[label="0.00558659;1pkt 1fpkt"];
5150--6059[label="0.00558659;1pkt 1fpkt"];
5150--6669[label="0.0416667;1pkt 1fpkt"];
5150--6746[label="1;2pkt 2fpkt"];
5150--6854[label="0.00558659;1pkt 1fpkt"];
5150--7255[label="0.00558659;1pkt 1fpkt"];
5668--6746[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.121.107.101" dst_port="80" src_ip="20.173.174.209"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.216.26.140"/>
      <from sec="1260594014" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594014" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
3487[label="185.20.194.156;s;104pkt 104fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.20.194.156:25, 41.250.136.33:*}[30.7692%]&lt;BR/&gt;{185.20.194.156:25, 42.133.140.81:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0385%)&lt;BR/&gt; 53: (0.961538%)&lt;BR/&gt; 63699: (0.480769%)&lt;BR/&gt; 63595: (0.480769%)&lt;BR/&gt; 62539: (0.480769%)&gt;];
}
3487--4513[label="0.00961538;1pkt 1fpkt"];
3487--5468[label="0.00961538;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.133.140.81" src_ip="185.20.194.156" src_port="25"/>
      <filter dst_ip="41.250.136.33" src_ip="185.20.194.156" src_port="25"/>
    </slice>
    <from sec="1260594072" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="36.5.129.71"/>
      <from sec="1260594618" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594618" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="36.5.129.71"/>
      <from sec="1260594618" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594618" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
3018[label="185.20.116.122;s;61pkt 61fpkt", shape=diamond, color=yellow];
3567[label="36.64.28.132;d;44pkt 44fpkt", shape=diamond, color=yellow];
6315[label="168.146.78.161;47pkt 47fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.78.161:25, *:*}[41.9643%]&lt;BR/&gt;{*:25, 36.64.28.132:*}[39.2857%]&lt;BR/&gt;{185.20.116.122:25, 41.9.250.65:*}[29.4643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 7548: (0.657895%)&lt;BR/&gt; 7545: (0.657895%)&lt;BR/&gt; 7466: (0.657895%)&lt;BR/&gt; 7458: (0.657895%)&gt;];
}
3018--3567[label="0.454545;20pkt 20fpkt"];
3567--6315[label="0.454545;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="168.146.78.161" src_port="25"/>
      <filter dst_ip="36.64.28.132" src_port="25"/>
      <filter dst_ip="41.9.250.65" src_ip="185.20.116.122" src_port="25"/>
    </slice>
    <from sec="1260594140" usec="0"/>
    <to sec="1260594861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.216.15.162"/>
      <from sec="1260594711" usec="0"/>
      <to sec="1260594807" usec="0"/>
    </slice>
    <from sec="1260594711" usec="0"/>
    <to sec="1260594807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1187[label="215.200.203.46;d;3pkt 3fpkt", shape=diamond, color=yellow];
3592[label="130.108.26.72;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.26.72:*, 215.200.203.46:80}[42.8571%]&lt;BR/&gt;{130.108.26.72:*, 215.200.202.92:80}[28.5714%]&lt;BR/&gt;{130.108.26.72:*, 197.91.84.220:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54561: (10%)&lt;BR/&gt; 54497: (10%)&lt;BR/&gt; 54481: (10%)&lt;BR/&gt; 54559: (5%)&gt;];
}
1187--3592[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.200.203.46" dst_port="80" src_ip="130.108.26.72"/>
      <filter dst_ip="197.91.84.220" dst_port="80" src_ip="130.108.26.72"/>
      <filter dst_ip="215.200.202.92" dst_port="80" src_ip="130.108.26.72"/>
    </slice>
    <from sec="1260594742" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="81.252.25.243"/>
      <from sec="1260594743" usec="0"/>
      <to sec="1260594746" usec="0"/>
    </slice>
    <from sec="1260594743" usec="0"/>
    <to sec="1260594746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.0.2.217"/>
      <from sec="1260594755" usec="0"/>
      <to sec="1260594827" usec="0"/>
    </slice>
    <from sec="1260594755" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.167.30.232"/>
      <from sec="1260594770" usec="0"/>
      <to sec="1260594789" usec="0"/>
    </slice>
    <from sec="1260594770" usec="0"/>
    <to sec="1260594789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
3558[label="172.216.84.22;s;97pkt 97fpkt", shape=diamond, color=yellow];
3635[label="189.128.58.189;d;91pkt 91fpkt", shape=diamond, color=yellow];
5330[label="189.128.58.189;d;91pkt 91fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.84.22:*, 189.128.58.189:80}[93.8144%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8208%)&lt;BR/&gt; 3642: (0.537634%)&lt;BR/&gt; 3640: (0.537634%)&lt;BR/&gt; 3638: (0.537634%)&lt;BR/&gt; 3636: (0.537634%)&gt;];
}
3558--3635[label="1;91pkt 91fpkt"];
3558--5330[label="1;91pkt 91fpkt"];
3635--5330[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="189.128.58.189" dst_port="80" src_ip="172.216.84.22"/>
    </slice>
    <from sec="1260594665" usec="0"/>
    <to sec="1260594815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.235.17.255"/>
      <from sec="1260594785" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594785" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
3622[label="194.121.97.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
3642[label="8.39.166.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.97.8:32966, 26.9.11.24:80}[50%]&lt;BR/&gt;{194.121.97.8:55191, 8.39.166.175:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55191: (33.3333%)&lt;BR/&gt; 32966: (16.6667%)&gt;];
}
3622--3642[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.39.166.175" dst_port="80" src_ip="194.121.97.8" src_port="55191"/>
      <filter dst_ip="26.9.11.24" dst_port="80" src_ip="194.121.97.8" src_port="32966"/>
    </slice>
    <from sec="1260594764" usec="0"/>
    <to sec="1260594801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.539926,1.81031,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
3673[label="86.152.236.58;d;5pkt 5fpkt", shape=diamond, color=yellow];
3674[label="168.140.150.144;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.150.144:443, 86.152.236.58:4116}[20%]&lt;BR/&gt;{168.140.150.144:443, 86.152.236.58:4117}[20%]&lt;BR/&gt;{168.140.150.144:443, 86.152.236.58:4118}[20%]&lt;BR/&gt;{168.140.150.144:443, 86.152.236.58:4119}[20%]&lt;BR/&gt;{168.140.150.144:443, 86.152.236.58:4120}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4120: (10%)&lt;BR/&gt; 4119: (10%)&lt;BR/&gt; 4118: (10%)&lt;BR/&gt; 4117: (10%)&gt;];
}
3673--3674[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="86.152.236.58" dst_port="4120" src_ip="168.140.150.144" src_port="443"/>
      <filter dst_ip="86.152.236.58" dst_port="4119" src_ip="168.140.150.144" src_port="443"/>
      <filter dst_ip="86.152.236.58" dst_port="4118" src_ip="168.140.150.144" src_port="443"/>
      <filter dst_ip="86.152.236.58" dst_port="4117" src_ip="168.140.150.144" src_port="443"/>
      <filter dst_ip="86.152.236.58" dst_port="4116" src_ip="168.140.150.144" src_port="443"/>
    </slice>
    <from sec="1260594815" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
223[label="172.216.234.118;d;1784pkt 1784fpkt", shape=diamond, color=yellow];
3695[label="172.216.234.118;d;319pkt 319fpkt", shape=hexagon, color=black];
6501[label="223.53.4.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.216.234.118:37437}[97.87%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37437: (48.9791%)&lt;BR/&gt; 443: (0.617284%)&lt;BR/&gt; 0: (0.42735%)&lt;BR/&gt; 80: (0.189934%)&lt;BR/&gt; 7356: (0.14245%)&gt;];
}
223--3695[label="1;319pkt 319fpkt"];
223--6501[label="1;3pkt 3fpkt"];
3695--6501[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.234.118" dst_port="37437"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
295[label="200.193.82.186;s;272pkt 272fpkt", shape=diamond, color=yellow];
3713[label="200.193.82.186;s;197pkt 197fpkt", shape=hexagon, color=black];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.82.186:6667, *:*}[31.9853%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.3774%)&lt;BR/&gt; 6666: (4.47761%)&lt;BR/&gt; 6665: (3.19829%)&lt;BR/&gt; 6664: (3.09168%)&lt;BR/&gt; 6661: (3.09168%)&gt;];
}
295--1181[label="0.00404858;1pkt 1fpkt"];
295--3713[label="1;197pkt 197fpkt"];
295--4572[label="0.00404858;1pkt 1fpkt"];
295--5510[label="0.00367647;1pkt 1fpkt"];
295--5516[label="0.00735294;2pkt 2fpkt"];
295--5530[label="0.0110294;3pkt 3fpkt"];
3713--4572[label="0.00507614;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.193.82.186" src_port="6667"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
422[label="172.216.9.178;d;105pkt 105fpkt", shape=diamond, color=yellow];
425[label="42.21.34.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
3743[label="42.21.34.226;s;1pkt 1fpkt", shape=hexagon, color=black];
4057[label="172.216.9.178;d;100pkt 100fpkt", shape=hexagon, color=black];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.216.9.178:6264}[88.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6264: (43.7198%)&lt;BR/&gt; 80: (3.86473%)&lt;BR/&gt; 0: (2.89855%)&lt;BR/&gt; 4672: (1.69082%)&lt;BR/&gt; 17368: (1.44928%)&gt;];
}
422--425[label="1;1pkt 1fpkt"];
422--3743[label="1;1pkt 1fpkt"];
422--4057[label="1;100pkt 100fpkt"];
422--5507[label="0.0285714;3pkt 3fpkt"];
422--5816[label="0.0138889;1pkt 1fpkt"];
425--3743[label="1;1pkt 1fpkt"];
425--4057[label="1;1pkt 1fpkt"];
3743--4057[label="1;1pkt 1fpkt"];
4057--5507[label="0.03;3pkt 3fpkt"];
4057--5816[label="0.0138889;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.9.178" dst_port="6264"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
470[label="168.146.73.122;s;64pkt 64fpkt", shape=diamond, color=yellow];
700[label="20.173.168.55;d;27pkt 27fpkt", shape=diamond, color=yellow];
3809[label="20.173.168.55;d;5pkt 5fpkt", shape=hexagon, color=black];
3918[label="168.146.73.122;s;17pkt 17fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.73.122:80, 20.173.168.55:*}[48.4375%]&lt;BR/&gt;{168.146.73.122:80, 214.25.161.117:*}[48.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63862: (1.76991%)&lt;BR/&gt; 55474: (1.76991%)&lt;BR/&gt; 52450: (1.76991%)&lt;BR/&gt; 49726: (1.76991%)&gt;];
}
470--700[label="1;27pkt 27fpkt"];
470--3809[label="1;5pkt 5fpkt"];
470--3918[label="1;17pkt 17fpkt"];
470--5507[label="0.09375;6pkt 6fpkt"];
470--5528[label="0.0625;4pkt 4fpkt"];
470--5532[label="0.09375;6pkt 6fpkt"];
470--5535[label="0.03125;2pkt 2fpkt"];
700--3809[label="1;5pkt 5fpkt"];
700--3918[label="0.352941;6pkt 6fpkt"];
700--5507[label="0.111111;3pkt 3fpkt"];
700--5528[label="0.0740741;2pkt 2fpkt"];
700--5532[label="0.111111;3pkt 3fpkt"];
3809--3918[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.25.161.117" src_ip="168.146.73.122" src_port="80"/>
      <filter dst_ip="20.173.168.55" src_ip="168.146.73.122" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
919[label="172.216.30.132;s;3174pkt 3174fpkt", shape=diamond, color=yellow];
5034[label="172.216.30.132;s;3174pkt 3174fpkt", shape=hexagon, color=black];
6188[label="172.216.30.132;3441pkt 3441fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.30.132:*, *:53}[82.7085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7548%)&lt;BR/&gt; 0: (0.64358%)&lt;BR/&gt; 55464: (0.0612933%)&lt;BR/&gt; 65164: (0.04597%)&lt;BR/&gt; 65146: (0.04597%)&gt;];
}
919--921[label="0.000397614;1pkt 1fpkt"];
919--1134[label="0.000518403;1pkt 1fpkt"];
919--1581[label="0.00137552;1pkt 1fpkt"];
919--2196[label="0.0027959;3pkt 3fpkt"];
919--2225[label="0.000846024;1pkt 1fpkt"];
919--2931[label="0.00289855;2pkt 2fpkt"];
919--3133[label="0.0282132;9pkt 9fpkt"];
919--3134[label="0.0321637;11pkt 11fpkt"];
919--3729[label="0.0111524;6pkt 6fpkt"];
919--3777[label="0.00819156;26pkt 26fpkt"];
919--4468[label="0.00313152;3pkt 3fpkt"];
919--4546[label="0.000518403;1pkt 1fpkt"];
919--4753[label="0.00289855;2pkt 2fpkt"];
919--5034[label="1;3174pkt 3174fpkt"];
919--5472[label="0.00289855;2pkt 2fpkt"];
919--5506[label="0.0078765;25pkt 25fpkt"];
919--5515[label="0.068683;218pkt 218fpkt"];
919--5527[label="0.0138626;44pkt 44fpkt"];
919--5531[label="0.00661626;21pkt 21fpkt"];
919--5534[label="0.00409578;13pkt 13fpkt"];
919--5537[label="0.00913674;29pkt 29fpkt"];
919--5551[label="0.0138626;44pkt 44fpkt"];
919--5552[label="0.00913674;29pkt 29fpkt"];
919--5566[label="0.00913674;29pkt 29fpkt"];
919--6188[label="1;3174pkt 3174fpkt"];
5034--5472[label="0.00289855;2pkt 2fpkt"];
5034--5506[label="0.0078765;25pkt 25fpkt"];
5034--5515[label="0.068683;218pkt 218fpkt"];
5034--5527[label="0.0138626;44pkt 44fpkt"];
5034--5531[label="0.00661626;21pkt 21fpkt"];
5034--5534[label="0.00409578;13pkt 13fpkt"];
5034--5537[label="0.00913674;29pkt 29fpkt"];
5034--5551[label="0.0138626;44pkt 44fpkt"];
5034--5552[label="0.00913674;29pkt 29fpkt"];
5034--5566[label="0.00913674;29pkt 29fpkt"];
5034--6188[label="1;3174pkt 3174fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="172.216.30.132"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.156.113.13"/>
      <from sec="1260594494" usec="0"/>
      <to sec="1260594828" usec="0"/>
    </slice>
    <from sec="1260594494" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
183[label="212.253.199.203;d;82pkt 82fpkt", shape=diamond, color=yellow];
184[label="179.38.140.66;s;118pkt 118fpkt", shape=diamond, color=yellow];
1816[label="14.75.70.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
4027[label="212.253.199.203;d;82pkt 82fpkt", shape=hexagon, color=black];
4446[label="179.38.140.66;s;108pkt 108fpkt", shape=hexagon, color=black];
5895[label="179.38.140.66;122pkt 122fpkt", shape=pentagon, color=darkviolet];
6840[label="179.38.140.66;122pkt 122fpkt", shape=invtriangle, color=brown];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.38.140.66:80, 212.253.199.203:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60402: (0.472441%)&lt;BR/&gt; 60300: (0.472441%)&lt;BR/&gt; 59606: (0.472441%)&lt;BR/&gt; 58854: (0.472441%)&gt;];
}
183--184[label="1;82pkt 82fpkt"];
183--4027[label="1;82pkt 82fpkt"];
183--4446[label="1;82pkt 82fpkt"];
183--5507[label="0.0121951;1pkt 1fpkt"];
183--5895[label="1;82pkt 82fpkt"];
183--6840[label="1;82pkt 82fpkt"];
184--1816[label="1;1pkt 1fpkt"];
184--4027[label="1;82pkt 82fpkt"];
184--4446[label="1;108pkt 108fpkt"];
184--5507[label="0.0677966;8pkt 8fpkt"];
184--5528[label="0.0508475;6pkt 6fpkt"];
184--5532[label="0.0254237;3pkt 3fpkt"];
184--5535[label="0.0169492;2pkt 2fpkt"];
184--5895[label="0.991525;117pkt 117fpkt"];
184--6840[label="0.991525;117pkt 117fpkt"];
1816--4446[label="1;1pkt 1fpkt"];
1816--5507[label="1;1pkt 1fpkt"];
1816--5895[label="1;1pkt 1fpkt"];
1816--6840[label="1;1pkt 1fpkt"];
4027--4446[label="1;82pkt 82fpkt"];
4027--5507[label="0.0121951;1pkt 1fpkt"];
4027--5895[label="1;82pkt 82fpkt"];
4027--6840[label="1;82pkt 82fpkt"];
4446--5507[label="0.0740741;8pkt 8fpkt"];
4446--5528[label="0.0555556;6pkt 6fpkt"];
4446--5532[label="0.00925926;1pkt 1fpkt"];
4446--5895[label="0.990741;107pkt 107fpkt"];
4446--6840[label="0.990741;107pkt 107fpkt"];
5895--6840[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="212.253.199.203" src_ip="179.38.140.66" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
922[label="168.140.150.18;d;339pkt 339fpkt", shape=diamond, color=yellow];
4030[label="168.140.150.18;d;137pkt 137fpkt", shape=hexagon, color=black];
6202[label="46.97.7.136;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6877[label="150.84.92.82;1pkt 1fpkt", shape=invtriangle, color=brown];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.140.150.18:25}[56.4433%]&lt;BR/&gt;{*:25, 168.140.150.18:*}[30.1546%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6205%)&lt;BR/&gt; 0: (0.379507%)&lt;BR/&gt; 3747: (0.28463%)&lt;BR/&gt; 1053: (0.28463%)&lt;BR/&gt; 65196: (0.189753%)&gt;];
}
922--4030[label="1;137pkt 137fpkt"];
922--6202[label="0.02;1pkt 1fpkt"];
922--6414[label="0.0105263;1pkt 1fpkt"];
922--6877[label="1;1pkt 1fpkt"];
4030--6414[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.140.150.18" src_port="25"/>
      <filter dst_ip="168.140.150.18" dst_port="25"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
968[label="130.108.235.39;s;318pkt 318fpkt", shape=diamond, color=yellow];
4053[label="130.108.235.39;s;109pkt 109fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.235.39:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4889: (0.468384%)&lt;BR/&gt; 62935: (0.234192%)&lt;BR/&gt; 62933: (0.234192%)&lt;BR/&gt; 62872: (0.234192%)&gt;];
}
968--4053[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.235.39" src_port="25"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
977[label="148.218.10.37;d;498pkt 498fpkt", shape=diamond, color=yellow];
978[label="195.201.138.7;s;251pkt 251fpkt", shape=diamond, color=yellow];
1515[label="195.201.138.156;s;254pkt 254fpkt", shape=diamond, color=yellow];
4054[label="148.218.10.37;d;229pkt 229fpkt", shape=hexagon, color=black];
5061[label="195.201.138.7;s;251pkt 251fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.201.138.7:22, 148.218.10.37:*}[49.3069%]&lt;BR/&gt;{195.201.138.156:22, 148.218.10.37:*}[49.3069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.6966%)&lt;BR/&gt; 6000: (0.202293%)&lt;BR/&gt; 2967: (0.202293%)&lt;BR/&gt; 65296: (0.134862%)&lt;BR/&gt; 64597: (0.134862%)&gt;];
}
977--978[label="0.992032;249pkt 249fpkt"];
977--1515[label="0.980315;249pkt 249fpkt"];
977--4054[label="1;229pkt 229fpkt"];
977--5061[label="0.992032;249pkt 249fpkt"];
978--4054[label="0.497817;114pkt 114fpkt"];
978--5061[label="1;251pkt 251fpkt"];
1515--4054[label="0.502183;115pkt 115fpkt"];
4054--5061[label="0.497817;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="148.218.10.37" src_ip="195.201.138.156" src_port="22"/>
      <filter dst_ip="148.218.10.37" src_ip="195.201.138.7" src_port="22"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
983[label="168.140.166.155;d;769pkt 769fpkt", shape=diamond, color=yellow];
4055[label="168.140.166.155;d;332pkt 332fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.140.166.155:37695}[95.7087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37695: (48.0018%)&lt;BR/&gt; 443: (1.68029%)&lt;BR/&gt; 0: (0.363306%)&lt;BR/&gt; 80: (0.227066%)&lt;BR/&gt; 51083: (0.181653%)&gt;];
}
983--4055[label="1;332pkt 332fpkt"];
</description>
    <slice>
      <filter dst_ip="168.140.166.155" dst_port="37695"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
417[label="168.140.166.155;s;3992pkt 3992fpkt", shape=diamond, color=yellow];
4056[label="168.140.166.155;s;2417pkt 2417fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.166.155:37695, *:*}[97.0942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37695: (48.5879%)&lt;BR/&gt; 443: (1.21704%)&lt;BR/&gt; 80: (0.218443%)&lt;BR/&gt; 51083: (0.0624122%)&lt;BR/&gt; 1133: (0.0468092%)&gt;];
}
417--4056[label="1;2417pkt 2417fpkt"];
417--5507[label="0.00125251;5pkt 5fpkt"];
417--5510[label="0.000250501;1pkt 1fpkt"];
417--5516[label="0.000501002;2pkt 2fpkt"];
417--5528[label="0.00125251;5pkt 5fpkt"];
417--5530[label="0.000250501;1pkt 1fpkt"];
417--5532[label="0.00175351;7pkt 7fpkt"];
417--5535[label="0.00125251;5pkt 5fpkt"];
4056--5507[label="0.00206868;5pkt 5fpkt"];
4056--5510[label="0.000413736;1pkt 1fpkt"];
4056--5516[label="0.000827472;2pkt 2fpkt"];
4056--5528[label="0.00206868;5pkt 5fpkt"];
4056--5530[label="0.000413736;1pkt 1fpkt"];
4056--5532[label="0.00206868;5pkt 5fpkt"];
4056--5535[label="0.00165494;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.166.155" src_port="37695"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1550[label="35.58.60.94;d;117pkt 117fpkt", shape=diamond, color=yellow];
1551[label="172.216.219.77;s;129pkt 129fpkt", shape=diamond, color=yellow];
4104[label="35.58.60.94;d;42pkt 42fpkt", shape=hexagon, color=black];
5966[label="172.216.219.77;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.219.77:*, 35.58.60.94:80}[77.4834%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2955: (0.457666%)&lt;BR/&gt; 2953: (0.457666%)&lt;BR/&gt; 2951: (0.457666%)&lt;BR/&gt; 2945: (0.457666%)&gt;];
}
1550--1551[label="1;117pkt 117fpkt"];
1550--4104[label="1;42pkt 42fpkt"];
1550--5510[label="0.0769231;9pkt 9fpkt"];
1550--5516[label="0.0598291;7pkt 7fpkt"];
1550--5530[label="0.0683761;8pkt 8fpkt"];
1550--5966[label="0.991453;116pkt 116fpkt"];
1551--4104[label="1;42pkt 42fpkt"];
1551--5510[label="0.0697674;9pkt 9fpkt"];
1551--5516[label="0.0697674;9pkt 9fpkt"];
1551--5530[label="0.0620155;8pkt 8fpkt"];
1551--5966[label="0.984496;127pkt 127fpkt"];
4104--5966[label="0.97619;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="35.58.60.94" dst_port="80" src_ip="172.216.219.77"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.24.220.78"/>
      <from sec="1260594411" usec="0"/>
      <to sec="1260594566" usec="0"/>
    </slice>
    <from sec="1260594411" usec="0"/>
    <to sec="1260594566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.162.47.127"/>
      <from sec="1260594007" usec="0"/>
      <to sec="1260594288" usec="0"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1260594000" usec="0"/>
      <to sec="1260594468" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
352[label="12.134.155.7;d;103pkt 103fpkt", shape=diamond, color=yellow];
353[label="168.140.179.117;s;507pkt 507fpkt", shape=diamond, color=yellow];
491[label="21.168.0.14;d;272pkt 272fpkt", shape=diamond, color=yellow];
3172[label="9.40.212.86;d;116pkt 116fpkt", shape=diamond, color=yellow];
4255[label="21.168.0.14;d;272pkt 272fpkt", shape=hexagon, color=black];
4845[label="12.134.155.7;d;98pkt 98fpkt", shape=hexagon, color=black];
5165[label="9.40.212.86;d;116pkt 116fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.179.117:8080, 21.168.0.14:*}[44.3894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (38.5782%)&lt;BR/&gt; 0: (12.6685%)&lt;BR/&gt; 80: (4.71698%)&lt;BR/&gt; 418: (0.404313%)&lt;BR/&gt; 113: (0.202156%)&gt;];
}
352--353[label="1;103pkt 103fpkt"];
352--4845[label="1;98pkt 98fpkt"];
353--491[label="1;272pkt 272fpkt"];
353--3136[label="0.0322581;1pkt 1fpkt"];
353--3172[label="0.146552;17pkt 17fpkt"];
353--3886[label="0.00257732;1pkt 1fpkt"];
353--4255[label="1;272pkt 272fpkt"];
353--4453[label="0.00197239;1pkt 1fpkt"];
353--4845[label="1;98pkt 98fpkt"];
353--4882[label="0.037037;1pkt 1fpkt"];
353--5035[label="0.00235294;1pkt 1fpkt"];
353--5165[label="0.146552;17pkt 17fpkt"];
353--5510[label="0.00986193;5pkt 5fpkt"];
353--5515[label="0.00197239;1pkt 1fpkt"];
353--5516[label="0.0138067;7pkt 7fpkt"];
353--5530[label="0.0394477;20pkt 20fpkt"];
491--4255[label="1;272pkt 272fpkt"];
3172--5165[label="1;116pkt 116fpkt"];
3172--5516[label="0.00862069;1pkt 1fpkt"];
3172--5532[label="0.00862069;1pkt 1fpkt"];
3172--6117[label="0.047619;1pkt 1fpkt"];
3172--6368[label="0.00862069;1pkt 1fpkt"];
3172--6585[label="0.0175439;1pkt 1fpkt"];
3172--7045[label="0.00862069;1pkt 1fpkt"];
5165--5516[label="0.00862069;1pkt 1fpkt"];
5165--5532[label="0.00862069;1pkt 1fpkt"];
5165--6117[label="0.047619;1pkt 1fpkt"];
5165--6368[label="0.00862069;1pkt 1fpkt"];
5165--6585[label="0.0175439;1pkt 1fpkt"];
5165--7045[label="0.00862069;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.168.0.14" src_ip="168.140.179.117" src_port="8080"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1959[label="172.216.165.122;s;993pkt 993fpkt", shape=diamond, color=yellow];
4294[label="172.216.165.122;s;993pkt 993fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.165.122:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1959--2888[label="0.00275482;1pkt 1fpkt"];
1959--2906[label="0.00268097;1pkt 1fpkt"];
1959--2922[label="0.0026455;1pkt 1fpkt"];
1959--3130[label="0.00283286;1pkt 1fpkt"];
1959--3400[label="0.00389105;1pkt 1fpkt"];
1959--4294[label="1;993pkt 993fpkt"];
1959--4513[label="0.00214592;1pkt 1fpkt"];
1959--4863[label="0.00299401;1pkt 1fpkt"];
1959--5046[label="0.00275482;1pkt 1fpkt"];
1959--5468[label="0.00214592;1pkt 1fpkt"];
4294--4513[label="0.00214592;1pkt 1fpkt"];
4294--4863[label="0.00299401;1pkt 1fpkt"];
4294--5046[label="0.00275482;1pkt 1fpkt"];
4294--5468[label="0.00214592;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.216.165.122"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1996[label="195.96.1.224;s;255pkt 255fpkt", shape=diamond, color=yellow];
4321[label="195.96.1.224;s;147pkt 147fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.96.1.224:25, *:*}[92.549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.1294%)&lt;BR/&gt; 443: (0.621891%)&lt;BR/&gt; 4849: (0.497512%)&lt;BR/&gt; 3361: (0.497512%)&lt;BR/&gt; 2669: (0.497512%)&gt;];
}
1996--3629[label="0.00970874;1pkt 1fpkt"];
1996--4321[label="1;147pkt 147fpkt"];
1996--5329[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="195.96.1.224" src_port="25"/>
    </slice>
    <from sec="1260594004" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1091[label="168.146.42.243;s;87pkt 87fpkt", shape=diamond, color=yellow];
1170[label="42.53.6.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1535[label="46.130.141.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
1558[label="46.128.206.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
1670[label="37.168.14.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
4282[label="46.128.206.172;d;2pkt 2fpkt", shape=hexagon, color=black];
4339[label="37.168.14.166;d;1pkt 1fpkt", shape=hexagon, color=black];
4757[label="42.53.6.198;d;1pkt 1fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.42.243:20209, 34.214.202.130:*}[29.8851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20209: (27.6042%)&lt;BR/&gt; 0: (9.375%)&lt;BR/&gt; 8971: (4.6875%)&lt;BR/&gt; 16001: (3.64583%)&lt;BR/&gt; 25845: (1.5625%)&gt;];
}
1091--1170[label="1;1pkt 1fpkt"];
1091--1535[label="1;1pkt 1fpkt"];
1091--1558[label="1;2pkt 2fpkt"];
1091--1670[label="1;1pkt 1fpkt"];
1091--4282[label="1;2pkt 2fpkt"];
1091--4339[label="1;1pkt 1fpkt"];
1091--4757[label="1;1pkt 1fpkt"];
1170--4757[label="1;1pkt 1fpkt"];
1558--4282[label="1;2pkt 2fpkt"];
1670--4339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.214.202.130" src_ip="168.146.42.243" src_port="20209"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1661[label="130.108.41.122;s;99pkt 99fpkt", shape=diamond, color=yellow];
1689[label="22.67.245.148;d;55pkt 55fpkt", shape=diamond, color=yellow];
4351[label="22.67.245.148;d;55pkt 55fpkt", shape=hexagon, color=black];
6150[label="130.108.41.122;104pkt 104fpkt", shape=pentagon, color=darkviolet];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.41.122:*, 22.67.245.148:80}[52.381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52782: (0.638978%)&lt;BR/&gt; 52780: (0.638978%)&lt;BR/&gt; 52774: (0.638978%)&lt;BR/&gt; 52764: (0.638978%)&gt;];
}
1661--1689[label="1;55pkt 55fpkt"];
1661--4299[label="0.0505051;5pkt 5fpkt"];
1661--4351[label="1;55pkt 55fpkt"];
1661--6150[label="0.989899;98pkt 98fpkt"];
1689--4351[label="1;55pkt 55fpkt"];
1689--6150[label="1;55pkt 55fpkt"];
4351--6150[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="22.67.245.148" dst_port="80" src_ip="130.108.41.122"/>
    </slice>
    <from sec="1260594010" usec="0"/>
    <to sec="1260594892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
197[label="87.86.4.222;d;2pkt 2fpkt", shape=diamond, color=yellow];
199[label="130.108.40.178;s;34pkt 34fpkt", shape=diamond, color=yellow];
944[label="34.77.128.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
984[label="41.128.106.202;d;2pkt 2fpkt", shape=diamond, color=yellow];
985[label="87.218.149.95;d;2pkt 2fpkt", shape=diamond, color=yellow];
986[label="42.11.160.170;d;2pkt 2fpkt", shape=diamond, color=yellow];
990[label="86.249.220.223;d;2pkt 2fpkt", shape=diamond, color=yellow];
1749[label="43.113.160.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
3687[label="130.108.40.178;s;19pkt 19fpkt", shape=hexagon, color=black];
3870[label="87.86.4.222;d;1pkt 1fpkt", shape=hexagon, color=black];
4058[label="86.249.220.223;d;1pkt 1fpkt", shape=hexagon, color=black];
4188[label="34.77.128.112;d;2pkt 2fpkt", shape=hexagon, color=black];
4239[label="41.128.106.202;d;2pkt 2fpkt", shape=hexagon, color=black];
4381[label="43.113.160.1;d;2pkt 2fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.40.178:8889, *:8000}[29.4118%]&lt;BR/&gt;{130.108.40.178:0, *:0}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (24%)&lt;BR/&gt; 8889: (22.6667%)&lt;BR/&gt; 8000: (20%)&lt;BR/&gt; 80: (5.33333%)&lt;BR/&gt; 12494: (4.66667%)&gt;];
}
197--199[label="1;2pkt 2fpkt"];
197--3687[label="0.5;1pkt 1fpkt"];
197--3870[label="1;1pkt 1fpkt"];
199--944[label="1;2pkt 2fpkt"];
199--984[label="1;2pkt 2fpkt"];
199--985[label="1;2pkt 2fpkt"];
199--986[label="1;2pkt 2fpkt"];
199--990[label="1;2pkt 2fpkt"];
199--1749[label="1;2pkt 2fpkt"];
199--2909[label="0.0294118;1pkt 1fpkt"];
199--3687[label="1;19pkt 19fpkt"];
199--3870[label="1;1pkt 1fpkt"];
199--4058[label="1;1pkt 1fpkt"];
199--4188[label="1;2pkt 2fpkt"];
199--4239[label="1;2pkt 2fpkt"];
199--4381[label="1;2pkt 2fpkt"];
199--4727[label="0.0294118;1pkt 1fpkt"];
944--3687[label="0.5;1pkt 1fpkt"];
944--4188[label="1;2pkt 2fpkt"];
984--3687[label="0.5;1pkt 1fpkt"];
984--4239[label="1;2pkt 2fpkt"];
985--3687[label="0.5;1pkt 1fpkt"];
986--3687[label="0.5;1pkt 1fpkt"];
990--3687[label="0.5;1pkt 1fpkt"];
990--4058[label="1;1pkt 1fpkt"];
1749--4381[label="1;2pkt 2fpkt"];
3687--3870[label="1;1pkt 1fpkt"];
3687--4058[label="1;1pkt 1fpkt"];
3687--4188[label="0.5;1pkt 1fpkt"];
3687--4239[label="0.5;1pkt 1fpkt"];
3687--4727[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8000" src_ip="130.108.40.178" src_port="8889"/>
      <filter src_ip="130.108.40.178"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
400[label="130.108.42.36;s;127pkt 127fpkt", shape=diamond, color=yellow];
650[label="35.209.35.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
711[label="52.84.71.8;d;2pkt 2fpkt", shape=diamond, color=yellow];
1669[label="81.238.49.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
1840[label="123.45.141.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
2507[label="35.21.174.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
2736[label="33.73.71.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
2902[label="220.186.53.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
4433[label="35.21.174.171;d;1pkt 1fpkt", shape=hexagon, color=black];
5157[label="52.84.71.8;d;2pkt 2fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.42.36:9825, *:*}[84.252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9825: (42.7536%)&lt;BR/&gt; 80: (2.89855%)&lt;BR/&gt; 0: (2.89855%)&lt;BR/&gt; 8303: (2.17391%)&lt;BR/&gt; 8000: (1.44928%)&gt;];
}
400--650[label="1;1pkt 1fpkt"];
400--711[label="1;2pkt 2fpkt"];
400--1669[label="1;1pkt 1fpkt"];
400--1840[label="1;1pkt 1fpkt"];
400--2507[label="1;1pkt 1fpkt"];
400--2736[label="1;1pkt 1fpkt"];
400--2902[label="1;1pkt 1fpkt"];
400--4433[label="1;1pkt 1fpkt"];
400--5157[label="1;2pkt 2fpkt"];
711--5157[label="1;2pkt 2fpkt"];
2507--4433[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.42.36" src_port="9825"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
1532[label="130.108.41.69;d;865pkt 865fpkt", shape=diamond, color=yellow];
4511[label="130.108.41.69;d;865pkt 865fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.108.41.69:47197}[95.8382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47197: (47.9191%)&lt;BR/&gt; 0: (2.77457%)&lt;BR/&gt; 16001: (1.50289%)&lt;BR/&gt; 80: (0.462428%)&lt;BR/&gt; 6881: (0.346821%)&gt;];
}
1532--2817[label="0.00115607;1pkt 1fpkt"];
1532--4511[label="1;865pkt 865fpkt"];
1532--4678[label="0.00115607;1pkt 1fpkt"];
1532--5431[label="0.00115607;1pkt 1fpkt"];
1532--5510[label="0.00231214;2pkt 2fpkt"];
1532--5517[label="0.00115607;1pkt 1fpkt"];
1532--5541[label="0.00115607;1pkt 1fpkt"];
1532--5556[label="0.00115607;1pkt 1fpkt"];
1532--5999[label="0.00115607;1pkt 1fpkt"];
1532--6884[label="0.00115607;1pkt 1fpkt"];
1532--7267[label="0.00115607;1pkt 1fpkt"];
4511--4678[label="0.00115607;1pkt 1fpkt"];
4511--5431[label="0.00115607;1pkt 1fpkt"];
4511--5510[label="0.00231214;2pkt 2fpkt"];
4511--5517[label="0.00115607;1pkt 1fpkt"];
4511--5541[label="0.00115607;1pkt 1fpkt"];
4511--5556[label="0.00115607;1pkt 1fpkt"];
4511--5999[label="0.00115607;1pkt 1fpkt"];
4511--6884[label="0.00115607;1pkt 1fpkt"];
4511--7267[label="0.00115607;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.41.69" dst_port="47197"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
1599[label="81.84.30.241;d;144pkt 144fpkt", shape=diamond, color=yellow];
1939[label="172.216.109.56;s;399pkt 399fpkt", shape=diamond, color=yellow];
2243[label="35.241.44.194;d;174pkt 174fpkt", shape=diamond, color=yellow];
4303[label="81.84.30.241;d;144pkt 144fpkt", shape=hexagon, color=black];
4527[label="35.241.44.194;d;120pkt 120fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.109.56:*, 35.241.44.194:80}[43.609%]&lt;BR/&gt;{172.216.109.56:*, 81.84.30.241:80}[36.0902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4380: (0.152905%)&lt;BR/&gt; 4376: (0.152905%)&lt;BR/&gt; 4372: (0.152905%)&lt;BR/&gt; 4361: (0.152905%)&gt;];
}
1599--1939[label="1;144pkt 144fpkt"];
1599--4303[label="1;144pkt 144fpkt"];
1599--5510[label="0.0347222;5pkt 5fpkt"];
1599--5516[label="0.0555556;8pkt 8fpkt"];
1599--5530[label="0.0555556;8pkt 8fpkt"];
1939--2243[label="1;174pkt 174fpkt"];
1939--4303[label="1;144pkt 144fpkt"];
1939--4527[label="1;120pkt 120fpkt"];
1939--5510[label="0.0601504;24pkt 24fpkt"];
1939--5516[label="0.085213;34pkt 34fpkt"];
1939--5530[label="0.0802005;32pkt 32fpkt"];
2243--4527[label="1;120pkt 120fpkt"];
2243--5510[label="0.045977;8pkt 8fpkt"];
2243--5516[label="0.0862069;15pkt 15fpkt"];
2243--5530[label="0.0517241;9pkt 9fpkt"];
4303--5510[label="0.0347222;5pkt 5fpkt"];
4303--5516[label="0.0555556;8pkt 8fpkt"];
4303--5530[label="0.0555556;8pkt 8fpkt"];
4527--5510[label="0.0666667;8pkt 8fpkt"];
4527--5516[label="0.125;15pkt 15fpkt"];
4527--5530[label="0.075;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="35.241.44.194" dst_port="80" src_ip="172.216.109.56"/>
      <filter dst_ip="81.84.30.241" dst_port="80" src_ip="172.216.109.56"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1117[label="20.173.174.136;d;114pkt 114fpkt", shape=diamond, color=yellow];
1943[label="168.146.102.225;s;52pkt 52fpkt", shape=diamond, color=yellow];
2049[label="173.80.5.240;s;63pkt 63fpkt", shape=diamond, color=yellow];
4192[label="168.146.102.225;s;19pkt 19fpkt", shape=hexagon, color=black];
4529[label="20.173.174.136;d;114pkt 114fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.80.5.240:80, 20.173.174.136:*}[36.5672%]&lt;BR/&gt;{168.146.102.225:80, 20.173.174.136:*}[34.3284%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34742: (0.828729%)&lt;BR/&gt; 65288: (0.552486%)&lt;BR/&gt; 61273: (0.552486%)&lt;BR/&gt; 60754: (0.552486%)&gt;];
}
1117--1943[label="0.884615;46pkt 46fpkt"];
1117--2049[label="0.777778;49pkt 49fpkt"];
1117--4192[label="0.894737;17pkt 17fpkt"];
1117--4529[label="1;114pkt 114fpkt"];
1117--5507[label="0.0614035;7pkt 7fpkt"];
1117--5528[label="0.0789474;9pkt 9fpkt"];
1117--5532[label="0.0614035;7pkt 7fpkt"];
1117--5535[label="0.0350877;4pkt 4fpkt"];
1117--6662[label="0.00970874;1pkt 1fpkt"];
1943--4192[label="1;19pkt 19fpkt"];
1943--4529[label="0.884615;46pkt 46fpkt"];
1943--5507[label="0.0769231;4pkt 4fpkt"];
1943--5528[label="0.0961538;5pkt 5fpkt"];
1943--5532[label="0.0769231;4pkt 4fpkt"];
1943--5535[label="0.0384615;2pkt 2fpkt"];
2049--4529[label="0.777778;49pkt 49fpkt"];
2049--5507[label="0.047619;3pkt 3fpkt"];
2049--5528[label="0.0793651;5pkt 5fpkt"];
2049--5532[label="0.0952381;6pkt 6fpkt"];
2049--5535[label="0.031746;2pkt 2fpkt"];
4192--4529[label="0.894737;17pkt 17fpkt"];
4192--5507[label="0.210526;4pkt 4fpkt"];
4529--5507[label="0.0614035;7pkt 7fpkt"];
4529--5528[label="0.0789474;9pkt 9fpkt"];
4529--5532[label="0.0614035;7pkt 7fpkt"];
4529--5535[label="0.0350877;4pkt 4fpkt"];
4529--6662[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.174.136" src_ip="173.80.5.240" src_port="80"/>
      <filter dst_ip="20.173.174.136" src_ip="168.146.102.225" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
679[label="194.121.96.182;s;2429pkt 2429fpkt", shape=diamond, color=yellow];
1134[label="200.92.246.171;d;1929pkt 1929fpkt", shape=diamond, color=yellow];
3964[label="194.121.96.182;s;2427pkt 2427fpkt", shape=hexagon, color=black];
4546[label="200.92.246.171;d;1929pkt 1929fpkt", shape=hexagon, color=black];
6427[label="194.121.96.182;2429pkt 2429fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.96.182:*, *:53}[54.0953%]&lt;BR/&gt;{*:*, 200.92.246.171:53}[44.5627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.8109%)&lt;BR/&gt; 0: (2.28843%)&lt;BR/&gt; 32768: (0.107691%)&lt;BR/&gt; 80: (0.0942296%)&lt;BR/&gt; 1024: (0.0448712%)&gt;];
}
679--1134[label="0.0191809;37pkt 37fpkt"];
679--1388[label="0.00120048;1pkt 1fpkt"];
679--2225[label="0.00423012;5pkt 5fpkt"];
679--3964[label="1;2427pkt 2427fpkt"];
679--4546[label="0.0191809;37pkt 37fpkt"];
679--5510[label="0.000823384;2pkt 2fpkt"];
679--5516[label="0.000411692;1pkt 1fpkt"];
679--6427[label="0.999588;2428pkt 2428fpkt"];
1134--1401[label="0.000531632;1pkt 1fpkt"];
1134--1521[label="0.00207361;4pkt 4fpkt"];
1134--1572[label="0.00103734;1pkt 1fpkt"];
1134--1942[label="0.00451467;2pkt 2fpkt"];
1134--1973[label="0.0222222;1pkt 1fpkt"];
1134--2248[label="0.00259202;5pkt 5fpkt"];
1134--2936[label="0.00239808;1pkt 1fpkt"];
1134--3126[label="0.00614439;4pkt 4fpkt"];
1134--3928[label="0.00155521;3pkt 3fpkt"];
1134--3964[label="0.0191809;37pkt 37fpkt"];
1134--4546[label="1;1929pkt 1929fpkt"];
1134--4738[label="0.00529101;2pkt 2fpkt"];
1134--4835[label="0.00259202;5pkt 5fpkt"];
1134--5034[label="0.000518403;1pkt 1fpkt"];
1134--5140[label="0.00239808;1pkt 1fpkt"];
1134--5506[label="0.00103681;2pkt 2fpkt"];
1134--5515[label="0.0482115;93pkt 93fpkt"];
1134--5537[label="0.024365;47pkt 47fpkt"];
1134--5552[label="0.024365;47pkt 47fpkt"];
1134--5566[label="0.024365;47pkt 47fpkt"];
1134--5740[label="0.00259202;5pkt 5fpkt"];
1134--6188[label="0.000518403;1pkt 1fpkt"];
1134--6427[label="0.0191809;37pkt 37fpkt"];
1134--6665[label="0.00466563;9pkt 9fpkt"];
1134--6692[label="0.00207361;4pkt 4fpkt"];
1134--6776[label="0.00259202;5pkt 5fpkt"];
1134--7115[label="0.00207361;4pkt 4fpkt"];
1134--7182[label="0.00466563;9pkt 9fpkt"];
3964--4546[label="0.0191809;37pkt 37fpkt"];
3964--5510[label="0.000824063;2pkt 2fpkt"];
3964--5516[label="0.000412031;1pkt 1fpkt"];
3964--6427[label="0.999588;2426pkt 2426fpkt"];
4546--4738[label="0.00529101;2pkt 2fpkt"];
4546--4835[label="0.00259202;5pkt 5fpkt"];
4546--5034[label="0.000518403;1pkt 1fpkt"];
4546--5140[label="0.00239808;1pkt 1fpkt"];
4546--5506[label="0.00103681;2pkt 2fpkt"];
4546--5515[label="0.0482115;93pkt 93fpkt"];
4546--5537[label="0.024365;47pkt 47fpkt"];
4546--5552[label="0.024365;47pkt 47fpkt"];
4546--5566[label="0.024365;47pkt 47fpkt"];
4546--5740[label="0.00259202;5pkt 5fpkt"];
4546--6188[label="0.000518403;1pkt 1fpkt"];
4546--6427[label="0.0191809;37pkt 37fpkt"];
4546--6665[label="0.00466563;9pkt 9fpkt"];
4546--6692[label="0.00207361;4pkt 4fpkt"];
4546--6776[label="0.00259202;5pkt 5fpkt"];
4546--7115[label="0.00207361;4pkt 4fpkt"];
4546--7182[label="0.00466563;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="194.121.96.182"/>
      <filter dst_ip="200.92.246.171" dst_port="53"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
406[label="172.216.237.177;d;163pkt 163fpkt", shape=diamond, color=yellow];
2266[label="194.121.109.0;d;1041pkt 1041fpkt", shape=diamond, color=yellow];
3903[label="172.216.237.177;d;157pkt 157fpkt", shape=hexagon, color=black];
4549[label="194.121.109.0;d;1041pkt 1041fpkt", shape=hexagon, color=black];
6474[label="44.64.111.193;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6609[label="129.60.193.227;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6612[label="44.64.111.228;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 194.121.109.0:*}[67.3753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.4175%)&lt;BR/&gt; 25: (10.3873%)&lt;BR/&gt; 113: (3.6305%)&lt;BR/&gt; 0: (0.484066%)&lt;BR/&gt; 3254: (0.121017%)&gt;];
}
406--3903[label="1;157pkt 157fpkt"];
406--6474[label="0.774194;24pkt 24fpkt"];
406--6609[label="0.0714286;1pkt 1fpkt"];
406--6612[label="0.75;24pkt 24fpkt"];
2266--3847[label="0.000960615;1pkt 1fpkt"];
2266--3898[label="0.000960615;1pkt 1fpkt"];
2266--4173[label="0.000960615;1pkt 1fpkt"];
2266--4549[label="1;1041pkt 1041fpkt"];
2266--5353[label="0.000960615;1pkt 1fpkt"];
2266--5384[label="0.000960615;1pkt 1fpkt"];
2266--5462[label="0.000960615;1pkt 1fpkt"];
2266--5506[label="0.0662824;69pkt 69fpkt"];
2266--5511[label="0.000960615;1pkt 1fpkt"];
2266--5527[label="0.0393852;41pkt 41fpkt"];
2266--5531[label="0.0854947;89pkt 89fpkt"];
2266--5534[label="0.0509126;53pkt 53fpkt"];
2266--5551[label="0.0393852;41pkt 41fpkt"];
2266--5928[label="0.000960615;1pkt 1fpkt"];
2266--6034[label="0.00787402;1pkt 1fpkt"];
2266--6059[label="0.000960615;1pkt 1fpkt"];
2266--6182[label="0.0246914;2pkt 2fpkt"];
2266--6217[label="0.005;1pkt 1fpkt"];
2266--6474[label="0.225806;7pkt 7fpkt"];
2266--6596[label="0.0209424;4pkt 4fpkt"];
2266--6612[label="0.0625;2pkt 2fpkt"];
2266--6854[label="0.000960615;1pkt 1fpkt"];
2266--6894[label="0.00793651;1pkt 1fpkt"];
2266--6964[label="0.0246914;2pkt 2fpkt"];
2266--6981[label="0.00497512;1pkt 1fpkt"];
2266--7150[label="0.0210526;4pkt 4fpkt"];
2266--7255[label="0.000960615;1pkt 1fpkt"];
2266--7353[label="0.0209424;4pkt 4fpkt"];
3903--6474[label="0.774194;24pkt 24fpkt"];
3903--6609[label="0.0714286;1pkt 1fpkt"];
3903--6612[label="0.75;24pkt 24fpkt"];
4549--5353[label="0.000960615;1pkt 1fpkt"];
4549--5384[label="0.000960615;1pkt 1fpkt"];
4549--5462[label="0.000960615;1pkt 1fpkt"];
4549--5506[label="0.0662824;69pkt 69fpkt"];
4549--5511[label="0.000960615;1pkt 1fpkt"];
4549--5527[label="0.0393852;41pkt 41fpkt"];
4549--5531[label="0.0854947;89pkt 89fpkt"];
4549--5534[label="0.0509126;53pkt 53fpkt"];
4549--5551[label="0.0393852;41pkt 41fpkt"];
4549--5928[label="0.000960615;1pkt 1fpkt"];
4549--6034[label="0.00787402;1pkt 1fpkt"];
4549--6059[label="0.000960615;1pkt 1fpkt"];
4549--6182[label="0.0246914;2pkt 2fpkt"];
4549--6217[label="0.005;1pkt 1fpkt"];
4549--6474[label="0.225806;7pkt 7fpkt"];
4549--6596[label="0.0209424;4pkt 4fpkt"];
4549--6612[label="0.0625;2pkt 2fpkt"];
4549--6854[label="0.000960615;1pkt 1fpkt"];
4549--6894[label="0.00793651;1pkt 1fpkt"];
4549--6964[label="0.0246914;2pkt 2fpkt"];
4549--6981[label="0.00497512;1pkt 1fpkt"];
4549--7150[label="0.0210526;4pkt 4fpkt"];
4549--7255[label="0.000960615;1pkt 1fpkt"];
4549--7353[label="0.0209424;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.121.109.0" src_port="53"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
767[label="36.52.145.30;d;6pkt 6fpkt", shape=diamond, color=yellow];
768[label="172.216.112.96;s;40pkt 40fpkt", shape=diamond, color=yellow];
3829[label="172.216.112.96;s;25pkt 25fpkt", shape=hexagon, color=black];
6047[label="172.216.112.96;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.112.96:*, 195.97.158.243:80}[41.5094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2064: (1.63934%)&lt;BR/&gt; 2063: (1.63934%)&lt;BR/&gt; 2175: (1.22951%)&lt;BR/&gt; 2173: (1.22951%)&gt;];
}
767--768[label="0.666667;4pkt 4fpkt"];
767--3829[label="0.333333;2pkt 2fpkt"];
767--6047[label="0.666667;4pkt 4fpkt"];
768--933[label="0.05;2pkt 2fpkt"];
768--1623[label="0.05;2pkt 2fpkt"];
768--2232[label="0.05;2pkt 2fpkt"];
768--2963[label="0.025;1pkt 1fpkt"];
768--3829[label="1;25pkt 25fpkt"];
768--3881[label="0.05;2pkt 2fpkt"];
768--4571[label="0.05;2pkt 2fpkt"];
768--5175[label="0.025;1pkt 1fpkt"];
768--6047[label="1;40pkt 40fpkt"];
3829--3881[label="0.08;2pkt 2fpkt"];
3829--4571[label="0.08;2pkt 2fpkt"];
3829--5175[label="0.04;1pkt 1fpkt"];
3829--6047[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="195.97.158.243" dst_port="80" src_ip="172.216.112.96"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
617[label="172.216.226.131;s;161pkt 161fpkt", shape=diamond, color=yellow];
718[label="222.148.3.66;d;6pkt 6fpkt", shape=diamond, color=yellow];
1831[label="220.135.42.97;d;3pkt 3fpkt", shape=diamond, color=yellow];
2442[label="37.49.131.70;d;3pkt 3fpkt", shape=diamond, color=yellow];
2839[label="220.88.237.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
4182[label="220.135.42.97;d;3pkt 3fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.226.131:*, *:80}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0678%)&lt;BR/&gt; 53: (2.82486%)&lt;BR/&gt; 0: (1.69492%)&lt;BR/&gt; 2773: (0.847458%)&lt;BR/&gt; 2770: (0.847458%)&gt;];
}
617--718[label="1;6pkt 6fpkt"];
617--1831[label="1;3pkt 3fpkt"];
617--2442[label="1;3pkt 3fpkt"];
617--2687[label="0.025641;2pkt 2fpkt"];
617--2839[label="1;1pkt 1fpkt"];
617--4182[label="1;3pkt 3fpkt"];
617--4596[label="0.025641;2pkt 2fpkt"];
617--5510[label="0.0248447;4pkt 4fpkt"];
617--5530[label="0.10559;17pkt 17fpkt"];
1831--4182[label="1;3pkt 3fpkt"];
2839--5530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.216.226.131"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1057[label="128.193.232.54;d;685pkt 685fpkt", shape=diamond, color=yellow];
1058[label="26.193.161.252;s;343pkt 343fpkt", shape=diamond, color=yellow];
4864[label="26.193.161.252;s;298pkt 298fpkt", shape=hexagon, color=black];
5759[label="56.29.69.38;63pkt 63fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.193.161.252:*, 128.193.232.54:23555}[49%]&lt;BR/&gt;{*:25, 128.193.232.54:*}[47.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23555: (35.4212%)&lt;BR/&gt; 25: (13.8949%)&lt;BR/&gt; 80: (0.539957%)&lt;BR/&gt; 57867: (0.143988%)&lt;BR/&gt; 56429: (0.143988%)&gt;];
}
1057--1058[label="1;343pkt 343fpkt"];
1057--1491[label="0.00145985;1pkt 1fpkt"];
1057--2522[label="0.00145985;1pkt 1fpkt"];
1057--3692[label="0.00145985;1pkt 1fpkt"];
1057--4436[label="0.00145985;1pkt 1fpkt"];
1057--4864[label="1;298pkt 298fpkt"];
1057--5081[label="0.00145985;1pkt 1fpkt"];
1057--5413[label="0.00145985;1pkt 1fpkt"];
1057--5512[label="0.00145985;1pkt 1fpkt"];
1057--5529[label="0.00145985;1pkt 1fpkt"];
1057--5532[label="0.00437956;3pkt 3fpkt"];
1057--5601[label="0.00145985;1pkt 1fpkt"];
1057--5681[label="0.00145985;1pkt 1fpkt"];
1057--5759[label="0.761905;48pkt 48fpkt"];
1057--6509[label="0.00145985;1pkt 1fpkt"];
1057--6544[label="0.00145985;1pkt 1fpkt"];
1057--6721[label="0.00145985;1pkt 1fpkt"];
1057--7204[label="0.00145985;1pkt 1fpkt"];
1058--4864[label="1;298pkt 298fpkt"];
</description>
    <slice>
      <filter dst_ip="128.193.232.54" src_port="25"/>
      <filter dst_ip="128.193.232.54" dst_port="23555" src_ip="26.193.161.252"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
2694[label="195.106.59.23;d;42pkt 42fpkt", shape=diamond, color=yellow];
4602[label="195.106.59.23;d;42pkt 42fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.77.47.163:*, 195.106.59.23:25}[47.619%]&lt;BR/&gt;{144.29.226.19:*, 195.106.59.23:25}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.6667%)&lt;BR/&gt; 53: (8.33333%)&lt;BR/&gt; 64105: (3.57143%)&lt;BR/&gt; 63265: (1.19048%)&lt;BR/&gt; 60583: (1.19048%)&gt;];
}
2694--4602[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="195.106.59.23" dst_port="25" src_ip="150.77.47.163"/>
      <filter dst_ip="195.106.59.23" dst_port="25" src_ip="144.29.226.19"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2075[label="80.136.27.81;s;5pkt 5fpkt", shape=diamond, color=yellow];
4621[label="80.136.27.81;s;5pkt 5fpkt", shape=hexagon, color=black];
5980[label="80.136.27.81;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.136.27.81:4000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4000: (50%)&lt;BR/&gt; 859: (9.375%)&lt;BR/&gt; 617: (9.375%)&lt;BR/&gt; 580: (9.375%)&lt;BR/&gt; 309: (9.375%)&gt;];
}
2075--4621[label="1;5pkt 5fpkt"];
2075--5980[label="1;5pkt 5fpkt"];
4621--5980[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="80.136.27.81" src_port="4000"/>
    </slice>
    <from sec="1260594116" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1627[label="173.80.49.6;s;18pkt 18fpkt", shape=diamond, color=yellow];
1787[label="220.30.52.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
2796[label="220.30.96.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
3243[label="220.0.130.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
3361[label="220.0.80.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
3631[label="220.29.162.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
4673[label="220.30.96.10;d;1pkt 1fpkt", shape=hexagon, color=black];
4960[label="220.30.52.46;d;1pkt 1fpkt", shape=hexagon, color=black];
5263[label="220.0.130.167;d;1pkt 1fpkt", shape=hexagon, color=black];
5297[label="220.1.70.12;d;1pkt 1fpkt", shape=hexagon, color=black];
5611[label="173.80.49.6;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6726[label="173.80.49.6;18pkt 18fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.80.49.6:3810, *:*}[52.6316%]&lt;BR/&gt;{173.80.49.6:3238, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3810: (30.1587%)&lt;BR/&gt; 3238: (12.6984%)&lt;BR/&gt; 9421: (4.7619%)&lt;BR/&gt; 8303: (4.7619%)&lt;BR/&gt; 32915: (3.96825%)&gt;];
}
1627--1787[label="1;1pkt 1fpkt"];
1627--2796[label="1;1pkt 1fpkt"];
1627--3243[label="1;1pkt 1fpkt"];
1627--3361[label="1;1pkt 1fpkt"];
1627--3631[label="1;1pkt 1fpkt"];
1627--4673[label="1;1pkt 1fpkt"];
1627--4960[label="1;1pkt 1fpkt"];
1627--5263[label="1;1pkt 1fpkt"];
1627--5297[label="1;1pkt 1fpkt"];
1627--5611[label="0.944444;17pkt 17fpkt"];
1627--6726[label="0.944444;17pkt 17fpkt"];
1787--4960[label="1;1pkt 1fpkt"];
1787--5611[label="1;1pkt 1fpkt"];
1787--6726[label="1;1pkt 1fpkt"];
2796--4673[label="1;1pkt 1fpkt"];
2796--5611[label="1;1pkt 1fpkt"];
2796--6726[label="1;1pkt 1fpkt"];
3243--5263[label="1;1pkt 1fpkt"];
3243--5611[label="1;1pkt 1fpkt"];
3243--6726[label="1;1pkt 1fpkt"];
3361--5611[label="1;1pkt 1fpkt"];
3361--6726[label="1;1pkt 1fpkt"];
3631--5611[label="1;1pkt 1fpkt"];
3631--6726[label="1;1pkt 1fpkt"];
4673--5611[label="1;1pkt 1fpkt"];
4673--6726[label="1;1pkt 1fpkt"];
4960--5611[label="1;1pkt 1fpkt"];
4960--6726[label="1;1pkt 1fpkt"];
5263--5611[label="1;1pkt 1fpkt"];
5263--6726[label="1;1pkt 1fpkt"];
5297--5611[label="1;1pkt 1fpkt"];
5297--6726[label="1;1pkt 1fpkt"];
5611--6726[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="173.80.49.6" src_port="3810"/>
      <filter src_ip="173.80.49.6" src_port="3238"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
2645[label="195.106.60.73;s;99pkt 99fpkt", shape=diamond, color=yellow];
2869[label="194.73.210.179;d;16pkt 16fpkt", shape=diamond, color=yellow];
4690[label="194.73.210.179;d;9pkt 9fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.106.60.73:80, 20.173.168.215:*}[51.5152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49300: (1.20968%)&lt;BR/&gt; 49287: (1.20968%)&lt;BR/&gt; 49276: (1.20968%)&lt;BR/&gt; 49271: (1.20968%)&gt;];
}
2645--2869[label="1;16pkt 16fpkt"];
2645--3490[label="0.0727273;4pkt 4fpkt"];
2645--4690[label="1;9pkt 9fpkt"];
2645--5507[label="0.0707071;7pkt 7fpkt"];
2645--5528[label="0.0505051;5pkt 5fpkt"];
2645--5532[label="0.030303;3pkt 3fpkt"];
2645--5535[label="0.020202;2pkt 2fpkt"];
2869--4690[label="1;9pkt 9fpkt"];
2869--5528[label="0.125;2pkt 2fpkt"];
4690--5528[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.168.215" src_ip="195.106.60.73" src_port="80"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2564[label="168.146.78.167;s;79pkt 79fpkt", shape=diamond, color=yellow];
4704[label="168.146.78.167;s;79pkt 79fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.78.167:25, 37.225.176.184:*}[25.3165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62135: (0.632911%)&lt;BR/&gt; 58816: (0.632911%)&lt;BR/&gt; 55853: (0.632911%)&lt;BR/&gt; 54225: (0.632911%)&gt;];
}
2564--4704[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="37.225.176.184" src_ip="168.146.78.167" src_port="25"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
2198[label="194.121.102.100;d;628pkt 628fpkt", shape=diamond, color=yellow];
4708[label="194.121.102.100;d;480pkt 480fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.121.102.100:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64050: (4.1065%)&lt;BR/&gt; 63542: (1.26354%)&lt;BR/&gt; 63098: (1.26354%)&lt;BR/&gt; 63433: (0.99278%)&lt;BR/&gt; 5018: (0.947653%)&gt;];
}
2198--3847[label="0.00159236;1pkt 1fpkt"];
2198--4173[label="0.00159236;1pkt 1fpkt"];
2198--4708[label="1;480pkt 480fpkt"];
2198--5353[label="0.00159236;1pkt 1fpkt"];
2198--5384[label="0.00159236;1pkt 1fpkt"];
2198--5511[label="0.00159236;1pkt 1fpkt"];
2198--5536[label="0.00159236;1pkt 1fpkt"];
2198--5928[label="0.00159236;1pkt 1fpkt"];
2198--6059[label="0.00159236;1pkt 1fpkt"];
2198--6544[label="0.00159236;1pkt 1fpkt"];
2198--6854[label="0.00159236;1pkt 1fpkt"];
2198--7255[label="0.00159236;1pkt 1fpkt"];
4708--5384[label="0.00208333;1pkt 1fpkt"];
4708--5511[label="0.00208333;1pkt 1fpkt"];
4708--5928[label="0.00208333;1pkt 1fpkt"];
4708--6854[label="0.00208333;1pkt 1fpkt"];
4708--7255[label="0.00208333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.121.102.100"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
2344[label="195.96.53.86;s;70pkt 70fpkt", shape=diamond, color=yellow];
4777[label="195.96.53.86;s;62pkt 62fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.96.53.86:25, 41.56.80.124:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65415: (0.757576%)&lt;BR/&gt; 65149: (0.757576%)&lt;BR/&gt; 62701: (0.757576%)&lt;BR/&gt; 61551: (0.757576%)&gt;];
}
2344--4777[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="41.56.80.124" src_ip="195.96.53.86" src_port="25"/>
    </slice>
    <from sec="1260594016" usec="0"/>
    <to sec="1260594805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
520[label="130.108.162.17;s;1608pkt 1608fpkt", shape=diamond, color=yellow];
810[label="36.198.10.253;d;44pkt 44fpkt", shape=diamond, color=yellow];
825[label="34.64.34.118;d;18pkt 18fpkt", shape=diamond, color=yellow];
846[label="46.162.232.100;d;3pkt 3fpkt", shape=diamond, color=yellow];
850[label="218.6.49.113;d;14pkt 14fpkt", shape=diamond, color=yellow];
1275[label="219.212.229.182;d;12pkt 12fpkt", shape=diamond, color=yellow];
1692[label="218.10.150.121;d;3pkt 3fpkt", shape=diamond, color=yellow];
2132[label="87.146.136.153;d;9pkt 9fpkt", shape=diamond, color=yellow];
2178[label="213.23.6.49;d;2pkt 2fpkt", shape=diamond, color=yellow];
2446[label="26.118.174.221;d;19pkt 19fpkt", shape=diamond, color=yellow];
2455[label="40.186.2.186;d;29pkt 29fpkt", shape=diamond, color=yellow];
2478[label="195.75.96.192;d;13pkt 13fpkt", shape=diamond, color=yellow];
2483[label="32.14.68.241;d;6pkt 6fpkt", shape=diamond, color=yellow];
2516[label="195.122.42.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
2532[label="36.198.102.51;d;18pkt 18fpkt", shape=diamond, color=yellow];
2546[label="219.249.232.161;d;12pkt 12fpkt", shape=diamond, color=yellow];
2863[label="219.213.145.253;d;8pkt 8fpkt", shape=diamond, color=yellow];
2957[label="130.108.162.18;s;144pkt 144fpkt", shape=diamond, color=yellow];
3069[label="34.66.96.39;d;57pkt 57fpkt", shape=diamond, color=yellow];
3286[label="43.212.122.2;d;13pkt 13fpkt", shape=diamond, color=yellow];
3582[label="36.198.28.153;d;7pkt 7fpkt", shape=diamond, color=yellow];
3590[label="36.48.201.14;d;3pkt 3fpkt", shape=diamond, color=yellow];
3841[label="36.198.10.253;d;26pkt 26fpkt", shape=hexagon, color=black];
3852[label="46.162.232.100;d;3pkt 3fpkt", shape=hexagon, color=black];
3854[label="218.6.49.113;d;7pkt 7fpkt", shape=hexagon, color=black];
3991[label="34.64.34.118;d;18pkt 18fpkt", shape=hexagon, color=black];
4411[label="26.118.174.221;d;19pkt 19fpkt", shape=hexagon, color=black];
4421[label="40.186.2.186;d;29pkt 29fpkt", shape=hexagon, color=black];
4654[label="32.14.68.241;d;6pkt 6fpkt", shape=hexagon, color=black];
4659[label="218.10.150.121;d;3pkt 3fpkt", shape=hexagon, color=black];
4689[label="219.213.145.253;d;8pkt 8fpkt", shape=hexagon, color=black];
4807[label="36.198.102.51;d;18pkt 18fpkt", shape=hexagon, color=black];
4988[label="34.66.96.39;d;51pkt 51fpkt", shape=hexagon, color=black];
5288[label="43.212.122.2;d;13pkt 13fpkt", shape=hexagon, color=black];
5321[label="36.48.201.14;d;3pkt 3fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.162.17:80, *:*}[91.7237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9333%)&lt;BR/&gt; 1058: (0.155694%)&lt;BR/&gt; 1064: (0.11121%)&lt;BR/&gt; 1049: (0.11121%)&lt;BR/&gt; 1044: (0.11121%)&gt;];
}
520--810[label="0.977273;43pkt 43fpkt"];
520--825[label="1;18pkt 18fpkt"];
520--846[label="0.666667;2pkt 2fpkt"];
520--850[label="0.857143;12pkt 12fpkt"];
520--1275[label="1;12pkt 12fpkt"];
520--1692[label="1;3pkt 3fpkt"];
520--1844[label="0.923077;12pkt 12fpkt"];
520--2132[label="0.888889;8pkt 8fpkt"];
520--2178[label="1;2pkt 2fpkt"];
520--2446[label="0.947368;18pkt 18fpkt"];
520--2455[label="0.896552;26pkt 26fpkt"];
520--2478[label="0.923077;12pkt 12fpkt"];
520--2483[label="1;6pkt 6fpkt"];
520--2516[label="1;2pkt 2fpkt"];
520--2532[label="1;18pkt 18fpkt"];
520--2546[label="1;12pkt 12fpkt"];
520--2863[label="0.875;7pkt 7fpkt"];
520--3069[label="0.964912;55pkt 55fpkt"];
520--3286[label="0.923077;12pkt 12fpkt"];
520--3582[label="0.857143;6pkt 6fpkt"];
520--3590[label="0.666667;2pkt 2fpkt"];
520--3841[label="0.961538;25pkt 25fpkt"];
520--3852[label="0.666667;2pkt 2fpkt"];
520--3854[label="0.857143;6pkt 6fpkt"];
520--3991[label="1;18pkt 18fpkt"];
520--4411[label="0.947368;18pkt 18fpkt"];
520--4421[label="0.896552;26pkt 26fpkt"];
520--4460[label="0.0298507;2pkt 2fpkt"];
520--4654[label="1;6pkt 6fpkt"];
520--4659[label="1;3pkt 3fpkt"];
520--4689[label="0.875;7pkt 7fpkt"];
520--4807[label="1;18pkt 18fpkt"];
520--4988[label="0.960784;49pkt 49fpkt"];
520--5288[label="0.923077;12pkt 12fpkt"];
520--5321[label="0.666667;2pkt 2fpkt"];
520--5507[label="0.068408;110pkt 110fpkt"];
520--5528[label="0.0783582;126pkt 126fpkt"];
520--5532[label="0.0634328;102pkt 102fpkt"];
520--5535[label="0.0329602;53pkt 53fpkt"];
810--2957[label="0.0227273;1pkt 1fpkt"];
810--3841[label="1;26pkt 26fpkt"];
810--5507[label="0.136364;6pkt 6fpkt"];
825--3991[label="1;18pkt 18fpkt"];
846--2957[label="0.333333;1pkt 1fpkt"];
846--3852[label="1;3pkt 3fpkt"];
850--2957[label="0.142857;2pkt 2fpkt"];
850--3854[label="1;7pkt 7fpkt"];
1692--4659[label="1;3pkt 3fpkt"];
2132--2957[label="0.111111;1pkt 1fpkt"];
2446--2957[label="0.0526316;1pkt 1fpkt"];
2446--4411[label="1;19pkt 19fpkt"];
2455--2957[label="0.103448;3pkt 3fpkt"];
2455--4421[label="1;29pkt 29fpkt"];
2455--5528[label="0.448276;13pkt 13fpkt"];
2478--2957[label="0.0769231;1pkt 1fpkt"];
2478--5528[label="0.461538;6pkt 6fpkt"];
2483--4654[label="1;6pkt 6fpkt"];
2532--4807[label="1;18pkt 18fpkt"];
2532--5528[label="0.333333;6pkt 6fpkt"];
2863--2957[label="0.125;1pkt 1fpkt"];
2863--4689[label="1;8pkt 8fpkt"];
2863--5528[label="0.25;2pkt 2fpkt"];
2863--5532[label="0.375;3pkt 3fpkt"];
2957--3069[label="0.0350877;2pkt 2fpkt"];
2957--3286[label="0.0769231;1pkt 1fpkt"];
2957--3582[label="0.142857;1pkt 1fpkt"];
2957--3590[label="0.333333;1pkt 1fpkt"];
2957--3841[label="0.0384615;1pkt 1fpkt"];
2957--3852[label="0.333333;1pkt 1fpkt"];
2957--3854[label="0.142857;1pkt 1fpkt"];
2957--4411[label="0.0526316;1pkt 1fpkt"];
2957--4421[label="0.103448;3pkt 3fpkt"];
2957--4453[label="0.00694444;1pkt 1fpkt"];
2957--4689[label="0.125;1pkt 1fpkt"];
2957--4988[label="0.0392157;2pkt 2fpkt"];
2957--5288[label="0.0769231;1pkt 1fpkt"];
2957--5321[label="0.333333;1pkt 1fpkt"];
2957--5507[label="0.0763889;11pkt 11fpkt"];
2957--5510[label="0.00694444;1pkt 1fpkt"];
2957--5528[label="0.0763889;11pkt 11fpkt"];
2957--5532[label="0.0694444;10pkt 10fpkt"];
2957--5535[label="0.0277778;4pkt 4fpkt"];
3069--4988[label="1;51pkt 51fpkt"];
3069--5532[label="0.0350877;2pkt 2fpkt"];
3286--5288[label="1;13pkt 13fpkt"];
3286--5532[label="0.538462;7pkt 7fpkt"];
3590--5321[label="1;3pkt 3fpkt"];
4421--5528[label="0.448276;13pkt 13fpkt"];
4689--5528[label="0.25;2pkt 2fpkt"];
4689--5532[label="0.375;3pkt 3fpkt"];
4807--5528[label="0.333333;6pkt 6fpkt"];
4988--5532[label="0.0392157;2pkt 2fpkt"];
5288--5532[label="0.538462;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="130.108.162.17" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
2566[label="172.216.36.15;s;114pkt 114fpkt", shape=diamond, color=yellow];
4843[label="172.216.36.15;s;107pkt 107fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.36.15:25, *:*}[96.4912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3213%)&lt;BR/&gt; 65025: (0.452489%)&lt;BR/&gt; 64821: (0.452489%)&lt;BR/&gt; 63825: (0.452489%)&lt;BR/&gt; 63755: (0.452489%)&gt;];
}
2566--4843[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="172.216.36.15" src_port="25"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
1433[label="168.140.145.10;s;446pkt 446fpkt", shape=diamond, color=yellow];
4846[label="168.140.145.10;s;446pkt 446fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.145.10:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1433--4846[label="1;446pkt 446fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.145.10"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
2251[label="168.140.150.16;d;63pkt 63fpkt", shape=diamond, color=yellow];
4880[label="168.140.150.16;d;63pkt 63fpkt", shape=hexagon, color=black];
6666[label="69.57.208.241;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7183[label="69.57.208.241;10pkt 10fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.56.205.76:*, 168.140.150.16:443}[58.209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35.8621%)&lt;BR/&gt; 993: (12.069%)&lt;BR/&gt; 54615: (1.37931%)&lt;BR/&gt; 53608: (1.37931%)&lt;BR/&gt; 38298: (1.37931%)&gt;];
}
2251--4880[label="1;63pkt 63fpkt"];
2251--6666[label="0.555556;5pkt 5fpkt"];
2251--7183[label="0.6;6pkt 6fpkt"];
4880--6666[label="0.555556;5pkt 5fpkt"];
4880--7183[label="0.6;6pkt 6fpkt"];
6666--7183[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="168.140.150.16" dst_port="443" src_ip="223.56.205.76"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
722[label="206.65.223.100;d;4pkt 4fpkt", shape=diamond, color=yellow];
725[label="172.216.8.143;s;49pkt 49fpkt", shape=diamond, color=yellow];
1575[label="160.49.85.45;d;296pkt 296fpkt", shape=diamond, color=yellow];
2255[label="172.216.30.172;s;156pkt 156fpkt", shape=diamond, color=yellow];
3217[label="198.37.194.3;d;80pkt 80fpkt", shape=diamond, color=yellow];
3365[label="212.17.211.40;d;11pkt 11fpkt", shape=diamond, color=yellow];
4881[label="172.216.30.172;s;156pkt 156fpkt", shape=hexagon, color=black];
5232[label="198.37.194.3;d;80pkt 80fpkt", shape=hexagon, color=black];
5311[label="212.17.211.40;d;11pkt 11fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.49.85.45:80}[70.3883%]&lt;BR/&gt;{172.216.30.172:*, *:80}[43.4466%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4069%)&lt;BR/&gt; 0: (0.474496%)&lt;BR/&gt; 20480: (0.355872%)&lt;BR/&gt; 48539: (0.237248%)&lt;BR/&gt; 48537: (0.237248%)&gt;];
}
722--725[label="1;4pkt 4fpkt"];
725--1274[label="0.0333333;1pkt 1fpkt"];
725--1575[label="0.857143;42pkt 42fpkt"];
725--3886[label="0.0204082;1pkt 1fpkt"];
725--4364[label="0.0526316;1pkt 1fpkt"];
725--4453[label="0.0204082;1pkt 1fpkt"];
725--5510[label="0.0408163;2pkt 2fpkt"];
1575--2255[label="0.365385;57pkt 57fpkt"];
1575--2699[label="0.0294118;2pkt 2fpkt"];
1575--3480[label="0.00546448;1pkt 1fpkt"];
1575--3742[label="0.027027;8pkt 8fpkt"];
1575--3800[label="0.0344828;1pkt 1fpkt"];
1575--4881[label="0.365385;57pkt 57fpkt"];
1575--5510[label="0.0236486;7pkt 7fpkt"];
1575--5516[label="0.0608108;18pkt 18fpkt"];
1575--5530[label="0.0878378;26pkt 26fpkt"];
1575--6556[label="0.00337838;1pkt 1fpkt"];
1575--6557[label="0.0439189;13pkt 13fpkt"];
1575--6966[label="0.00675676;2pkt 2fpkt"];
2255--3217[label="0.9375;75pkt 75fpkt"];
2255--3365[label="0.545455;6pkt 6fpkt"];
2255--4786[label="0.00641026;1pkt 1fpkt"];
2255--4881[label="1;156pkt 156fpkt"];
2255--5232[label="0.9375;75pkt 75fpkt"];
2255--5311[label="0.545455;6pkt 6fpkt"];
2255--5510[label="0.025641;4pkt 4fpkt"];
2255--5516[label="0.0576923;9pkt 9fpkt"];
2255--5530[label="0.0833333;13pkt 13fpkt"];
3217--4881[label="0.9375;75pkt 75fpkt"];
3217--5232[label="1;80pkt 80fpkt"];
3217--5510[label="0.0375;3pkt 3fpkt"];
3217--5516[label="0.0375;3pkt 3fpkt"];
3217--5530[label="0.0375;3pkt 3fpkt"];
3365--4881[label="0.545455;6pkt 6fpkt"];
3365--5311[label="1;11pkt 11fpkt"];
4881--5232[label="0.9375;75pkt 75fpkt"];
4881--5311[label="0.545455;6pkt 6fpkt"];
4881--5510[label="0.025641;4pkt 4fpkt"];
4881--5516[label="0.0576923;9pkt 9fpkt"];
4881--5530[label="0.0833333;13pkt 13fpkt"];
5232--5510[label="0.0375;3pkt 3fpkt"];
5232--5516[label="0.0375;3pkt 3fpkt"];
5232--5530[label="0.0375;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.216.30.172"/>
      <filter dst_ip="160.49.85.45" dst_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
3174[label="168.140.213.0;s;228pkt 228fpkt", shape=diamond, color=yellow];
4921[label="168.140.213.0;s;228pkt 228fpkt", shape=hexagon, color=black];
5574[label="168.140.213.0;232pkt 232fpkt", shape=pentagon, color=darkviolet];
6710[label="168.140.213.0;232pkt 232fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.213.0:*, *:53}[76.0684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.8261%)&lt;BR/&gt; 110: (3.58696%)&lt;BR/&gt; 25: (2.71739%)&lt;BR/&gt; 0: (1.30435%)&lt;BR/&gt; 65501: (0.217391%)&gt;];
}
3174--4921[label="1;228pkt 228fpkt"];
3174--5515[label="0.0175439;4pkt 4fpkt"];
3174--5527[label="0.00438596;1pkt 1fpkt"];
3174--5531[label="0.00877193;2pkt 2fpkt"];
3174--5551[label="0.00438596;1pkt 1fpkt"];
3174--5574[label="0.991228;226pkt 226fpkt"];
3174--6710[label="0.991228;226pkt 226fpkt"];
4921--5515[label="0.0175439;4pkt 4fpkt"];
4921--5527[label="0.00438596;1pkt 1fpkt"];
4921--5531[label="0.00877193;2pkt 2fpkt"];
4921--5551[label="0.00438596;1pkt 1fpkt"];
4921--5574[label="0.991228;226pkt 226fpkt"];
4921--6710[label="0.991228;226pkt 226fpkt"];
5574--6710[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="168.140.213.0"/>
    </slice>
    <from sec="1260594005" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
3195[label="168.140.150.210;s;82pkt 82fpkt", shape=diamond, color=yellow];
4942[label="168.140.150.210;s;82pkt 82fpkt", shape=hexagon, color=black];
6542[label="168.140.150.210;83pkt 83fpkt", shape=pentagon, color=darkviolet];
7130[label="168.140.150.210;83pkt 83fpkt", shape=invtriangle, color=brown];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.150.210:80, 201.77.181.242:*}[21.6867%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3939%)&lt;BR/&gt; 50323: (1.21212%)&lt;BR/&gt; 64038: (0.606061%)&lt;BR/&gt; 63612: (0.606061%)&lt;BR/&gt; 62101: (0.606061%)&gt;];
}
3195--4942[label="1;82pkt 82fpkt"];
3195--5507[label="0.0243902;2pkt 2fpkt"];
3195--5528[label="0.0853659;7pkt 7fpkt"];
3195--5532[label="0.0121951;1pkt 1fpkt"];
3195--5535[label="0.0487805;4pkt 4fpkt"];
3195--6542[label="1;82pkt 82fpkt"];
3195--7130[label="1;82pkt 82fpkt"];
4942--5507[label="0.0243902;2pkt 2fpkt"];
4942--5528[label="0.0853659;7pkt 7fpkt"];
4942--5532[label="0.0121951;1pkt 1fpkt"];
4942--5535[label="0.0487805;4pkt 4fpkt"];
4942--6542[label="1;82pkt 82fpkt"];
4942--7130[label="1;82pkt 82fpkt"];
6542--7130[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="201.77.181.242" src_ip="168.140.150.210" src_port="80"/>
    </slice>
    <from sec="1260594023" usec="0"/>
    <to sec="1260594890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.162.165.47"/>
      <from sec="1260594513" usec="0"/>
      <to sec="1260594674" usec="0"/>
    </slice>
    <from sec="1260594513" usec="0"/>
    <to sec="1260594674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1525[label="130.108.45.224;s;146pkt 146fpkt", shape=diamond, color=yellow];
1815[label="223.180.96.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
2439[label="33.77.234.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2763[label="35.22.120.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
3260[label="45.59.110.204;d;6pkt 6fpkt", shape=diamond, color=yellow];
3271[label="36.233.16.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
4994[label="45.59.110.204;d;6pkt 6fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.45.224:*, *:80}[78.0822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 6141: (9.5679%)&lt;BR/&gt; 8303: (1.23457%)&lt;BR/&gt; 8000: (1.23457%)&lt;BR/&gt; 2176: (0.925926%)&gt;];
}
1525--1815[label="1;1pkt 1fpkt"];
1525--2439[label="1;1pkt 1fpkt"];
1525--2763[label="1;1pkt 1fpkt"];
1525--3260[label="1;6pkt 6fpkt"];
1525--3271[label="1;1pkt 1fpkt"];
1525--4994[label="1;6pkt 6fpkt"];
1525--5510[label="0.0342466;5pkt 5fpkt"];
1525--5516[label="0.164384;24pkt 24fpkt"];
1525--5530[label="0.10274;15pkt 15fpkt"];
3260--4994[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.108.45.224"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
627[label="168.140.150.16;s;305pkt 305fpkt", shape=diamond, color=yellow];
863[label="214.25.158.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
902[label="214.25.149.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
966[label="168.140.151.64;s;156pkt 156fpkt", shape=diamond, color=yellow];
1432[label="222.101.69.24;d;106pkt 106fpkt", shape=diamond, color=yellow];
2370[label="220.149.237.4;d;8pkt 8fpkt", shape=diamond, color=yellow];
2489[label="214.25.158.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
2705[label="172.216.26.143;s;32pkt 32fpkt", shape=diamond, color=yellow];
2753[label="43.195.80.190;d;38pkt 38fpkt", shape=diamond, color=yellow];
2782[label="172.216.106.86;s;19pkt 19fpkt", shape=diamond, color=yellow];
2803[label="214.25.158.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
2858[label="25.76.107.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
3101[label="25.76.114.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
3273[label="214.25.158.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
3303[label="214.25.159.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
3454[label="34.249.141.53;d;20pkt 20fpkt", shape=diamond, color=yellow];
3633[label="25.76.114.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
3857[label="214.25.158.138;d;1pkt 1fpkt", shape=hexagon, color=black];
3866[label="214.25.149.132;d;1pkt 1fpkt", shape=hexagon, color=black];
4675[label="214.25.158.166;d;1pkt 1fpkt", shape=hexagon, color=black];
4687[label="25.76.107.8;d;1pkt 1fpkt", shape=hexagon, color=black];
4827[label="25.76.114.138;d;1pkt 1fpkt", shape=hexagon, color=black];
5006[label="214.25.159.161;d;2pkt 2fpkt", shape=hexagon, color=black];
5184[label="34.249.141.53;d;20pkt 20fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.151.64:*, *:*}[30.2326%]&lt;BR/&gt;{*:995, *:*}[25.5814%]&lt;BR/&gt;{168.140.150.16:443, *:*}[21.5116%]&lt;BR/&gt;{*:*, 222.101.69.24:*}[20.5426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (26.7635%)&lt;BR/&gt; 995: (10.3734%)&lt;BR/&gt; 993: (6.77732%)&lt;BR/&gt; 80: (4.21853%)&lt;BR/&gt; 143: (0.899032%)&gt;];
}
627--863[label="1;1pkt 1fpkt"];
627--902[label="1;1pkt 1fpkt"];
627--1432[label="0.0471698;5pkt 5fpkt"];
627--2370[label="0.625;5pkt 5fpkt"];
627--2489[label="0.5;1pkt 1fpkt"];
627--2540[label="0.1;1pkt 1fpkt"];
627--2753[label="1;38pkt 38fpkt"];
627--2858[label="1;1pkt 1fpkt"];
627--3101[label="1;1pkt 1fpkt"];
627--3273[label="0.5;1pkt 1fpkt"];
627--3303[label="0.5;1pkt 1fpkt"];
627--3454[label="1;20pkt 20fpkt"];
627--3857[label="1;1pkt 1fpkt"];
627--3866[label="1;1pkt 1fpkt"];
627--4687[label="1;1pkt 1fpkt"];
627--4827[label="1;1pkt 1fpkt"];
627--5006[label="0.5;1pkt 1fpkt"];
627--5184[label="1;20pkt 20fpkt"];
863--3857[label="1;1pkt 1fpkt"];
902--3866[label="1;1pkt 1fpkt"];
966--1432[label="0.95283;101pkt 101fpkt"];
966--5507[label="0.0192308;3pkt 3fpkt"];
966--5528[label="0.0128205;2pkt 2fpkt"];
966--5532[label="0.025641;4pkt 4fpkt"];
966--5535[label="0.0128205;2pkt 2fpkt"];
2489--2705[label="0.5;1pkt 1fpkt"];
2705--3633[label="1;1pkt 1fpkt"];
2705--4563[label="0.0625;2pkt 2fpkt"];
2782--2803[label="1;1pkt 1fpkt"];
2782--3303[label="0.5;1pkt 1fpkt"];
2782--4675[label="1;1pkt 1fpkt"];
2782--5006[label="0.5;1pkt 1fpkt"];
2803--4675[label="1;1pkt 1fpkt"];
2858--4687[label="1;1pkt 1fpkt"];
3101--4827[label="1;1pkt 1fpkt"];
3303--5006[label="1;2pkt 2fpkt"];
3454--5184[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.151.64"/>
      <filter dst_ip="222.101.69.24"/>
      <filter src_port="995"/>
      <filter src_ip="168.140.150.16" src_port="443"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
419[label="194.121.108.71;s;234pkt 234fpkt", shape=diamond, color=yellow];
462[label="195.28.166.220;d;2pkt 2fpkt", shape=diamond, color=yellow];
1136[label="14.4.115.176;d;30pkt 30fpkt", shape=diamond, color=yellow];
1343[label="40.222.208.98;d;2pkt 2fpkt", shape=diamond, color=yellow];
2138[label="87.134.4.154;d;2pkt 2fpkt", shape=diamond, color=yellow];
2740[label="219.213.215.198;d;65pkt 65fpkt", shape=diamond, color=yellow];
2845[label="34.59.83.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
2916[label="20.173.174.228;d;43pkt 43fpkt", shape=diamond, color=yellow];
4380[label="40.222.208.98;d;2pkt 2fpkt", shape=hexagon, color=black];
4547[label="14.4.115.176;d;30pkt 30fpkt", shape=hexagon, color=black];
4981[label="34.59.83.148;d;2pkt 2fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.108.71:21, *:*}[56.0311%]&lt;BR/&gt;{194.121.108.71:*, 219.213.215.198:*}[24.5136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (29.2271%)&lt;BR/&gt; 80: (3.1401%)&lt;BR/&gt; 54531: (0.362319%)&lt;BR/&gt; 53155: (0.362319%)&lt;BR/&gt; 52736: (0.362319%)&gt;];
}
419--462[label="0.5;1pkt 1fpkt"];
419--1136[label="1;30pkt 30fpkt"];
419--1173[label="0.0909091;8pkt 8fpkt"];
419--1343[label="1;2pkt 2fpkt"];
419--1388[label="0.0042735;1pkt 1fpkt"];
419--2138[label="1;2pkt 2fpkt"];
419--2740[label="0.953846;62pkt 62fpkt"];
419--2845[label="1;2pkt 2fpkt"];
419--2916[label="0.55814;24pkt 24fpkt"];
419--4380[label="1;2pkt 2fpkt"];
419--4547[label="1;30pkt 30fpkt"];
419--4981[label="1;2pkt 2fpkt"];
419--5152[label="0.0909091;8pkt 8fpkt"];
419--5507[label="0.0042735;1pkt 1fpkt"];
1136--4547[label="1;30pkt 30fpkt"];
1343--4380[label="1;2pkt 2fpkt"];
2740--3697[label="0.0307692;2pkt 2fpkt"];
2740--4203[label="0.0153846;1pkt 1fpkt"];
2740--5344[label="0.0307692;2pkt 2fpkt"];
2740--5507[label="0.0307692;2pkt 2fpkt"];
2740--5635[label="0.0153846;1pkt 1fpkt"];
2845--4981[label="1;2pkt 2fpkt"];
2916--4590[label="0.0465116;2pkt 2fpkt"];
2916--5209[label="0.0512821;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.213.215.198" src_ip="194.121.108.71"/>
      <filter src_ip="194.121.108.71" src_port="21"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
934[label="168.146.205.25;s;96pkt 96fpkt", shape=diamond, color=yellow];
3055[label="42.53.115.107;d;21pkt 21fpkt", shape=diamond, color=yellow];
4037[label="168.146.205.25;s;77pkt 77fpkt", shape=hexagon, color=black];
4987[label="42.53.115.107;d;21pkt 21fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.205.25:3127, 4.162.252.99:*}[30.2083%]&lt;BR/&gt;{168.146.205.25:80, 42.53.115.107:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.4651%)&lt;BR/&gt; 3127: (12.093%)&lt;BR/&gt; 4121: (4.65116%)&lt;BR/&gt; 2121: (4.65116%)&lt;BR/&gt; 23127: (2.7907%)&gt;];
}
934--1639[label="0.1125;9pkt 9fpkt"];
934--3055[label="1;21pkt 21fpkt"];
934--4037[label="1;77pkt 77fpkt"];
934--4499[label="0.09375;9pkt 9fpkt"];
934--4987[label="1;21pkt 21fpkt"];
934--5040[label="0.0833333;8pkt 8fpkt"];
934--5528[label="0.0729167;7pkt 7fpkt"];
934--5532[label="0.0520833;5pkt 5fpkt"];
3055--4037[label="1;21pkt 21fpkt"];
3055--4987[label="1;21pkt 21fpkt"];
3055--5528[label="0.285714;6pkt 6fpkt"];
3055--5532[label="0.190476;4pkt 4fpkt"];
4037--4499[label="0.116883;9pkt 9fpkt"];
4037--4987[label="1;21pkt 21fpkt"];
4037--5040[label="0.103896;8pkt 8fpkt"];
4037--5528[label="0.0909091;7pkt 7fpkt"];
4037--5532[label="0.0649351;5pkt 5fpkt"];
4987--5528[label="0.285714;6pkt 6fpkt"];
4987--5532[label="0.190476;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="4.162.252.99" src_ip="168.146.205.25" src_port="3127"/>
      <filter dst_ip="42.53.115.107" src_ip="168.146.205.25" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
212[label="168.140.150.18;s;1976pkt 1976fpkt", shape=diamond, color=yellow];
232[label="172.216.39.153;s;354pkt 354fpkt", shape=diamond, color=yellow];
405[label="195.119.186.188;d;44pkt 44fpkt", shape=diamond, color=yellow];
407[label="172.216.237.177;s;533pkt 533fpkt", shape=diamond, color=yellow];
784[label="214.25.158.146;d;40pkt 40fpkt", shape=diamond, color=yellow];
1021[label="172.216.36.14;s;495pkt 495fpkt", shape=diamond, color=yellow];
1103[label="168.43.183.93;s;350pkt 350fpkt", shape=diamond, color=yellow];
1526[label="172.216.148.99;s;120pkt 120fpkt", shape=diamond, color=yellow];
1607[label="195.97.109.74;d;85pkt 85fpkt", shape=diamond, color=yellow];
1632[label="214.25.158.213;d;42pkt 42fpkt", shape=diamond, color=yellow];
1793[label="193.8.164.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
2028[label="214.25.155.100;d;35pkt 35fpkt", shape=diamond, color=yellow];
2644[label="172.216.106.87;s;116pkt 116fpkt", shape=diamond, color=yellow];
2665[label="20.91.223.96;d;58pkt 58fpkt", shape=diamond, color=yellow];
2735[label="17.55.213.219;d;40pkt 40fpkt", shape=diamond, color=yellow];
2744[label="172.216.82.177;s;4pkt 4fpkt", shape=diamond, color=yellow];
2808[label="195.97.109.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
2974[label="130.108.235.218;s;34pkt 34fpkt", shape=diamond, color=yellow];
3014[label="214.25.155.4;d;6pkt 6fpkt", shape=diamond, color=yellow];
3149[label="194.121.104.73;s;111pkt 111fpkt", shape=diamond, color=yellow];
3181[label="172.216.83.60;s;21pkt 21fpkt", shape=diamond, color=yellow];
3283[label="194.181.139.95;d;30pkt 30fpkt", shape=diamond, color=yellow];
3379[label="214.25.155.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
3414[label="172.216.226.169;s;106pkt 106fpkt", shape=diamond, color=yellow];
3500[label="172.216.153.81;s;43pkt 43fpkt", shape=diamond, color=yellow];
3698[label="172.216.39.153;s;100pkt 100fpkt", shape=hexagon, color=black];
3738[label="195.119.186.188;d;44pkt 44fpkt", shape=hexagon, color=black];
3872[label="168.140.150.18;s;1976pkt 1976fpkt", shape=hexagon, color=black];
3982[label="214.25.158.146;d;40pkt 40fpkt", shape=hexagon, color=black];
4128[label="214.25.158.213;d;42pkt 42fpkt", shape=hexagon, color=black];
4510[label="172.216.148.99;s;105pkt 105fpkt", shape=hexagon, color=black];
4563[label="195.97.109.74;d;72pkt 72fpkt", shape=hexagon, color=black];
4749[label="172.216.106.87;s;116pkt 116fpkt", shape=hexagon, color=black];
4814[label="195.97.109.58;d;1pkt 1fpkt", shape=hexagon, color=black];
4870[label="168.43.183.93;s;350pkt 350fpkt", shape=hexagon, color=black];
4914[label="20.91.223.96;d;58pkt 58fpkt", shape=hexagon, color=black];
4926[label="172.216.83.60;s;21pkt 21fpkt", shape=hexagon, color=black];
4958[label="17.55.213.219;d;40pkt 40fpkt", shape=hexagon, color=black];
5022[label="214.25.155.217;d;1pkt 1fpkt", shape=hexagon, color=black];
5059[label="172.216.237.177;s;533pkt 533fpkt", shape=hexagon, color=black];
5073[label="172.216.36.14;s;495pkt 495fpkt", shape=hexagon, color=black];
5870[label="172.216.80.57;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5890[label="172.216.201.65;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6030[label="172.216.146.91;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6076[label="172.216.149.103;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6351[label="172.216.87.167;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6365[label="172.216.192.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7040[label="172.216.87.167;25pkt 25fpkt", shape=invtriangle, color=brown];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.150.18:25, *:*}[22.9993%]&lt;BR/&gt;{168.140.150.18:*, *:25}[20.1524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.7356%)&lt;BR/&gt; 113: (2.35587%)&lt;BR/&gt; 53: (1.17794%)&lt;BR/&gt; 32817: (0.458716%)&lt;BR/&gt; 80: (0.362442%)&gt;];
}
212--244[label="0.00065189;1pkt 1fpkt"];
212--405[label="0.159091;7pkt 7fpkt"];
212--1607[label="0.0352941;3pkt 3fpkt"];
212--1704[label="0.5;1pkt 1fpkt"];
212--1793[label="1;2pkt 2fpkt"];
212--1823[label="0.0100503;2pkt 2fpkt"];
212--2028[label="1;35pkt 35fpkt"];
212--2665[label="0.948276;55pkt 55fpkt"];
212--2735[label="0.775;31pkt 31fpkt"];
212--3379[label="1;1pkt 1fpkt"];
212--3738[label="0.159091;7pkt 7fpkt"];
212--3872[label="1;1976pkt 1976fpkt"];
212--4358[label="0.5;1pkt 1fpkt"];
212--4453[label="0.000914913;1pkt 1fpkt"];
212--4563[label="0.0277778;2pkt 2fpkt"];
212--4914[label="0.948276;55pkt 55fpkt"];
212--4958[label="0.775;31pkt 31fpkt"];
212--5022[label="1;1pkt 1fpkt"];
232--405[label="0.386364;17pkt 17fpkt"];
232--784[label="0.975;39pkt 39fpkt"];
232--1607[label="0.305882;26pkt 26fpkt"];
232--3698[label="1;100pkt 100fpkt"];
232--3738[label="0.386364;17pkt 17fpkt"];
232--3982[label="0.975;39pkt 39fpkt"];
232--4563[label="0.291667;21pkt 21fpkt"];
405--407[label="0.227273;10pkt 10fpkt"];
405--750[label="0.0454545;2pkt 2fpkt"];
405--2692[label="0.0227273;1pkt 1fpkt"];
405--2974[label="0.0588235;2pkt 2fpkt"];
405--3698[label="0.159091;7pkt 7fpkt"];
405--3738[label="1;44pkt 44fpkt"];
405--3824[label="0.0454545;2pkt 2fpkt"];
405--3872[label="0.159091;7pkt 7fpkt"];
405--5059[label="0.227273;10pkt 10fpkt"];
405--5945[label="0.0227273;1pkt 1fpkt"];
405--6351[label="0.0416667;1pkt 1fpkt"];
405--7040[label="0.04;1pkt 1fpkt"];
407--1607[label="0.235294;20pkt 20fpkt"];
407--1632[label="0.357143;15pkt 15fpkt"];
407--2735[label="0.175;7pkt 7fpkt"];
407--3738[label="0.227273;10pkt 10fpkt"];
407--4128[label="0.357143;15pkt 15fpkt"];
407--4563[label="0.25;18pkt 18fpkt"];
407--4958[label="0.175;7pkt 7fpkt"];
407--5059[label="1;533pkt 533fpkt"];
784--2644[label="0.025;1pkt 1fpkt"];
784--3698[label="0.85;34pkt 34fpkt"];
784--3982[label="1;40pkt 40fpkt"];
784--4749[label="0.025;1pkt 1fpkt"];
1021--1632[label="0.047619;2pkt 2fpkt"];
1021--2808[label="1;1pkt 1fpkt"];
1021--4128[label="0.047619;2pkt 2fpkt"];
1021--4453[label="0.0020202;1pkt 1fpkt"];
1021--4814[label="1;1pkt 1fpkt"];
1021--5035[label="0.00235294;1pkt 1fpkt"];
1021--5073[label="1;495pkt 495fpkt"];
1103--2665[label="0.0172414;1pkt 1fpkt"];
1103--3283[label="1;30pkt 30fpkt"];
1103--4870[label="1;350pkt 350fpkt"];
1103--4914[label="0.0172414;1pkt 1fpkt"];
1526--1632[label="0.190476;8pkt 8fpkt"];
1526--4128[label="0.190476;8pkt 8fpkt"];
1526--4453[label="0.00833333;1pkt 1fpkt"];
1526--4510[label="1;105pkt 105fpkt"];
1526--5506[label="0.0666667;8pkt 8fpkt"];
1526--5515[label="0.0666667;8pkt 8fpkt"];
1526--5527[label="0.0166667;2pkt 2fpkt"];
1526--5551[label="0.0166667;2pkt 2fpkt"];
1607--1687[label="0.0138889;1pkt 1fpkt"];
1607--1952[label="0.0117647;1pkt 1fpkt"];
1607--1957[label="0.0352941;3pkt 3fpkt"];
1607--2231[label="0.0235294;2pkt 2fpkt"];
1607--2297[label="0.0235294;2pkt 2fpkt"];
1607--2644[label="0.0117647;1pkt 1fpkt"];
1607--2705[label="0.0625;2pkt 2fpkt"];
1607--2744[label="0.25;1pkt 1fpkt"];
1607--2974[label="0.0588235;2pkt 2fpkt"];
1607--3149[label="0.0117647;1pkt 1fpkt"];
1607--3181[label="0.142857;3pkt 3fpkt"];
1607--3500[label="0.0232558;1pkt 1fpkt"];
1607--3698[label="0.0705882;6pkt 6fpkt"];
1607--3824[label="0.0235294;2pkt 2fpkt"];
1607--3872[label="0.0352941;3pkt 3fpkt"];
1607--4563[label="1;72pkt 72fpkt"];
1607--4749[label="0.0117647;1pkt 1fpkt"];
1607--4926[label="0.142857;3pkt 3fpkt"];
1607--5059[label="0.235294;20pkt 20fpkt"];
1607--5870[label="0.0769231;1pkt 1fpkt"];
1607--6076[label="0.0178571;1pkt 1fpkt"];
1607--6351[label="0.0416667;1pkt 1fpkt"];
1607--7034[label="0.0117647;1pkt 1fpkt"];
1607--7040[label="0.04;1pkt 1fpkt"];
1632--3414[label="0.261905;11pkt 11fpkt"];
1632--4128[label="1;42pkt 42fpkt"];
1632--4510[label="0.190476;8pkt 8fpkt"];
1632--5059[label="0.357143;15pkt 15fpkt"];
1632--5073[label="0.047619;2pkt 2fpkt"];
1632--6030[label="0.0952381;4pkt 4fpkt"];
1632--6365[label="0.2;2pkt 2fpkt"];
1793--3872[label="1;2pkt 2fpkt"];
2028--3872[label="1;35pkt 35fpkt"];
2644--3982[label="0.025;1pkt 1fpkt"];
2644--4087[label="0.00862069;1pkt 1fpkt"];
2644--4563[label="0.0138889;1pkt 1fpkt"];
2644--4749[label="1;116pkt 116fpkt"];
2644--5035[label="0.00862069;1pkt 1fpkt"];
2665--2925[label="0.0172414;1pkt 1fpkt"];
2665--3872[label="0.948276;55pkt 55fpkt"];
2665--4870[label="0.0172414;1pkt 1fpkt"];
2665--4887[label="0.0172414;1pkt 1fpkt"];
2665--4914[label="1;58pkt 58fpkt"];
2665--5890[label="0.0588235;1pkt 1fpkt"];
2735--3872[label="0.775;31pkt 31fpkt"];
2735--4958[label="1;40pkt 40fpkt"];
2735--5059[label="0.175;7pkt 7fpkt"];
2735--6665[label="0.05;2pkt 2fpkt"];
2735--7182[label="0.05;2pkt 2fpkt"];
2744--4563[label="0.25;1pkt 1fpkt"];
2808--4814[label="1;1pkt 1fpkt"];
2808--5073[label="1;1pkt 1fpkt"];
2974--3014[label="1;6pkt 6fpkt"];
2974--3738[label="0.0588235;2pkt 2fpkt"];
2974--4563[label="0.0588235;2pkt 2fpkt"];
3149--4087[label="0.00900901;1pkt 1fpkt"];
3149--4563[label="0.0138889;1pkt 1fpkt"];
3149--5035[label="0.00900901;1pkt 1fpkt"];
3181--4563[label="0.0952381;2pkt 2fpkt"];
3181--4926[label="1;21pkt 21fpkt"];
3181--5035[label="0.047619;1pkt 1fpkt"];
3181--5528[label="0.047619;1pkt 1fpkt"];
3283--4870[label="1;30pkt 30fpkt"];
3379--3872[label="1;1pkt 1fpkt"];
3379--5022[label="1;1pkt 1fpkt"];
3414--4128[label="0.261905;11pkt 11fpkt"];
3414--5506[label="0.00943396;1pkt 1fpkt"];
3414--5531[label="0.0188679;2pkt 2fpkt"];
3414--5534[label="0.00943396;1pkt 1fpkt"];
3500--4563[label="0.0232558;1pkt 1fpkt"];
3698--3738[label="0.159091;7pkt 7fpkt"];
3698--3982[label="0.85;34pkt 34fpkt"];
3698--4563[label="0.0833333;6pkt 6fpkt"];
3738--3824[label="0.0454545;2pkt 2fpkt"];
3738--3872[label="0.159091;7pkt 7fpkt"];
3738--5059[label="0.227273;10pkt 10fpkt"];
3738--5945[label="0.0227273;1pkt 1fpkt"];
3738--6351[label="0.0416667;1pkt 1fpkt"];
3738--7040[label="0.04;1pkt 1fpkt"];
3872--4358[label="0.5;1pkt 1fpkt"];
3872--4453[label="0.000914913;1pkt 1fpkt"];
3872--4563[label="0.0277778;2pkt 2fpkt"];
3872--4914[label="0.948276;55pkt 55fpkt"];
3872--4958[label="0.775;31pkt 31fpkt"];
3872--5022[label="1;1pkt 1fpkt"];
3982--4749[label="0.025;1pkt 1fpkt"];
4128--4510[label="0.190476;8pkt 8fpkt"];
4128--5059[label="0.357143;15pkt 15fpkt"];
4128--5073[label="0.047619;2pkt 2fpkt"];
4128--6030[label="0.0952381;4pkt 4fpkt"];
4128--6365[label="0.2;2pkt 2fpkt"];
4510--5506[label="0.0761905;8pkt 8fpkt"];
4510--5515[label="0.0761905;8pkt 8fpkt"];
4510--5527[label="0.0190476;2pkt 2fpkt"];
4510--5551[label="0.0190476;2pkt 2fpkt"];
4563--4749[label="0.0138889;1pkt 1fpkt"];
4563--4926[label="0.0952381;2pkt 2fpkt"];
4563--5059[label="0.25;18pkt 18fpkt"];
4563--5870[label="0.0769231;1pkt 1fpkt"];
4563--6076[label="0.0178571;1pkt 1fpkt"];
4563--7034[label="0.0138889;1pkt 1fpkt"];
4749--5035[label="0.00862069;1pkt 1fpkt"];
4814--5073[label="1;1pkt 1fpkt"];
4870--4914[label="0.0172414;1pkt 1fpkt"];
4914--5890[label="0.0588235;1pkt 1fpkt"];
4926--5035[label="0.047619;1pkt 1fpkt"];
4926--5528[label="0.047619;1pkt 1fpkt"];
4958--5059[label="0.175;7pkt 7fpkt"];
4958--6665[label="0.05;2pkt 2fpkt"];
4958--7182[label="0.05;2pkt 2fpkt"];
6351--7040[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.150.18" src_port="25"/>
      <filter dst_port="25" src_ip="168.140.150.18"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
976[label="128.193.144.241;d;692pkt 692fpkt", shape=diamond, color=yellow];
5060[label="128.193.144.241;d;692pkt 692fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.193.144.241:16881}[91.9075%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (45.9538%)&lt;BR/&gt; 0: (1.87861%)&lt;BR/&gt; 64820: (1.37283%)&lt;BR/&gt; 2581: (1.01156%)&lt;BR/&gt; 6881: (0.361272%)&gt;];
}
976--2522[label="0.00144509;1pkt 1fpkt"];
976--3692[label="0.00144509;1pkt 1fpkt"];
976--4436[label="0.00144509;1pkt 1fpkt"];
976--5060[label="1;692pkt 692fpkt"];
976--5413[label="0.00144509;1pkt 1fpkt"];
976--5512[label="0.00144509;1pkt 1fpkt"];
976--5601[label="0.00144509;1pkt 1fpkt"];
976--5681[label="0.00144509;1pkt 1fpkt"];
976--6721[label="0.00144509;1pkt 1fpkt"];
976--7204[label="0.00144509;1pkt 1fpkt"];
5060--5413[label="0.00144509;1pkt 1fpkt"];
5060--5512[label="0.00144509;1pkt 1fpkt"];
5060--5601[label="0.00144509;1pkt 1fpkt"];
5060--5681[label="0.00144509;1pkt 1fpkt"];
5060--6721[label="0.00144509;1pkt 1fpkt"];
5060--7204[label="0.00144509;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.193.144.241" dst_port="16881"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1491[label="219.50.148.202;s;2064pkt 2064fpkt", shape=diamond, color=yellow];
5081[label="219.50.148.202;s;2064pkt 2064fpkt", shape=hexagon, color=black];
6509[label="219.50.148.202;2232pkt 2232fpkt", shape=pentagon, color=darkviolet];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.50.148.202:3953, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3953: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1491--5081[label="1;2064pkt 2064fpkt"];
1491--6509[label="0.999516;2063pkt 2063fpkt"];
5081--6509[label="0.999516;2063pkt 2063fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.50.148.202" src_port="3953"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1094[label="203.148.184.198;d;250pkt 250fpkt", shape=diamond, color=yellow];
1095[label="172.216.31.8;s;220pkt 220fpkt", shape=diamond, color=yellow];
3941[label="172.216.31.8;s;220pkt 220fpkt", shape=hexagon, color=black];
5105[label="203.148.184.198;d;250pkt 250fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.31.8:*, 203.148.184.198:3124}[85.7708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (46.1702%)&lt;BR/&gt; 2121: (2.12766%)&lt;BR/&gt; 4121: (1.70213%)&lt;BR/&gt; 23127: (0.851064%)&lt;BR/&gt; 3128: (0.638298%)&gt;];
}
1094--1095[label="0.986364;217pkt 217fpkt"];
1094--1395[label="0.016;4pkt 4fpkt"];
1094--1407[label="0.016;4pkt 4fpkt"];
1094--3885[label="0.004;1pkt 1fpkt"];
1094--3941[label="0.986364;217pkt 217fpkt"];
1094--4444[label="0.016;4pkt 4fpkt"];
1094--4833[label="0.016;4pkt 4fpkt"];
1094--5025[label="0.008;2pkt 2fpkt"];
1094--5105[label="1;250pkt 250fpkt"];
1094--6109[label="0.016;4pkt 4fpkt"];
1094--6140[label="0.016;4pkt 4fpkt"];
1094--6154[label="0.016;4pkt 4fpkt"];
1094--6457[label="0.008;2pkt 2fpkt"];
1094--6933[label="0.016;4pkt 4fpkt"];
1094--6950[label="0.016;4pkt 4fpkt"];
1094--7083[label="0.008;2pkt 2fpkt"];
1094--7333[label="0.008;2pkt 2fpkt"];
1095--1498[label="0.00465116;1pkt 1fpkt"];
1095--3941[label="1;220pkt 220fpkt"];
1095--4087[label="0.00465116;1pkt 1fpkt"];
1095--5105[label="0.986364;217pkt 217fpkt"];
3941--4087[label="0.00465116;1pkt 1fpkt"];
3941--5105[label="0.986364;217pkt 217fpkt"];
5105--6109[label="0.016;4pkt 4fpkt"];
5105--6140[label="0.016;4pkt 4fpkt"];
5105--6154[label="0.016;4pkt 4fpkt"];
5105--6457[label="0.008;2pkt 2fpkt"];
5105--6933[label="0.016;4pkt 4fpkt"];
5105--6950[label="0.016;4pkt 4fpkt"];
5105--7083[label="0.008;2pkt 2fpkt"];
5105--7333[label="0.008;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.148.184.198" dst_port="3124" src_ip="172.216.31.8"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
287[label="172.216.137.172;s;6734pkt 6734fpkt", shape=diamond, color=yellow];
518[label="172.216.144.102;s;112pkt 112fpkt", shape=diamond, color=yellow];
636[label="37.69.75.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
3711[label="172.216.137.172;s;5309pkt 5309fpkt", shape=hexagon, color=black];
4257[label="172.216.144.102;s;112pkt 112fpkt", shape=hexagon, color=black];
5119[label="37.69.75.191;d;2pkt 2fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.137.172:33800, *:*}[96.4359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33800: (48.1094%)&lt;BR/&gt; 443: (0.802706%)&lt;BR/&gt; 7594: (0.488958%)&lt;BR/&gt; 80: (0.321897%)&lt;BR/&gt; 515: (0.260777%)&gt;];
}
287--636[label="0.5;1pkt 1fpkt"];
287--952[label="0.0075188;1pkt 1fpkt"];
287--3711[label="1;5309pkt 5309fpkt"];
287--5119[label="0.5;1pkt 1fpkt"];
287--5507[label="0.000297;2pkt 2fpkt"];
287--5528[label="0.0004455;3pkt 3fpkt"];
287--5532[label="0.000742501;5pkt 5fpkt"];
518--552[label="0.0178571;2pkt 2fpkt"];
518--636[label="0.5;1pkt 1fpkt"];
518--644[label="0.00892857;1pkt 1fpkt"];
518--1594[label="0.00892857;1pkt 1fpkt"];
518--2963[label="0.00892857;1pkt 1fpkt"];
518--4257[label="1;112pkt 112fpkt"];
518--4726[label="0.0178571;2pkt 2fpkt"];
518--5119[label="0.5;1pkt 1fpkt"];
518--5175[label="0.00892857;1pkt 1fpkt"];
518--5530[label="0.0625;7pkt 7fpkt"];
636--3711[label="0.5;1pkt 1fpkt"];
636--4257[label="0.5;1pkt 1fpkt"];
636--5119[label="1;2pkt 2fpkt"];
3711--5119[label="0.5;1pkt 1fpkt"];
3711--5507[label="0.000376719;2pkt 2fpkt"];
3711--5528[label="0.000565078;3pkt 3fpkt"];
3711--5532[label="0.000565078;3pkt 3fpkt"];
4257--4726[label="0.0178571;2pkt 2fpkt"];
4257--5119[label="0.5;1pkt 1fpkt"];
4257--5175[label="0.00892857;1pkt 1fpkt"];
4257--5530[label="0.0625;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="172.216.137.172" src_port="33800"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
2276[label="40.39.19.181;s;939pkt 939fpkt", shape=diamond, color=yellow];
5137[label="40.39.19.181;s;939pkt 939fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.39.19.181:53641, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53641: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2276--5137[label="1;939pkt 939fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="40.39.19.181" src_port="53641"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
3445[label="168.140.164.205;s;72pkt 72fpkt", shape=diamond, color=yellow];
5177[label="168.140.164.205;s;72pkt 72fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.164.205:47028, *:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47028: (47.2222%)&lt;BR/&gt; 80: (1.38889%)&lt;BR/&gt; 65054: (0.694444%)&lt;BR/&gt; 64579: (0.694444%)&lt;BR/&gt; 64071: (0.694444%)&gt;];
}
3445--5145[label="0.0138889;1pkt 1fpkt"];
3445--5177[label="1;72pkt 72fpkt"];
3445--5530[label="0.0138889;1pkt 1fpkt"];
5177--5530[label="0.0138889;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.164.205" src_port="47028"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
275[label="172.216.20.174;d;227pkt 227fpkt", shape=diamond, color=yellow];
277[label="46.84.142.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
399[label="130.108.42.36;d;135pkt 135fpkt", shape=diamond, color=yellow];
402[label="222.7.210.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
467[label="53.150.120.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
537[label="34.15.60.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
565[label="35.166.9.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
609[label="35.168.21.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
626[label="44.229.158.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
643[label="43.0.216.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
704[label="222.55.6.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
970[label="87.73.38.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
1067[label="220.139.82.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1084[label="130.108.45.224;d;375pkt 375fpkt", shape=diamond, color=yellow];
1122[label="46.88.121.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
1154[label="87.172.103.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
1265[label="222.150.202.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
1630[label="52.84.71.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
2032[label="81.238.49.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
3234[label="47.196.216.106;s;3pkt 3fpkt", shape=diamond, color=yellow];
3235[label="130.108.192.198;d;61pkt 61fpkt", shape=diamond, color=yellow];
3261[label="45.59.110.204;s;6pkt 6fpkt", shape=diamond, color=yellow];
3272[label="36.233.16.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
3432[label="44.218.177.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
3498[label="33.73.71.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
3709[label="172.216.20.174;d;97pkt 97fpkt", shape=hexagon, color=black];
3772[label="34.15.60.205;s;1pkt 1fpkt", shape=hexagon, color=black];
3795[label="43.0.216.34;s;1pkt 1fpkt", shape=hexagon, color=black];
3810[label="222.55.6.190;s;1pkt 1fpkt", shape=hexagon, color=black];
3915[label="53.150.120.14;s;1pkt 1fpkt", shape=hexagon, color=black];
3947[label="35.168.21.86;s;1pkt 1fpkt", shape=hexagon, color=black];
4509[label="130.108.45.224;d;375pkt 375fpkt", shape=hexagon, color=black];
5057[label="130.108.42.36;d;135pkt 135fpkt", shape=hexagon, color=black];
5115[label="44.229.158.216;s;1pkt 1fpkt", shape=hexagon, color=black];
5253[label="130.108.192.198;d;61pkt 61fpkt", shape=hexagon, color=black];
5580[label="219.75.177.1;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5647[label="53.150.120.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5760[label="220.139.82.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5834[label="43.24.35.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6372[label="35.3.59.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6639[label="44.218.177.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6735[label="53.150.120.14;1pkt 1fpkt", shape=invtriangle, color=brown];
6783[label="220.139.82.38;1pkt 1fpkt", shape=invtriangle, color=brown];
7129[label="219.75.138.210;1pkt 1fpkt", shape=invtriangle, color=brown];
7168[label="44.218.177.234;1pkt 1fpkt", shape=invtriangle, color=brown];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.108.45.224:6141}[33.4586%]&lt;BR/&gt;{*:*, 172.216.20.174:*}[28.4461%]&lt;BR/&gt;{*:80, *:*}[25.6892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6141: (17.7132%)&lt;BR/&gt; 80: (12.7231%)&lt;BR/&gt; 9825: (6.31196%)&lt;BR/&gt; 53: (1.58625%)&lt;BR/&gt; 17176: (1.25578%)&gt;];
}
275--277[label="1;1pkt 1fpkt"];
275--402[label="1;1pkt 1fpkt"];
275--467[label="1;1pkt 1fpkt"];
275--537[label="1;1pkt 1fpkt"];
275--565[label="1;1pkt 1fpkt"];
275--609[label="1;1pkt 1fpkt"];
275--626[label="1;1pkt 1fpkt"];
275--643[label="1;1pkt 1fpkt"];
275--704[label="1;1pkt 1fpkt"];
275--970[label="1;1pkt 1fpkt"];
275--1040[label="1;1pkt 1fpkt"];
275--1067[label="1;1pkt 1fpkt"];
275--1122[label="1;1pkt 1fpkt"];
275--1154[label="1;1pkt 1fpkt"];
275--1265[label="1;1pkt 1fpkt"];
275--1979[label="0.0132159;3pkt 3fpkt"];
275--3234[label="1;3pkt 3fpkt"];
275--3709[label="1;97pkt 97fpkt"];
275--3772[label="1;1pkt 1fpkt"];
275--3795[label="1;1pkt 1fpkt"];
275--3810[label="1;1pkt 1fpkt"];
275--3915[label="1;1pkt 1fpkt"];
275--3947[label="1;1pkt 1fpkt"];
275--5115[label="1;1pkt 1fpkt"];
275--5507[label="0.0264317;6pkt 6fpkt"];
275--5528[label="0.0176211;4pkt 4fpkt"];
275--5532[label="0.0176211;4pkt 4fpkt"];
275--5535[label="0.00881057;2pkt 2fpkt"];
275--5580[label="0.25;1pkt 1fpkt"];
275--5647[label="1;1pkt 1fpkt"];
275--5760[label="1;1pkt 1fpkt"];
275--6735[label="1;1pkt 1fpkt"];
275--6783[label="1;1pkt 1fpkt"];
275--7129[label="1;1pkt 1fpkt"];
277--3709[label="1;1pkt 1fpkt"];
399--1630[label="1;1pkt 1fpkt"];
399--2032[label="1;1pkt 1fpkt"];
399--2817[label="0.00740741;1pkt 1fpkt"];
399--3432[label="1;1pkt 1fpkt"];
399--3498[label="1;1pkt 1fpkt"];
399--4678[label="0.00740741;1pkt 1fpkt"];
399--5057[label="1;135pkt 135fpkt"];
399--5431[label="0.00740741;1pkt 1fpkt"];
399--5515[label="0.037037;5pkt 5fpkt"];
399--5517[label="0.00740741;1pkt 1fpkt"];
399--5527[label="0.00740741;1pkt 1fpkt"];
399--5541[label="0.00740741;1pkt 1fpkt"];
399--5551[label="0.00740741;1pkt 1fpkt"];
399--5556[label="0.00740741;1pkt 1fpkt"];
399--5580[label="0.25;1pkt 1fpkt"];
399--5834[label="1;1pkt 1fpkt"];
399--5999[label="0.00740741;1pkt 1fpkt"];
399--6372[label="1;1pkt 1fpkt"];
399--6639[label="1;1pkt 1fpkt"];
399--6884[label="0.00740741;1pkt 1fpkt"];
399--7168[label="1;1pkt 1fpkt"];
399--7267[label="0.00740741;1pkt 1fpkt"];
402--3709[label="1;1pkt 1fpkt"];
467--3709[label="1;1pkt 1fpkt"];
467--3915[label="1;1pkt 1fpkt"];
467--5647[label="1;1pkt 1fpkt"];
467--6735[label="1;1pkt 1fpkt"];
537--3709[label="1;1pkt 1fpkt"];
537--3772[label="1;1pkt 1fpkt"];
565--3709[label="1;1pkt 1fpkt"];
609--3709[label="1;1pkt 1fpkt"];
609--3947[label="1;1pkt 1fpkt"];
626--3709[label="1;1pkt 1fpkt"];
626--5115[label="1;1pkt 1fpkt"];
643--3709[label="1;1pkt 1fpkt"];
643--3795[label="1;1pkt 1fpkt"];
704--3709[label="1;1pkt 1fpkt"];
704--3810[label="1;1pkt 1fpkt"];
970--3709[label="1;1pkt 1fpkt"];
1067--3709[label="1;1pkt 1fpkt"];
1067--5760[label="1;1pkt 1fpkt"];
1067--6783[label="1;1pkt 1fpkt"];
1084--2817[label="0.00266667;1pkt 1fpkt"];
1084--3261[label="1;6pkt 6fpkt"];
1084--3272[label="1;1pkt 1fpkt"];
1084--4509[label="1;375pkt 375fpkt"];
1084--4678[label="0.00266667;1pkt 1fpkt"];
1084--5431[label="0.00266667;1pkt 1fpkt"];
1084--5517[label="0.00266667;1pkt 1fpkt"];
1084--5528[label="0.032;12pkt 12fpkt"];
1084--5532[label="0.0106667;4pkt 4fpkt"];
1084--5535[label="0.00266667;1pkt 1fpkt"];
1084--5541[label="0.00266667;1pkt 1fpkt"];
1084--5556[label="0.00266667;1pkt 1fpkt"];
1084--5580[label="0.25;1pkt 1fpkt"];
1084--5999[label="0.00266667;1pkt 1fpkt"];
1084--6884[label="0.00266667;1pkt 1fpkt"];
1084--7267[label="0.00266667;1pkt 1fpkt"];
1122--3709[label="1;1pkt 1fpkt"];
1154--3709[label="1;1pkt 1fpkt"];
1265--3709[label="1;1pkt 1fpkt"];
1630--5057[label="1;1pkt 1fpkt"];
2032--5057[label="1;1pkt 1fpkt"];
3235--4678[label="0.0163934;1pkt 1fpkt"];
3235--5253[label="1;61pkt 61fpkt"];
3235--5431[label="0.0163934;1pkt 1fpkt"];
3235--5517[label="0.0163934;1pkt 1fpkt"];
3235--5528[label="0.360656;22pkt 22fpkt"];
3235--5532[label="0.262295;16pkt 16fpkt"];
3235--5541[label="0.0163934;1pkt 1fpkt"];
3235--5556[label="0.0163934;1pkt 1fpkt"];
3235--5580[label="0.25;1pkt 1fpkt"];
3235--5999[label="0.0163934;1pkt 1fpkt"];
3235--6884[label="0.0163934;1pkt 1fpkt"];
3235--7267[label="0.0163934;1pkt 1fpkt"];
3261--4509[label="1;6pkt 6fpkt"];
3261--5532[label="0.166667;1pkt 1fpkt"];
3261--5535[label="0.166667;1pkt 1fpkt"];
3272--4509[label="1;1pkt 1fpkt"];
3432--5057[label="1;1pkt 1fpkt"];
3432--6639[label="1;1pkt 1fpkt"];
3432--7168[label="1;1pkt 1fpkt"];
3498--5057[label="1;1pkt 1fpkt"];
3709--3772[label="1;1pkt 1fpkt"];
3709--3795[label="1;1pkt 1fpkt"];
3709--3810[label="1;1pkt 1fpkt"];
3709--3915[label="1;1pkt 1fpkt"];
3709--3947[label="1;1pkt 1fpkt"];
3709--5115[label="1;1pkt 1fpkt"];
3709--5507[label="0.0618557;6pkt 6fpkt"];
3709--5528[label="0.0206186;2pkt 2fpkt"];
3709--5532[label="0.0206186;2pkt 2fpkt"];
3709--5535[label="0.0206186;2pkt 2fpkt"];
3709--5580[label="0.25;1pkt 1fpkt"];
3709--5647[label="1;1pkt 1fpkt"];
3709--5760[label="1;1pkt 1fpkt"];
3709--6735[label="1;1pkt 1fpkt"];
3709--6783[label="1;1pkt 1fpkt"];
3915--5647[label="1;1pkt 1fpkt"];
3915--6735[label="1;1pkt 1fpkt"];
4509--4678[label="0.00266667;1pkt 1fpkt"];
4509--5431[label="0.00266667;1pkt 1fpkt"];
4509--5517[label="0.00266667;1pkt 1fpkt"];
4509--5528[label="0.032;12pkt 12fpkt"];
4509--5532[label="0.0106667;4pkt 4fpkt"];
4509--5535[label="0.00266667;1pkt 1fpkt"];
4509--5541[label="0.00266667;1pkt 1fpkt"];
4509--5556[label="0.00266667;1pkt 1fpkt"];
4509--5580[label="0.25;1pkt 1fpkt"];
4509--5999[label="0.00266667;1pkt 1fpkt"];
4509--6884[label="0.00266667;1pkt 1fpkt"];
4509--7267[label="0.00266667;1pkt 1fpkt"];
5057--5431[label="0.00740741;1pkt 1fpkt"];
5057--5515[label="0.037037;5pkt 5fpkt"];
5057--5517[label="0.00740741;1pkt 1fpkt"];
5057--5527[label="0.00740741;1pkt 1fpkt"];
5057--5541[label="0.00740741;1pkt 1fpkt"];
5057--5551[label="0.00740741;1pkt 1fpkt"];
5057--5556[label="0.00740741;1pkt 1fpkt"];
5057--5580[label="0.25;1pkt 1fpkt"];
5057--5834[label="1;1pkt 1fpkt"];
5057--5999[label="0.00740741;1pkt 1fpkt"];
5057--6372[label="1;1pkt 1fpkt"];
5057--6639[label="1;1pkt 1fpkt"];
5057--6884[label="0.00740741;1pkt 1fpkt"];
5057--7168[label="1;1pkt 1fpkt"];
5057--7267[label="0.00740741;1pkt 1fpkt"];
5253--5431[label="0.0163934;1pkt 1fpkt"];
5253--5517[label="0.0163934;1pkt 1fpkt"];
5253--5528[label="0.360656;22pkt 22fpkt"];
5253--5532[label="0.262295;16pkt 16fpkt"];
5253--5541[label="0.0163934;1pkt 1fpkt"];
5253--5556[label="0.0163934;1pkt 1fpkt"];
5253--5580[label="0.25;1pkt 1fpkt"];
5253--5999[label="0.0163934;1pkt 1fpkt"];
5253--6884[label="0.0163934;1pkt 1fpkt"];
5253--7267[label="0.0163934;1pkt 1fpkt"];
5647--6735[label="1;1pkt 1fpkt"];
5760--6783[label="1;1pkt 1fpkt"];
6639--7168[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.20.174"/>
      <filter src_port="80"/>
      <filter dst_ip="130.108.45.224" dst_port="6141"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
2245[label="20.173.168.40;d;110pkt 110fpkt", shape=diamond, color=yellow];
2246[label="168.146.151.147;s;137pkt 137fpkt", shape=diamond, color=yellow];
4528[label="168.146.151.147;s;122pkt 122fpkt", shape=hexagon, color=black];
4876[label="20.173.168.40;d;110pkt 110fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.151.147:80, 20.173.168.40:*}[70.3448%]&lt;BR/&gt;{168.146.151.147:80, 20.173.174.119:*}[22.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5825%)&lt;BR/&gt; 65339: (0.417537%)&lt;BR/&gt; 65294: (0.417537%)&lt;BR/&gt; 64607: (0.417537%)&lt;BR/&gt; 64554: (0.417537%)&gt;];
}
2245--2246[label="0.927273;102pkt 102fpkt"];
2245--2936[label="0.00909091;1pkt 1fpkt"];
2245--4528[label="0.845455;93pkt 93fpkt"];
2245--4876[label="1;110pkt 110fpkt"];
2245--5140[label="0.00909091;1pkt 1fpkt"];
2245--5507[label="0.0727273;8pkt 8fpkt"];
2245--5528[label="0.0818182;9pkt 9fpkt"];
2245--5531[label="0.00909091;1pkt 1fpkt"];
2245--5532[label="0.0636364;7pkt 7fpkt"];
2245--5535[label="0.0272727;3pkt 3fpkt"];
2245--6625[label="0.00909091;1pkt 1fpkt"];
2245--6662[label="0.00970874;1pkt 1fpkt"];
2246--4528[label="1;122pkt 122fpkt"];
2246--4876[label="0.927273;102pkt 102fpkt"];
2246--5507[label="0.0656934;9pkt 9fpkt"];
2246--5528[label="0.0656934;9pkt 9fpkt"];
2246--5532[label="0.0583942;8pkt 8fpkt"];
2246--5535[label="0.0218978;3pkt 3fpkt"];
4528--4876[label="0.845455;93pkt 93fpkt"];
4528--5507[label="0.0737705;9pkt 9fpkt"];
4528--5528[label="0.0737705;9pkt 9fpkt"];
4528--5532[label="0.0655738;8pkt 8fpkt"];
4876--5140[label="0.00909091;1pkt 1fpkt"];
4876--5507[label="0.0727273;8pkt 8fpkt"];
4876--5528[label="0.0818182;9pkt 9fpkt"];
4876--5531[label="0.00909091;1pkt 1fpkt"];
4876--5532[label="0.0636364;7pkt 7fpkt"];
4876--5535[label="0.0272727;3pkt 3fpkt"];
4876--6625[label="0.00909091;1pkt 1fpkt"];
4876--6662[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.168.40" src_ip="168.146.151.147" src_port="80"/>
      <filter dst_ip="20.173.174.119" src_ip="168.146.151.147" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
3309[label="172.216.40.144;s;116pkt 116fpkt", shape=diamond, color=yellow];
5295[label="172.216.40.144;s;116pkt 116fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.40.144:16453, *:*}[83.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16453: (41.8103%)&lt;BR/&gt; 80: (5.60345%)&lt;BR/&gt; 18157: (2.58621%)&lt;BR/&gt; 6901: (1.72414%)&lt;BR/&gt; 48423: (1.2931%)&gt;];
}
3309--5295[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="172.216.40.144" src_port="16453"/>
    </slice>
    <from sec="1260594659" usec="0"/>
    <to sec="1260594816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66185,1.812,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.205.194.50"/>
      <from sec="1260594661" usec="0"/>
      <to sec="1260594717" usec="0"/>
    </slice>
    <from sec="1260594661" usec="0"/>
    <to sec="1260594717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730818,1.76805,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1338[label="213.16.194.68;d;2pkt 2fpkt", shape=diamond, color=yellow];
5320[label="213.16.194.68;d;2pkt 2fpkt", shape=hexagon, color=black];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.205.16:110, 213.16.194.68:2420}[50%]&lt;BR/&gt;{172.216.205.16:50742, 213.16.194.68:113}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50742: (25%)&lt;BR/&gt; 2420: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 110: (25%)&gt;];
}
1338--5320[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.16.194.68" dst_port="113" src_ip="172.216.205.16" src_port="50742"/>
      <filter dst_ip="213.16.194.68" dst_port="2420" src_ip="172.216.205.16" src_port="110"/>
    </slice>
    <from sec="1260594738" usec="0"/>
    <to sec="1260594753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.121.109.0"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.179.254.0"/>
    </slice>
    <from sec="1260594789" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.113.160.1"/>
    </slice>
    <from sec="1260594142" usec="0"/>
    <to sec="1260594341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.4.2"/>
    </slice>
    <from sec="1260594396" usec="0"/>
    <to sec="1260594407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02082,1.74297,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
3415[label="168.140.38.2;s;110pkt 110fpkt", shape=diamond, color=yellow];
5587[label="168.140.38.2;113pkt 113fpkt", shape=pentagon, color=darkviolet];
6717[label="168.140.38.2;113pkt 113fpkt", shape=invtriangle, color=brown];
7202[label="168.140.38.2;112pkt 112fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.38.2:3072, *:*}[84.9558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3072: (42.4107%)&lt;BR/&gt; 7024: (2.67857%)&lt;BR/&gt; 3570: (2.67857%)&lt;BR/&gt; 443: (2.67857%)&lt;BR/&gt; 80: (1.78571%)&gt;];
}
3415--5510[label="0.00909091;1pkt 1fpkt"];
3415--5516[label="0.00909091;1pkt 1fpkt"];
3415--5530[label="0.00909091;1pkt 1fpkt"];
3415--5532[label="0.00909091;1pkt 1fpkt"];
3415--5587[label="1;110pkt 110fpkt"];
3415--6717[label="1;110pkt 110fpkt"];
3415--7202[label="0.990909;109pkt 109fpkt"];
5587--6717[label="1;113pkt 113fpkt"];
5587--7202[label="1;112pkt 112fpkt"];
6717--7202[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.38.2" src_port="3072"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.206.2"/>
    </slice>
    <from sec="1260594415" usec="0"/>
    <to sec="1260594423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.48.86.4"/>
    </slice>
    <from sec="1260594692" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.140.213.6"/>
    </slice>
    <from sec="1260594394" usec="0"/>
    <to sec="1260594886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.85.243.7"/>
    </slice>
    <from sec="1260594434" usec="0"/>
    <to sec="1260594463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.202.8"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.194.204.10"/>
    </slice>
    <from sec="1260594703" usec="0"/>
    <to sec="1260594715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.20.40.13"/>
    </slice>
    <from sec="1260594742" usec="0"/>
    <to sec="1260594748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1159[label="168.146.102.13;s;85pkt 85fpkt", shape=diamond, color=yellow];
5640[label="168.146.102.13;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.146.102.13:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64274: (0.534759%)&lt;BR/&gt; 63804: (0.534759%)&lt;BR/&gt; 63754: (0.534759%)&lt;BR/&gt; 59157: (0.534759%)&gt;];
}
1159--5640[label="0.988235;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="168.146.102.13" src_port="25"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.156.113.13"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.68.14"/>
    </slice>
    <from sec="1260594131" usec="0"/>
    <to sec="1260594854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.71.178.15"/>
    </slice>
    <from sec="1260594208" usec="0"/>
    <to sec="1260594544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.236.28.16"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.84.16"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.78.174.16"/>
    </slice>
    <from sec="1260594034" usec="0"/>
    <to sec="1260594808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.61.36.18"/>
    </slice>
    <from sec="1260594792" usec="0"/>
    <to sec="1260594896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.20.123.18"/>
    </slice>
    <from sec="1260594486" usec="0"/>
    <to sec="1260594566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.38.56.19"/>
    </slice>
    <from sec="1260594071" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.38.213.19"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.80.21"/>
    </slice>
    <from sec="1260594866" usec="0"/>
    <to sec="1260594872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.142.166.24"/>
    </slice>
    <from sec="1260594603" usec="0"/>
    <to sec="1260594808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.106.186.24"/>
    </slice>
    <from sec="1260594008" usec="0"/>
    <to sec="1260594759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.49.102.26"/>
    </slice>
    <from sec="1260594533" usec="0"/>
    <to sec="1260594541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.162.26"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.162.168.26"/>
    </slice>
    <from sec="1260594004" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.143.11.27"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.149.29"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.108.109.31"/>
    </slice>
    <from sec="1260594239" usec="0"/>
    <to sec="1260594261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.212.168.34"/>
    </slice>
    <from sec="1260594868" usec="0"/>
    <to sec="1260594886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.202.34"/>
    </slice>
    <from sec="1260594244" usec="0"/>
    <to sec="1260594252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.76.222.35"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.90.246.36"/>
    </slice>
    <from sec="1260594455" usec="0"/>
    <to sec="1260594484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1710[label="172.216.112.38;s;21pkt 21fpkt", shape=diamond, color=yellow];
5761[label="172.216.112.38;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.112.38:*, 29.211.85.117:80}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (2.43902%)&lt;BR/&gt; 4994: (2.43902%)&lt;BR/&gt; 4963: (2.43902%)&lt;BR/&gt; 4961: (2.43902%)&gt;];
}
1710--5761[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="29.211.85.117" dst_port="80" src_ip="172.216.112.38"/>
    </slice>
    <from sec="1260594038" usec="0"/>
    <to sec="1260594373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.124.25.39"/>
    </slice>
    <from sec="1260594004" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.91.176.39"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.160.119.40"/>
    </slice>
    <from sec="1260594048" usec="0"/>
    <to sec="1260594105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.149.174.40"/>
    </slice>
    <from sec="1260594514" usec="0"/>
    <to sec="1260594624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.193.194.40"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.228.40"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96927,1.79249,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
61[label="133.244.201.44s;75pkt 75fpkt", shape=rectangle, color=red];
5794[label="133.244.201.44;290pkt 290fpkt", shape=pentagon, color=darkviolet];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.244.201.44:*, 172.216.161.138:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1923: (0.273973%)&lt;BR/&gt; 1922: (0.273973%)&lt;BR/&gt; 1921: (0.273973%)&lt;BR/&gt; 1920: (0.273973%)&gt;];
}
61--5794[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.161.138" dst_port="80" src_ip="133.244.201.44"/>
    </slice>
    <from sec="1260594828" usec="0"/>
    <to sec="1260594851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.203.45"/>
    </slice>
    <from sec="1260594479" usec="0"/>
    <to sec="1260594534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.164.18.46"/>
    </slice>
    <from sec="1260594279" usec="0"/>
    <to sec="1260594453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.108.130.46"/>
    </slice>
    <from sec="1260594620" usec="0"/>
    <to sec="1260594871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.138.175.46"/>
    </slice>
    <from sec="1260594452" usec="0"/>
    <to sec="1260594480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.80.207.46"/>
    </slice>
    <from sec="1260594276" usec="0"/>
    <to sec="1260594519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.157.207.47"/>
    </slice>
    <from sec="1260594771" usec="0"/>
    <to sec="1260594773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.20.124.49"/>
    </slice>
    <from sec="1260594072" usec="0"/>
    <to sec="1260594733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.60.5.51"/>
    </slice>
    <from sec="1260594251" usec="0"/>
    <to sec="1260594509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.2.177.51"/>
    </slice>
    <from sec="1260594793" usec="0"/>
    <to sec="1260594799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.145.233.53"/>
    </slice>
    <from sec="1260594500" usec="0"/>
    <to sec="1260594601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.90.203.54"/>
    </slice>
    <from sec="1260594305" usec="0"/>
    <to sec="1260594366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96927,1.79249,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
78[label="4.115.230.54s;245pkt 245fpkt", shape=rectangle, color=red];
5856[label="4.115.230.54;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.115.230.54:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3374: (0.200803%)&lt;BR/&gt; 3373: (0.200803%)&lt;BR/&gt; 3372: (0.200803%)&lt;BR/&gt; 3371: (0.200803%)&gt;];
}
78--5856[label="0.995918;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="4.115.230.54"/>
    </slice>
    <from sec="1260594701" usec="0"/>
    <to sec="1260594711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.42.56"/>
    </slice>
    <from sec="1260594067" usec="0"/>
    <to sec="1260594854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.163.209.60"/>
    </slice>
    <from sec="1260594879" usec="0"/>
    <to sec="1260594887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.170.222.61"/>
    </slice>
    <from sec="1260594608" usec="0"/>
    <to sec="1260594764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.144.200.62"/>
    </slice>
    <from sec="1260594202" usec="0"/>
    <to sec="1260594207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.205.65"/>
    </slice>
    <from sec="1260594292" usec="0"/>
    <to sec="1260594415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.36.185.67"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.108.91.68"/>
    </slice>
    <from sec="1260594841" usec="0"/>
    <to sec="1260594852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.142.46.69"/>
    </slice>
    <from sec="1260594487" usec="0"/>
    <to sec="1260594493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.120.154.70"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.242.124.71"/>
    </slice>
    <from sec="1260594003" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.212.96.74"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
5962[label="194.121.104.77;138pkt 138fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.121.104.77:0, *:0}[98.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5507%)&lt;BR/&gt; 6000: (0.724638%)&lt;BR/&gt; 2967: (0.362319%)&lt;BR/&gt; 445: (0.362319%)&gt;];
}
</description>
    <slice>
      <filter src_ip="194.121.104.77"/>
    </slice>
    <from sec="1260594005" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.80.78"/>
    </slice>
    <from sec="1260594871" usec="0"/>
    <to sec="1260594873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.92.140.78"/>
    </slice>
    <from sec="1260594784" usec="0"/>
    <to sec="1260594890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.128.101.80"/>
    </slice>
    <from sec="1260594776" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.20.121.80"/>
    </slice>
    <from sec="1260594008" usec="0"/>
    <to sec="1260594861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.254.74.81"/>
    </slice>
    <from sec="1260594273" usec="0"/>
    <to sec="1260594709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.84.92.82"/>
    </slice>
    <from sec="1260594336" usec="0"/>
    <to sec="1260594600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.151.166.82"/>
    </slice>
    <from sec="1260594573" usec="0"/>
    <to sec="1260594580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.215.157.83"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96927,1.79249,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
82[label="150.86.247.83s;206pkt 206fpkt", shape=rectangle, color=red];
5994[label="150.86.247.83;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.86.247.83:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3309: (0.228833%)&lt;BR/&gt; 3308: (0.228833%)&lt;BR/&gt; 3307: (0.228833%)&lt;BR/&gt; 3306: (0.228833%)&gt;];
}
82--5994[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="150.86.247.83"/>
    </slice>
    <from sec="1260594767" usec="0"/>
    <to sec="1260594773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.69.27.84"/>
    </slice>
    <from sec="1260594069" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
6009[label="9.40.212.86;210pkt 210fpkt", shape=pentagon, color=darkviolet];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.40.212.86:418, *:3128}[35.7143%]&lt;BR/&gt;{9.40.212.86:418, *:80}[32.8571%]&lt;BR/&gt;{9.40.212.86:418, *:8080}[30.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 418: (49.7619%)&lt;BR/&gt; 3128: (17.8571%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 8080: (15.4762%)&lt;BR/&gt; 52136: (0.238095%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3128" src_ip="9.40.212.86" src_port="418"/>
      <filter dst_port="80" src_ip="9.40.212.86" src_port="418"/>
      <filter dst_port="8080" src_ip="9.40.212.86" src_port="418"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.129.221.87"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.1.22.88"/>
    </slice>
    <from sec="1260594338" usec="0"/>
    <to sec="1260594344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.124.24.88"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13054,1.70424,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
64[label="172.216.89.153s;1pkt 1fpkt", shape=rectangle, color=red];
168[label="215.238.174.143;d;36pkt 36fpkt", shape=diamond, color=yellow];
169[label="130.108.192.117;s;125pkt 125fpkt", shape=diamond, color=yellow];
1208[label="172.216.232.51;s;110pkt 110fpkt", shape=diamond, color=yellow];
1226[label="172.216.89.153;s;873pkt 873fpkt", shape=diamond, color=yellow];
1370[label="216.237.70.27;d;24pkt 24fpkt", shape=diamond, color=yellow];
2001[label="22.98.126.153;d;192pkt 192fpkt", shape=diamond, color=yellow];
2682[label="130.108.41.44;s;65pkt 65fpkt", shape=diamond, color=yellow];
3253[label="36.52.148.169;d;14pkt 14fpkt", shape=diamond, color=yellow];
3319[label="195.32.63.28;d;5pkt 5fpkt", shape=diamond, color=yellow];
3485[label="174.186.54.72;d;138pkt 138fpkt", shape=diamond, color=yellow];
3679[label="215.238.174.143;d;36pkt 36fpkt", shape=hexagon, color=black];
4922[label="172.216.232.51;s;110pkt 110fpkt", shape=hexagon, color=black];
5274[label="36.52.148.169;d;14pkt 14fpkt", shape=hexagon, color=black];
6029[label="172.216.19.91;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6156[label="172.216.6.124;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.89.153:*, *:80}[56.3712%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.729%)&lt;BR/&gt; 13374: (2.85554%)&lt;BR/&gt; 443: (2.21165%)&lt;BR/&gt; 8000: (0.727884%)&lt;BR/&gt; 1028: (0.335946%)&gt;];
}
64--1226[label="1;1pkt 1fpkt"];
168--169[label="0.833333;30pkt 30fpkt"];
168--1636[label="0.0277778;1pkt 1fpkt"];
168--1731[label="0.0277778;1pkt 1fpkt"];
168--2682[label="0.0833333;3pkt 3fpkt"];
168--3478[label="0.0277778;1pkt 1fpkt"];
168--3679[label="1;36pkt 36fpkt"];
168--5948[label="0.0277778;1pkt 1fpkt"];
168--6671[label="0.0277778;1pkt 1fpkt"];
168--6865[label="0.0277778;1pkt 1fpkt"];
169--762[label="0.032;4pkt 4fpkt"];
169--933[label="0.112;14pkt 14fpkt"];
169--2722[label="0.096;12pkt 12fpkt"];
169--2963[label="0.00884956;1pkt 1fpkt"];
169--3679[label="0.833333;30pkt 30fpkt"];
169--3881[label="0.112;14pkt 14fpkt"];
169--4327[label="0.032;4pkt 4fpkt"];
169--4950[label="0.096;12pkt 12fpkt"];
169--5175[label="0.00884956;1pkt 1fpkt"];
1208--2001[label="0.227273;25pkt 25fpkt"];
1208--4922[label="1;110pkt 110fpkt"];
1208--5510[label="0.0272727;3pkt 3fpkt"];
1226--1370[label="1;24pkt 24fpkt"];
1226--1643[label="0.0294118;2pkt 2fpkt"];
1226--1978[label="0.00696864;2pkt 2fpkt"];
1226--1995[label="0.0215054;2pkt 2fpkt"];
1226--2001[label="0.0208333;4pkt 4fpkt"];
1226--2201[label="0.0366972;4pkt 4fpkt"];
1226--2385[label="0.111111;2pkt 2fpkt"];
1226--2656[label="0.0111111;1pkt 1fpkt"];
1226--2693[label="0.015625;1pkt 1fpkt"];
1226--2885[label="0.039604;4pkt 4fpkt"];
1226--2969[label="0.0677966;4pkt 4fpkt"];
1226--3196[label="0.0128205;1pkt 1fpkt"];
1226--3253[label="1;14pkt 14fpkt"];
1226--3319[label="1;5pkt 5fpkt"];
1226--3397[label="0.00952381;1pkt 1fpkt"];
1226--3452[label="0.0135135;1pkt 1fpkt"];
1226--3485[label="0.347826;48pkt 48fpkt"];
1226--3773[label="0.0983607;18pkt 18fpkt"];
1226--4447[label="0.0155039;2pkt 2fpkt"];
1226--4565[label="0.0340909;9pkt 9fpkt"];
1226--4587[label="0.0344828;2pkt 2fpkt"];
1226--4618[label="0.111111;2pkt 2fpkt"];
1226--4700[label="0.039604;4pkt 4fpkt"];
1226--4710[label="0.0366972;4pkt 4fpkt"];
1226--5099[label="0.00952381;1pkt 1fpkt"];
1226--5145[label="0.00696864;2pkt 2fpkt"];
1226--5147[label="0.0111111;1pkt 1fpkt"];
1226--5206[label="0.0128205;1pkt 1fpkt"];
1226--5274[label="1;14pkt 14fpkt"];
1226--5479[label="0.0128205;1pkt 1fpkt"];
1226--5510[label="0.0538373;47pkt 47fpkt"];
1226--5516[label="0.067583;59pkt 59fpkt"];
1226--5530[label="0.0664376;58pkt 58fpkt"];
2001--2021[label="0.03125;6pkt 6fpkt"];
2001--2582[label="0.020202;2pkt 2fpkt"];
2001--2682[label="0.230769;15pkt 15fpkt"];
2001--3473[label="0.0114943;1pkt 1fpkt"];
2001--3973[label="0.0144928;1pkt 1fpkt"];
2001--4263[label="0.0104167;2pkt 2fpkt"];
2001--4721[label="0.0232558;2pkt 2fpkt"];
2001--4878[label="0.0145985;2pkt 2fpkt"];
2001--4922[label="0.227273;25pkt 25fpkt"];
2001--5510[label="0.0572917;11pkt 11fpkt"];
2001--5516[label="0.00520833;1pkt 1fpkt"];
2001--5530[label="0.03125;6pkt 6fpkt"];
2001--6029[label="0.666667;2pkt 2fpkt"];
2001--6138[label="0.0113636;1pkt 1fpkt"];
2001--6156[label="0.275;11pkt 11fpkt"];
2682--2963[label="0.0461538;3pkt 3fpkt"];
2682--3679[label="0.0833333;3pkt 3fpkt"];
2682--5175[label="0.0461538;3pkt 3fpkt"];
2682--5530[label="0.0153846;1pkt 1fpkt"];
3253--5274[label="1;14pkt 14fpkt"];
3485--4878[label="0.0218978;3pkt 3fpkt"];
3485--5510[label="0.0217391;3pkt 3fpkt"];
3485--5516[label="0.0362319;5pkt 5fpkt"];
3485--5530[label="0.0217391;3pkt 3fpkt"];
3679--5948[label="0.0277778;1pkt 1fpkt"];
3679--6671[label="0.0277778;1pkt 1fpkt"];
3679--6865[label="0.0277778;1pkt 1fpkt"];
4922--5510[label="0.0272727;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.216.89.153"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.214.66.92"/>
    </slice>
    <from sec="1260594017" usec="0"/>
    <to sec="1260594886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.19.26.93"/>
    </slice>
    <from sec="1260594233" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.154.5.94"/>
    </slice>
    <from sec="1260594392" usec="0"/>
    <to sec="1260594874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.39.15.96"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.205.96"/>
    </slice>
    <from sec="1260594897" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.34.97"/>
    </slice>
    <from sec="1260594515" usec="0"/>
    <to sec="1260594525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.156.180.98"/>
    </slice>
    <from sec="1260594149" usec="0"/>
    <to sec="1260594163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.70.59.100"/>
    </slice>
    <from sec="1260594451" usec="0"/>
    <to sec="1260594535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.45.141.100"/>
    </slice>
    <from sec="1260594247" usec="0"/>
    <to sec="1260594608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.20.37.101"/>
    </slice>
    <from sec="1260594740" usec="0"/>
    <to sec="1260594766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.251.199.102"/>
    </slice>
    <from sec="1260594088" usec="0"/>
    <to sec="1260594089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.122.102.104"/>
    </slice>
    <from sec="1260594361" usec="0"/>
    <to sec="1260594422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.146.160.106"/>
    </slice>
    <from sec="1260594561" usec="0"/>
    <to sec="1260594593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.225.211.106"/>
    </slice>
    <from sec="1260594005" usec="0"/>
    <to sec="1260594355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.170.149.108"/>
    </slice>
    <from sec="1260594150" usec="0"/>
    <to sec="1260594896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.161.109"/>
    </slice>
    <from sec="1260594003" usec="0"/>
    <to sec="1260594871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
6101[label="172.216.41.110;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.41.110:8214, *:*}[89.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8214: (44.5455%)&lt;BR/&gt; 80: (2.72727%)&lt;BR/&gt; 50800: (1.81818%)&lt;BR/&gt; 58764: (0.909091%)&lt;BR/&gt; 58262: (0.909091%)&gt;];
}
</description>
    <slice>
      <filter src_ip="172.216.41.110" src_port="8214"/>
    </slice>
    <from sec="1260594095" usec="0"/>
    <to sec="1260594837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699306,1.7362,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2588[label="219.125.83.110;s;833pkt 833fpkt", shape=diamond, color=yellow];
6102[label="219.125.83.110;904pkt 904fpkt", shape=pentagon, color=darkviolet];
6928[label="219.125.83.110;904pkt 904fpkt", shape=invtriangle, color=brown];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.125.83.110:4760, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4760: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2588--6102[label="0.997599;831pkt 831fpkt"];
2588--6928[label="0.997599;831pkt 831fpkt"];
6102--6928[label="1;904pkt 904fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.125.83.110" src_port="4760"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.36.184.113"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528405,1.76349,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
1989[label="222.77.198.114;s;1667pkt 1667fpkt", shape=diamond, color=yellow];
6119[label="222.77.198.114;1667pkt 1667fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.77.198.114:*, *:80}[47.2705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.6353%)&lt;BR/&gt; 0: (2.39952%)&lt;BR/&gt; 33462: (1.19976%)&lt;BR/&gt; 33461: (1.19976%)&lt;BR/&gt; 33460: (1.19976%)&gt;];
}
1989--5510[label="0.0557888;93pkt 93fpkt"];
1989--5516[label="0.106179;177pkt 177fpkt"];
1989--5530[label="0.0419916;70pkt 70fpkt"];
1989--6119[label="1;1667pkt 1667fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="222.77.198.114"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.121.97.116"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.212.25.117"/>
    </slice>
    <from sec="1260594258" usec="0"/>
    <to sec="1260594264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.240.153.120"/>
    </slice>
    <from sec="1260594696" usec="0"/>
    <to sec="1260594742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.150.186.120"/>
    </slice>
    <from sec="1260594489" usec="0"/>
    <to sec="1260594498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.49.51.122"/>
    </slice>
    <from sec="1260594802" usec="0"/>
    <to sec="1260594827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.192.10.126"/>
    </slice>
    <from sec="1260594438" usec="0"/>
    <to sec="1260594442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.108.80.126"/>
    </slice>
    <from sec="1260594460" usec="0"/>
    <to sec="1260594492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.202.198.128"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.206.151.129"/>
    </slice>
    <from sec="1260594500" usec="0"/>
    <to sec="1260594508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
6181[label="130.108.91.130;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.91.130:6922, *:*}[82.4074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6922: (41.2037%)&lt;BR/&gt; 80: (8.7963%)&lt;BR/&gt; 36521: (0.925926%)&lt;BR/&gt; 23668: (0.925926%)&lt;BR/&gt; 65074: (0.462963%)&gt;];
}
</description>
    <slice>
      <filter src_ip="130.108.91.130" src_port="6922"/>
    </slice>
    <from sec="1260594020" usec="0"/>
    <to sec="1260594853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.53.9.131"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.2.10.131"/>
    </slice>
    <from sec="1260594880" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.205.136"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.76.222.137"/>
    </slice>
    <from sec="1260594668" usec="0"/>
    <to sec="1260594672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.144.185.138"/>
    </slice>
    <from sec="1260594440" usec="0"/>
    <to sec="1260594443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.74.13.139"/>
    </slice>
    <from sec="1260594735" usec="0"/>
    <to sec="1260594744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.124.54.140"/>
    </slice>
    <from sec="1260594860" usec="0"/>
    <to sec="1260594897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.109.250.140"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.76.222.143"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.81.96.144"/>
    </slice>
    <from sec="1260594279" usec="0"/>
    <to sec="1260594285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.136.130.144"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.155.17.147"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.119.112.153"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.25.153.154"/>
    </slice>
    <from sec="1260594349" usec="0"/>
    <to sec="1260594356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96927,1.79249,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
89[label="2.63.74.157s;254pkt 254fpkt", shape=rectangle, color=red];
6292[label="2.63.74.157;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.63.74.157:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3834: (0.197239%)&lt;BR/&gt; 3833: (0.197239%)&lt;BR/&gt; 3832: (0.197239%)&lt;BR/&gt; 3831: (0.197239%)&gt;];
}
89--6292[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="2.63.74.157"/>
    </slice>
    <from sec="1260594536" usec="0"/>
    <to sec="1260594545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.28.102.157"/>
    </slice>
    <from sec="1260594178" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.146.32.158"/>
    </slice>
    <from sec="1260594729" usec="0"/>
    <to sec="1260594780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.13.66.158"/>
    </slice>
    <from sec="1260594855" usec="0"/>
    <to sec="1260594872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.172.141.159"/>
    </slice>
    <from sec="1260594382" usec="0"/>
    <to sec="1260594412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.134.174.159"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.228.161"/>
    </slice>
    <from sec="1260594270" usec="0"/>
    <to sec="1260594791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.145.91.162"/>
    </slice>
    <from sec="1260594543" usec="0"/>
    <to sec="1260594550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
1579[label="172.216.24.75;d;95pkt 95fpkt", shape=diamond, color=yellow];
1655[label="130.108.40.150;d;96pkt 96fpkt", shape=diamond, color=yellow];
1711[label="37.227.160.162;s;5pkt 5fpkt", shape=diamond, color=yellow];
2172[label="37.227.161.54;s;5pkt 5fpkt", shape=diamond, color=yellow];
3314[label="37.227.166.130;s;5pkt 5fpkt", shape=diamond, color=yellow];
3601[label="168.149.174.143;d;5pkt 5fpkt", shape=diamond, color=yellow];
4648[label="37.227.161.54;s;5pkt 5fpkt", shape=hexagon, color=black];
5853[label="37.227.161.54;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6328[label="37.227.160.162;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6827[label="37.227.161.54;4pkt 4fpkt", shape=invtriangle, color=brown];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 172.216.24.75:*}[41.3265%]&lt;BR/&gt;{*:80, 130.108.40.150:*}[33.6735%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.129%)&lt;BR/&gt; 443: (5.84677%)&lt;BR/&gt; 53: (1.41129%)&lt;BR/&gt; 25: (1.20968%)&lt;BR/&gt; 55173: (1.00806%)&gt;];
}
1579--1711[label="1;5pkt 5fpkt"];
1579--1979[label="0.0210526;2pkt 2fpkt"];
1579--2172[label="1;5pkt 5fpkt"];
1579--2273[label="0.0526316;5pkt 5fpkt"];
1579--3216[label="0.164706;14pkt 14fpkt"];
1579--3314[label="1;5pkt 5fpkt"];
1579--3423[label="0.0326087;3pkt 3fpkt"];
1579--4648[label="1;5pkt 5fpkt"];
1579--4896[label="0.0526316;5pkt 5fpkt"];
1579--5507[label="0.0315789;3pkt 3fpkt"];
1579--5528[label="0.115789;11pkt 11fpkt"];
1579--5532[label="0.0526316;5pkt 5fpkt"];
1579--5535[label="0.105263;10pkt 10fpkt"];
1579--5816[label="0.0277778;2pkt 2fpkt"];
1579--5820[label="0.0519481;4pkt 4fpkt"];
1579--5853[label="1;4pkt 4fpkt"];
1579--5953[label="0.0704225;5pkt 5fpkt"];
1579--6304[label="0.0326087;3pkt 3fpkt"];
1579--6328[label="0.375;9pkt 9fpkt"];
1579--6331[label="0.0322581;2pkt 2fpkt"];
1579--6827[label="1;4pkt 4fpkt"];
1579--7026[label="0.0327869;2pkt 2fpkt"];
1655--1719[label="0.0208333;2pkt 2fpkt"];
1655--2817[label="0.0104167;1pkt 1fpkt"];
1655--3805[label="0.0833333;8pkt 8fpkt"];
1655--4678[label="0.0104167;1pkt 1fpkt"];
1655--5431[label="0.0104167;1pkt 1fpkt"];
1655--5507[label="0.0625;6pkt 6fpkt"];
1655--5517[label="0.0104167;1pkt 1fpkt"];
1655--5528[label="0.0104167;1pkt 1fpkt"];
1655--5541[label="0.0104167;1pkt 1fpkt"];
1655--5556[label="0.0104167;1pkt 1fpkt"];
1655--5736[label="0.0208333;2pkt 2fpkt"];
1655--5756[label="0.0535714;3pkt 3fpkt"];
1655--5820[label="0.012987;1pkt 1fpkt"];
1655--5999[label="0.0104167;1pkt 1fpkt"];
1655--6328[label="0.458333;11pkt 11fpkt"];
1655--6884[label="0.0104167;1pkt 1fpkt"];
1655--7267[label="0.0104167;1pkt 1fpkt"];
1711--5528[label="1;5pkt 5fpkt"];
1711--6328[label="1;5pkt 5fpkt"];
2172--4648[label="1;5pkt 5fpkt"];
2172--5853[label="1;4pkt 4fpkt"];
2172--6827[label="1;4pkt 4fpkt"];
3314--5532[label="0.6;3pkt 3fpkt"];
3601--6328[label="0.8;4pkt 4fpkt"];
4648--5853[label="1;4pkt 4fpkt"];
4648--6827[label="1;4pkt 4fpkt"];
5853--6827[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.40.150" src_port="80"/>
      <filter dst_ip="172.216.24.75" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.227.161.163"/>
    </slice>
    <from sec="1260594460" usec="0"/>
    <to sec="1260594491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.227.1.164"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.227.168.164"/>
    </slice>
    <from sec="1260594436" usec="0"/>
    <to sec="1260594450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.108.88.165"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.108.194.165"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.105.4.167"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.64.53.167"/>
    </slice>
    <from sec="1260594446" usec="0"/>
    <to sec="1260594470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.15.117.167"/>
    </slice>
    <from sec="1260594390" usec="0"/>
    <to sec="1260594771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.1.168"/>
    </slice>
    <from sec="1260594211" usec="0"/>
    <to sec="1260594813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.64.26.170"/>
    </slice>
    <from sec="1260594240" usec="0"/>
    <to sec="1260594318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.11.160.170"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.113.172.170"/>
    </slice>
    <from sec="1260594560" usec="0"/>
    <to sec="1260594600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.21.174.171"/>
    </slice>
    <from sec="1260594404" usec="0"/>
    <to sec="1260594429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.5.172"/>
    </slice>
    <from sec="1260594680" usec="0"/>
    <to sec="1260594699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.104.122.172"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.39.175"/>
    </slice>
    <from sec="1260594734" usec="0"/>
    <to sec="1260594761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.27.75.175"/>
    </slice>
    <from sec="1260594290" usec="0"/>
    <to sec="1260594354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.39.166.175"/>
    </slice>
    <from sec="1260594792" usec="0"/>
    <to sec="1260594801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.97.56.178"/>
    </slice>
    <from sec="1260594617" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.22.181"/>
    </slice>
    <from sec="1260594272" usec="0"/>
    <to sec="1260594283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.17.140.181"/>
    </slice>
    <from sec="1260594398" usec="0"/>
    <to sec="1260594403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.154.181"/>
    </slice>
    <from sec="1260594430" usec="0"/>
    <to sec="1260594460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.108.93.182"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.199.155.184"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.176.220.185"/>
    </slice>
    <from sec="1260594249" usec="0"/>
    <to sec="1260594896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96927,1.79249,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
94[label="29.245.204.186s;229pkt 229fpkt", shape=rectangle, color=red];
6448[label="29.245.204.186;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.245.204.186:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4621: (0.207039%)&lt;BR/&gt; 4620: (0.207039%)&lt;BR/&gt; 4619: (0.207039%)&lt;BR/&gt; 4618: (0.207039%)&gt;];
}
94--6448[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="29.245.204.186"/>
    </slice>
    <from sec="1260594378" usec="0"/>
    <to sec="1260594389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.146.165.188"/>
    </slice>
    <from sec="1260594370" usec="0"/>
    <to sec="1260594383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.55.6.190"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.132.205.194"/>
    </slice>
    <from sec="1260594085" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.16.179.195"/>
    </slice>
    <from sec="1260594592" usec="0"/>
    <to sec="1260594595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.108.194.195"/>
    </slice>
    <from sec="1260594278" usec="0"/>
    <to sec="1260594358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699306,1.7362,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
1584[label="219.110.130.196;s;1472pkt 1472fpkt", shape=diamond, color=yellow];
6486[label="219.110.130.196;1595pkt 1595fpkt", shape=pentagon, color=darkviolet];
7098[label="219.110.130.196;1594pkt 1594fpkt", shape=invtriangle, color=brown];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.110.130.196:60693, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60693: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1584--6486[label="1;1472pkt 1472fpkt"];
1584--7098[label="0.999321;1471pkt 1471fpkt"];
6486--7098[label="1;1594pkt 1594fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.110.130.196" src_port="60693"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.140.150.198"/>
    </slice>
    <from sec="1260594440" usec="0"/>
    <to sec="1260594559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.234.21.199"/>
    </slice>
    <from sec="1260594624" usec="0"/>
    <to sec="1260594677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.68.198.199"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.7.221.199"/>
    </slice>
    <from sec="1260594278" usec="0"/>
    <to sec="1260594286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.71.37.200"/>
    </slice>
    <from sec="1260594302" usec="0"/>
    <to sec="1260594483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.15.60.205"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.133.116.206"/>
    </slice>
    <from sec="1260594515" usec="0"/>
    <to sec="1260594540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.211.19.207"/>
    </slice>
    <from sec="1260594302" usec="0"/>
    <to sec="1260594468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.180.101.210"/>
    </slice>
    <from sec="1260594790" usec="0"/>
    <to sec="1260594795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.88.114.211"/>
    </slice>
    <from sec="1260594466" usec="0"/>
    <to sec="1260594631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.93.42.212"/>
    </slice>
    <from sec="1260594199" usec="0"/>
    <to sec="1260594871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.216.80.216"/>
    </slice>
    <from sec="1260594871" usec="0"/>
    <to sec="1260594876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.229.158.216"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.239.32.217"/>
    </slice>
    <from sec="1260594391" usec="0"/>
    <to sec="1260594395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.140.168.217"/>
    </slice>
    <from sec="1260594084" usec="0"/>
    <to sec="1260594826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07205,1.76564,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
96[label="150.86.119.218s;224pkt 224fpkt", shape=rectangle, color=red];
6576[label="150.86.119.218;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7143[label="150.86.119.218;254pkt 254fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.86.119.218:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 2390: (0.204918%)&lt;BR/&gt; 2389: (0.204918%)&lt;BR/&gt; 2388: (0.204918%)&lt;BR/&gt; 2387: (0.204918%)&gt;];
}
96--6576[label="1;224pkt 224fpkt"];
96--7143[label="1;224pkt 224fpkt"];
6576--7143[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="150.86.119.218"/>
    </slice>
    <from sec="1260594843" usec="0"/>
    <to sec="1260594852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.83.36.219"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.20.122.221"/>
    </slice>
    <from sec="1260594443" usec="0"/>
    <to sec="1260594447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.180.14.223"/>
    </slice>
    <from sec="1260594874" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.36.179.223"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.101.201.225"/>
    </slice>
    <from sec="1260594776" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.122.208.226"/>
    </slice>
    <from sec="1260594819" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.117.139.227"/>
    </slice>
    <from sec="1260594235" usec="0"/>
    <to sec="1260594293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.120.2.228"/>
    </slice>
    <from sec="1260594492" usec="0"/>
    <to sec="1260594876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.202.231"/>
    </slice>
    <from sec="1260594284" usec="0"/>
    <to sec="1260594297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.200.202.233"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.82.136.235"/>
    </slice>
    <from sec="1260594330" usec="0"/>
    <to sec="1260594367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1970[label="130.108.205.236;s;281pkt 281fpkt", shape=diamond, color=yellow];
2278[label="215.249.42.21;d;275pkt 275fpkt", shape=diamond, color=yellow];
4557[label="215.249.42.21;d;185pkt 185fpkt", shape=hexagon, color=black];
4558[label="130.108.205.236;s;250pkt 250fpkt", shape=hexagon, color=black];
6645[label="130.108.205.236;306pkt 306fpkt", shape=pentagon, color=darkviolet];
7171[label="130.108.205.236;305pkt 305fpkt", shape=invtriangle, color=brown];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.205.236:*, 215.249.42.21:80}[97.7124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7815%)&lt;BR/&gt; 995: (0.218477%)&lt;BR/&gt; 62057: (0.187266%)&lt;BR/&gt; 62048: (0.187266%)&lt;BR/&gt; 62047: (0.187266%)&gt;];
}
1970--2278[label="1;275pkt 275fpkt"];
1970--4256[label="0.00425532;1pkt 1fpkt"];
1970--4557[label="1;185pkt 185fpkt"];
1970--4558[label="1;250pkt 250fpkt"];
1970--4786[label="0.00355872;1pkt 1fpkt"];
1970--5044[label="0.00862069;2pkt 2fpkt"];
1970--5510[label="0.0569395;16pkt 16fpkt"];
1970--5516[label="0.0569395;16pkt 16fpkt"];
1970--5530[label="0.0604982;17pkt 17fpkt"];
1970--6645[label="1;281pkt 281fpkt"];
1970--7171[label="0.996441;280pkt 280fpkt"];
2278--4557[label="1;185pkt 185fpkt"];
2278--4558[label="0.98;245pkt 245fpkt"];
2278--5510[label="0.0581818;16pkt 16fpkt"];
2278--5516[label="0.0581818;16pkt 16fpkt"];
2278--5530[label="0.0581818;16pkt 16fpkt"];
2278--6645[label="1;275pkt 275fpkt"];
2278--7171[label="1;275pkt 275fpkt"];
4557--4558[label="1;185pkt 185fpkt"];
4557--5510[label="0.0864865;16pkt 16fpkt"];
4557--5516[label="0.0864865;16pkt 16fpkt"];
4557--5530[label="0.0864865;16pkt 16fpkt"];
4557--6645[label="1;185pkt 185fpkt"];
4557--7171[label="1;185pkt 185fpkt"];
4558--4786[label="0.004;1pkt 1fpkt"];
4558--5044[label="0.00862069;2pkt 2fpkt"];
4558--5510[label="0.064;16pkt 16fpkt"];
4558--5516[label="0.064;16pkt 16fpkt"];
4558--5530[label="0.068;17pkt 17fpkt"];
4558--6645[label="1;250pkt 250fpkt"];
4558--7171[label="0.996;249pkt 249fpkt"];
6645--7171[label="1;305pkt 305fpkt"];
</description>
    <slice>
      <filter dst_ip="215.249.42.21" dst_port="80" src_ip="130.108.205.236"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03675,1.72691,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1726[label="195.106.154.198;d;85pkt 85fpkt", shape=diamond, color=yellow];
1877[label="197.70.24.97;s;22pkt 22fpkt", shape=diamond, color=yellow];
2732[label="130.108.42.62;d;88pkt 88fpkt", shape=diamond, color=yellow];
3345[label="25.76.222.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
4375[label="195.106.154.198;d;79pkt 79fpkt", shape=hexagon, color=black];
4834[label="197.70.24.97;s;22pkt 22fpkt", shape=hexagon, color=black];
4957[label="130.108.42.62;d;88pkt 88fpkt", shape=hexagon, color=black];
5921[label="42.195.51.70;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6054[label="26.211.97.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6673[label="197.70.22.244;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7362[label="197.70.22.244;7pkt 7fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.106.154.198:*}[47.191%]&lt;BR/&gt;{*:80, 130.108.42.62:*}[27.5281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.1198%)&lt;BR/&gt; 443: (7.94621%)&lt;BR/&gt; 58268: (0.733496%)&lt;BR/&gt; 56055: (0.733496%)&lt;BR/&gt; 993: (0.733496%)&gt;];
}
1726--1877[label="0.636364;14pkt 14fpkt"];
1726--3345[label="1;1pkt 1fpkt"];
1726--3692[label="0.0117647;1pkt 1fpkt"];
1726--4375[label="1;79pkt 79fpkt"];
1726--4834[label="0.636364;14pkt 14fpkt"];
1726--5507[label="0.270588;23pkt 23fpkt"];
1726--5528[label="0.0117647;1pkt 1fpkt"];
1726--5532[label="0.0352941;3pkt 3fpkt"];
1726--5681[label="0.0117647;1pkt 1fpkt"];
1726--6319[label="0.0322581;1pkt 1fpkt"];
1726--6673[label="1;6pkt 6fpkt"];
1726--7362[label="1;7pkt 7fpkt"];
1877--2732[label="0.181818;4pkt 4fpkt"];
1877--4039[label="0.0454545;1pkt 1fpkt"];
1877--4375[label="0.636364;14pkt 14fpkt"];
1877--4834[label="1;22pkt 22fpkt"];
1877--4957[label="0.181818;4pkt 4fpkt"];
1877--5507[label="0.181818;4pkt 4fpkt"];
1877--5528[label="0.136364;3pkt 3fpkt"];
2732--2817[label="0.0113636;1pkt 1fpkt"];
2732--4678[label="0.0113636;1pkt 1fpkt"];
2732--4834[label="0.181818;4pkt 4fpkt"];
2732--4957[label="1;88pkt 88fpkt"];
2732--5431[label="0.0113636;1pkt 1fpkt"];
2732--5507[label="0.0113636;1pkt 1fpkt"];
2732--5517[label="0.0113636;1pkt 1fpkt"];
2732--5528[label="0.0340909;3pkt 3fpkt"];
2732--5532[label="0.0681818;6pkt 6fpkt"];
2732--5535[label="0.170455;15pkt 15fpkt"];
2732--5541[label="0.0113636;1pkt 1fpkt"];
2732--5556[label="0.0113636;1pkt 1fpkt"];
2732--5921[label="1;5pkt 5fpkt"];
2732--5999[label="0.0113636;1pkt 1fpkt"];
2732--6054[label="0.833333;5pkt 5fpkt"];
2732--6884[label="0.0113636;1pkt 1fpkt"];
2732--7267[label="0.0113636;1pkt 1fpkt"];
4375--4834[label="0.636364;14pkt 14fpkt"];
4375--5507[label="0.291139;23pkt 23fpkt"];
4375--5528[label="0.0126582;1pkt 1fpkt"];
4375--5681[label="0.0126582;1pkt 1fpkt"];
4375--6319[label="0.0322581;1pkt 1fpkt"];
4375--6673[label="1;6pkt 6fpkt"];
4375--7362[label="1;7pkt 7fpkt"];
4834--4957[label="0.181818;4pkt 4fpkt"];
4834--5507[label="0.181818;4pkt 4fpkt"];
4834--5528[label="0.136364;3pkt 3fpkt"];
4957--5431[label="0.0113636;1pkt 1fpkt"];
4957--5507[label="0.0113636;1pkt 1fpkt"];
4957--5517[label="0.0113636;1pkt 1fpkt"];
4957--5528[label="0.0340909;3pkt 3fpkt"];
4957--5532[label="0.0681818;6pkt 6fpkt"];
4957--5535[label="0.170455;15pkt 15fpkt"];
4957--5541[label="0.0113636;1pkt 1fpkt"];
4957--5556[label="0.0113636;1pkt 1fpkt"];
4957--5921[label="1;5pkt 5fpkt"];
4957--5999[label="0.0113636;1pkt 1fpkt"];
4957--6054[label="0.833333;5pkt 5fpkt"];
4957--6884[label="0.0113636;1pkt 1fpkt"];
4957--7267[label="0.0113636;1pkt 1fpkt"];
6673--7362[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.42.62" src_port="80"/>
      <filter dst_ip="195.106.154.198" src_port="80"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.176.228.247"/>
    </slice>
    <from sec="1260594184" usec="0"/>
    <to sec="1260594276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.119.49.251"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.208.168.252"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.123.92.254"/>
    </slice>
    <from sec="1260594665" usec="0"/>
    <to sec="1260594684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.25.170.254"/>
    </slice>
    <from sec="1260594659" usec="0"/>
    <to sec="1260594675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.427975,1.80755,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.136.139.255"/>
    </slice>
    <from sec="1260594235" usec="0"/>
    <to sec="1260594259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.179.254.0"/>
    </slice>
    <from sec="1260594789" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.113.160.1"/>
    </slice>
    <from sec="1260594142" usec="0"/>
    <to sec="1260594341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
5593[label="168.140.233.2;99pkt 99fpkt", shape=pentagon, color=darkviolet];
6719[label="168.140.233.2;99pkt 99fpkt", shape=invtriangle, color=brown];
7203[label="168.140.233.2;98pkt 98fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.233.2:32048, *:*}[86.8687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32048: (43.5811%)&lt;BR/&gt; 80: (4.56081%)&lt;BR/&gt; 5190: (1.52027%)&lt;BR/&gt; 443: (1.35135%)&lt;BR/&gt; 61637: (1.01351%)&gt;];
}
5593--6719[label="1;99pkt 99fpkt"];
5593--7203[label="1;98pkt 98fpkt"];
6719--7203[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="168.140.233.2" src_port="32048"/>
    </slice>
    <from sec="1260594626" usec="0"/>
    <to sec="1260594894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
5615[label="219.110.41.7;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6728[label="219.110.41.7;21pkt 21fpkt", shape=invtriangle, color=brown];
7208[label="219.110.41.7;20pkt 20fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.110.41.7:*, 130.108.162.120:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1357: (2.41935%)&lt;BR/&gt; 1356: (2.41935%)&lt;BR/&gt; 1355: (2.41935%)&lt;BR/&gt; 1354: (2.41935%)&gt;];
}
5615--6728[label="1;21pkt 21fpkt"];
5615--7208[label="1;20pkt 20fpkt"];
6728--7208[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.162.120" dst_port="80" src_ip="219.110.41.7"/>
    </slice>
    <from sec="1260594867" usec="0"/>
    <to sec="1260594870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.78.174.16"/>
    </slice>
    <from sec="1260594034" usec="0"/>
    <to sec="1260594808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.20.123.18"/>
    </slice>
    <from sec="1260594486" usec="0"/>
    <to sec="1260594566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="223.38.56.19"/>
    </slice>
    <from sec="1260594071" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.38.213.19"/>
    </slice>
    <from sec="1260594011" usec="0"/>
    <to sec="1260594898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.134.112.25"/>
    </slice>
    <from sec="1260594137" usec="0"/>
    <to sec="1260594151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
5711[label="34.226.217.27;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6762[label="34.226.217.27;8pkt 8fpkt", shape=invtriangle, color=brown];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.226.217.27:*, 130.108.162.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3084: (6.25%)&lt;BR/&gt; 3083: (6.25%)&lt;BR/&gt; 3082: (6.25%)&lt;BR/&gt; 3081: (6.25%)&gt;];
}
5711--6762[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.162.123" dst_port="80" src_ip="34.226.217.27"/>
    </slice>
    <from sec="1260594861" usec="0"/>
    <to sec="1260594865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.108.109.31"/>
    </slice>
    <from sec="1260594239" usec="0"/>
    <to sec="1260594261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.149.174.40"/>
    </slice>
    <from sec="1260594514" usec="0"/>
    <to sec="1260594624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.193.194.40"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
5780[label="130.108.148.41;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6789[label="130.108.148.41;4pkt 4fpkt", shape=invtriangle, color=brown];
7230[label="130.108.148.41;4pkt 4fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.148.41:80, 20.173.168.1:63877}[25%]&lt;BR/&gt;{130.108.148.41:80, 20.173.168.144:33390}[25%]&lt;BR/&gt;{130.108.148.41:80, 20.173.168.144:46163}[25%]&lt;BR/&gt;{130.108.148.41:80, 20.173.168.144:55393}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63877: (12.5%)&lt;BR/&gt; 55393: (12.5%)&lt;BR/&gt; 46163: (12.5%)&lt;BR/&gt; 33390: (12.5%)&gt;];
}
5780--6789[label="1;4pkt 4fpkt"];
5780--7230[label="1;4pkt 4fpkt"];
6789--7230[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.168.144" dst_port="55393" src_ip="130.108.148.41" src_port="80"/>
      <filter dst_ip="20.173.168.144" dst_port="46163" src_ip="130.108.148.41" src_port="80"/>
      <filter dst_ip="20.173.168.144" dst_port="33390" src_ip="130.108.148.41" src_port="80"/>
      <filter dst_ip="20.173.168.1" dst_port="63877" src_ip="130.108.148.41" src_port="80"/>
    </slice>
    <from sec="1260594263" usec="0"/>
    <to sec="1260594868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.200.202.43"/>
    </slice>
    <from sec="1260594727" usec="0"/>
    <to sec="1260594897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
5806[label="86.228.32.47;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6803[label="86.228.32.47;255pkt 255fpkt", shape=invtriangle, color=brown];
7236[label="86.228.32.47;255pkt 255fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.228.32.47:6000, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
5806--6803[label="1;255pkt 255fpkt"];
5806--7236[label="1;255pkt 255fpkt"];
6803--7236[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.228.32.47" src_port="6000"/>
    </slice>
    <from sec="1260594772" usec="0"/>
    <to sec="1260594773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.24.35.52"/>
    </slice>
    <from sec="1260594116" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
5840[label="195.106.58.53;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6820[label="195.106.58.53;18pkt 18fpkt", shape=invtriangle, color=brown];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.106.58.53:*, 24.23.211.190:80}[22.2222%]&lt;BR/&gt;{195.106.58.53:20254, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 20254: (11.1111%)&lt;BR/&gt; 27031: (8.33333%)&lt;BR/&gt; 63888: (2.77778%)&lt;BR/&gt; 63875: (2.77778%)&gt;];
}
5840--6820[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="195.106.58.53" src_port="20254"/>
      <filter dst_ip="24.23.211.190" dst_port="80" src_ip="195.106.58.53"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.147.177.53"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.145.233.53"/>
    </slice>
    <from sec="1260594500" usec="0"/>
    <to sec="1260594601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.62.134.61"/>
    </slice>
    <from sec="1260594117" usec="0"/>
    <to sec="1260594286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.36.185.67"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.138.36.68"/>
    </slice>
    <from sec="1260594003" usec="0"/>
    <to sec="1260594897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
5917[label="130.108.90.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6850[label="130.108.90.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.90.69:50500, 213.41.233.84:9999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50500: (50%)&lt;BR/&gt; 9999: (50%)&gt;];
}
5917--6850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.41.233.84" dst_port="9999" src_ip="130.108.90.69" src_port="50500"/>
    </slice>
    <from sec="1260594001" usec="0"/>
    <to sec="1260594875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
5922[label="130.108.64.70;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6851[label="130.108.64.70;15pkt 15fpkt", shape=invtriangle, color=brown];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.64.70:*, *:80}[40%]&lt;BR/&gt;{130.108.64.70:*, 20.235.92.166:443}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.0345%)&lt;BR/&gt; 80: (18.9655%)&lt;BR/&gt; 1823: (3.44828%)&lt;BR/&gt; 1822: (3.44828%)&lt;BR/&gt; 1821: (3.44828%)&gt;];
}
5922--6851[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.108.64.70"/>
      <filter dst_ip="20.235.92.166" dst_port="443" src_ip="130.108.64.70"/>
    </slice>
    <from sec="1260594042" usec="0"/>
    <to sec="1260594149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.120.154.70"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
5942[label="137.90.118.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6861[label="137.90.118.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.90.118.73:15262, 168.140.241.201:14078}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15262: (50%)&lt;BR/&gt; 14078: (50%)&gt;];
}
5942--6861[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.140.241.201" dst_port="14078" src_ip="137.90.118.73" src_port="15262"/>
    </slice>
    <from sec="1260594576" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
5972[label="213.11.15.80;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6872[label="213.11.15.80;4pkt 4fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.11.15.80:51392, 194.121.105.88:53}[25%]&lt;BR/&gt;{213.11.15.80:53589, 194.121.105.88:53}[25%]&lt;BR/&gt;{213.11.15.80:55556, 194.121.105.88:53}[25%]&lt;BR/&gt;{213.11.15.80:63051, 194.121.105.88:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63051: (12.5%)&lt;BR/&gt; 55556: (12.5%)&lt;BR/&gt; 53589: (12.5%)&lt;BR/&gt; 51392: (12.5%)&gt;];
}
5972--6872[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.121.105.88" dst_port="53" src_ip="213.11.15.80" src_port="63051"/>
      <filter dst_ip="194.121.105.88" dst_port="53" src_ip="213.11.15.80" src_port="55556"/>
      <filter dst_ip="194.121.105.88" dst_port="53" src_ip="213.11.15.80" src_port="53589"/>
      <filter dst_ip="194.121.105.88" dst_port="53" src_ip="213.11.15.80" src_port="51392"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.151.166.82"/>
    </slice>
    <from sec="1260594573" usec="0"/>
    <to sec="1260594580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.69.27.84"/>
    </slice>
    <from sec="1260594069" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.855338,1.69208,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
2182[label="130.108.42.8;d;639pkt 639fpkt", shape=diamond, color=yellow];
4207[label="130.108.42.8;d;359pkt 359fpkt", shape=hexagon, color=black];
6018[label="196.22.225.88;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6890[label="196.22.225.88;9pkt 9fpkt", shape=invtriangle, color=brown];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.108.42.8:37430}[91.4992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37430: (45.5709%)&lt;BR/&gt; 0: (4.13386%)&lt;BR/&gt; 80: (1.62402%)&lt;BR/&gt; 6881: (0.885827%)&lt;BR/&gt; 16001: (0.738189%)&gt;];
}
2182--2817[label="0.00156495;1pkt 1fpkt"];
2182--4207[label="1;359pkt 359fpkt"];
2182--4678[label="0.00156495;1pkt 1fpkt"];
2182--5431[label="0.00156495;1pkt 1fpkt"];
2182--5517[label="0.00156495;1pkt 1fpkt"];
2182--5528[label="0.00156495;1pkt 1fpkt"];
2182--5535[label="0.00156495;1pkt 1fpkt"];
2182--5541[label="0.00156495;1pkt 1fpkt"];
2182--5556[label="0.00156495;1pkt 1fpkt"];
2182--5999[label="0.00156495;1pkt 1fpkt"];
2182--6018[label="0.111111;1pkt 1fpkt"];
2182--6884[label="0.00156495;1pkt 1fpkt"];
2182--6890[label="0.111111;1pkt 1fpkt"];
2182--7267[label="0.00156495;1pkt 1fpkt"];
4207--6018[label="0.111111;1pkt 1fpkt"];
4207--6890[label="0.111111;1pkt 1fpkt"];
6018--6890[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.42.8" dst_port="37430"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
6025[label="168.140.24.90;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6891[label="168.140.24.90;34pkt 34fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.140.24.90:8080, 86.224.8.168:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 49750: (1.44928%)&lt;BR/&gt; 48021: (1.44928%)&lt;BR/&gt; 47765: (1.44928%)&lt;BR/&gt; 45260: (1.44928%)&gt;];
}
6025--6891[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="86.224.8.168" src_ip="168.140.24.90" src_port="8080"/>
    </slice>
    <from sec="1260594260" usec="0"/>
    <to sec="1260594897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.214.66.92"/>
    </slice>
    <from sec="1260594017" usec="0"/>
    <to sec="1260594886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699306,1.7362,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
2960[label="130.108.41.120;d;139pkt 139fpkt", shape=diamond, color=yellow];
6036[label="16.147.221.92;86pkt 86fpkt", shape=pentagon, color=darkviolet];
6895[label="16.147.221.92;85pkt 85fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.147.221.92:80, 130.108.41.120:*}[59.3103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8387%)&lt;BR/&gt; 3411: (0.483871%)&lt;BR/&gt; 3407: (0.483871%)&lt;BR/&gt; 3403: (0.483871%)&lt;BR/&gt; 3401: (0.483871%)&gt;];
}
2960--4678[label="0.00719424;1pkt 1fpkt"];
2960--5431[label="0.00719424;1pkt 1fpkt"];
2960--5507[label="0.0647482;9pkt 9fpkt"];
2960--5517[label="0.00719424;1pkt 1fpkt"];
2960--5528[label="0.0647482;9pkt 9fpkt"];
2960--5532[label="0.0647482;9pkt 9fpkt"];
2960--5535[label="0.0359712;5pkt 5fpkt"];
2960--5541[label="0.00719424;1pkt 1fpkt"];
2960--5556[label="0.00719424;1pkt 1fpkt"];
2960--5999[label="0.00719424;1pkt 1fpkt"];
2960--6036[label="0.930233;80pkt 80fpkt"];
2960--6884[label="0.00719424;1pkt 1fpkt"];
2960--6895[label="0.929412;79pkt 79fpkt"];
2960--7267[label="0.00719424;1pkt 1fpkt"];
6036--6895[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.41.120" src_ip="16.147.221.92" src_port="80"/>
    </slice>
    <from sec="1260594004" usec="0"/>
    <to sec="1260594892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.19.26.93"/>
    </slice>
    <from sec="1260594233" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.218.149.95"/>
    </slice>
    <from sec="1260594004" usec="0"/>
    <to sec="1260594341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.200.205.96"/>
    </slice>
    <from sec="1260594897" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
6061[label="36.228.211.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6907[label="36.228.211.99;1pkt 1fpkt", shape=invtriangle, color=brown];
7272[label="36.228.211.99;2pkt 2fpkt", shape=invhouse, color=bisque];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.228.211.99:80, 172.216.112.38:4944}[50%]&lt;BR/&gt;{36.228.211.99:80, 172.216.112.38:4946}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4946: (37.5%)&lt;BR/&gt; 4944: (12.5%)&gt;];
}
6061--6907[label="1;1pkt 1fpkt"];
6061--7272[label="1;1pkt 1fpkt"];
6907--7272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.112.38" dst_port="4946" src_ip="36.228.211.99" src_port="80"/>
      <filter dst_ip="172.216.112.38" dst_port="4944" src_ip="36.228.211.99" src_port="80"/>
    </slice>
    <from sec="1260594039" usec="0"/>
    <to sec="1260594062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.45.141.100"/>
    </slice>
    <from sec="1260594247" usec="0"/>
    <to sec="1260594608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.20.37.101"/>
    </slice>
    <from sec="1260594740" usec="0"/>
    <to sec="1260594766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.122.102.104"/>
    </slice>
    <from sec="1260594361" usec="0"/>
    <to sec="1260594422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.148.178.119"/>
    </slice>
    <from sec="1260594678" usec="0"/>
    <to sec="1260594686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07205,1.76564,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
88[label="150.86.27.126s;248pkt 248fpkt", shape=rectangle, color=red];
6160[label="150.86.27.126;248pkt 248fpkt", shape=pentagon, color=darkviolet];
6953[label="150.86.27.126;248pkt 248fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.86.27.126:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4587: (0.201613%)&lt;BR/&gt; 4586: (0.201613%)&lt;BR/&gt; 4585: (0.201613%)&lt;BR/&gt; 4583: (0.201613%)&gt;];
}
88--6160[label="0.995968;247pkt 247fpkt"];
88--6953[label="0.995968;247pkt 247fpkt"];
6160--6953[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="150.86.27.126"/>
    </slice>
    <from sec="1260594785" usec="0"/>
    <to sec="1260594797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.108.80.126"/>
    </slice>
    <from sec="1260594460" usec="0"/>
    <to sec="1260594492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
6163[label="17.23.106.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6956[label="17.23.106.126;1pkt 1fpkt", shape=invtriangle, color=brown];
7286[label="17.23.106.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.23.106.126:1970, 130.108.162.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1970: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6163--6956[label="1;1pkt 1fpkt"];
6163--7286[label="1;1pkt 1fpkt"];
6956--7286[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.162.27" dst_port="80" src_ip="17.23.106.126" src_port="1970"/>
    </slice>
    <from sec="1260594252" usec="0"/>
    <to sec="1260594885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
6165[label="185.20.49.127;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6957[label="185.20.49.127;2pkt 2fpkt", shape=invtriangle, color=brown];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.20.49.127:80, 20.173.170.108:37415}[50%]&lt;BR/&gt;{185.20.49.127:80, 20.173.170.201:35358}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37415: (25%)&lt;BR/&gt; 35358: (25%)&gt;];
}
6165--6957[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.170.201" dst_port="35358" src_ip="185.20.49.127" src_port="80"/>
      <filter dst_ip="20.173.170.108" dst_port="37415" src_ip="185.20.49.127" src_port="80"/>
    </slice>
    <from sec="1260594127" usec="0"/>
    <to sec="1260594437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.41.10.129"/>
    </slice>
    <from sec="1260594348" usec="0"/>
    <to sec="1260594443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.53.9.131"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.109.250.140"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
6258[label="2.151.237.146;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6997[label="2.151.237.146;14pkt 14fpkt", shape=invtriangle, color=brown];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.151.237.146:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 20459: (3.7037%)&lt;BR/&gt; 20457: (3.7037%)&lt;BR/&gt; 20456: (3.7037%)&lt;BR/&gt; 20454: (3.7037%)&gt;];
}
6258--6997[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="2.151.237.146"/>
    </slice>
    <from sec="1260594000" usec="0"/>
    <to sec="1260594026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.155.17.147"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
6264[label="180.183.181.148;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7001[label="180.183.181.148;7pkt 7fpkt", shape=invtriangle, color=brown];
7298[label="180.183.181.148;7pkt 7fpkt", shape=invhouse, color=bisque];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.183.181.148:80, 130.108.74.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53684: (6.81818%)&lt;BR/&gt; 53683: (6.81818%)&lt;BR/&gt; 53640: (6.81818%)&lt;BR/&gt; 53639: (6.81818%)&gt;];
}
6264--7001[label="1;7pkt 7fpkt"];
6264--7298[label="1;7pkt 7fpkt"];
7001--7298[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.74.210" src_ip="180.183.181.148" src_port="80"/>
    </slice>
    <from sec="1260594074" usec="0"/>
    <to sec="1260594743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.146.5.149"/>
    </slice>
    <from sec="1260594016" usec="0"/>
    <to sec="1260594139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.192.170.150"/>
    </slice>
    <from sec="1260594247" usec="0"/>
    <to sec="1260594598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.216.228.152"/>
    </slice>
    <from sec="1260594766" usec="0"/>
    <to sec="1260594767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.97.182.155"/>
    </slice>
    <from sec="1260594007" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
6289[label="37.48.217.156;216pkt 216fpkt", shape=pentagon, color=darkviolet];
7013[label="37.48.217.156;215pkt 215fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.48.217.156:4861, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4861: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
6289--7013[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="37.48.217.156" src_port="4861"/>
    </slice>
    <from sec="1260594008" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.28.102.157"/>
    </slice>
    <from sec="1260594178" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
6301[label="172.216.134.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7018[label="172.216.134.158;1pkt 1fpkt", shape=invtriangle, color=brown];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.134.158:80, 20.173.170.247:65405}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65405: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6301--7018[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.170.247" dst_port="65405" src_ip="172.216.134.158" src_port="80"/>
    </slice>
    <from sec="1260594597" usec="0"/>
    <to sec="1260594603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
6312[label="37.227.168.160;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7019[label="37.227.168.160;23pkt 23fpkt", shape=invtriangle, color=brown];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.227.168.160:21, 168.149.161.149:*}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.7391%)&lt;BR/&gt; 65441: (2.17391%)&lt;BR/&gt; 64567: (2.17391%)&lt;BR/&gt; 64421: (2.17391%)&lt;BR/&gt; 64314: (2.17391%)&gt;];
}
6312--7019[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="168.149.161.149" src_ip="37.227.168.160" src_port="21"/>
    </slice>
    <from sec="1260594305" usec="0"/>
    <to sec="1260594314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.145.91.162"/>
    </slice>
    <from sec="1260594543" usec="0"/>
    <to sec="1260594550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.722348,1.72008,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
3206[label="172.216.130.164;d;23pkt 23fpkt", shape=diamond, color=yellow];
3366[label="37.227.169.98;s;8pkt 8fpkt", shape=diamond, color=yellow];
3572[label="37.227.169.101;s;9pkt 9fpkt", shape=diamond, color=yellow];
5220[label="172.216.130.164;d;23pkt 23fpkt", shape=hexagon, color=black];
5312[label="37.227.169.101;s;9pkt 9fpkt", shape=hexagon, color=black];
6056[label="37.227.169.98;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.227.169.101:443, 172.216.130.164:*}[39.1304%]&lt;BR/&gt;{37.227.169.98:443, 172.216.130.164:*}[34.7826%]&lt;BR/&gt;{*:80, 172.216.130.164:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (42.5%)&lt;BR/&gt; 80: (7.5%)&lt;BR/&gt; 64070: (2.5%)&lt;BR/&gt; 64039: (2.5%)&lt;BR/&gt; 63403: (2.5%)&gt;];
}
3206--3366[label="1;8pkt 8fpkt"];
3206--3572[label="1;9pkt 9fpkt"];
3206--5220[label="1;23pkt 23fpkt"];
3206--5312[label="1;9pkt 9fpkt"];
3206--5507[label="0.0434783;1pkt 1fpkt"];
3206--6056[label="1;8pkt 8fpkt"];
3206--6331[label="0.0434783;1pkt 1fpkt"];
3206--7026[label="0.0434783;1pkt 1fpkt"];
3366--5220[label="1;8pkt 8fpkt"];
3366--6056[label="1;8pkt 8fpkt"];
3572--5220[label="1;9pkt 9fpkt"];
3572--5312[label="1;9pkt 9fpkt"];
5220--5312[label="1;9pkt 9fpkt"];
5220--5507[label="0.0434783;1pkt 1fpkt"];
5220--6056[label="1;8pkt 8fpkt"];
5220--6331[label="0.0434783;1pkt 1fpkt"];
5220--7026[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.130.164" src_port="80"/>
      <filter dst_ip="172.216.130.164" src_ip="37.227.169.101" src_port="443"/>
      <filter dst_ip="172.216.130.164" src_ip="37.227.169.98" src_port="443"/>
    </slice>
    <from sec="1260594069" usec="0"/>
    <to sec="1260594828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.227.161.163"/>
    </slice>
    <from sec="1260594460" usec="0"/>
    <to sec="1260594491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.108.88.165"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.120.154.166"/>
    </slice>
    <from sec="1260594096" usec="0"/>
    <to sec="1260594099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.155.131.171"/>
    </slice>
    <from sec="1260594066" usec="0"/>
    <to sec="1260594138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.972643,1.78753,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
6411[label="195.224.88.179;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7066[label="195.224.88.179;16pkt 16fpkt", shape=invtriangle, color=brown];
7325[label="195.224.88.179;15pkt 15fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.224.88.179:80, 172.216.15.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50921: (3.19149%)&lt;BR/&gt; 50910: (3.19149%)&lt;BR/&gt; 50906: (3.19149%)&lt;BR/&gt; 50904: (3.19149%)&gt;];
}
6411--7066[label="1;16pkt 16fpkt"];
6411--7325[label="1;15pkt 15fpkt"];
7066--7325[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.15.56" src_ip="195.224.88.179" src_port="80"/>
    </slice>
    <from sec="1260594752" usec="0"/>
    <to sec="1260594896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.146.18.185"/>
    </slice>
    <from sec="1260594487" usec="0"/>
    <to sec="1260594494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
6446[label="192.165.155.186;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7077[label="192.165.155.186;12pkt 12fpkt", shape=invtriangle, color=brown];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.165.155.186:*, 172.216.149.103:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 8526: (4.16667%)&lt;BR/&gt; 8516: (4.16667%)&lt;BR/&gt; 8514: (4.16667%)&lt;BR/&gt; 8512: (4.16667%)&gt;];
}
6446--7077[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="172.216.149.103" dst_port="25" src_ip="192.165.155.186"/>
    </slice>
    <from sec="1260594368" usec="0"/>
    <to sec="1260594389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.49.70.188"/>
    </slice>
    <from sec="1260594763" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.55.6.190"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.76.222.192"/>
    </slice>
    <from sec="1260594021" usec="0"/>
    <to sec="1260594431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
6480[label="140.157.93.195;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7095[label="140.157.93.195;16pkt 16fpkt", shape=invtriangle, color=brown];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.157.93.195:80, 194.121.108.53:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50547: (3.125%)&lt;BR/&gt; 50541: (3.125%)&lt;BR/&gt; 50539: (3.125%)&lt;BR/&gt; 50535: (3.125%)&gt;];
}
6480--7095[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="194.121.108.53" src_ip="140.157.93.195" src_port="80"/>
    </slice>
    <from sec="1260594079" usec="0"/>
    <to sec="1260594087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.108.194.195"/>
    </slice>
    <from sec="1260594278" usec="0"/>
    <to sec="1260594358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.176.159.197"/>
    </slice>
    <from sec="1260594118" usec="0"/>
    <to sec="1260594363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.140.150.198"/>
    </slice>
    <from sec="1260594441" usec="0"/>
    <to sec="1260594559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.71.37.200"/>
    </slice>
    <from sec="1260594302" usec="0"/>
    <to sec="1260594483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
6516[label="130.108.69.204;80pkt 80fpkt", shape=pentagon, color=darkviolet];
7118[label="130.108.69.204;80pkt 80fpkt", shape=invtriangle, color=brown];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.69.204:*, 81.228.130.35:80}[60%]&lt;BR/&gt;{130.108.69.204:*, 87.67.127.75:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61523: (0.625%)&lt;BR/&gt; 61522: (0.625%)&lt;BR/&gt; 61521: (0.625%)&lt;BR/&gt; 61520: (0.625%)&gt;];
}
6516--7118[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="81.228.130.35" dst_port="80" src_ip="130.108.69.204"/>
      <filter dst_ip="87.67.127.75" dst_port="80" src_ip="130.108.69.204"/>
    </slice>
    <from sec="1260594002" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.15.60.205"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.211.19.207"/>
    </slice>
    <from sec="1260594302" usec="0"/>
    <to sec="1260594468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.180.101.210"/>
    </slice>
    <from sec="1260594790" usec="0"/>
    <to sec="1260594795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.40.11.218"/>
    </slice>
    <from sec="1260594297" usec="0"/>
    <to sec="1260594304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.250.199.225"/>
    </slice>
    <from sec="1260594192" usec="0"/>
    <to sec="1260594554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.101.201.225"/>
    </slice>
    <from sec="1260594776" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
6602[label="179.38.86.226;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7154[label="179.38.86.226;22pkt 22fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.38.86.226:1433, 44.87.106.205:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 29747: (2.27273%)&lt;BR/&gt; 29647: (2.27273%)&lt;BR/&gt; 29613: (2.27273%)&lt;BR/&gt; 29599: (2.27273%)&gt;];
}
6602--7154[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="44.87.106.205" src_ip="179.38.86.226" src_port="1433"/>
    </slice>
    <from sec="1260594016" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626881,1.78093,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
6607[label="100.0.36.227;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7156[label="100.0.36.227;23pkt 23fpkt", shape=invtriangle, color=brown];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.0.36.227:80, 128.193.200.165:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51233: (2.17391%)&lt;BR/&gt; 51232: (2.17391%)&lt;BR/&gt; 51231: (2.17391%)&lt;BR/&gt; 51228: (2.17391%)&gt;];
}
6607--7156[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="128.193.200.165" src_ip="100.0.36.227" src_port="80"/>
    </slice>
    <from sec="1260594189" usec="0"/>
    <to sec="1260594211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.117.139.227"/>
    </slice>
    <from sec="1260594235" usec="0"/>
    <to sec="1260594293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.200.202.231"/>
    </slice>
    <from sec="1260594284" usec="0"/>
    <to sec="1260594297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.82.136.235"/>
    </slice>
    <from sec="1260594330" usec="0"/>
    <to sec="1260594367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.141.216.240"/>
    </slice>
    <from sec="1260594256" usec="0"/>
    <to sec="1260594261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.77.176.252"/>
    </slice>
    <from sec="1260594367" usec="0"/>
    <to sec="1260594373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.25.170.254"/>
    </slice>
    <from sec="1260594659" usec="0"/>
    <to sec="1260594675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636622,1.8273,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.136.139.255"/>
    </slice>
    <from sec="1260594235" usec="0"/>
    <to sec="1260594259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.36.198.8"/>
    </slice>
    <from sec="1260594861" usec="0"/>
    <to sec="1260594864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.71.178.15"/>
    </slice>
    <from sec="1260594215" usec="0"/>
    <to sec="1260594544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.108.109.31"/>
    </slice>
    <from sec="1260594239" usec="0"/>
    <to sec="1260594261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.858031,1.81405,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
5770[label="130.108.162.40;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7227[label="130.108.162.40;5pkt 5fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.108.162.40:2967, 86.224.42.85:6000}[20%]&lt;BR/&gt;{130.108.162.40:80, 20.173.172.248:36599}[20%]&lt;BR/&gt;{130.108.162.40:80, 20.173.172.248:36961}[20%]&lt;BR/&gt;{130.108.162.40:80, 20.173.172.248:38249}[20%]&lt;BR/&gt;{130.108.162.40:80, 20.173.172.248:55987}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 55987: (10%)&lt;BR/&gt; 38249: (10%)&lt;BR/&gt; 36961: (10%)&lt;BR/&gt; 36599: (10%)&gt;];
}
5770--7227[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="20.173.172.248" dst_port="55987" src_ip="130.108.162.40" src_port="80"/>
      <filter dst_ip="20.173.172.248" dst_port="38249" src_ip="130.108.162.40" src_port="80"/>
      <filter dst_ip="20.173.172.248" dst_port="36961" src_ip="130.108.162.40" src_port="80"/>
      <filter dst_ip="20.173.172.248" dst_port="36599" src_ip="130.108.162.40" src_port="80"/>
      <filter dst_ip="86.224.42.85" dst_port="6000" src_ip="130.108.162.40" src_port="2967"/>
    </slice>
    <from sec="1260594080" usec="0"/>
    <to sec="1260594875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.193.194.40"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.216.80.46"/>
    </slice>
    <from sec="1260594871" usec="0"/>
    <to sec="1260594872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.24.35.52"/>
    </slice>
    <from sec="1260594116" usec="0"/>
    <to sec="1260594895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.120.154.70"/>
    </slice>
    <from sec="1260594900" usec="0"/>
    <to sec="1260594901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.25.56.74"/>
    </slice>
    <from sec="1260594285" usec="0"/>
    <to sec="1260594291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.858031,1.81405,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
6039[label="197.44.120.93;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7270[label="197.44.120.93;1pkt 1fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.44.120.93:80, 130.108.68.54:61675}[50%]&lt;BR/&gt;{197.44.120.93:80, 130.108.68.54:61733}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61733: (33.3333%)&lt;BR/&gt; 61675: (16.6667%)&gt;];
}
6039--7270[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.108.68.54" dst_port="61733" src_ip="197.44.120.93" src_port="80"/>
      <filter dst_ip="130.108.68.54" dst_port="61675" src_ip="197.44.120.93" src_port="80"/>
    </slice>
    <from sec="1260594847" usec="0"/>
    <to sec="1260594893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.122.102.104"/>
    </slice>
    <from sec="1260594361" usec="0"/>
    <to sec="1260594422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.212.25.117"/>
    </slice>
    <from sec="1260594258" usec="0"/>
    <to sec="1260594264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.53.9.131"/>
    </slice>
    <from sec="1260594006" usec="0"/>
    <to sec="1260594899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.216.228.152"/>
    </slice>
    <from sec="1260594766" usec="0"/>
    <to sec="1260594767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.28.102.157"/>
    </slice>
    <from sec="1260594178" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.216.134.158"/>
    </slice>
    <from sec="1260594597" usec="0"/>
    <to sec="1260594603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.858031,1.81405,020,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
6359[label="172.216.80.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7316[label="172.216.80.168;1pkt 1fpkt", shape=invhouse, color=bisque];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.80.168:0, 103.149.11.95:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6359--7316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="103.149.11.95" src_ip="172.216.80.168"/>
    </slice>
    <from sec="1260594871" usec="0"/>
    <to sec="1260594880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.130.70.171"/>
    </slice>
    <from sec="1260594595" usec="0"/>
    <to sec="1260594602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.49.70.188"/>
    </slice>
    <from sec="1260594763" usec="0"/>
    <to sec="1260594900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.180.101.210"/>
    </slice>
    <from sec="1260594792" usec="0"/>
    <to sec="1260594795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.978949,1.83374,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
7137[label="172.216.80.216;1pkt 1fpkt", shape=invtriangle, color=brown];
7349[label="172.216.80.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.216.80.216:0, 103.149.11.95:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7137--7349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="103.149.11.95" src_ip="172.216.80.216"/>
    </slice>
    <from sec="1260594871" usec="0"/>
    <to sec="1260594876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.129.151.226"/>
    </slice>
    <from sec="1260594615" usec="0"/>
    <to sec="1260594627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.117.139.227"/>
    </slice>
    <from sec="1260594235" usec="0"/>
    <to sec="1260594293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.158.142.230"/>
    </slice>
    <from sec="1260594760" usec="0"/>
    <to sec="1260594774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.82.136.235"/>
    </slice>
    <from sec="1260594330" usec="0"/>
    <to sec="1260594367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.232.102.236"/>
    </slice>
    <from sec="1260594003" usec="0"/>
    <to sec="1260594006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865174,1.8596,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.77.176.252"/>
    </slice>
    <from sec="1260594367" usec="0"/>
    <to sec="1260594373" usec="0"/>
  </anomaly>

</admd:annotation>
