<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.486588,1.28279,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="43939384" usec="0"/>
    <to sec="43939384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="43939384" usec="0"/>
    <to sec="43939384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
255[label="163.234.103.31;d;9pkt 9fpkt", shape=diamond, color=yellow];
256[label="89.138.17.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 163.234.103.31:3173}[33.3333%]&lt;BR/&gt;{3.78.36.162:17902, 163.234.103.31:*}[22.2222%]&lt;BR/&gt;{*:6112, 163.234.103.31:*}[22.2222%]&lt;BR/&gt;{89.138.17.167:*, 163.234.103.31:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6112: (22.7273%)&lt;BR/&gt; 3173: (18.1818%)&lt;BR/&gt; 24148: (9.09091%)&lt;BR/&gt; 17902: (9.09091%)&lt;BR/&gt; 0: (9.09091%)&gt;];
}
255--256[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.31" src_ip="89.138.17.167"/>
      <filter dst_ip="163.234.103.31" src_port="6112"/>
      <filter dst_ip="163.234.103.31" dst_port="3173"/>
      <filter dst_ip="163.234.103.31" src_ip="3.78.36.162" src_port="17902"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
285[label="163.234.80.46;s;3pkt 3fpkt", shape=diamond, color=yellow];
4149[label="163.234.80.46;s;3pkt 3fpkt", shape=hexagon, color=black];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.80.46:80, 21.100.25.47:36242}[33.3333%]&lt;BR/&gt;{163.234.80.46:80, 20.37.120.224:53552}[33.3333%]&lt;BR/&gt;{163.234.80.46:80, 20.37.120.224:62824}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62824: (16.6667%)&lt;BR/&gt; 53552: (16.6667%)&lt;BR/&gt; 36242: (16.6667%)&gt;];
}
285--286[label="0.333333;1pkt 1fpkt"];
285--4149[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.120.224" dst_port="62824" src_ip="163.234.80.46" src_port="80"/>
      <filter dst_ip="20.37.120.224" dst_port="53552" src_ip="163.234.80.46" src_port="80"/>
      <filter dst_ip="21.100.25.47" dst_port="36242" src_ip="163.234.80.46" src_port="80"/>
    </slice>
    <from sec="1262322501" usec="0"/>
    <to sec="1262322617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
343[label="217.55.217.204;s;562pkt 562fpkt", shape=diamond, color=yellow];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.55.217.204:6667, *:*}[30.7829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (15.3915%)&lt;BR/&gt; 6660: (3.82562%)&lt;BR/&gt; 6664: (3.73665%)&lt;BR/&gt; 6661: (3.55872%)&lt;BR/&gt; 6666: (3.38078%)&gt;];
}
343--4710[label="0.00355872;2pkt 2fpkt"];
343--4746[label="0.00177936;1pkt 1fpkt"];
343--4751[label="0.00177936;1pkt 1fpkt"];
343--4767[label="0.00177936;1pkt 1fpkt"];
343--4818[label="0.00177936;1pkt 1fpkt"];
343--4831[label="0.00177936;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.55.217.204" src_port="6667"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.140.157.36"/>
      <from sec="1262322654" usec="0"/>
      <to sec="1262322826" usec="0"/>
    </slice>
    <from sec="1262322654" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="17.140.157.36"/>
      <from sec="1262322654" usec="0"/>
      <to sec="1262322826" usec="0"/>
    </slice>
    <from sec="1262322654" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.108.245.146"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
480[label="46.50.17.171;d;4pkt 4fpkt", shape=diamond, color=yellow];
481[label="140.14.67.117;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.67.117:*, *:53}[50%]&lt;BR/&gt;{140.14.67.117:*, 46.50.17.171:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 50333: (8.33333%)&lt;BR/&gt; 50313: (8.33333%)&lt;BR/&gt; 50311: (8.33333%)&gt;];
}
480--481[label="1;4pkt 4fpkt"];
481--1822[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="46.50.17.171" src_ip="140.14.67.117"/>
      <filter dst_port="53" src_ip="140.14.67.117"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
499[label="208.108.249.178;s;2065pkt 2065fpkt", shape=diamond, color=yellow];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.249.178:*, *:53}[95.7869%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.8935%)&lt;BR/&gt; 0: (4.11622%)&lt;BR/&gt; 63775: (0.0484262%)&lt;BR/&gt; 63466: (0.0484262%)&lt;BR/&gt; 63035: (0.0484262%)&gt;];
}
499--500[label="0.00145278;3pkt 3fpkt"];
499--516[label="0.00145278;3pkt 3fpkt"];
499--658[label="0.00131752;1pkt 1fpkt"];
499--816[label="0.0130751;27pkt 27fpkt"];
499--1274[label="0.00157895;3pkt 3fpkt"];
499--1837[label="0.00279851;3pkt 3fpkt"];
499--2982[label="0.00145278;3pkt 3fpkt"];
499--2986[label="0.00145278;3pkt 3fpkt"];
499--3019[label="0.00131752;1pkt 1fpkt"];
499--3680[label="0.0130751;27pkt 27fpkt"];
499--3688[label="0.00488599;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="208.108.249.178"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
132[label="33.43.67.20;d;9pkt 9fpkt", shape=diamond, color=yellow];
667[label="140.14.188.64;s;9pkt 9fpkt", shape=diamond, color=yellow];
2915[label="33.43.67.20;d;9pkt 9fpkt", shape=hexagon, color=black];
5125[label="140.14.188.64;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.188.64:443, 33.43.67.20:*}[84.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (37.5%)&lt;BR/&gt; 554: (6.25%)&lt;BR/&gt; 64962: (2.77778%)&lt;BR/&gt; 64960: (2.77778%)&lt;BR/&gt; 64959: (2.77778%)&gt;];
}
132--667[label="0.888889;8pkt 8fpkt"];
132--2915[label="1;9pkt 9fpkt"];
132--5125[label="0.888889;8pkt 8fpkt"];
667--2915[label="0.888889;8pkt 8fpkt"];
667--5125[label="1;9pkt 9fpkt"];
2915--5125[label="0.888889;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="33.43.67.20" src_ip="140.14.188.64" src_port="443"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.108.243.118"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
680[label="136.25.140.224;d;1267pkt 1267fpkt", shape=diamond, color=yellow];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.25.140.224:9124}[97.0797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9124: (48.5399%)&lt;BR/&gt; 443: (0.986582%)&lt;BR/&gt; 0: (0.868193%)&lt;BR/&gt; 57794: (0.197316%)&lt;BR/&gt; 80: (0.11839%)&gt;];
}
680--4746[label="0.000789266;1pkt 1fpkt"];
680--4767[label="0.000789266;1pkt 1fpkt"];
680--4818[label="0.000789266;1pkt 1fpkt"];
680--4831[label="0.000789266;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.140.224" dst_port="9124"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
606[label="23.207.16.192;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.207.16.192:80, 163.234.103.125:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52968: (7.14286%)&lt;BR/&gt; 52967: (7.14286%)&lt;BR/&gt; 52964: (7.14286%)&lt;BR/&gt; 52963: (7.14286%)&gt;];
}
606--2990[label="1;7pkt 7fpkt"];
606--4582[label="1;7pkt 7fpkt"];
606--4796[label="0.571429;4pkt 4fpkt"];
606--4857[label="0.571429;4pkt 4fpkt"];
606--5515[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.125" src_ip="23.207.16.192" src_port="80"/>
    </slice>
    <from sec="1262322023" usec="0"/>
    <to sec="1262322064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
322[label="208.108.254.201;s;737pkt 737fpkt", shape=diamond, color=yellow];
2273[label="32.162.49.46;d;14pkt 14fpkt", shape=diamond, color=yellow];
3056[label="208.108.254.201;s;607pkt 607fpkt", shape=hexagon, color=black];
4312[label="32.162.49.46;d;14pkt 14fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.254.201:80, 90.40.253.136:*}[83.4464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8542%)&lt;BR/&gt; 17130: (0.218659%)&lt;BR/&gt; 17146: (0.145773%)&lt;BR/&gt; 17135: (0.145773%)&lt;BR/&gt; 17134: (0.145773%)&gt;];
}
322--658[label="0.00135685;1pkt 1fpkt"];
322--1044[label="0.292096;85pkt 85fpkt"];
322--2273[label="1;14pkt 14fpkt"];
322--2880[label="0.2;1pkt 1fpkt"];
322--3019[label="0.00135685;1pkt 1fpkt"];
322--3056[label="1;607pkt 607fpkt"];
322--4312[label="1;14pkt 14fpkt"];
322--4784[label="0.0027137;2pkt 2fpkt"];
322--4796[label="0.0122117;9pkt 9fpkt"];
322--4846[label="0.0027137;2pkt 2fpkt"];
322--4857[label="0.0122117;9pkt 9fpkt"];
322--4890[label="0.0027137;2pkt 2fpkt"];
2273--3056[label="1;14pkt 14fpkt"];
2273--4312[label="1;14pkt 14fpkt"];
2273--4784[label="0.0714286;1pkt 1fpkt"];
2273--4846[label="0.0714286;1pkt 1fpkt"];
2273--4890[label="0.0714286;1pkt 1fpkt"];
3056--4312[label="1;14pkt 14fpkt"];
3056--4784[label="0.00329489;2pkt 2fpkt"];
3056--4796[label="0.014827;9pkt 9fpkt"];
3056--4846[label="0.00329489;2pkt 2fpkt"];
3056--4857[label="0.014827;9pkt 9fpkt"];
3056--4890[label="0.00329489;2pkt 2fpkt"];
4312--4784[label="0.0714286;1pkt 1fpkt"];
4312--4846[label="0.0714286;1pkt 1fpkt"];
4312--4890[label="0.0714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.40.253.136" src_ip="208.108.254.201" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.89.39.2"/>
      <from sec="1262322119" usec="0"/>
      <to sec="1262322340" usec="0"/>
    </slice>
    <from sec="1262322119" usec="0"/>
    <to sec="1262322340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.108.242.37"/>
      <from sec="1262322648" usec="0"/>
      <to sec="1262322813" usec="0"/>
    </slice>
    <from sec="1262322648" usec="0"/>
    <to sec="1262322813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
1307[label="140.14.106.91;s;442pkt 442fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.106.91:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1307--3195[label="0.00226244;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.106.91"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
521[label="163.234.204.10;d;34pkt 34fpkt", shape=diamond, color=yellow];
1393[label="206.26.186.100;s;19pkt 19fpkt", shape=diamond, color=yellow];
2988[label="163.234.204.10;d;29pkt 29fpkt", shape=hexagon, color=black];
5472[label="93.184.92.176;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5909[label="93.184.92.176;3pkt 3fpkt", shape=invtriangle, color=brown];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.26.186.100:*, 163.234.204.10:995}[35.8974%]&lt;BR/&gt;{*:*, 163.234.204.10:443}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (29.5455%)&lt;BR/&gt; 993: (9.09091%)&lt;BR/&gt; 443: (8.52273%)&lt;BR/&gt; 37479: (2.27273%)&lt;BR/&gt; 27724: (2.27273%)&gt;];
}
521--1393[label="0.736842;14pkt 14fpkt"];
521--2988[label="1;29pkt 29fpkt"];
521--5472[label="1;3pkt 3fpkt"];
521--5909[label="1;3pkt 3fpkt"];
1393--2988[label="0.578947;11pkt 11fpkt"];
2988--5472[label="1;3pkt 3fpkt"];
2988--5909[label="1;3pkt 3fpkt"];
5472--5909[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.204.10" dst_port="443"/>
      <filter dst_ip="163.234.204.10" dst_port="995" src_ip="206.26.186.100"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.25.53.168"/>
      <from sec="1262322053" usec="0"/>
      <to sec="1262322811" usec="0"/>
    </slice>
    <from sec="1262322053" usec="0"/>
    <to sec="1262322811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
339[label="163.234.29.86;s;26pkt 26fpkt", shape=diamond, color=yellow];
1416[label="31.81.210.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
1561[label="42.174.87.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.29.86:2498, *:17788}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2498: (50%)&lt;BR/&gt; 17788: (35.7143%)&lt;BR/&gt; 55196: (3.57143%)&lt;BR/&gt; 45483: (3.57143%)&lt;BR/&gt; 9839: (1.78571%)&gt;];
}
339--470[label="1;1pkt 1fpkt"];
339--1416[label="1;1pkt 1fpkt"];
339--1561[label="1;1pkt 1fpkt"];
339--4208[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="163.234.29.86" src_port="2498"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
461[label="140.14.169.56;s;426pkt 426fpkt", shape=diamond, color=yellow];
1064[label="182.133.173.0;d;7pkt 7fpkt", shape=diamond, color=yellow];
1458[label="58.33.96.173;d;13pkt 13fpkt", shape=diamond, color=yellow];
1744[label="196.44.140.255;d;6pkt 6fpkt", shape=diamond, color=yellow];
1764[label="13.234.170.151;d;6pkt 6fpkt", shape=diamond, color=yellow];
2236[label="215.99.4.167;d;19pkt 19fpkt", shape=diamond, color=yellow];
2454[label="32.161.155.49;d;9pkt 9fpkt", shape=diamond, color=yellow];
2502[label="180.134.234.7;d;8pkt 8fpkt", shape=diamond, color=yellow];
2657[label="177.236.132.167;d;9pkt 9fpkt", shape=diamond, color=yellow];
2663[label="182.97.20.149;d;7pkt 7fpkt", shape=diamond, color=yellow];
2764[label="9.104.55.12;d;63pkt 63fpkt", shape=diamond, color=yellow];
2852[label="182.46.44.161;d;12pkt 12fpkt", shape=diamond, color=yellow];
3391[label="182.133.173.0;d;7pkt 7fpkt", shape=hexagon, color=black];
4343[label="182.97.20.149;d;7pkt 7fpkt", shape=hexagon, color=black];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.169.56:80, *:*}[90.0634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9165%)&lt;BR/&gt; 62615: (0.250417%)&lt;BR/&gt; 62614: (0.250417%)&lt;BR/&gt; 62613: (0.250417%)&lt;BR/&gt; 62612: (0.250417%)&gt;];
}
461--615[label="1;4pkt 4fpkt"];
461--1064[label="1;7pkt 7fpkt"];
461--1433[label="1;22pkt 22fpkt"];
461--1458[label="1;13pkt 13fpkt"];
461--1657[label="0.0461538;3pkt 3fpkt"];
461--1744[label="1;6pkt 6fpkt"];
461--1764[label="1;6pkt 6fpkt"];
461--1901[label="0.06;3pkt 3fpkt"];
461--1913[label="0.241935;30pkt 30fpkt"];
461--1951[label="0.0833333;1pkt 1fpkt"];
461--2118[label="0.2375;19pkt 19fpkt"];
461--2221[label="0.0625;1pkt 1fpkt"];
461--2236[label="1;19pkt 19fpkt"];
461--2267[label="0.5;1pkt 1fpkt"];
461--2389[label="0.0357143;1pkt 1fpkt"];
461--2391[label="0.0454545;2pkt 2fpkt"];
461--2454[label="1;9pkt 9fpkt"];
461--2468[label="0.00645161;1pkt 1fpkt"];
461--2502[label="1;8pkt 8fpkt"];
461--2657[label="1;9pkt 9fpkt"];
461--2663[label="1;7pkt 7fpkt"];
461--2764[label="0.253968;16pkt 16fpkt"];
461--2790[label="0.567568;21pkt 21fpkt"];
461--2852[label="1;12pkt 12fpkt"];
461--3007[label="1;4pkt 4fpkt"];
461--3391[label="1;7pkt 7fpkt"];
461--3579[label="1;22pkt 22fpkt"];
461--3747[label="0.253731;17pkt 17fpkt"];
461--3935[label="0.0243902;1pkt 1fpkt"];
461--4245[label="0.0384615;1pkt 1fpkt"];
461--4311[label="0.5;1pkt 1fpkt"];
461--4343[label="1;7pkt 7fpkt"];
461--4595[label="0.253731;17pkt 17fpkt"];
461--4796[label="0.0422535;18pkt 18fpkt"];
461--4857[label="0.0422535;18pkt 18fpkt"];
1064--3391[label="1;7pkt 7fpkt"];
2663--4343[label="1;7pkt 7fpkt"];
2764--3021[label="0.047619;3pkt 3fpkt"];
2764--3069[label="0.111111;7pkt 7fpkt"];
2764--3451[label="0.015873;1pkt 1fpkt"];
2764--4572[label="0.015873;1pkt 1fpkt"];
2764--4796[label="0.0634921;4pkt 4fpkt"];
2764--4857[label="0.0634921;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.169.56" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
712[label="209.72.156.112;s;632pkt 632fpkt", shape=diamond, color=yellow];
1075[label="200.59.17.37;d;8pkt 8fpkt", shape=diamond, color=yellow];
1437[label="38.27.160.153;d;3pkt 3fpkt", shape=diamond, color=yellow];
1463[label="209.66.32.210;d;27pkt 27fpkt", shape=diamond, color=yellow];
1507[label="37.27.70.52;d;29pkt 29fpkt", shape=diamond, color=yellow];
1665[label="209.66.32.225;d;81pkt 81fpkt", shape=diamond, color=yellow];
2472[label="209.66.32.233;d;27pkt 27fpkt", shape=diamond, color=yellow];
2728[label="36.153.166.254;d;2pkt 2fpkt", shape=diamond, color=yellow];
2850[label="36.153.166.255;d;2pkt 2fpkt", shape=diamond, color=yellow];
2870[label="36.153.166.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
2898[label="36.153.166.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
3392[label="200.59.17.37;d;8pkt 8fpkt", shape=hexagon, color=black];
4133[label="37.27.70.52;d;29pkt 29fpkt", shape=hexagon, color=black];
4318[label="209.66.32.233;d;27pkt 27fpkt", shape=hexagon, color=black];
4503[label="36.153.166.255;d;2pkt 2fpkt", shape=hexagon, color=black];
5288[label="209.72.156.112;726pkt 726fpkt", shape=pentagon, color=darkviolet];
5836[label="209.72.156.112;726pkt 726fpkt", shape=invtriangle, color=brown];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.72.156.112:*, 209.66.32.225:80}[35.2185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9356%)&lt;BR/&gt; 60436: (0.15015%)&lt;BR/&gt; 52163: (0.15015%)&lt;BR/&gt; 60595: (0.10725%)&lt;BR/&gt; 60513: (0.10725%)&gt;];
}
712--1075[label="1;8pkt 8fpkt"];
712--1437[label="1;3pkt 3fpkt"];
712--1463[label="0.037037;1pkt 1fpkt"];
712--1507[label="1;29pkt 29fpkt"];
712--1644[label="0.516854;46pkt 46fpkt"];
712--1665[label="1;81pkt 81fpkt"];
712--2173[label="0.144231;15pkt 15fpkt"];
712--2472[label="0.037037;1pkt 1fpkt"];
712--2598[label="0.134615;14pkt 14fpkt"];
712--2728[label="1;2pkt 2fpkt"];
712--2850[label="1;2pkt 2fpkt"];
712--2870[label="1;1pkt 1fpkt"];
712--2898[label="1;1pkt 1fpkt"];
712--2901[label="1;1pkt 1fpkt"];
712--3392[label="1;8pkt 8fpkt"];
712--3732[label="0.431818;19pkt 19fpkt"];
712--4133[label="1;29pkt 29fpkt"];
712--4265[label="0.15;15pkt 15fpkt"];
712--4318[label="0.037037;1pkt 1fpkt"];
712--4503[label="1;2pkt 2fpkt"];
712--4710[label="0.00791139;5pkt 5fpkt"];
712--4725[label="0.0221519;14pkt 14fpkt"];
712--4746[label="0.028481;18pkt 18fpkt"];
712--4767[label="0.0142405;9pkt 9fpkt"];
712--4805[label="0.0221519;14pkt 14fpkt"];
712--4818[label="0.028481;18pkt 18fpkt"];
712--4831[label="0.0142405;9pkt 9fpkt"];
712--5288[label="1;632pkt 632fpkt"];
712--5836[label="1;632pkt 632fpkt"];
1075--3392[label="1;8pkt 8fpkt"];
1075--4725[label="0.5;4pkt 4fpkt"];
1075--4805[label="0.5;4pkt 4fpkt"];
1075--5288[label="1;8pkt 8fpkt"];
1075--5836[label="1;8pkt 8fpkt"];
1437--5288[label="1;3pkt 3fpkt"];
1437--5836[label="1;3pkt 3fpkt"];
1463--5288[label="0.037037;1pkt 1fpkt"];
1463--5836[label="0.037037;1pkt 1fpkt"];
1507--4133[label="1;29pkt 29fpkt"];
1507--5288[label="1;29pkt 29fpkt"];
1507--5836[label="1;29pkt 29fpkt"];
1665--4746[label="0.0123457;1pkt 1fpkt"];
1665--4818[label="0.0123457;1pkt 1fpkt"];
1665--5288[label="1;81pkt 81fpkt"];
1665--5836[label="1;81pkt 81fpkt"];
2472--4318[label="1;27pkt 27fpkt"];
2472--5288[label="0.037037;1pkt 1fpkt"];
2472--5836[label="0.037037;1pkt 1fpkt"];
2728--4767[label="0.5;1pkt 1fpkt"];
2728--4831[label="0.5;1pkt 1fpkt"];
2728--5288[label="1;2pkt 2fpkt"];
2728--5836[label="1;2pkt 2fpkt"];
2850--4503[label="1;2pkt 2fpkt"];
2850--4767[label="0.5;1pkt 1fpkt"];
2850--4831[label="0.5;1pkt 1fpkt"];
2850--5288[label="1;2pkt 2fpkt"];
2850--5836[label="1;2pkt 2fpkt"];
2870--4746[label="1;1pkt 1fpkt"];
2870--4818[label="1;1pkt 1fpkt"];
2870--5288[label="1;1pkt 1fpkt"];
2870--5836[label="1;1pkt 1fpkt"];
2898--4746[label="1;1pkt 1fpkt"];
2898--4818[label="1;1pkt 1fpkt"];
2898--5288[label="1;1pkt 1fpkt"];
2898--5836[label="1;1pkt 1fpkt"];
3392--4725[label="0.5;4pkt 4fpkt"];
3392--4805[label="0.5;4pkt 4fpkt"];
3392--5288[label="1;8pkt 8fpkt"];
3392--5836[label="1;8pkt 8fpkt"];
4133--5288[label="1;29pkt 29fpkt"];
4133--5836[label="1;29pkt 29fpkt"];
4318--5288[label="0.037037;1pkt 1fpkt"];
4318--5836[label="0.037037;1pkt 1fpkt"];
4503--4767[label="0.5;1pkt 1fpkt"];
4503--4831[label="0.5;1pkt 1fpkt"];
4503--5288[label="1;2pkt 2fpkt"];
4503--5836[label="1;2pkt 2fpkt"];
5288--5836[label="1;726pkt 726fpkt"];
</description>
    <slice>
      <filter dst_ip="209.66.32.225" dst_port="80" src_ip="209.72.156.112"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="52.200.37.117"/>
      <from sec="1262322197" usec="0"/>
      <to sec="1262322203" usec="0"/>
    </slice>
    <from sec="1262322197" usec="0"/>
    <to sec="1262322203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
1164[label="209.72.28.69;s;126pkt 126fpkt", shape=diamond, color=yellow];
1488[label="17.182.214.126;d;2pkt 2fpkt", shape=diamond, color=yellow];
1490[label="30.243.82.18;d;6pkt 6fpkt", shape=diamond, color=yellow];
1492[label="20.101.234.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
2700[label="20.146.229.138;d;2pkt 2fpkt", shape=diamond, color=yellow];
3410[label="30.243.82.18;d;6pkt 6fpkt", shape=hexagon, color=black];
4368[label="209.72.28.69;s;126pkt 126fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.72.28.69:*, *:80}[97.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8848%)&lt;BR/&gt; 2525: (0.743494%)&lt;BR/&gt; 2522: (0.743494%)&lt;BR/&gt; 2520: (0.743494%)&lt;BR/&gt; 2435: (0.743494%)&gt;];
}
1164--1488[label="1;2pkt 2fpkt"];
1164--1490[label="1;6pkt 6fpkt"];
1164--1492[label="1;1pkt 1fpkt"];
1164--1664[label="0.0117647;1pkt 1fpkt"];
1164--2700[label="1;2pkt 2fpkt"];
1164--3410[label="1;6pkt 6fpkt"];
1164--4368[label="1;126pkt 126fpkt"];
1488--4368[label="1;2pkt 2fpkt"];
1490--3410[label="1;6pkt 6fpkt"];
1490--4368[label="1;6pkt 6fpkt"];
1492--4368[label="1;1pkt 1fpkt"];
2700--4368[label="1;2pkt 2fpkt"];
3410--4368[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.72.28.69"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1595[label="140.14.105.73;s;849pkt 849fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.105.73:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1595--2054[label="0.00253807;1pkt 1fpkt"];
1595--2302[label="0.00243309;1pkt 1fpkt"];
1595--2303[label="0.0026455;1pkt 1fpkt"];
1595--2315[label="0.00290698;1pkt 1fpkt"];
1595--2316[label="0.00283286;1pkt 1fpkt"];
1595--2524[label="0.00253807;1pkt 1fpkt"];
1595--2734[label="0.00359712;1pkt 1fpkt"];
1595--3857[label="0.00253807;1pkt 1fpkt"];
1595--4069[label="0.00330033;1pkt 1fpkt"];
1595--4179[label="0.00295858;1pkt 1fpkt"];
1595--4373[label="0.00359712;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.105.73"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752914,1.25039,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
926[label="211.101.50.31;d;136pkt 136fpkt", shape=diamond, color=yellow];
5258[label="136.172.128.105;173pkt 173fpkt", shape=pentagon, color=darkviolet];
5823[label="136.172.128.105;172pkt 172fpkt", shape=invtriangle, color=brown];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.172.128.105:20, 211.101.50.31:*}[82.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (43.659%)&lt;BR/&gt; 80: (4.88565%)&lt;BR/&gt; 0: (1.2474%)&lt;BR/&gt; 21: (0.519751%)&lt;BR/&gt; 65231: (0.31185%)&gt;];
}
926--1659[label="0.985294;134pkt 134fpkt"];
926--2929[label="0.00735294;1pkt 1fpkt"];
926--3495[label="0.00735294;1pkt 1fpkt"];
926--3527[label="1;136pkt 136fpkt"];
926--4529[label="0.00735294;1pkt 1fpkt"];
926--5258[label="0.985294;134pkt 134fpkt"];
926--5823[label="0.985294;134pkt 134fpkt"];
5258--5823[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_ip="211.101.50.31" src_ip="136.172.128.105" src_port="20"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1728[label="93.99.192.106;d;87pkt 87fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2967, 93.99.192.106:6000}[86.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (43.1034%)&lt;BR/&gt; 2967: (43.1034%)&lt;BR/&gt; 0: (13.7931%)&gt;];
}
1728--5322[label="0.0114943;1pkt 1fpkt"];
1728--5848[label="0.0114943;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.99.192.106" dst_port="6000" src_port="2967"/>
    </slice>
    <from sec="1262322768" usec="0"/>
    <to sec="1262322773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="88.177.114.62"/>
      <from sec="1262322240" usec="0"/>
      <to sec="1262322331" usec="0"/>
    </slice>
    <from sec="1262322240" usec="0"/>
    <to sec="1262322331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
330[label="163.234.176.152;s;1428pkt 1428fpkt", shape=diamond, color=yellow];
643[label="93.185.212.207;d;12pkt 12fpkt", shape=diamond, color=yellow];
1028[label="201.141.68.247;d;12pkt 12fpkt", shape=diamond, color=yellow];
1790[label="17.177.246.120;d;20pkt 20fpkt", shape=diamond, color=yellow];
1965[label="201.141.27.242;d;17pkt 17fpkt", shape=diamond, color=yellow];
2017[label="44.176.92.179;d;2pkt 2fpkt", shape=diamond, color=yellow];
2031[label="88.71.232.31;d;13pkt 13fpkt", shape=diamond, color=yellow];
2493[label="37.78.54.118;d;3pkt 3fpkt", shape=diamond, color=yellow];
2665[label="33.185.37.159;d;4pkt 4fpkt", shape=diamond, color=yellow];
3164[label="93.185.212.207;d;12pkt 12fpkt", shape=hexagon, color=black];
3994[label="201.141.27.242;d;17pkt 17fpkt", shape=hexagon, color=black];
4021[label="88.71.232.31;d;13pkt 13fpkt", shape=hexagon, color=black];
4173[label="163.234.176.152;s;1285pkt 1285fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.176.152:80, *:*}[99.93%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9648%)&lt;BR/&gt; 1101: (0.140944%)&lt;BR/&gt; 1081: (0.140944%)&lt;BR/&gt; 1042: (0.140944%)&lt;BR/&gt; 1348: (0.123326%)&gt;];
}
330--504[label="0.00769231;1pkt 1fpkt"];
330--643[label="1;12pkt 12fpkt"];
330--1028[label="1;12pkt 12fpkt"];
330--1047[label="1;24pkt 24fpkt"];
330--1344[label="0.0769231;2pkt 2fpkt"];
330--1549[label="1;9pkt 9fpkt"];
330--1790[label="1;20pkt 20fpkt"];
330--1965[label="1;17pkt 17fpkt"];
330--2017[label="1;2pkt 2fpkt"];
330--2031[label="1;13pkt 13fpkt"];
330--2493[label="1;3pkt 3fpkt"];
330--2665[label="1;4pkt 4fpkt"];
330--3164[label="1;12pkt 12fpkt"];
330--3386[label="1;24pkt 24fpkt"];
330--3435[label="1;3pkt 3fpkt"];
330--3941[label="0.0769231;2pkt 2fpkt"];
330--3994[label="1;17pkt 17fpkt"];
330--4021[label="1;13pkt 13fpkt"];
330--4173[label="1;1285pkt 1285fpkt"];
330--4570[label="1;3pkt 3fpkt"];
330--4784[label="0.00140056;2pkt 2fpkt"];
330--4796[label="0.0896359;128pkt 128fpkt"];
330--4846[label="0.00140056;2pkt 2fpkt"];
330--4857[label="0.0896359;128pkt 128fpkt"];
330--4890[label="0.00140056;2pkt 2fpkt"];
643--3164[label="1;12pkt 12fpkt"];
643--4173[label="1;12pkt 12fpkt"];
643--4796[label="1;12pkt 12fpkt"];
643--4857[label="1;12pkt 12fpkt"];
1028--4173[label="1;12pkt 12fpkt"];
1028--4796[label="1;12pkt 12fpkt"];
1028--4857[label="1;12pkt 12fpkt"];
1790--4173[label="1;20pkt 20fpkt"];
1965--3994[label="1;17pkt 17fpkt"];
1965--4173[label="1;17pkt 17fpkt"];
2017--4173[label="1;2pkt 2fpkt"];
2031--4021[label="1;13pkt 13fpkt"];
2031--4173[label="1;13pkt 13fpkt"];
2493--4173[label="1;3pkt 3fpkt"];
2665--4173[label="1;4pkt 4fpkt"];
3164--4173[label="1;12pkt 12fpkt"];
3164--4796[label="1;12pkt 12fpkt"];
3164--4857[label="1;12pkt 12fpkt"];
3994--4173[label="1;17pkt 17fpkt"];
4021--4173[label="1;13pkt 13fpkt"];
4173--4570[label="1;3pkt 3fpkt"];
4173--4784[label="0.00155642;2pkt 2fpkt"];
4173--4796[label="0.0996109;128pkt 128fpkt"];
4173--4846[label="0.00155642;2pkt 2fpkt"];
4173--4857[label="0.0996109;128pkt 128fpkt"];
4173--4890[label="0.00155642;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="163.234.176.152" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
1805[label="209.67.105.216;s;219pkt 219fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.67.105.216:25, *:*}[94.0639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0868%)&lt;BR/&gt; 443: (0.684932%)&lt;BR/&gt; 4919: (0.456621%)&lt;BR/&gt; 64912: (0.228311%)&lt;BR/&gt; 64814: (0.228311%)&gt;];
}
1805--4724[label="0.00913242;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="209.67.105.216" src_port="25"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
368[label="163.234.103.149;s;380pkt 380fpkt", shape=diamond, color=yellow];
1811[label="88.161.210.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
3654[label="163.234.103.149;s;197pkt 197fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.103.149:4041, *:*}[67.6316%]&lt;BR/&gt;{163.234.103.149:*, *:80}[23.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4041: (32.4394%)&lt;BR/&gt; 80: (12.1107%)&lt;BR/&gt; 9045: (1.55709%)&lt;BR/&gt; 14195: (0.865052%)&lt;BR/&gt; 8001: (0.865052%)&gt;];
}
368--1811[label="1;1pkt 1fpkt"];
368--3654[label="1;197pkt 197fpkt"];
368--4710[label="0.00263158;1pkt 1fpkt"];
368--4725[label="0.0131579;5pkt 5fpkt"];
368--4746[label="0.00263158;1pkt 1fpkt"];
368--4767[label="0.00263158;1pkt 1fpkt"];
368--4805[label="0.0131579;5pkt 5fpkt"];
368--4818[label="0.00263158;1pkt 1fpkt"];
368--4831[label="0.00263158;1pkt 1fpkt"];
1811--3654[label="1;1pkt 1fpkt"];
3654--4710[label="0.00507614;1pkt 1fpkt"];
3654--4725[label="0.0253807;5pkt 5fpkt"];
3654--4805[label="0.0253807;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="163.234.103.149" src_port="4041"/>
      <filter dst_port="80" src_ip="163.234.103.149"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1815[label="140.14.3.58;s;88pkt 88fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.3.58:25, *:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.4545%)&lt;BR/&gt; 53: (4.54545%)&lt;BR/&gt; 65139: (0.568182%)&lt;BR/&gt; 63490: (0.568182%)&lt;BR/&gt; 63320: (0.568182%)&gt;];
}
1815--4795[label="0.0113636;1pkt 1fpkt"];
1815--4856[label="0.0113636;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.3.58" src_port="25"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1835[label="136.25.194.218;s;947pkt 947fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.25.194.218:0, *:0}[99.8944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8944%)&lt;BR/&gt; 3497: (0.0527983%)&lt;BR/&gt; 80: (0.0527983%)&gt;];
}
</description>
    <slice>
      <filter src_ip="136.25.194.218"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
216[label="140.14.223.164;s;638pkt 638fpkt", shape=diamond, color=yellow];
3031[label="140.14.223.164;s;639pkt 639fpkt", shape=hexagon, color=black];
5444[label="140.14.223.164;716pkt 716fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.223.164:25, *:*}[95.1117%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54773: (0.150527%)&lt;BR/&gt; 52578: (0.150527%)&lt;BR/&gt; 65267: (0.0752634%)&lt;BR/&gt; 64941: (0.0752634%)&gt;];
}
216--1894[label="0.0204082;1pkt 1fpkt"];
216--3031[label="1;638pkt 638fpkt"];
216--4724[label="0.0031348;2pkt 2fpkt"];
216--5444[label="1;638pkt 638fpkt"];
3031--4724[label="0.00312989;2pkt 2fpkt"];
3031--5444[label="1;639pkt 639fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.223.164" src_port="25"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
579[label="36.23.63.80;d;57pkt 57fpkt", shape=diamond, color=yellow];
1494[label="14.131.84.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1784[label="32.98.58.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
2469[label="32.97.61.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
2646[label="32.236.251.125;d;19pkt 19fpkt", shape=diamond, color=yellow];
2885[label="21.242.10.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.253.82:3124, 36.23.63.80:*}[70.3704%]&lt;BR/&gt;{208.108.253.82:80, 32.236.251.125:*}[23.4568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (35.1852%)&lt;BR/&gt; 80: (14.8148%)&lt;BR/&gt; 49890: (0.617284%)&lt;BR/&gt; 33611: (0.617284%)&lt;BR/&gt; 23547: (0.617284%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="36.23.63.80" src_ip="208.108.253.82" src_port="3124"/>
      <filter dst_ip="32.236.251.125" src_ip="208.108.253.82" src_port="80"/>
    </slice>
    <from sec="1262322010" usec="0"/>
    <to sec="1262322802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
131[label="163.234.102.228;s;284pkt 284fpkt", shape=diamond, color=yellow];
147[label="16.63.132.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
252[label="33.53.58.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="88.151.132.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
434[label="21.212.141.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
490[label="215.206.196.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
510[label="39.76.78.1;d;3pkt 3fpkt", shape=diamond, color=yellow];
526[label="27.0.185.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
540[label="28.145.82.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
550[label="8.91.39.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
565[label="8.110.11.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
569[label="217.186.21.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
572[label="5.54.24.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
577[label="20.236.42.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
666[label="168.139.227.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
790[label="99.219.214.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
807[label="88.81.27.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
808[label="92.94.79.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
1013[label="206.102.178.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
1062[label="30.130.242.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
1291[label="27.4.238.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1422[label="36.161.73.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1496[label="3.234.183.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1499[label="28.155.67.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
1501[label="30.12.146.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1503[label="27.108.200.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
1506[label="99.5.233.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
1522[label="209.31.244.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
1523[label="27.210.26.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
1652[label="25.56.215.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
1709[label="16.206.23.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
1717[label="40.184.29.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
1732[label="31.136.236.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
1765[label="134.75.25.159;d;3pkt 3fpkt", shape=diamond, color=yellow];
1880[label="18.112.43.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
1952[label="93.158.150.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1955[label="201.158.249.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
1963[label="43.123.100.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1985[label="31.173.14.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2034[label="41.136.247.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
2244[label="99.20.144.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
2327[label="30.139.160.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
2423[label="88.186.179.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
2429[label="197.44.89.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2449[label="186.17.2.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
2610[label="46.88.11.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
2642[label="45.133.201.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2643[label="46.78.87.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
2806[label="55.66.133.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
2807[label="41.4.211.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2818[label="168.35.43.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2829[label="47.94.146.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
2872[label="36.78.83.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
3001[label="20.236.42.16;d;1pkt 1fpkt", shape=hexagon, color=black];
3022[label="163.234.102.228;s;89pkt 89fpkt", shape=hexagon, color=black];
3140[label="5.54.24.108;d;1pkt 1fpkt", shape=hexagon, color=black];
3153[label="206.102.178.253;d;1pkt 1fpkt", shape=hexagon, color=black];
3260[label="88.151.132.100;d;1pkt 1fpkt", shape=hexagon, color=black];
3270[label="92.94.79.96;d;1pkt 1fpkt", shape=hexagon, color=black];
3325[label="27.0.185.117;d;1pkt 1fpkt", shape=hexagon, color=black];
3345[label="217.186.21.69;d;1pkt 1fpkt", shape=hexagon, color=black];
3413[label="3.234.183.98;d;1pkt 1fpkt", shape=hexagon, color=black];
3417[label="99.5.233.188;d;1pkt 1fpkt", shape=hexagon, color=black];
3437[label="16.63.132.17;d;1pkt 1fpkt", shape=hexagon, color=black];
3540[label="25.56.215.15;d;1pkt 1fpkt", shape=hexagon, color=black];
3573[label="36.161.73.171;d;1pkt 1fpkt", shape=hexagon, color=black];
3577[label="30.130.242.251;d;1pkt 1fpkt", shape=hexagon, color=black];
3614[label="168.139.227.103;d;1pkt 1fpkt", shape=hexagon, color=black];
3714[label="27.4.238.217;d;1pkt 1fpkt", shape=hexagon, color=black];
3740[label="8.110.11.255;d;1pkt 1fpkt", shape=hexagon, color=black];
4008[label="31.173.14.255;d;1pkt 1fpkt", shape=hexagon, color=black];
4146[label="186.17.2.199;d;1pkt 1fpkt", shape=hexagon, color=black];
4204[label="30.139.160.97;d;1pkt 1fpkt", shape=hexagon, color=black];
4235[label="18.112.43.84;d;1pkt 1fpkt", shape=hexagon, color=black];
4282[label="28.155.67.253;d;1pkt 1fpkt", shape=hexagon, color=black];
4283[label="30.12.146.189;d;1pkt 1fpkt", shape=hexagon, color=black];
4291[label="197.44.89.90;d;1pkt 1fpkt", shape=hexagon, color=black];
4323[label="45.133.201.205;d;1pkt 1fpkt", shape=hexagon, color=black];
4324[label="46.78.87.104;d;1pkt 1fpkt", shape=hexagon, color=black];
4460[label="88.186.179.82;d;1pkt 1fpkt", shape=hexagon, color=black];
4482[label="168.35.43.98;d;1pkt 1fpkt", shape=hexagon, color=black];
5620[label="163.234.102.228;292pkt 292fpkt", shape=pentagon, color=darkviolet];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.102.228:15990, *:*}[46.7577%]&lt;BR/&gt;{163.234.102.228:8889, *:8000}[20.8191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (26.0695%)&lt;BR/&gt; 8889: (19.1176%)&lt;BR/&gt; 8000: (9.69251%)&lt;BR/&gt; 17788: (4.34492%)&lt;BR/&gt; 3246: (3.60963%)&gt;];
}
131--147[label="1;1pkt 1fpkt"];
131--252[label="1;1pkt 1fpkt"];
131--402[label="1;1pkt 1fpkt"];
131--434[label="1;1pkt 1fpkt"];
131--490[label="1;1pkt 1fpkt"];
131--510[label="0.666667;2pkt 2fpkt"];
131--526[label="1;1pkt 1fpkt"];
131--540[label="1;1pkt 1fpkt"];
131--550[label="1;1pkt 1fpkt"];
131--565[label="1;1pkt 1fpkt"];
131--569[label="1;1pkt 1fpkt"];
131--572[label="1;1pkt 1fpkt"];
131--577[label="1;1pkt 1fpkt"];
131--666[label="1;1pkt 1fpkt"];
131--790[label="1;1pkt 1fpkt"];
131--807[label="1;1pkt 1fpkt"];
131--808[label="1;1pkt 1fpkt"];
131--1013[label="1;1pkt 1fpkt"];
131--1062[label="1;1pkt 1fpkt"];
131--1291[label="1;1pkt 1fpkt"];
131--1422[label="1;1pkt 1fpkt"];
131--1496[label="1;1pkt 1fpkt"];
131--1499[label="1;1pkt 1fpkt"];
131--1501[label="1;1pkt 1fpkt"];
131--1503[label="1;1pkt 1fpkt"];
131--1506[label="1;1pkt 1fpkt"];
131--1522[label="1;1pkt 1fpkt"];
131--1523[label="1;1pkt 1fpkt"];
131--1652[label="1;1pkt 1fpkt"];
131--1709[label="1;1pkt 1fpkt"];
131--1717[label="1;1pkt 1fpkt"];
131--1732[label="1;1pkt 1fpkt"];
131--1765[label="1;3pkt 3fpkt"];
131--1880[label="1;1pkt 1fpkt"];
131--1952[label="1;1pkt 1fpkt"];
131--1955[label="1;1pkt 1fpkt"];
131--1963[label="1;1pkt 1fpkt"];
131--1985[label="1;1pkt 1fpkt"];
131--2034[label="1;1pkt 1fpkt"];
131--2244[label="1;1pkt 1fpkt"];
131--2327[label="1;1pkt 1fpkt"];
131--2423[label="1;1pkt 1fpkt"];
131--2429[label="1;1pkt 1fpkt"];
131--2449[label="1;1pkt 1fpkt"];
131--2610[label="1;1pkt 1fpkt"];
131--2642[label="1;1pkt 1fpkt"];
131--2643[label="1;1pkt 1fpkt"];
131--2806[label="1;1pkt 1fpkt"];
131--2807[label="1;1pkt 1fpkt"];
131--2818[label="1;1pkt 1fpkt"];
131--2829[label="1;1pkt 1fpkt"];
131--2872[label="1;1pkt 1fpkt"];
131--3001[label="1;1pkt 1fpkt"];
131--3022[label="1;89pkt 89fpkt"];
131--3140[label="1;1pkt 1fpkt"];
131--3153[label="1;1pkt 1fpkt"];
131--3260[label="1;1pkt 1fpkt"];
131--3270[label="1;1pkt 1fpkt"];
131--3325[label="1;1pkt 1fpkt"];
131--3345[label="1;1pkt 1fpkt"];
131--3413[label="1;1pkt 1fpkt"];
131--3417[label="1;1pkt 1fpkt"];
131--3437[label="1;1pkt 1fpkt"];
131--3540[label="1;1pkt 1fpkt"];
131--3573[label="1;1pkt 1fpkt"];
131--3577[label="1;1pkt 1fpkt"];
131--3614[label="1;1pkt 1fpkt"];
131--3714[label="1;1pkt 1fpkt"];
131--3740[label="1;1pkt 1fpkt"];
131--4008[label="1;1pkt 1fpkt"];
131--4146[label="1;1pkt 1fpkt"];
131--4204[label="1;1pkt 1fpkt"];
131--4235[label="1;1pkt 1fpkt"];
131--4282[label="1;1pkt 1fpkt"];
131--4283[label="1;1pkt 1fpkt"];
131--4291[label="1;1pkt 1fpkt"];
131--4323[label="1;1pkt 1fpkt"];
131--4324[label="1;1pkt 1fpkt"];
131--4460[label="1;1pkt 1fpkt"];
131--4482[label="1;1pkt 1fpkt"];
131--4710[label="0.00704225;2pkt 2fpkt"];
131--5620[label="1;284pkt 284fpkt"];
147--3022[label="1;1pkt 1fpkt"];
147--3437[label="1;1pkt 1fpkt"];
147--5620[label="1;1pkt 1fpkt"];
252--3022[label="1;1pkt 1fpkt"];
252--5620[label="1;1pkt 1fpkt"];
402--3022[label="1;1pkt 1fpkt"];
402--3260[label="1;1pkt 1fpkt"];
402--5620[label="1;1pkt 1fpkt"];
434--3022[label="1;1pkt 1fpkt"];
434--5620[label="1;1pkt 1fpkt"];
490--3022[label="1;1pkt 1fpkt"];
490--5620[label="1;1pkt 1fpkt"];
510--2956[label="0.333333;1pkt 1fpkt"];
510--3022[label="0.333333;1pkt 1fpkt"];
510--5620[label="0.666667;2pkt 2fpkt"];
526--3022[label="1;1pkt 1fpkt"];
526--3325[label="1;1pkt 1fpkt"];
526--5620[label="1;1pkt 1fpkt"];
540--3022[label="1;1pkt 1fpkt"];
540--5620[label="1;1pkt 1fpkt"];
550--3022[label="1;1pkt 1fpkt"];
550--5620[label="1;1pkt 1fpkt"];
565--3022[label="1;1pkt 1fpkt"];
565--3740[label="1;1pkt 1fpkt"];
565--5620[label="1;1pkt 1fpkt"];
569--3022[label="1;1pkt 1fpkt"];
569--3345[label="1;1pkt 1fpkt"];
569--5620[label="1;1pkt 1fpkt"];
572--3022[label="1;1pkt 1fpkt"];
572--3140[label="1;1pkt 1fpkt"];
572--5620[label="1;1pkt 1fpkt"];
577--3001[label="1;1pkt 1fpkt"];
577--3022[label="1;1pkt 1fpkt"];
577--5620[label="1;1pkt 1fpkt"];
666--3022[label="1;1pkt 1fpkt"];
666--3614[label="1;1pkt 1fpkt"];
666--5620[label="1;1pkt 1fpkt"];
790--3022[label="1;1pkt 1fpkt"];
790--5620[label="1;1pkt 1fpkt"];
807--3022[label="1;1pkt 1fpkt"];
807--5620[label="1;1pkt 1fpkt"];
808--3022[label="1;1pkt 1fpkt"];
808--3270[label="1;1pkt 1fpkt"];
808--5620[label="1;1pkt 1fpkt"];
1013--3022[label="1;1pkt 1fpkt"];
1013--3153[label="1;1pkt 1fpkt"];
1013--5620[label="1;1pkt 1fpkt"];
1062--3022[label="1;1pkt 1fpkt"];
1062--3577[label="1;1pkt 1fpkt"];
1062--5620[label="1;1pkt 1fpkt"];
1291--3022[label="1;1pkt 1fpkt"];
1291--3714[label="1;1pkt 1fpkt"];
1291--5620[label="1;1pkt 1fpkt"];
1422--3022[label="1;1pkt 1fpkt"];
1422--3573[label="1;1pkt 1fpkt"];
1422--5620[label="1;1pkt 1fpkt"];
1496--3413[label="1;1pkt 1fpkt"];
1496--5620[label="1;1pkt 1fpkt"];
1499--4282[label="1;1pkt 1fpkt"];
1499--5620[label="1;1pkt 1fpkt"];
1501--4283[label="1;1pkt 1fpkt"];
1501--5620[label="1;1pkt 1fpkt"];
1503--5620[label="1;1pkt 1fpkt"];
1506--3417[label="1;1pkt 1fpkt"];
1506--5620[label="1;1pkt 1fpkt"];
1522--5620[label="1;1pkt 1fpkt"];
1523--5620[label="1;1pkt 1fpkt"];
1652--3022[label="1;1pkt 1fpkt"];
1652--3540[label="1;1pkt 1fpkt"];
1652--5620[label="1;1pkt 1fpkt"];
1709--3022[label="1;1pkt 1fpkt"];
1709--5620[label="1;1pkt 1fpkt"];
1717--5620[label="1;1pkt 1fpkt"];
1732--5620[label="1;1pkt 1fpkt"];
1765--5620[label="1;3pkt 3fpkt"];
1880--3022[label="1;1pkt 1fpkt"];
1880--4235[label="1;1pkt 1fpkt"];
1880--5620[label="1;1pkt 1fpkt"];
1952--5620[label="1;1pkt 1fpkt"];
1955--5620[label="1;1pkt 1fpkt"];
1963--5620[label="1;1pkt 1fpkt"];
1985--4008[label="1;1pkt 1fpkt"];
1985--5620[label="1;1pkt 1fpkt"];
2034--5620[label="1;1pkt 1fpkt"];
2244--5620[label="1;1pkt 1fpkt"];
2327--3022[label="1;1pkt 1fpkt"];
2327--4204[label="1;1pkt 1fpkt"];
2327--5620[label="1;1pkt 1fpkt"];
2423--4460[label="1;1pkt 1fpkt"];
2423--5620[label="1;1pkt 1fpkt"];
2429--4291[label="1;1pkt 1fpkt"];
2429--5620[label="1;1pkt 1fpkt"];
2449--4146[label="1;1pkt 1fpkt"];
2449--5620[label="1;1pkt 1fpkt"];
2610--5620[label="1;1pkt 1fpkt"];
2642--4323[label="1;1pkt 1fpkt"];
2642--5620[label="1;1pkt 1fpkt"];
2643--4324[label="1;1pkt 1fpkt"];
2643--5620[label="1;1pkt 1fpkt"];
2806--5620[label="1;1pkt 1fpkt"];
2807--5620[label="1;1pkt 1fpkt"];
2818--4482[label="1;1pkt 1fpkt"];
2818--5620[label="1;1pkt 1fpkt"];
2829--5620[label="1;1pkt 1fpkt"];
2872--5620[label="1;1pkt 1fpkt"];
3001--3022[label="1;1pkt 1fpkt"];
3001--5620[label="1;1pkt 1fpkt"];
3022--3140[label="1;1pkt 1fpkt"];
3022--3153[label="1;1pkt 1fpkt"];
3022--3260[label="1;1pkt 1fpkt"];
3022--3270[label="1;1pkt 1fpkt"];
3022--3325[label="1;1pkt 1fpkt"];
3022--3345[label="1;1pkt 1fpkt"];
3022--3437[label="1;1pkt 1fpkt"];
3022--3540[label="1;1pkt 1fpkt"];
3022--3573[label="1;1pkt 1fpkt"];
3022--3577[label="1;1pkt 1fpkt"];
3022--3614[label="1;1pkt 1fpkt"];
3022--3714[label="1;1pkt 1fpkt"];
3022--3740[label="1;1pkt 1fpkt"];
3022--4204[label="1;1pkt 1fpkt"];
3022--4235[label="1;1pkt 1fpkt"];
3022--4710[label="0.0224719;2pkt 2fpkt"];
3022--5620[label="1;89pkt 89fpkt"];
3140--5620[label="1;1pkt 1fpkt"];
3153--5620[label="1;1pkt 1fpkt"];
3260--5620[label="1;1pkt 1fpkt"];
3270--5620[label="1;1pkt 1fpkt"];
3325--5620[label="1;1pkt 1fpkt"];
3345--5620[label="1;1pkt 1fpkt"];
3413--5620[label="1;1pkt 1fpkt"];
3417--5620[label="1;1pkt 1fpkt"];
3437--5620[label="1;1pkt 1fpkt"];
3540--5620[label="1;1pkt 1fpkt"];
3573--5620[label="1;1pkt 1fpkt"];
3577--5620[label="1;1pkt 1fpkt"];
3614--5620[label="1;1pkt 1fpkt"];
3714--5620[label="1;1pkt 1fpkt"];
3740--5620[label="1;1pkt 1fpkt"];
4008--5620[label="1;1pkt 1fpkt"];
4146--5620[label="1;1pkt 1fpkt"];
4204--5620[label="1;1pkt 1fpkt"];
4235--5620[label="1;1pkt 1fpkt"];
4282--5620[label="1;1pkt 1fpkt"];
4283--5620[label="1;1pkt 1fpkt"];
4291--5620[label="1;1pkt 1fpkt"];
4323--5620[label="1;1pkt 1fpkt"];
4324--5620[label="1;1pkt 1fpkt"];
4460--5620[label="1;1pkt 1fpkt"];
4482--5620[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="163.234.102.228" src_port="15990"/>
      <filter dst_port="8000" src_ip="163.234.102.228" src_port="8889"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1861[label="208.108.254.167;s;333pkt 333fpkt", shape=diamond, color=yellow];
2038[label="196.85.143.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.254.167:*, 217.173.125.218:53}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.8623%)&lt;BR/&gt; 995: (2.69461%)&lt;BR/&gt; 123: (2.09581%)&lt;BR/&gt; 0: (0.898204%)&lt;BR/&gt; 25: (0.598802%)&gt;];
}
1861--2038[label="1;1pkt 1fpkt"];
1861--2136[label="0.243243;81pkt 81fpkt"];
1861--3019[label="0.003003;1pkt 1fpkt"];
1861--4240[label="0.162162;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="217.173.125.218" dst_port="53" src_ip="208.108.254.167"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.24.251.103"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322738" usec="0"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.14.150.110"/>
      <from sec="1262322008" usec="0"/>
      <to sec="1262322822" usec="0"/>
    </slice>
    <from sec="1262322008" usec="0"/>
    <to sec="1262322822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.140.82.27"/>
      <from sec="1262322455" usec="0"/>
      <to sec="1262322559" usec="0"/>
    </slice>
    <from sec="1262322455" usec="0"/>
    <to sec="1262322559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
2288[label="37.72.228.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
2289[label="140.14.146.121;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.146.121:80, 37.72.228.177:59280}[50%]&lt;BR/&gt;{140.14.146.121:80, 37.72.228.177:59282}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59282: (25%)&lt;BR/&gt; 59280: (25%)&gt;];
}
2288--2289[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="37.72.228.177" dst_port="59282" src_ip="140.14.146.121" src_port="80"/>
      <filter dst_ip="37.72.228.177" dst_port="59280" src_ip="140.14.146.121" src_port="80"/>
    </slice>
    <from sec="1262322544" usec="0"/>
    <to sec="1262322587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.25.212.66"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322826" usec="0"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1084[label="156.225.201.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
2443[label="20.37.126.171;d;2pkt 2fpkt", shape=diamond, color=yellow];
4028[label="156.225.201.50;s;2pkt 2fpkt", shape=hexagon, color=black];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.201.50:21, 20.37.126.171:41738}[50%]&lt;BR/&gt;{156.225.201.50:13956, 20.37.126.171:36024}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41738: (25%)&lt;BR/&gt; 36024: (25%)&lt;BR/&gt; 13956: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
1084--2443[label="1;2pkt 2fpkt"];
1084--4028[label="1;2pkt 2fpkt"];
2443--4028[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.126.171" dst_port="36024" src_ip="156.225.201.50" src_port="13956"/>
      <filter dst_ip="20.37.126.171" dst_port="41738" src_ip="156.225.201.50" src_port="21"/>
    </slice>
    <from sec="1262322473" usec="0"/>
    <to sec="1262322510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="140.14.169.8"/>
      <from sec="1262322003" usec="0"/>
      <to sec="1262322823" usec="0"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
310[label="208.108.243.64;s;3267pkt 3267fpkt", shape=diamond, color=yellow];
828[label="20.37.125.53;d;86pkt 86fpkt", shape=diamond, color=yellow];
844[label="136.25.232.226;s;1726pkt 1726fpkt", shape=diamond, color=yellow];
849[label="208.108.244.97;s;2144pkt 2144fpkt", shape=diamond, color=yellow];
1149[label="20.37.120.9;d;72pkt 72fpkt", shape=diamond, color=yellow];
1821[label="141.14.174.171;s;67pkt 67fpkt", shape=diamond, color=yellow];
1897[label="20.37.120.52;d;85pkt 85fpkt", shape=diamond, color=yellow];
1908[label="20.37.125.119;d;83pkt 83fpkt", shape=diamond, color=yellow];
2074[label="20.37.120.54;d;111pkt 111fpkt", shape=diamond, color=yellow];
2127[label="20.37.120.74;d;74pkt 74fpkt", shape=diamond, color=yellow];
2143[label="20.37.125.96;d;71pkt 71fpkt", shape=diamond, color=yellow];
2147[label="20.37.125.45;d;83pkt 83fpkt", shape=diamond, color=yellow];
2157[label="20.37.125.118;d;75pkt 75fpkt", shape=diamond, color=yellow];
2160[label="20.37.125.41;d;84pkt 84fpkt", shape=diamond, color=yellow];
2161[label="20.37.125.42;d;84pkt 84fpkt", shape=diamond, color=yellow];
2164[label="20.37.125.35;d;79pkt 79fpkt", shape=diamond, color=yellow];
2166[label="20.37.125.54;d;76pkt 76fpkt", shape=diamond, color=yellow];
2168[label="20.37.120.4;d;67pkt 67fpkt", shape=diamond, color=yellow];
2170[label="20.37.125.70;d;89pkt 89fpkt", shape=diamond, color=yellow];
2177[label="20.37.120.40;d;70pkt 70fpkt", shape=diamond, color=yellow];
2180[label="20.37.125.52;d;68pkt 68fpkt", shape=diamond, color=yellow];
2183[label="20.37.120.65;d;62pkt 62fpkt", shape=diamond, color=yellow];
2301[label="20.37.125.40;d;65pkt 65fpkt", shape=diamond, color=yellow];
2350[label="20.37.125.76;d;66pkt 66fpkt", shape=diamond, color=yellow];
2355[label="20.37.120.64;d;63pkt 63fpkt", shape=diamond, color=yellow];
2367[label="20.37.120.69;d;69pkt 69fpkt", shape=diamond, color=yellow];
2376[label="20.37.120.81;d;72pkt 72fpkt", shape=diamond, color=yellow];
2377[label="20.37.125.117;d;76pkt 76fpkt", shape=diamond, color=yellow];
2378[label="20.37.120.72;d;68pkt 68fpkt", shape=diamond, color=yellow];
2381[label="20.37.120.82;d;66pkt 66fpkt", shape=diamond, color=yellow];
2407[label="20.37.120.75;d;60pkt 60fpkt", shape=diamond, color=yellow];
2415[label="20.37.120.80;d;81pkt 81fpkt", shape=diamond, color=yellow];
2416[label="20.37.120.41;d;86pkt 86fpkt", shape=diamond, color=yellow];
2544[label="20.37.120.10;d;57pkt 57fpkt", shape=diamond, color=yellow];
2576[label="20.37.120.55;d;70pkt 70fpkt", shape=diamond, color=yellow];
2577[label="20.37.125.32;d;61pkt 61fpkt", shape=diamond, color=yellow];
2582[label="20.37.120.42;d;56pkt 56fpkt", shape=diamond, color=yellow];
2596[label="20.37.125.71;d;49pkt 49fpkt", shape=diamond, color=yellow];
2784[label="20.37.120.5;d;52pkt 52fpkt", shape=diamond, color=yellow];
2796[label="20.37.125.97;d;55pkt 55fpkt", shape=diamond, color=yellow];
2847[label="92.59.227.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
3049[label="208.108.243.64;s;2173pkt 2173fpkt", shape=hexagon, color=black];
3287[label="136.25.232.226;s;660pkt 660fpkt", shape=hexagon, color=black];
3869[label="20.37.120.54;d;73pkt 73fpkt", shape=hexagon, color=black];
3898[label="20.37.125.73;d;84pkt 84fpkt", shape=hexagon, color=black];
3942[label="20.37.125.45;d;83pkt 83fpkt", shape=hexagon, color=black];
3951[label="20.37.125.34;d;60pkt 60fpkt", shape=hexagon, color=black];
4053[label="20.37.125.40;d;60pkt 60fpkt", shape=hexagon, color=black];
4103[label="20.37.120.82;d;53pkt 53fpkt", shape=hexagon, color=black];
4115[label="20.37.125.70;d;73pkt 73fpkt", shape=hexagon, color=black];
4185[label="141.14.174.171;s;61pkt 61fpkt", shape=hexagon, color=black];
4214[label="20.37.120.10;d;51pkt 51fpkt", shape=hexagon, color=black];
4232[label="20.37.120.74;d;74pkt 74fpkt", shape=hexagon, color=black];
4236[label="20.37.125.98;d;54pkt 54fpkt", shape=hexagon, color=black];
4253[label="20.37.120.42;d;54pkt 54fpkt", shape=hexagon, color=black];
4256[label="20.37.125.42;d;75pkt 75fpkt", shape=hexagon, color=black];
4268[label="20.37.120.75;d;60pkt 60fpkt", shape=hexagon, color=black];
4425[label="20.37.120.55;d;70pkt 70fpkt", shape=hexagon, color=black];
4434[label="20.37.125.41;d;84pkt 84fpkt", shape=hexagon, color=black];
4438[label="20.37.125.54;d;76pkt 76fpkt", shape=hexagon, color=black];
5129[label="208.108.243.64;3529pkt 3529fpkt", shape=pentagon, color=darkviolet];
5767[label="208.108.243.64;3529pkt 3529fpkt", shape=invtriangle, color=brown];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.243.64:80, *:*}[45.6924%]&lt;BR/&gt;{208.108.244.97:53, *:*}[27.7497%]&lt;BR/&gt;{136.25.232.226:20129, *:*}[22.3215%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5993%)&lt;BR/&gt; 20129: (9.57421%)&lt;BR/&gt; 53: (5.41475%)&lt;BR/&gt; 25: (0.261617%)&lt;BR/&gt; 443: (0.0432028%)&gt;];
}
310--378[label="0.306604;65pkt 65fpkt"];
310--553[label="0.122642;13pkt 13fpkt"];
310--828[label="0.825581;71pkt 71fpkt"];
310--1149[label="0.902778;65pkt 65fpkt"];
310--1642[label="0.463768;64pkt 64fpkt"];
310--1683[label="0.888889;32pkt 32fpkt"];
310--1856[label="0.761905;64pkt 64fpkt"];
310--1897[label="0.894118;76pkt 76fpkt"];
310--1908[label="0.975904;81pkt 81fpkt"];
310--1924[label="0.757895;72pkt 72fpkt"];
310--2074[label="0.513514;57pkt 57fpkt"];
310--2127[label="0.972973;72pkt 72fpkt"];
310--2143[label="1;71pkt 71fpkt"];
310--2147[label="0.915663;76pkt 76fpkt"];
310--2150[label="0.822785;65pkt 65fpkt"];
310--2157[label="0.973333;73pkt 73fpkt"];
310--2160[label="0.964286;81pkt 81fpkt"];
310--2161[label="0.952381;80pkt 80fpkt"];
310--2163[label="0.666667;58pkt 58fpkt"];
310--2164[label="0.974684;77pkt 77fpkt"];
310--2166[label="0.960526;73pkt 73fpkt"];
310--2168[label="0.955224;64pkt 64fpkt"];
310--2170[label="0.865169;77pkt 77fpkt"];
310--2177[label="0.971429;68pkt 68fpkt"];
310--2180[label="0.970588;66pkt 66fpkt"];
310--2183[label="0.919355;57pkt 57fpkt"];
310--2296[label="0.927536;64pkt 64fpkt"];
310--2301[label="0.953846;62pkt 62fpkt"];
310--2340[label="0.898305;53pkt 53fpkt"];
310--2350[label="0.924242;61pkt 61fpkt"];
310--2355[label="0.936508;59pkt 59fpkt"];
310--2367[label="0.797101;55pkt 55fpkt"];
310--2376[label="0.958333;69pkt 69fpkt"];
310--2377[label="0.802632;61pkt 61fpkt"];
310--2378[label="0.970588;66pkt 66fpkt"];
310--2381[label="0.969697;64pkt 64fpkt"];
310--2403[label="0.983871;61pkt 61fpkt"];
310--2407[label="0.966667;58pkt 58fpkt"];
310--2415[label="0.864198;70pkt 70fpkt"];
310--2416[label="0.976744;84pkt 84fpkt"];
310--2544[label="1;57pkt 57fpkt"];
310--2563[label="0.966667;58pkt 58fpkt"];
310--2568[label="0.820896;55pkt 55fpkt"];
310--2576[label="0.957143;67pkt 67fpkt"];
310--2577[label="0.95082;58pkt 58fpkt"];
310--2582[label="0.928571;52pkt 52fpkt"];
310--2596[label="1;49pkt 49fpkt"];
310--2638[label="0.147059;10pkt 10fpkt"];
310--2768[label="0.833333;50pkt 50fpkt"];
310--2784[label="0.961538;50pkt 50fpkt"];
310--2796[label="0.890909;49pkt 49fpkt"];
310--2843[label="0.909091;10pkt 10fpkt"];
310--2996[label="0.0978261;9pkt 9fpkt"];
310--3049[label="1;2173pkt 2173fpkt"];
310--3488[label="0.787234;37pkt 37fpkt"];
310--3869[label="0.465753;34pkt 34fpkt"];
310--3898[label="0.761905;64pkt 64fpkt"];
310--3942[label="0.915663;76pkt 76fpkt"];
310--3951[label="0.616667;37pkt 37fpkt"];
310--4053[label="0.95;57pkt 57fpkt"];
310--4103[label="1;53pkt 53fpkt"];
310--4115[label="0.876712;64pkt 64fpkt"];
310--4214[label="1;51pkt 51fpkt"];
310--4232[label="0.972973;72pkt 72fpkt"];
310--4233[label="0.463768;64pkt 64fpkt"];
310--4236[label="0.962963;52pkt 52fpkt"];
310--4253[label="0.925926;50pkt 50fpkt"];
310--4256[label="0.946667;71pkt 71fpkt"];
310--4268[label="0.966667;58pkt 58fpkt"];
310--4320[label="0.147059;10pkt 10fpkt"];
310--4425[label="0.957143;67pkt 67fpkt"];
310--4434[label="0.964286;81pkt 81fpkt"];
310--4438[label="0.960526;73pkt 73fpkt"];
310--4498[label="0.909091;10pkt 10fpkt"];
310--4784[label="0.000306091;1pkt 1fpkt"];
310--4796[label="0.0511172;167pkt 167fpkt"];
310--4846[label="0.000306091;1pkt 1fpkt"];
310--4857[label="0.0511172;167pkt 167fpkt"];
310--4890[label="0.000306091;1pkt 1fpkt"];
310--5129[label="1;3267pkt 3267fpkt"];
310--5767[label="1;3267pkt 3267fpkt"];
828--845[label="0.0232558;2pkt 2fpkt"];
828--855[label="0.0232558;2pkt 2fpkt"];
828--1324[label="0.333333;1pkt 1fpkt"];
828--3049[label="0.523256;45pkt 45fpkt"];
828--3294[label="0.0253165;2pkt 2fpkt"];
828--3488[label="1;47pkt 47fpkt"];
828--3537[label="0.333333;1pkt 1fpkt"];
828--3645[label="0.0116279;1pkt 1fpkt"];
828--3878[label="0.0232558;2pkt 2fpkt"];
828--4585[label="0.0116279;1pkt 1fpkt"];
828--4796[label="0.0465116;4pkt 4fpkt"];
828--4857[label="0.0465116;4pkt 4fpkt"];
828--5129[label="0.825581;71pkt 71fpkt"];
828--5767[label="0.825581;71pkt 71fpkt"];
844--2796[label="0.0181818;1pkt 1fpkt"];
844--3287[label="1;660pkt 660fpkt"];
849--859[label="0.00381679;5pkt 5fpkt"];
849--1382[label="0.08;2pkt 2fpkt"];
849--1932[label="0.015873;1pkt 1fpkt"];
849--2296[label="0.0144928;1pkt 1fpkt"];
849--2301[label="0.0153846;1pkt 1fpkt"];
849--2611[label="0.00303951;2pkt 2fpkt"];
849--2762[label="0.0615711;29pkt 29fpkt"];
849--3019[label="0.00131752;1pkt 1fpkt"];
849--3195[label="0.0013986;1pkt 1fpkt"];
849--3364[label="0.0833333;2pkt 2fpkt"];
849--3882[label="1;1883pkt 1883fpkt"];
849--4053[label="0.0166667;1pkt 1fpkt"];
849--4783[label="0.00139925;3pkt 3fpkt"];
849--4795[label="0.051306;110pkt 110fpkt"];
849--4845[label="0.00139925;3pkt 3fpkt"];
849--4856[label="0.051306;110pkt 110fpkt"];
849--4889[label="0.00139925;3pkt 3fpkt"];
1149--3049[label="0.638889;46pkt 46fpkt"];
1149--3110[label="0.0465116;2pkt 2fpkt"];
1149--4784[label="0.0138889;1pkt 1fpkt"];
1149--4796[label="0.0416667;3pkt 3fpkt"];
1149--4846[label="0.0138889;1pkt 1fpkt"];
1149--4857[label="0.0416667;3pkt 3fpkt"];
1149--4890[label="0.0138889;1pkt 1fpkt"];
1149--5129[label="0.902778;65pkt 65fpkt"];
1149--5767[label="0.902778;65pkt 65fpkt"];
1821--2367[label="0.0746269;5pkt 5fpkt"];
1821--2847[label="1;1pkt 1fpkt"];
1821--4185[label="1;61pkt 61fpkt"];
1897--3049[label="0.635294;54pkt 54fpkt"];
1897--3878[label="0.0117647;1pkt 1fpkt"];
1897--4796[label="0.0588235;5pkt 5fpkt"];
1897--4857[label="0.0588235;5pkt 5fpkt"];
1897--5129[label="0.894118;76pkt 76fpkt"];
1897--5767[label="0.894118;76pkt 76fpkt"];
1908--3049[label="0.650602;54pkt 54fpkt"];
1908--4796[label="0.0843373;7pkt 7fpkt"];
1908--4857[label="0.0843373;7pkt 7fpkt"];
1908--5129[label="0.975904;81pkt 81fpkt"];
1908--5767[label="0.975904;81pkt 81fpkt"];
2074--3049[label="0.306306;34pkt 34fpkt"];
2074--3066[label="0.00900901;1pkt 1fpkt"];
2074--3294[label="0.0379747;3pkt 3fpkt"];
2074--3869[label="1;73pkt 73fpkt"];
2074--3878[label="0.036036;4pkt 4fpkt"];
2074--4796[label="0.036036;4pkt 4fpkt"];
2074--4857[label="0.036036;4pkt 4fpkt"];
2074--5129[label="0.513514;57pkt 57fpkt"];
2074--5767[label="0.513514;57pkt 57fpkt"];
2127--3049[label="0.662162;49pkt 49fpkt"];
2127--4232[label="1;74pkt 74fpkt"];
2127--4796[label="0.027027;2pkt 2fpkt"];
2127--4857[label="0.027027;2pkt 2fpkt"];
2127--5129[label="0.972973;72pkt 72fpkt"];
2127--5767[label="0.972973;72pkt 72fpkt"];
2143--3049[label="0.704225;50pkt 50fpkt"];
2143--4796[label="0.0704225;5pkt 5fpkt"];
2143--4857[label="0.0704225;5pkt 5fpkt"];
2143--5129[label="1;71pkt 71fpkt"];
2143--5767[label="1;71pkt 71fpkt"];
2147--3049[label="0.60241;50pkt 50fpkt"];
2147--3066[label="0.0120482;1pkt 1fpkt"];
2147--3942[label="1;83pkt 83fpkt"];
2147--4796[label="0.0481928;4pkt 4fpkt"];
2147--4857[label="0.0481928;4pkt 4fpkt"];
2147--5129[label="0.915663;76pkt 76fpkt"];
2147--5141[label="0.0120482;1pkt 1fpkt"];
2147--5767[label="0.915663;76pkt 76fpkt"];
2157--3049[label="0.666667;50pkt 50fpkt"];
2157--3066[label="0.0133333;1pkt 1fpkt"];
2157--4796[label="0.0266667;2pkt 2fpkt"];
2157--4857[label="0.0266667;2pkt 2fpkt"];
2157--5129[label="0.973333;73pkt 73fpkt"];
2157--5767[label="0.973333;73pkt 73fpkt"];
2160--3049[label="0.690476;58pkt 58fpkt"];
2160--3878[label="0.0238095;2pkt 2fpkt"];
2160--4434[label="1;84pkt 84fpkt"];
2160--4796[label="0.0833333;7pkt 7fpkt"];
2160--4857[label="0.0833333;7pkt 7fpkt"];
2160--5129[label="0.964286;81pkt 81fpkt"];
2160--5767[label="0.964286;81pkt 81fpkt"];
2161--3049[label="0.666667;56pkt 56fpkt"];
2161--3878[label="0.0119048;1pkt 1fpkt"];
2161--4256[label="1;75pkt 75fpkt"];
2161--4796[label="0.047619;4pkt 4fpkt"];
2161--4857[label="0.047619;4pkt 4fpkt"];
2161--5129[label="0.952381;80pkt 80fpkt"];
2161--5767[label="0.952381;80pkt 80fpkt"];
2164--3049[label="0.721519;57pkt 57fpkt"];
2164--3066[label="0.0126582;1pkt 1fpkt"];
2164--4796[label="0.0379747;3pkt 3fpkt"];
2164--4857[label="0.0379747;3pkt 3fpkt"];
2164--5129[label="0.974684;77pkt 77fpkt"];
2164--5767[label="0.974684;77pkt 77fpkt"];
2166--2957[label="0.0131579;1pkt 1fpkt"];
2166--3049[label="0.631579;48pkt 48fpkt"];
2166--3066[label="0.0131579;1pkt 1fpkt"];
2166--4438[label="1;76pkt 76fpkt"];
2166--4796[label="0.0394737;3pkt 3fpkt"];
2166--4857[label="0.0394737;3pkt 3fpkt"];
2166--5129[label="0.960526;73pkt 73fpkt"];
2166--5141[label="0.0131579;1pkt 1fpkt"];
2166--5767[label="0.960526;73pkt 73fpkt"];
2168--3049[label="0.731343;49pkt 49fpkt"];
2168--4796[label="0.0298507;2pkt 2fpkt"];
2168--4857[label="0.0298507;2pkt 2fpkt"];
2168--5129[label="0.955224;64pkt 64fpkt"];
2168--5141[label="0.0149254;1pkt 1fpkt"];
2168--5767[label="0.955224;64pkt 64fpkt"];
2170--3049[label="0.617978;55pkt 55fpkt"];
2170--3221[label="0.011236;1pkt 1fpkt"];
2170--4115[label="1;73pkt 73fpkt"];
2170--4631[label="0.011236;1pkt 1fpkt"];
2170--4796[label="0.0449438;4pkt 4fpkt"];
2170--4857[label="0.0449438;4pkt 4fpkt"];
2170--5129[label="0.865169;77pkt 77fpkt"];
2170--5767[label="0.865169;77pkt 77fpkt"];
2177--2373[label="0.0142857;1pkt 1fpkt"];
2177--3049[label="0.728571;51pkt 51fpkt"];
2177--4796[label="0.1;7pkt 7fpkt"];
2177--4857[label="0.1;7pkt 7fpkt"];
2177--5129[label="0.971429;68pkt 68fpkt"];
2177--5767[label="0.971429;68pkt 68fpkt"];
2180--3049[label="0.735294;50pkt 50fpkt"];
2180--4796[label="0.102941;7pkt 7fpkt"];
2180--4857[label="0.102941;7pkt 7fpkt"];
2180--5129[label="0.970588;66pkt 66fpkt"];
2180--5767[label="0.970588;66pkt 66fpkt"];
2183--3049[label="0.83871;52pkt 52fpkt"];
2183--3066[label="0.016129;1pkt 1fpkt"];
2183--4796[label="0.0967742;6pkt 6fpkt"];
2183--4857[label="0.0967742;6pkt 6fpkt"];
2183--5129[label="0.919355;57pkt 57fpkt"];
2183--5767[label="0.919355;57pkt 57fpkt"];
2301--3049[label="0.692308;45pkt 45fpkt"];
2301--3882[label="0.0153846;1pkt 1fpkt"];
2301--4053[label="1;60pkt 60fpkt"];
2301--4795[label="0.0153846;1pkt 1fpkt"];
2301--4796[label="0.0307692;2pkt 2fpkt"];
2301--4856[label="0.0153846;1pkt 1fpkt"];
2301--4857[label="0.0307692;2pkt 2fpkt"];
2301--5129[label="0.953846;62pkt 62fpkt"];
2301--5767[label="0.953846;62pkt 62fpkt"];
2350--3049[label="0.606061;40pkt 40fpkt"];
2350--3294[label="0.0151515;1pkt 1fpkt"];
2350--4796[label="0.0454545;3pkt 3fpkt"];
2350--4857[label="0.0454545;3pkt 3fpkt"];
2350--5129[label="0.924242;61pkt 61fpkt"];
2350--5767[label="0.924242;61pkt 61fpkt"];
2355--3049[label="0.714286;45pkt 45fpkt"];
2355--4796[label="0.047619;3pkt 3fpkt"];
2355--4857[label="0.047619;3pkt 3fpkt"];
2355--5129[label="0.936508;59pkt 59fpkt"];
2355--5767[label="0.936508;59pkt 59fpkt"];
2367--3049[label="0.521739;36pkt 36fpkt"];
2367--4185[label="0.0819672;5pkt 5fpkt"];
2367--4796[label="0.0434783;3pkt 3fpkt"];
2367--4857[label="0.0434783;3pkt 3fpkt"];
2367--5129[label="0.797101;55pkt 55fpkt"];
2367--5767[label="0.797101;55pkt 55fpkt"];
2376--2549[label="0.0138889;1pkt 1fpkt"];
2376--3049[label="0.694444;50pkt 50fpkt"];
2376--3878[label="0.0138889;1pkt 1fpkt"];
2376--4796[label="0.0277778;2pkt 2fpkt"];
2376--4857[label="0.0277778;2pkt 2fpkt"];
2376--5129[label="0.958333;69pkt 69fpkt"];
2376--5349[label="0.0138889;1pkt 1fpkt"];
2376--5767[label="0.958333;69pkt 69fpkt"];
2377--3049[label="0.5;38pkt 38fpkt"];
2377--3878[label="0.0131579;1pkt 1fpkt"];
2377--4796[label="0.0526316;4pkt 4fpkt"];
2377--4857[label="0.0526316;4pkt 4fpkt"];
2377--5129[label="0.802632;61pkt 61fpkt"];
2377--5767[label="0.802632;61pkt 61fpkt"];
2378--3049[label="0.588235;40pkt 40fpkt"];
2378--4796[label="0.0294118;2pkt 2fpkt"];
2378--4857[label="0.0294118;2pkt 2fpkt"];
2378--5129[label="0.970588;66pkt 66fpkt"];
2378--5767[label="0.970588;66pkt 66fpkt"];
2381--3049[label="0.590909;39pkt 39fpkt"];
2381--4103[label="1;53pkt 53fpkt"];
2381--4796[label="0.0757576;5pkt 5fpkt"];
2381--4857[label="0.0757576;5pkt 5fpkt"];
2381--5129[label="0.969697;64pkt 64fpkt"];
2381--5767[label="0.969697;64pkt 64fpkt"];
2407--3049[label="0.716667;43pkt 43fpkt"];
2407--3066[label="0.0166667;1pkt 1fpkt"];
2407--4268[label="1;60pkt 60fpkt"];
2407--4784[label="0.0166667;1pkt 1fpkt"];
2407--4796[label="0.0333333;2pkt 2fpkt"];
2407--4846[label="0.0166667;1pkt 1fpkt"];
2407--4857[label="0.0333333;2pkt 2fpkt"];
2407--4890[label="0.0166667;1pkt 1fpkt"];
2407--5129[label="0.966667;58pkt 58fpkt"];
2407--5767[label="0.966667;58pkt 58fpkt"];
2415--3021[label="0.0246914;2pkt 2fpkt"];
2415--3049[label="0.54321;44pkt 44fpkt"];
2415--3878[label="0.0493827;4pkt 4fpkt"];
2415--4796[label="0.0740741;6pkt 6fpkt"];
2415--4857[label="0.0740741;6pkt 6fpkt"];
2415--5129[label="0.864198;70pkt 70fpkt"];
2415--5767[label="0.864198;70pkt 70fpkt"];
2416--2957[label="0.0116279;1pkt 1fpkt"];
2416--3049[label="0.55814;48pkt 48fpkt"];
2416--4795[label="0.0116279;1pkt 1fpkt"];
2416--4796[label="0.0232558;2pkt 2fpkt"];
2416--4856[label="0.0116279;1pkt 1fpkt"];
2416--4857[label="0.0232558;2pkt 2fpkt"];
2416--5129[label="0.976744;84pkt 84fpkt"];
2416--5767[label="0.976744;84pkt 84fpkt"];
2544--3049[label="0.631579;36pkt 36fpkt"];
2544--4214[label="1;51pkt 51fpkt"];
2544--4796[label="0.0701754;4pkt 4fpkt"];
2544--4857[label="0.0701754;4pkt 4fpkt"];
2544--5129[label="1;57pkt 57fpkt"];
2544--5767[label="1;57pkt 57fpkt"];
2576--3049[label="0.614286;43pkt 43fpkt"];
2576--4425[label="1;70pkt 70fpkt"];
2576--4796[label="0.0571429;4pkt 4fpkt"];
2576--4857[label="0.0571429;4pkt 4fpkt"];
2576--5129[label="0.957143;67pkt 67fpkt"];
2576--5767[label="0.957143;67pkt 67fpkt"];
2577--3049[label="0.540984;33pkt 33fpkt"];
2577--4796[label="0.0491803;3pkt 3fpkt"];
2577--4857[label="0.0491803;3pkt 3fpkt"];
2577--5129[label="0.95082;58pkt 58fpkt"];
2577--5767[label="0.95082;58pkt 58fpkt"];
2582--2957[label="0.0357143;2pkt 2fpkt"];
2582--3049[label="0.714286;40pkt 40fpkt"];
2582--4253[label="1;54pkt 54fpkt"];
2582--4795[label="0.0178571;1pkt 1fpkt"];
2582--4796[label="0.0357143;2pkt 2fpkt"];
2582--4856[label="0.0178571;1pkt 1fpkt"];
2582--4857[label="0.0357143;2pkt 2fpkt"];
2582--5129[label="0.928571;52pkt 52fpkt"];
2582--5326[label="0.0714286;1pkt 1fpkt"];
2582--5767[label="0.928571;52pkt 52fpkt"];
2596--3049[label="0.734694;36pkt 36fpkt"];
2596--4796[label="0.0816327;4pkt 4fpkt"];
2596--4857[label="0.0816327;4pkt 4fpkt"];
2596--5129[label="1;49pkt 49fpkt"];
2596--5767[label="1;49pkt 49fpkt"];
2784--3049[label="0.692308;36pkt 36fpkt"];
2784--4796[label="0.0769231;4pkt 4fpkt"];
2784--4857[label="0.0769231;4pkt 4fpkt"];
2784--5129[label="0.961538;50pkt 50fpkt"];
2784--5767[label="0.961538;50pkt 50fpkt"];
2796--3049[label="0.436364;24pkt 24fpkt"];
2796--4796[label="0.0545455;3pkt 3fpkt"];
2796--4857[label="0.0545455;3pkt 3fpkt"];
2796--5129[label="0.890909;49pkt 49fpkt"];
2796--5767[label="0.890909;49pkt 49fpkt"];
2847--4185[label="1;1pkt 1fpkt"];
3049--3488[label="0.787234;37pkt 37fpkt"];
3049--3869[label="0.465753;34pkt 34fpkt"];
3049--3898[label="0.607143;51pkt 51fpkt"];
3049--3942[label="0.60241;50pkt 50fpkt"];
3049--3951[label="0.616667;37pkt 37fpkt"];
3049--4053[label="0.75;45pkt 45fpkt"];
3049--4103[label="0.735849;39pkt 39fpkt"];
3049--4115[label="0.753425;55pkt 55fpkt"];
3049--4214[label="0.705882;36pkt 36fpkt"];
3049--4232[label="0.662162;49pkt 49fpkt"];
3049--4233[label="0.318841;44pkt 44fpkt"];
3049--4236[label="0.666667;36pkt 36fpkt"];
3049--4253[label="0.740741;40pkt 40fpkt"];
3049--4256[label="0.746667;56pkt 56fpkt"];
3049--4268[label="0.716667;43pkt 43fpkt"];
3049--4425[label="0.614286;43pkt 43fpkt"];
3049--4434[label="0.690476;58pkt 58fpkt"];
3049--4438[label="0.631579;48pkt 48fpkt"];
3049--4784[label="0.000460193;1pkt 1fpkt"];
3049--4796[label="0.0768523;167pkt 167fpkt"];
3049--4846[label="0.000460193;1pkt 1fpkt"];
3049--4857[label="0.0768523;167pkt 167fpkt"];
3049--4890[label="0.000460193;1pkt 1fpkt"];
3049--5129[label="1;2173pkt 2173fpkt"];
3049--5767[label="1;2173pkt 2173fpkt"];
3869--3878[label="0.0547945;4pkt 4fpkt"];
3869--4796[label="0.0547945;4pkt 4fpkt"];
3869--4857[label="0.0547945;4pkt 4fpkt"];
3869--5129[label="0.465753;34pkt 34fpkt"];
3869--5767[label="0.465753;34pkt 34fpkt"];
3898--4166[label="0.154762;13pkt 13fpkt"];
3898--4230[label="0.1;2pkt 2fpkt"];
3898--4585[label="0.0238095;2pkt 2fpkt"];
3898--4796[label="0.0357143;3pkt 3fpkt"];
3898--4857[label="0.0357143;3pkt 3fpkt"];
3898--5129[label="0.761905;64pkt 64fpkt"];
3898--5767[label="0.761905;64pkt 64fpkt"];
3942--4796[label="0.0481928;4pkt 4fpkt"];
3942--4857[label="0.0481928;4pkt 4fpkt"];
3942--5129[label="0.915663;76pkt 76fpkt"];
3942--5141[label="0.0120482;1pkt 1fpkt"];
3942--5767[label="0.915663;76pkt 76fpkt"];
3951--4263[label="0.333333;20pkt 20fpkt"];
3951--4796[label="0.1;6pkt 6fpkt"];
3951--4857[label="0.1;6pkt 6fpkt"];
3951--5117[label="0.0166667;1pkt 1fpkt"];
3951--5129[label="0.616667;37pkt 37fpkt"];
3951--5767[label="0.616667;37pkt 37fpkt"];
4053--4795[label="0.0166667;1pkt 1fpkt"];
4053--4796[label="0.0333333;2pkt 2fpkt"];
4053--4856[label="0.0166667;1pkt 1fpkt"];
4053--4857[label="0.0333333;2pkt 2fpkt"];
4053--5129[label="0.95;57pkt 57fpkt"];
4053--5767[label="0.95;57pkt 57fpkt"];
4103--4796[label="0.0943396;5pkt 5fpkt"];
4103--4857[label="0.0943396;5pkt 5fpkt"];
4103--5129[label="1;53pkt 53fpkt"];
4103--5767[label="1;53pkt 53fpkt"];
4115--4796[label="0.0547945;4pkt 4fpkt"];
4115--4857[label="0.0547945;4pkt 4fpkt"];
4115--5129[label="0.876712;64pkt 64fpkt"];
4115--5767[label="0.876712;64pkt 64fpkt"];
4214--4796[label="0.0784314;4pkt 4fpkt"];
4214--4857[label="0.0784314;4pkt 4fpkt"];
4214--5129[label="1;51pkt 51fpkt"];
4214--5767[label="1;51pkt 51fpkt"];
4232--4796[label="0.027027;2pkt 2fpkt"];
4232--4857[label="0.027027;2pkt 2fpkt"];
4232--5129[label="0.972973;72pkt 72fpkt"];
4232--5767[label="0.972973;72pkt 72fpkt"];
4236--4796[label="0.0185185;1pkt 1fpkt"];
4236--4857[label="0.0185185;1pkt 1fpkt"];
4236--5129[label="0.962963;52pkt 52fpkt"];
4236--5767[label="0.962963;52pkt 52fpkt"];
4253--4795[label="0.0185185;1pkt 1fpkt"];
4253--4796[label="0.037037;2pkt 2fpkt"];
4253--4856[label="0.0185185;1pkt 1fpkt"];
4253--4857[label="0.037037;2pkt 2fpkt"];
4253--5129[label="0.925926;50pkt 50fpkt"];
4253--5326[label="0.0714286;1pkt 1fpkt"];
4253--5767[label="0.925926;50pkt 50fpkt"];
4256--4796[label="0.0533333;4pkt 4fpkt"];
4256--4857[label="0.0533333;4pkt 4fpkt"];
4256--5129[label="0.946667;71pkt 71fpkt"];
4256--5767[label="0.946667;71pkt 71fpkt"];
4268--4784[label="0.0166667;1pkt 1fpkt"];
4268--4796[label="0.0333333;2pkt 2fpkt"];
4268--4846[label="0.0166667;1pkt 1fpkt"];
4268--4857[label="0.0333333;2pkt 2fpkt"];
4268--4890[label="0.0166667;1pkt 1fpkt"];
4268--5129[label="0.966667;58pkt 58fpkt"];
4268--5767[label="0.966667;58pkt 58fpkt"];
4425--4796[label="0.0571429;4pkt 4fpkt"];
4425--4857[label="0.0571429;4pkt 4fpkt"];
4425--5129[label="0.957143;67pkt 67fpkt"];
4425--5767[label="0.957143;67pkt 67fpkt"];
4434--4796[label="0.0833333;7pkt 7fpkt"];
4434--4857[label="0.0833333;7pkt 7fpkt"];
4434--5129[label="0.964286;81pkt 81fpkt"];
4434--5767[label="0.964286;81pkt 81fpkt"];
4438--4796[label="0.0394737;3pkt 3fpkt"];
4438--4857[label="0.0394737;3pkt 3fpkt"];
4438--5129[label="0.960526;73pkt 73fpkt"];
4438--5141[label="0.0131579;1pkt 1fpkt"];
4438--5767[label="0.960526;73pkt 73fpkt"];
5129--5767[label="1;3529pkt 3529fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.243.64" src_port="80"/>
      <filter src_ip="208.108.244.97" src_port="53"/>
      <filter src_ip="136.25.232.226" src_port="20129"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
597[label="173.206.234.52;s;39pkt 39fpkt", shape=diamond, color=yellow];
2602[label="163.234.70.42;d;22pkt 22fpkt", shape=diamond, color=yellow];
2794[label="163.234.42.162;d;16pkt 16fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.206.234.52:80, *:*}[45.9459%]&lt;BR/&gt;{*:80, 163.234.70.42:*}[29.7297%]&lt;BR/&gt;{*:80, 163.234.42.162:*}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7532%)&lt;BR/&gt; 443: (3.24675%)&lt;BR/&gt; 58704: (1.2987%)&lt;BR/&gt; 58703: (1.2987%)&lt;BR/&gt; 4571: (1.2987%)&gt;];
}
597--949[label="0.0769231;3pkt 3fpkt"];
597--983[label="0.282051;11pkt 11fpkt"];
597--1311[label="0.36;9pkt 9fpkt"];
597--2602[label="0.0454545;1pkt 1fpkt"];
597--2791[label="0.117647;2pkt 2fpkt"];
597--2794[label="0.125;2pkt 2fpkt"];
597--2810[label="0.0512821;2pkt 2fpkt"];
2602--3111[label="0.0454545;1pkt 1fpkt"];
2602--4057[label="0.181818;4pkt 4fpkt"];
2602--4270[label="0.0909091;2pkt 2fpkt"];
2602--4685[label="0.181818;4pkt 4fpkt"];
2602--4796[label="0.136364;3pkt 3fpkt"];
2602--4857[label="0.136364;3pkt 3fpkt"];
2602--5083[label="0.0454545;1pkt 1fpkt"];
2602--5446[label="0.0909091;2pkt 2fpkt"];
2602--5493[label="0.181818;4pkt 4fpkt"];
2602--5752[label="0.0454545;1pkt 1fpkt"];
2602--5901[label="0.0909091;2pkt 2fpkt"];
2602--6063[label="0.0909091;2pkt 2fpkt"];
2794--3111[label="0.125;2pkt 2fpkt"];
2794--4057[label="0.1875;3pkt 3fpkt"];
2794--4685[label="0.1875;3pkt 3fpkt"];
2794--4796[label="0.0625;1pkt 1fpkt"];
2794--4857[label="0.0625;1pkt 1fpkt"];
2794--5083[label="0.125;2pkt 2fpkt"];
2794--5493[label="0.25;4pkt 4fpkt"];
2794--5752[label="0.125;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="173.206.234.52" src_port="80"/>
      <filter dst_ip="163.234.70.42" src_port="80"/>
      <filter dst_ip="163.234.42.162" src_port="80"/>
    </slice>
    <from sec="1262322029" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.6.85.117"/>
      <from sec="1262322001" usec="0"/>
      <to sec="1262322822" usec="0"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.3.193.82"/>
      <from sec="1262322003" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
489[label="220.146.186.151;d;4767pkt 4767fpkt", shape=diamond, color=yellow];
2769[label="136.25.53.233;s;208pkt 208fpkt", shape=diamond, color=yellow];
4420[label="136.25.53.233;s;208pkt 208fpkt", shape=hexagon, color=black];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.25.199.143:*, 220.146.186.151:53}[94.3874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7299%)&lt;BR/&gt; 995: (0.115763%)&lt;BR/&gt; 25: (0.0771754%)&lt;BR/&gt; 49250: (0.0482346%)&lt;BR/&gt; 65360: (0.0289408%)&gt;];
}
489--497[label="0.00178571;1pkt 1fpkt"];
489--499[label="0.000968523;2pkt 2fpkt"];
489--717[label="0.00100435;3pkt 3fpkt"];
489--799[label="0.000933271;4pkt 4fpkt"];
489--915[label="0.0052356;1pkt 1fpkt"];
489--1145[label="0.0111732;4pkt 4fpkt"];
489--1213[label="0.000312793;1pkt 1fpkt"];
489--1303[label="0.000571755;2pkt 2fpkt"];
489--1308[label="0.00531444;6pkt 6fpkt"];
489--1601[label="0.000793651;1pkt 1fpkt"];
489--1605[label="0.00210305;2pkt 2fpkt"];
489--1618[label="0.003003;1pkt 1fpkt"];
489--1886[label="0.00623701;3pkt 3fpkt"];
489--2159[label="0.000992063;1pkt 1fpkt"];
489--2549[label="0.00353357;1pkt 1fpkt"];
489--2769[label="0.0192308;4pkt 4fpkt"];
489--2935[label="0.000839102;4pkt 4fpkt"];
489--2948[label="0.000926569;4pkt 4fpkt"];
489--3054[label="0.000839102;4pkt 4fpkt"];
489--3066[label="0.00104888;5pkt 5fpkt"];
489--3086[label="0.00171233;1pkt 1fpkt"];
489--3191[label="0.000419551;2pkt 2fpkt"];
489--3462[label="0.000453309;1pkt 1fpkt"];
489--3512[label="0.003003;1pkt 1fpkt"];
489--3828[label="0.984267;4692pkt 4692fpkt"];
489--3891[label="0.00117233;1pkt 1fpkt"];
489--3919[label="0.0063762;6pkt 6fpkt"];
489--4100[label="0.00704225;2pkt 2fpkt"];
489--4111[label="0.000992063;1pkt 1fpkt"];
489--4170[label="0.00110988;3pkt 3fpkt"];
489--4394[label="0.00210305;2pkt 2fpkt"];
489--4420[label="0.0192308;4pkt 4fpkt"];
489--4578[label="0.00617284;1pkt 1fpkt"];
489--4691[label="0.000992063;1pkt 1fpkt"];
489--4715[label="0.0769876;367pkt 367fpkt"];
489--4719[label="0.0788756;376pkt 376fpkt"];
489--4733[label="0.0881057;420pkt 420fpkt"];
489--4758[label="0.0119572;57pkt 57fpkt"];
489--4771[label="0.00818125;39pkt 39fpkt"];
489--4807[label="0.0788756;376pkt 376fpkt"];
489--4824[label="0.0119572;57pkt 57fpkt"];
489--4833[label="0.00818125;39pkt 39fpkt"];
489--4863[label="0.0788756;376pkt 376fpkt"];
489--4864[label="0.0119572;57pkt 57fpkt"];
489--4876[label="0.00818125;39pkt 39fpkt"];
489--4933[label="0.000839983;4pkt 4fpkt"];
489--5201[label="0.000839102;4pkt 4fpkt"];
489--5210[label="0.000266525;1pkt 1fpkt"];
489--5290[label="0.00583658;3pkt 3fpkt"];
489--5349[label="0.00306748;1pkt 1fpkt"];
489--5468[label="0.00104888;5pkt 5fpkt"];
489--5907[label="0.00104888;5pkt 5fpkt"];
489--6066[label="0.00104888;5pkt 5fpkt"];
2769--4420[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_ip="220.146.186.151" dst_port="53" src_ip="136.25.199.143"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
984[label="209.67.91.11;d;1005pkt 1005fpkt", shape=diamond, color=yellow];
1446[label="28.3.45.139;s;15pkt 15fpkt", shape=diamond, color=yellow];
2465[label="30.85.89.8;s;13pkt 13fpkt", shape=diamond, color=yellow];
2788[label="19.54.166.149;s;76pkt 76fpkt", shape=diamond, color=yellow];
3400[label="28.3.45.139;s;9pkt 9fpkt", shape=hexagon, color=black];
4910[label="19.54.163.4;72pkt 72fpkt", shape=pentagon, color=darkviolet];
5058[label="196.34.42.42;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5365[label="28.3.45.139;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5475[label="193.34.163.176;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5687[label="19.54.163.4;71pkt 71fpkt", shape=invtriangle, color=brown];
5866[label="28.3.45.139;30pkt 30fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.54.166.157:80, 209.67.91.11:*}[32.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7386%)&lt;BR/&gt; 58635: (0.149365%)&lt;BR/&gt; 54454: (0.149365%)&lt;BR/&gt; 49924: (0.149365%)&lt;BR/&gt; 49643: (0.149365%)&gt;];
}
984--1236[label="0.000995025;1pkt 1fpkt"];
984--1403[label="1;338pkt 338fpkt"];
984--1446[label="0.2;3pkt 3fpkt"];
984--1771[label="0.000995025;1pkt 1fpkt"];
984--2465[label="1;13pkt 13fpkt"];
984--2788[label="1;76pkt 76fpkt"];
984--2910[label="0.000995025;1pkt 1fpkt"];
984--3491[label="0.000995025;1pkt 1fpkt"];
984--3564[label="1;263pkt 263fpkt"];
984--3610[label="0.000995025;1pkt 1fpkt"];
984--3832[label="0.000995025;1pkt 1fpkt"];
984--4616[label="0.000995025;1pkt 1fpkt"];
984--4770[label="0.000995025;1pkt 1fpkt"];
984--4784[label="0.0039801;4pkt 4fpkt"];
984--4796[label="0.0368159;37pkt 37fpkt"];
984--4832[label="0.000995025;1pkt 1fpkt"];
984--4846[label="0.0039801;4pkt 4fpkt"];
984--4857[label="0.0368159;37pkt 37fpkt"];
984--4877[label="0.000995025;1pkt 1fpkt"];
984--4890[label="0.0039801;4pkt 4fpkt"];
984--4910[label="0.819444;59pkt 59fpkt"];
984--5058[label="1;11pkt 11fpkt"];
984--5124[label="0.000995025;1pkt 1fpkt"];
984--5365[label="0.266667;8pkt 8fpkt"];
984--5475[label="1;7pkt 7fpkt"];
984--5687[label="0.816901;58pkt 58fpkt"];
984--5765[label="0.000995025;1pkt 1fpkt"];
984--5866[label="0.266667;8pkt 8fpkt"];
984--6012[label="0.000995025;1pkt 1fpkt"];
1446--3400[label="1;9pkt 9fpkt"];
1446--5365[label="1;15pkt 15fpkt"];
1446--5866[label="1;15pkt 15fpkt"];
2788--4796[label="0.0526316;4pkt 4fpkt"];
2788--4857[label="0.0526316;4pkt 4fpkt"];
3400--5365[label="1;9pkt 9fpkt"];
3400--5866[label="1;9pkt 9fpkt"];
4910--5687[label="1;71pkt 71fpkt"];
5365--5866[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="209.67.91.11" src_ip="19.54.166.157" src_port="80"/>
    </slice>
    <from sec="1262322015" usec="0"/>
    <to sec="1262322897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
733[label="136.25.48.3;d;41pkt 41fpkt", shape=diamond, color=yellow];
2809[label="142.251.9.76;s;19pkt 19fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.251.9.76:80, 136.25.48.3:*}[24.0741%]&lt;BR/&gt;{142.251.116.197:80, 136.25.48.3:*}[22.2222%]&lt;BR/&gt;{142.251.9.178:80, 136.25.48.3:*}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3333%)&lt;BR/&gt; 8080: (5%)&lt;BR/&gt; 3691: (1.66667%)&lt;BR/&gt; 3690: (1.66667%)&lt;BR/&gt; 3680: (1.66667%)&gt;];
}
733--2809[label="0.315789;6pkt 6fpkt"];
733--4796[label="0.0731707;3pkt 3fpkt"];
733--4857[label="0.0731707;3pkt 3fpkt"];
733--5070[label="0.0243902;1pkt 1fpkt"];
2809--3356[label="0.105263;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.48.3" src_ip="142.251.9.76" src_port="80"/>
      <filter dst_ip="136.25.48.3" src_ip="142.251.116.197" src_port="80"/>
      <filter dst_ip="136.25.48.3" src_ip="142.251.9.178" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
2722[label="28.27.213.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
2836[label="156.225.200.121;s;3pkt 3fpkt", shape=diamond, color=yellow];
4355[label="28.27.213.0;d;2pkt 2fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.200.121:80, 20.37.122.27:48325}[33.3333%]&lt;BR/&gt;{156.225.200.121:80, 28.27.213.0:36149}[33.3333%]&lt;BR/&gt;{156.225.200.121:80, 28.27.213.0:38204}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38204: (21.4286%)&lt;BR/&gt; 36149: (21.4286%)&lt;BR/&gt; 48325: (7.14286%)&gt;];
}
2722--2836[label="1;2pkt 2fpkt"];
2722--4355[label="1;2pkt 2fpkt"];
2836--4355[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="28.27.213.0" dst_port="38204" src_ip="156.225.200.121" src_port="80"/>
      <filter dst_ip="28.27.213.0" dst_port="36149" src_ip="156.225.200.121" src_port="80"/>
      <filter dst_ip="20.37.122.27" dst_port="48325" src_ip="156.225.200.121" src_port="80"/>
    </slice>
    <from sec="1262322657" usec="0"/>
    <to sec="1262322813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569143,1.30866,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322648" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
231[label="90.45.137.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
232[label="163.234.69.227;s;5pkt 5fpkt", shape=diamond, color=yellow];
2936[label="90.45.137.222;d;1pkt 1fpkt", shape=hexagon, color=black];
3212[label="163.234.69.227;s;2pkt 2fpkt", shape=hexagon, color=black];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.69.227:3133, 90.20.33.2:80}[20%]&lt;BR/&gt;{163.234.69.227:3032, 90.45.137.58:6112}[20%]&lt;BR/&gt;{163.234.69.227:3043, 90.45.137.222:6112}[20%]&lt;BR/&gt;{163.234.69.227:3167, 214.48.251.60:80}[20%]&lt;BR/&gt;{163.234.69.227:3171, 214.48.251.60:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6112: (33.3333%)&lt;BR/&gt; 3043: (22.2222%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 3032: (11.1111%)&lt;BR/&gt; 3171: (5.55556%)&gt;];
}
231--232[label="1;1pkt 1fpkt"];
231--2936[label="1;1pkt 1fpkt"];
231--3212[label="1;1pkt 1fpkt"];
232--2936[label="1;1pkt 1fpkt"];
232--3212[label="1;2pkt 2fpkt"];
232--4746[label="0.4;2pkt 2fpkt"];
232--4818[label="0.4;2pkt 2fpkt"];
2936--3212[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.48.251.60" dst_port="80" src_ip="163.234.69.227" src_port="3171"/>
      <filter dst_ip="214.48.251.60" dst_port="80" src_ip="163.234.69.227" src_port="3167"/>
      <filter dst_ip="90.45.137.222" dst_port="6112" src_ip="163.234.69.227" src_port="3043"/>
      <filter dst_ip="90.45.137.58" dst_port="6112" src_ip="163.234.69.227" src_port="3032"/>
      <filter dst_ip="90.20.33.2" dst_port="80" src_ip="163.234.69.227" src_port="3133"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
234[label="217.55.217.200;s;303pkt 303fpkt", shape=diamond, color=yellow];
2937[label="217.55.217.200;s;263pkt 263fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.55.217.200:6667, *:*}[35.6436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.1979%)&lt;BR/&gt; 6661: (3.53357%)&lt;BR/&gt; 6666: (3.18021%)&lt;BR/&gt; 6665: (3.00353%)&lt;BR/&gt; 6662: (3.00353%)&gt;];
}
234--2937[label="1;263pkt 263fpkt"];
234--4725[label="0.00330033;1pkt 1fpkt"];
234--4746[label="0.00330033;1pkt 1fpkt"];
234--4805[label="0.00330033;1pkt 1fpkt"];
234--4818[label="0.00330033;1pkt 1fpkt"];
2937--4725[label="0.00380228;1pkt 1fpkt"];
2937--4805[label="0.00380228;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.55.217.200" src_port="6667"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
291[label="196.160.54.122;s;43pkt 43fpkt", shape=diamond, color=yellow];
687[label="163.234.197.101;d;10010pkt 10010fpkt", shape=diamond, color=yellow];
2947[label="196.160.54.122;s;29pkt 29fpkt", shape=hexagon, color=black];
3810[label="170.139.40.233;s;2pkt 2fpkt", shape=hexagon, color=black];
5391[label="13.20.75.148;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 163.234.197.101:25576}[97.1637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25576: (48.2019%)&lt;BR/&gt; 0: (1.82287%)&lt;BR/&gt; 16001: (1.05508%)&lt;BR/&gt; 80: (0.886665%)&lt;BR/&gt; 6881: (0.698435%)&gt;];
}
291--687[label="1;43pkt 43fpkt"];
291--2947[label="1;29pkt 29fpkt"];
291--4796[label="0.0465116;2pkt 2fpkt"];
291--4857[label="0.0465116;2pkt 2fpkt"];
687--1980[label="1;7pkt 7fpkt"];
687--2037[label="1;27pkt 27fpkt"];
687--2947[label="1;29pkt 29fpkt"];
687--3810[label="1;2pkt 2fpkt"];
687--4306[label="1;27pkt 27fpkt"];
687--4732[label="0.999169;2406pkt 2406fpkt"];
687--4784[label="0.000599401;6pkt 6fpkt"];
687--4796[label="0.0002997;3pkt 3fpkt"];
687--4846[label="0.000599401;6pkt 6fpkt"];
687--4857[label="0.0002997;3pkt 3fpkt"];
687--4890[label="0.000599401;6pkt 6fpkt"];
687--5391[label="0.7;7pkt 7fpkt"];
2947--4796[label="0.0689655;2pkt 2fpkt"];
2947--4857[label="0.0689655;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.197.101" dst_port="25576"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
362[label="208.108.249.172;s;11pkt 11fpkt", shape=diamond, color=yellow];
363[label="216.109.203.122;d;7pkt 7fpkt", shape=diamond, color=yellow];
2958[label="208.108.249.172;s;11pkt 11fpkt", shape=hexagon, color=black];
2959[label="216.109.203.122;d;5pkt 5fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.249.172:*, 216.109.203.122:*}[63.6364%]&lt;BR/&gt;{208.108.249.172:*, *:53}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (11.7647%)&lt;BR/&gt; 62955: (5.88235%)&lt;BR/&gt; 60948: (5.88235%)&lt;BR/&gt; 57991: (5.88235%)&lt;BR/&gt; 57119: (5.88235%)&gt;];
}
362--363[label="1;7pkt 7fpkt"];
362--2958[label="1;11pkt 11fpkt"];
362--2959[label="1;5pkt 5fpkt"];
363--2958[label="1;7pkt 7fpkt"];
363--2959[label="1;5pkt 5fpkt"];
2958--2959[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="216.109.203.122" src_ip="208.108.249.172"/>
      <filter dst_port="53" src_ip="208.108.249.172"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
410[label="136.25.212.77;d;4pkt 4fpkt", shape=diamond, color=yellow];
2965[label="136.25.212.77;d;4pkt 4fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.140.137.14:4122, 136.25.212.77:445}[25%]&lt;BR/&gt;{43.42.226.77:1196, 136.25.212.77:445}[25%]&lt;BR/&gt;{197.37.140.80:80, 136.25.212.77:4745}[25%]&lt;BR/&gt;{2.214.215.144:1665, 136.25.212.77:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 4745: (12.5%)&lt;BR/&gt; 4122: (12.5%)&lt;BR/&gt; 1665: (12.5%)&lt;BR/&gt; 1196: (12.5%)&gt;];
}
410--2965[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.212.77" dst_port="445" src_ip="2.214.215.144" src_port="1665"/>
      <filter dst_ip="136.25.212.77" dst_port="4745" src_ip="197.37.140.80" src_port="80"/>
      <filter dst_ip="136.25.212.77" dst_port="445" src_ip="43.42.226.77" src_port="1196"/>
      <filter dst_ip="136.25.212.77" dst_port="445" src_ip="200.140.137.14" src_port="4122"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
954[label="147.192.254.166;s;336pkt 336fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.192.254.166:53, *:*}[53.5714%]&lt;BR/&gt;{147.192.254.166:*, *:53}[34.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.0476%)&lt;BR/&gt; 25: (6.39881%)&lt;BR/&gt; 43761: (0.297619%)&lt;BR/&gt; 4126: (0.297619%)&lt;BR/&gt; 65475: (0.14881%)&gt;];
}
954--1274[label="0.00595238;2pkt 2fpkt"];
954--2968[label="0.0178571;6pkt 6fpkt"];
954--4724[label="0.00297619;1pkt 1fpkt"];
954--4795[label="0.0386905;13pkt 13fpkt"];
954--4856[label="0.0386905;13pkt 13fpkt"];
954--5452[label="0.997024;335pkt 335fpkt"];
954--5902[label="0.997024;335pkt 335fpkt"];
</description>
    <slice>
      <filter src_ip="147.192.254.166" src_port="53"/>
      <filter dst_port="53" src_ip="147.192.254.166"/>
    </slice>
    <from sec="1262322005" usec="0"/>
    <to sec="1262322737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
517[label="136.25.199.2;s;31pkt 31fpkt", shape=diamond, color=yellow];
601[label="46.51.40.239;d;21pkt 21fpkt", shape=diamond, color=yellow];
2987[label="136.25.199.2;s;31pkt 31fpkt", shape=hexagon, color=black];
3005[label="46.51.40.239;d;21pkt 21fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.25.199.2:443, 46.51.40.239:*}[48.3871%]&lt;BR/&gt;{136.25.199.2:443, 44.181.116.133:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (38.4615%)&lt;BR/&gt; 80: (11.5385%)&lt;BR/&gt; 50577: (1.92308%)&lt;BR/&gt; 50576: (1.92308%)&lt;BR/&gt; 50574: (1.92308%)&gt;];
}
517--601[label="1;21pkt 21fpkt"];
517--2987[label="1;31pkt 31fpkt"];
517--3005[label="1;21pkt 21fpkt"];
601--2987[label="1;21pkt 21fpkt"];
601--3005[label="1;21pkt 21fpkt"];
2987--3005[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="46.51.40.239" src_ip="136.25.199.2" src_port="443"/>
      <filter dst_ip="44.181.116.133" src_ip="136.25.199.2" src_port="443"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
558[label="33.109.27.124;s;4pkt 4fpkt", shape=diamond, color=yellow];
2998[label="33.109.27.124;s;4pkt 4fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.109.27.124:30729, 209.72.24.104:80}[25%]&lt;BR/&gt;{33.109.27.124:30737, 209.72.24.104:80}[25%]&lt;BR/&gt;{33.109.27.124:30907, 209.72.24.104:80}[25%]&lt;BR/&gt;{33.109.27.124:31432, 209.72.24.104:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31432: (12.5%)&lt;BR/&gt; 30907: (12.5%)&lt;BR/&gt; 30737: (12.5%)&lt;BR/&gt; 30729: (12.5%)&gt;];
}
558--2998[label="1;4pkt 4fpkt"];
558--4710[label="0.25;1pkt 1fpkt"];
2998--4710[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="33.109.27.124" src_port="31432"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="33.109.27.124" src_port="30907"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="33.109.27.124" src_port="30737"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="33.109.27.124" src_port="30729"/>
    </slice>
    <from sec="1262322005" usec="0"/>
    <to sec="1262322166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569143,1.30866,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="47839096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
371[label="2.4.145.195;s;3035pkt 3035fpkt", shape=diamond, color=yellow];
3077[label="2.4.145.195;s;1464pkt 1464fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.4.145.195:6661, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6661: (50%)&lt;BR/&gt; 39511: (0.0555679%)&lt;BR/&gt; 8225: (0.0555679%)&lt;BR/&gt; 61998: (0.0444543%)&lt;BR/&gt; 50321: (0.0444543%)&gt;];
}
371--724[label="0.00247525;1pkt 1fpkt"];
371--3077[label="1;1464pkt 1464fpkt"];
</description>
    <slice>
      <filter src_ip="2.4.145.195" src_port="6661"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
511[label="39.76.78.1;s;2pkt 2fpkt", shape=diamond, color=yellow];
3119[label="39.76.78.1;s;2pkt 2fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.76.78.1:37101, 163.234.102.228:15990}[50%]&lt;BR/&gt;{39.76.78.1:57482, 163.234.102.228:15990}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 57482: (25%)&lt;BR/&gt; 37101: (25%)&gt;];
}
511--3119[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="39.76.78.1" src_port="57482"/>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="39.76.78.1" src_port="37101"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
566[label="8.110.11.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
3134[label="8.110.11.255;s;1pkt 1fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.110.11.255:8824, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 8824: (50%)&gt;];
}
566--3134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="8.110.11.255" src_port="8824"/>
    </slice>
    <from sec="1262322006" usec="0"/>
    <to sec="1262322430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
294[label="208.108.246.129;s;7874pkt 7874fpkt", shape=diamond, color=yellow];
5331[label="208.108.246.129;8436pkt 8436fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.246.129:7282, *:*}[97.5818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7282: (48.7891%)&lt;BR/&gt; 443: (0.809319%)&lt;BR/&gt; 80: (0.3832%)&lt;BR/&gt; 55002: (0.030656%)&lt;BR/&gt; 6902: (0.0245248%)&gt;];
}
294--991[label="0.0245399;4pkt 4fpkt"];
294--3148[label="0.0245399;4pkt 4fpkt"];
294--3838[label="1;5748pkt 5748fpkt"];
294--4710[label="0.000942329;5pkt 5fpkt"];
294--4725[label="0.000520382;3pkt 3fpkt"];
294--4746[label="0.000711744;4pkt 4fpkt"];
294--4767[label="0.000558243;3pkt 3fpkt"];
294--4784[label="0.000762002;6pkt 6fpkt"];
294--4796[label="0.001778;14pkt 14fpkt"];
294--4805[label="0.000520382;3pkt 3fpkt"];
294--4818[label="0.000711744;4pkt 4fpkt"];
294--4831[label="0.000558243;3pkt 3fpkt"];
294--4846[label="0.000762002;6pkt 6fpkt"];
294--4857[label="0.001778;14pkt 14fpkt"];
294--4890[label="0.000762002;6pkt 6fpkt"];
294--5331[label="1;7874pkt 7874fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.246.129" src_port="7282"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
644[label="163.234.35.1;d;82pkt 82fpkt", shape=diamond, color=yellow];
662[label="21.100.87.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
1725[label="214.65.76.48;s;21pkt 21fpkt", shape=diamond, color=yellow];
3013[label="163.234.35.1;d;20pkt 20fpkt", shape=hexagon, color=black];
3171[label="21.100.87.141;s;1pkt 1fpkt", shape=hexagon, color=black];
3786[label="214.65.76.48;s;21pkt 21fpkt", shape=hexagon, color=black];
5075[label="209.66.6.46;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5082[label="214.65.76.48;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5408[label="213.168.174.154;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5750[label="209.66.6.46;11pkt 11fpkt", shape=invtriangle, color=brown];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 163.234.35.1:*}[48.6188%]&lt;BR/&gt;{213.168.174.154:80, 163.234.103.195:*}[28.7293%]&lt;BR/&gt;{214.65.76.48:80, *:*}[22.6519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.631%)&lt;BR/&gt; 1870: (0.922509%)&lt;BR/&gt; 1864: (0.922509%)&lt;BR/&gt; 2159: (0.738007%)&lt;BR/&gt; 2016: (0.738007%)&gt;];
}
644--662[label="1;1pkt 1fpkt"];
644--1684[label="0.0731707;6pkt 6fpkt"];
644--1725[label="0.238095;5pkt 5fpkt"];
644--3013[label="1;20pkt 20fpkt"];
644--3171[label="1;1pkt 1fpkt"];
644--3786[label="0.238095;5pkt 5fpkt"];
644--4796[label="0.0121951;1pkt 1fpkt"];
644--4857[label="0.0121951;1pkt 1fpkt"];
644--5075[label="0.272727;3pkt 3fpkt"];
644--5082[label="0.119048;5pkt 5fpkt"];
644--5408[label="0.114754;7pkt 7fpkt"];
644--5750[label="0.272727;3pkt 3fpkt"];
662--3013[label="1;1pkt 1fpkt"];
662--3171[label="1;1pkt 1fpkt"];
1725--3013[label="0.1;2pkt 2fpkt"];
1725--3647[label="0.761905;16pkt 16fpkt"];
1725--3786[label="1;21pkt 21fpkt"];
1725--5082[label="1;21pkt 21fpkt"];
3013--3171[label="1;1pkt 1fpkt"];
3013--3786[label="0.1;2pkt 2fpkt"];
3013--4796[label="0.05;1pkt 1fpkt"];
3013--4857[label="0.05;1pkt 1fpkt"];
3013--5075[label="0.0909091;1pkt 1fpkt"];
3013--5082[label="0.1;2pkt 2fpkt"];
3013--5408[label="0.05;1pkt 1fpkt"];
3013--5750[label="0.0909091;1pkt 1fpkt"];
3786--5082[label="1;21pkt 21fpkt"];
5075--5750[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="214.65.76.48" src_port="80"/>
      <filter dst_ip="163.234.35.1" src_port="80"/>
      <filter dst_ip="163.234.103.195" src_ip="213.168.174.154" src_port="80"/>
    </slice>
    <from sec="1262322061" usec="0"/>
    <to sec="1262322897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
254[label="8.5.210.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
3218[label="8.5.210.126;s;1pkt 1fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.5.210.126:50075, 209.72.24.104:31983}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50075: (50%)&lt;BR/&gt; 31983: (50%)&gt;];
}
254--3218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.24.104" dst_port="31983" src_ip="8.5.210.126" src_port="50075"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1142[label="89.40.143.168;s;1219pkt 1219fpkt", shape=diamond, color=yellow];
3228[label="89.40.143.168;s;666pkt 666fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.40.143.168:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1142--3228[label="1;666pkt 666fpkt"];
</description>
    <slice>
      <filter src_ip="89.40.143.168"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
2782[label="44.21.172.76;s;177pkt 177fpkt", shape=diamond, color=yellow];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.21.172.76:*, 208.108.244.112:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63150: (0.282486%)&lt;BR/&gt; 63145: (0.282486%)&lt;BR/&gt; 63141: (0.282486%)&lt;BR/&gt; 63109: (0.282486%)&gt;];
}
2782--2980[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.244.112" dst_port="53" src_ip="44.21.172.76"/>
    </slice>
    <from sec="1262322007" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1190[label="2.43.182.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
3254[label="2.43.182.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.43.182.199:4787, 208.108.242.188:39684}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39684: (50%)&lt;BR/&gt; 4787: (50%)&gt;];
}
1190--3254[label="1;1pkt 1fpkt"];
1190--3622[label="1;1pkt 1fpkt"];
3254--3622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.242.188" dst_port="39684" src_ip="2.43.182.199" src_port="4787"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
419[label="99.219.214.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
3264[label="99.219.214.111;s;1pkt 1fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.219.214.111:13381, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 13381: (50%)&gt;];
}
419--3264[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="99.219.214.111" src_port="13381"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
456[label="163.234.103.168;d;115pkt 115fpkt", shape=diamond, color=yellow];
941[label="22.132.41.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
967[label="21.68.33.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
1254[label="44.72.118.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
1327[label="32.51.231.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
3138[label="21.68.33.243;s;1pkt 1fpkt", shape=hexagon, color=black];
3291[label="44.72.118.180;s;1pkt 1fpkt", shape=hexagon, color=black];
3326[label="22.132.41.171;s;1pkt 1fpkt", shape=hexagon, color=black];
3335[label="32.51.231.194;s;1pkt 1fpkt", shape=hexagon, color=black];
3886[label="163.234.103.168;d;115pkt 115fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 163.234.103.168:*}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.916%)&lt;BR/&gt; 9057: (9.2437%)&lt;BR/&gt; 63471: (0.840336%)&lt;BR/&gt; 11916: (0.840336%)&lt;BR/&gt; 8894: (0.840336%)&gt;];
}
456--941[label="1;1pkt 1fpkt"];
456--967[label="1;1pkt 1fpkt"];
456--1254[label="1;1pkt 1fpkt"];
456--1327[label="1;1pkt 1fpkt"];
456--3138[label="1;1pkt 1fpkt"];
456--3291[label="1;1pkt 1fpkt"];
456--3326[label="1;1pkt 1fpkt"];
456--3335[label="1;1pkt 1fpkt"];
456--3886[label="1;115pkt 115fpkt"];
941--3326[label="1;1pkt 1fpkt"];
941--3886[label="1;1pkt 1fpkt"];
967--3138[label="1;1pkt 1fpkt"];
967--3886[label="1;1pkt 1fpkt"];
1254--3291[label="1;1pkt 1fpkt"];
1254--3886[label="1;1pkt 1fpkt"];
1327--3335[label="1;1pkt 1fpkt"];
1327--3886[label="1;1pkt 1fpkt"];
3138--3886[label="1;1pkt 1fpkt"];
3291--3886[label="1;1pkt 1fpkt"];
3326--3886[label="1;1pkt 1fpkt"];
3335--3886[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.168" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
942[label="156.225.20.232;s;145pkt 145fpkt", shape=diamond, color=yellow];
1314[label="20.37.122.76;d;147pkt 147fpkt", shape=diamond, color=yellow];
3329[label="156.225.20.232;s;145pkt 145fpkt", shape=hexagon, color=black];
3532[label="20.37.122.76;d;65pkt 65fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.20.232:80, 20.37.122.76:*}[98.6395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9004%)&lt;BR/&gt; 65221: (0.398406%)&lt;BR/&gt; 64486: (0.398406%)&lt;BR/&gt; 63443: (0.398406%)&lt;BR/&gt; 63259: (0.398406%)&gt;];
}
942--1314[label="1;145pkt 145fpkt"];
942--3329[label="1;145pkt 145fpkt"];
942--3532[label="1;65pkt 65fpkt"];
942--4796[label="0.0551724;8pkt 8fpkt"];
942--4857[label="0.0551724;8pkt 8fpkt"];
1314--1839[label="0.00680272;1pkt 1fpkt"];
1314--3329[label="1;145pkt 145fpkt"];
1314--3532[label="1;65pkt 65fpkt"];
1314--4796[label="0.0544218;8pkt 8fpkt"];
1314--4857[label="0.0544218;8pkt 8fpkt"];
3329--3532[label="1;65pkt 65fpkt"];
3329--4796[label="0.0551724;8pkt 8fpkt"];
3329--4857[label="0.0551724;8pkt 8fpkt"];
3532--4796[label="0.123077;8pkt 8fpkt"];
3532--4857[label="0.123077;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.122.76" src_ip="156.225.20.232" src_port="80"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
896[label="173.206.232.48;s;52pkt 52fpkt", shape=diamond, color=yellow];
2791[label="163.234.197.105;d;17pkt 17fpkt", shape=diamond, color=yellow];
2795[label="163.234.102.131;d;17pkt 17fpkt", shape=diamond, color=yellow];
3111[label="173.206.232.48;s;52pkt 52fpkt", shape=hexagon, color=black];
5083[label="173.206.232.48;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5752[label="173.206.232.48;60pkt 60fpkt", shape=invtriangle, color=brown];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.206.232.48:80, *:*}[37.3626%]&lt;BR/&gt;{173.206.232.48:443, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.9457%)&lt;BR/&gt; 443: (17.0543%)&lt;BR/&gt; 62491: (0.968992%)&lt;BR/&gt; 62490: (0.968992%)&lt;BR/&gt; 4888: (0.968992%)&gt;];
}
896--949[label="0.115385;6pkt 6fpkt"];
896--1925[label="0.2;3pkt 3fpkt"];
896--2380[label="0.0416667;1pkt 1fpkt"];
896--2602[label="0.0454545;1pkt 1fpkt"];
896--2791[label="0.117647;2pkt 2fpkt"];
896--2794[label="0.125;2pkt 2fpkt"];
896--2795[label="0.0588235;1pkt 1fpkt"];
896--3111[label="1;52pkt 52fpkt"];
896--3336[label="0.222222;6pkt 6fpkt"];
896--4796[label="0.0192308;1pkt 1fpkt"];
896--4857[label="0.0192308;1pkt 1fpkt"];
896--5083[label="1;52pkt 52fpkt"];
896--5752[label="1;52pkt 52fpkt"];
2791--3111[label="0.117647;2pkt 2fpkt"];
2791--4057[label="0.176471;3pkt 3fpkt"];
2791--4685[label="0.176471;3pkt 3fpkt"];
2791--4796[label="0.117647;2pkt 2fpkt"];
2791--4857[label="0.117647;2pkt 2fpkt"];
2791--5083[label="0.117647;2pkt 2fpkt"];
2791--5493[label="0.176471;3pkt 3fpkt"];
2791--5752[label="0.117647;2pkt 2fpkt"];
2795--3111[label="0.0588235;1pkt 1fpkt"];
2795--4057[label="0.176471;3pkt 3fpkt"];
2795--4270[label="0.117647;2pkt 2fpkt"];
2795--4685[label="0.176471;3pkt 3fpkt"];
2795--4784[label="0.0588235;1pkt 1fpkt"];
2795--4796[label="0.117647;2pkt 2fpkt"];
2795--4846[label="0.0588235;1pkt 1fpkt"];
2795--4857[label="0.117647;2pkt 2fpkt"];
2795--4890[label="0.0588235;1pkt 1fpkt"];
2795--5083[label="0.0588235;1pkt 1fpkt"];
2795--5493[label="0.294118;5pkt 5fpkt"];
2795--5752[label="0.0588235;1pkt 1fpkt"];
3111--3336[label="0.222222;6pkt 6fpkt"];
3111--4796[label="0.0192308;1pkt 1fpkt"];
3111--4857[label="0.0192308;1pkt 1fpkt"];
3111--5083[label="1;52pkt 52fpkt"];
3111--5752[label="1;52pkt 52fpkt"];
5083--5752[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="173.206.232.48" src_port="80"/>
      <filter src_ip="173.206.232.48" src_port="443"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
551[label="8.91.39.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
3339[label="8.91.39.20;s;1pkt 1fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.91.39.20:14585, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 14585: (50%)&gt;];
}
551--3339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="8.91.39.20" src_port="14585"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
1361[label="140.14.223.165;s;192pkt 192fpkt", shape=diamond, color=yellow];
3351[label="140.14.223.165;s;89pkt 89fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.223.165:25, *:*}[86.4583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2883%)&lt;BR/&gt; 64713: (0.355872%)&lt;BR/&gt; 62545: (0.355872%)&lt;BR/&gt; 62341: (0.355872%)&lt;BR/&gt; 62060: (0.355872%)&gt;];
}
1361--3195[label="0.00520833;1pkt 1fpkt"];
1361--3351[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.223.165" src_port="25"/>
    </slice>
    <from sec="1262322011" usec="0"/>
    <to sec="1262322827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
585[label="197.37.140.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
1518[label="163.234.103.46;d;8pkt 8fpkt", shape=diamond, color=yellow];
2662[label="197.37.140.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
3352[label="197.37.140.80;s;2pkt 2fpkt", shape=hexagon, color=black];
3434[label="197.37.140.186;s;1pkt 1fpkt", shape=hexagon, color=black];
3986[label="163.234.103.46;d;4pkt 4fpkt", shape=hexagon, color=black];
4342[label="197.37.140.85;s;1pkt 1fpkt", shape=hexagon, color=black];
5183[label="197.37.140.80;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.190.105.121:80, 163.234.103.46:*}[30%]&lt;BR/&gt;{197.37.140.80:80, 163.234.103.46:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60054: (8.33333%)&lt;BR/&gt; 60022: (8.33333%)&lt;BR/&gt; 60252: (6.25%)&lt;BR/&gt; 59093: (6.25%)&gt;];
}
585--1518[label="1;2pkt 2fpkt"];
585--3352[label="1;2pkt 2fpkt"];
585--5183[label="1;2pkt 2fpkt"];
1518--2662[label="1;1pkt 1fpkt"];
1518--3352[label="1;2pkt 2fpkt"];
1518--3434[label="1;1pkt 1fpkt"];
1518--3986[label="1;4pkt 4fpkt"];
1518--4342[label="1;1pkt 1fpkt"];
1518--5183[label="0.6;3pkt 3fpkt"];
1518--5308[label="0.6;3pkt 3fpkt"];
2662--4342[label="1;1pkt 1fpkt"];
3352--5183[label="1;2pkt 2fpkt"];
3434--3986[label="1;1pkt 1fpkt"];
3986--5183[label="0.25;1pkt 1fpkt"];
3986--5308[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.46" src_ip="197.37.140.80" src_port="80"/>
      <filter dst_ip="163.234.103.46" src_ip="30.190.105.121" src_port="80"/>
    </slice>
    <from sec="1262322022" usec="0"/>
    <to sec="1262322818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
405[label="208.108.225.38;s;15pkt 15fpkt", shape=diamond, color=yellow];
406[label="38.55.32.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
611[label="17.34.217.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
2963[label="38.55.32.1;d;1pkt 1fpkt", shape=hexagon, color=black];
3367[label="17.34.217.9;d;1pkt 1fpkt", shape=hexagon, color=black];
3855[label="208.108.225.38;s;15pkt 15fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.225.38:*, 20.60.136.235:80}[73.3333%]&lt;BR/&gt;{208.108.225.38:1060, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 1060: (14.7059%)&lt;BR/&gt; 57346: (5.88235%)&lt;BR/&gt; 1117: (5.88235%)&lt;BR/&gt; 8102: (2.94118%)&gt;];
}
405--406[label="1;1pkt 1fpkt"];
405--611[label="1;1pkt 1fpkt"];
405--1862[label="0.0666667;1pkt 1fpkt"];
405--2963[label="1;1pkt 1fpkt"];
405--3367[label="1;1pkt 1fpkt"];
405--3855[label="1;15pkt 15fpkt"];
405--4223[label="0.0666667;1pkt 1fpkt"];
406--2963[label="1;1pkt 1fpkt"];
406--3855[label="1;1pkt 1fpkt"];
611--3367[label="1;1pkt 1fpkt"];
611--3855[label="1;1pkt 1fpkt"];
2963--3855[label="1;1pkt 1fpkt"];
3367--3855[label="1;1pkt 1fpkt"];
3855--4223[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.225.38" src_port="1060"/>
      <filter dst_ip="20.60.136.235" dst_port="80" src_ip="208.108.225.38"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
571[label="156.225.201.56;s;26pkt 26fpkt", shape=diamond, color=yellow];
630[label="20.37.120.252;d;35pkt 35fpkt", shape=diamond, color=yellow];
1354[label="20.37.120.122;d;12pkt 12fpkt", shape=diamond, color=yellow];
3742[label="20.37.120.122;d;11pkt 11fpkt", shape=hexagon, color=black];
4433[label="156.225.201.56;s;26pkt 26fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.206.127:80, 20.37.120.252:*}[30.6122%]&lt;BR/&gt;{156.225.201.56:80, 20.37.120.122:*}[26.5306%]&lt;BR/&gt;{156.225.201.56:*, 20.37.120.252:*}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.7273%)&lt;BR/&gt; 21: (8.18182%)&lt;BR/&gt; 65377: (1.81818%)&lt;BR/&gt; 64871: (1.81818%)&lt;BR/&gt; 63533: (1.81818%)&gt;];
}
571--630[label="0.461538;12pkt 12fpkt"];
571--1354[label="1;12pkt 12fpkt"];
571--3376[label="0.363636;4pkt 4fpkt"];
571--3742[label="1;11pkt 11fpkt"];
571--4433[label="1;26pkt 26fpkt"];
571--4796[label="0.0384615;1pkt 1fpkt"];
571--4857[label="0.0384615;1pkt 1fpkt"];
630--855[label="0.0857143;3pkt 3fpkt"];
630--3294[label="0.0857143;3pkt 3fpkt"];
630--3376[label="1;11pkt 11fpkt"];
630--4433[label="0.461538;12pkt 12fpkt"];
630--4796[label="0.0285714;1pkt 1fpkt"];
630--4857[label="0.0285714;1pkt 1fpkt"];
1354--3742[label="1;11pkt 11fpkt"];
1354--4433[label="1;12pkt 12fpkt"];
1354--4796[label="0.0833333;1pkt 1fpkt"];
1354--4857[label="0.0833333;1pkt 1fpkt"];
3742--4433[label="1;11pkt 11fpkt"];
3742--4796[label="0.0909091;1pkt 1fpkt"];
3742--4857[label="0.0909091;1pkt 1fpkt"];
4433--4796[label="0.0384615;1pkt 1fpkt"];
4433--4857[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.120.252" src_ip="156.225.201.56"/>
      <filter dst_ip="20.37.120.122" src_ip="156.225.201.56" src_port="80"/>
      <filter dst_ip="20.37.120.252" src_ip="136.6.206.127" src_port="80"/>
    </slice>
    <from sec="1262322009" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1063[label="30.130.242.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
3390[label="30.130.242.251;s;1pkt 1fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.130.242.251:60274, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60274: (50%)&lt;BR/&gt; 15990: (50%)&gt;];
}
1063--3390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="30.130.242.251" src_port="60274"/>
    </slice>
    <from sec="1262322114" usec="0"/>
    <to sec="1262322716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1076[label="200.59.17.37;s;8pkt 8fpkt", shape=diamond, color=yellow];
3393[label="200.59.17.37;s;8pkt 8fpkt", shape=hexagon, color=black];
5040[label="200.59.17.37;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.59.17.37:80, 209.72.156.112:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60298: (6.25%)&lt;BR/&gt; 54066: (6.25%)&lt;BR/&gt; 53913: (6.25%)&lt;BR/&gt; 51871: (6.25%)&gt;];
}
1076--3393[label="1;8pkt 8fpkt"];
1076--3639[label="1;8pkt 8fpkt"];
1076--5040[label="1;8pkt 8fpkt"];
3393--3639[label="1;8pkt 8fpkt"];
3393--5040[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.156.112" src_ip="200.59.17.37" src_port="80"/>
    </slice>
    <from sec="1262322135" usec="0"/>
    <to sec="1262322180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1083[label="20.37.126.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
3397[label="20.37.126.181;d;1pkt 1fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.201.50:80, 20.37.126.181:46100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46100: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1083--3397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.126.181" dst_port="46100" src_ip="156.225.201.50" src_port="80"/>
    </slice>
    <from sec="1262322146" usec="0"/>
    <to sec="1262322172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
982[label="140.14.39.85;s;24pkt 24fpkt", shape=diamond, color=yellow];
1106[label="20.37.126.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
3401[label="20.37.126.18;d;1pkt 1fpkt", shape=hexagon, color=black];
3553[label="140.14.39.85;s;24pkt 24fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.39.85:32769, *:53}[37.5%]&lt;BR/&gt;{140.14.39.85:53, *:*}[29.1667%]&lt;BR/&gt;{140.14.39.85:*, 9.47.81.220:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32%)&lt;BR/&gt; 32769: (18%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 37516: (4%)&lt;BR/&gt; 110: (4%)&gt;];
}
982--1106[label="1;1pkt 1fpkt"];
982--1336[label="0.208333;5pkt 5fpkt"];
982--3340[label="0.208333;5pkt 5fpkt"];
982--3401[label="1;1pkt 1fpkt"];
982--3553[label="1;24pkt 24fpkt"];
1106--3401[label="1;1pkt 1fpkt"];
1106--3553[label="1;1pkt 1fpkt"];
3401--3553[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.47.81.220" src_ip="140.14.39.85"/>
      <filter src_ip="140.14.39.85" src_port="53"/>
      <filter dst_port="53" src_ip="140.14.39.85" src_port="32769"/>
    </slice>
    <from sec="1262322014" usec="0"/>
    <to sec="1262322474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
533[label="163.234.103.125;s;77pkt 77fpkt", shape=diamond, color=yellow];
605[label="23.207.16.192;d;7pkt 7fpkt", shape=diamond, color=yellow];
1475[label="170.24.11.158;d;61pkt 61fpkt", shape=diamond, color=yellow];
3407[label="170.24.11.158;d;61pkt 61fpkt", shape=hexagon, color=black];
3533[label="163.234.103.125;s;77pkt 77fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.103.125:*, 170.24.11.158:80}[79.2208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53064: (0.706714%)&lt;BR/&gt; 53063: (0.706714%)&lt;BR/&gt; 53062: (0.706714%)&lt;BR/&gt; 53061: (0.706714%)&gt;];
}
533--605[label="1;7pkt 7fpkt"];
533--1475[label="1;61pkt 61fpkt"];
533--3407[label="1;61pkt 61fpkt"];
533--3533[label="1;77pkt 77fpkt"];
533--4710[label="0.0519481;4pkt 4fpkt"];
533--4725[label="0.012987;1pkt 1fpkt"];
533--4805[label="0.012987;1pkt 1fpkt"];
605--3533[label="1;7pkt 7fpkt"];
605--4710[label="0.571429;4pkt 4fpkt"];
1475--3407[label="1;61pkt 61fpkt"];
1475--3533[label="1;61pkt 61fpkt"];
3407--3533[label="1;61pkt 61fpkt"];
3533--4710[label="0.0519481;4pkt 4fpkt"];
3533--4725[label="0.012987;1pkt 1fpkt"];
3533--4805[label="0.012987;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.24.11.158" dst_port="80" src_ip="163.234.103.125"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1483[label="15.19.240.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
3409[label="15.19.240.91;s;1pkt 1fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.19.240.91:80, 208.108.253.89:59357}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59357: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1483--3409[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.253.89" dst_port="59357" src_ip="15.19.240.91" src_port="80"/>
    </slice>
    <from sec="1262322212" usec="0"/>
    <to sec="1262322454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1504[label="27.108.200.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
3415[label="27.108.200.79;s;1pkt 1fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.108.200.79:57344, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57344: (50%)&lt;BR/&gt; 15990: (50%)&gt;];
}
1504--3415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="27.108.200.79" src_port="57344"/>
    </slice>
    <from sec="1262322220" usec="0"/>
    <to sec="1262322589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1509[label="196.178.170.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
3418[label="196.178.170.135;d;2pkt 2fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.230.146:6602, 196.178.170.135:80}[50%]&lt;BR/&gt;{140.14.230.146:6602, 196.178.170.135:20480}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6602: (50%)&lt;BR/&gt; 20480: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
1509--3418[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.178.170.135" dst_port="20480" src_ip="140.14.230.146" src_port="6602"/>
      <filter dst_ip="196.178.170.135" dst_port="80" src_ip="140.14.230.146" src_port="6602"/>
    </slice>
    <from sec="1262322222" usec="0"/>
    <to sec="1262322290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1524[label="27.210.26.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
3424[label="27.210.26.221;s;1pkt 1fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.210.26.221:14458, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 14458: (50%)&gt;];
}
1524--3424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="27.210.26.221" src_port="14458"/>
    </slice>
    <from sec="1262322233" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
148[label="16.63.132.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
3438[label="16.63.132.17;s;1pkt 1fpkt", shape=hexagon, color=black];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.63.132.17:52731, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52731: (50%)&lt;BR/&gt; 15990: (50%)&gt;];
}
148--3438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="16.63.132.17" src_port="52731"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
175[label="163.234.176.147;s;1110pkt 1110fpkt", shape=diamond, color=yellow];
176[label="213.104.212.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
457[label="209.6.125.239;d;46pkt 46fpkt", shape=diamond, color=yellow];
1044[label="90.40.253.136;d;291pkt 291fpkt", shape=diamond, color=yellow];
1356[label="21.100.3.142;d;94pkt 94fpkt", shape=diamond, color=yellow];
1443[label="208.155.48.32;d;61pkt 61fpkt", shape=diamond, color=yellow];
2680[label="42.178.132.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
2925[label="213.104.212.19;d;1pkt 1fpkt", shape=hexagon, color=black];
3441[label="163.234.176.147;s;487pkt 487fpkt", shape=hexagon, color=black];
3695[label="209.6.125.239;d;40pkt 40fpkt", shape=hexagon, color=black];
5389[label="163.234.176.147;1158pkt 1158fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.176.147:80, 90.40.253.136:*}[49.0056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7264%)&lt;BR/&gt; 53: (0.136778%)&lt;BR/&gt; 60803: (0.106383%)&lt;BR/&gt; 51705: (0.106383%)&lt;BR/&gt; 60999: (0.0911854%)&gt;];
}
175--176[label="1;1pkt 1fpkt"];
175--457[label="1;46pkt 46fpkt"];
175--1044[label="0.707904;206pkt 206fpkt"];
175--1356[label="0.904255;85pkt 85fpkt"];
175--1443[label="1;61pkt 61fpkt"];
175--1969[label="0.0505051;5pkt 5fpkt"];
175--2487[label="1;1pkt 1fpkt"];
175--2680[label="1;1pkt 1fpkt"];
175--2925[label="1;1pkt 1fpkt"];
175--3347[label="0.904255;85pkt 85fpkt"];
175--3441[label="1;487pkt 487fpkt"];
175--3695[label="1;40pkt 40fpkt"];
175--3998[label="0.0505051;5pkt 5fpkt"];
175--4327[label="1;1pkt 1fpkt"];
175--4677[label="1;1pkt 1fpkt"];
175--4784[label="0.0126126;14pkt 14fpkt"];
175--4796[label="0.0864865;96pkt 96fpkt"];
175--4846[label="0.0126126;14pkt 14fpkt"];
175--4857[label="0.0864865;96pkt 96fpkt"];
175--4890[label="0.0126126;14pkt 14fpkt"];
175--5389[label="0.995495;1105pkt 1105fpkt"];
176--2925[label="1;1pkt 1fpkt"];
176--3441[label="1;1pkt 1fpkt"];
176--5389[label="1;1pkt 1fpkt"];
457--3441[label="0.782609;36pkt 36fpkt"];
457--3695[label="1;40pkt 40fpkt"];
457--4784[label="0.304348;14pkt 14fpkt"];
457--4796[label="0.673913;31pkt 31fpkt"];
457--4846[label="0.304348;14pkt 14fpkt"];
457--4857[label="0.673913;31pkt 31fpkt"];
457--4890[label="0.304348;14pkt 14fpkt"];
457--5389[label="1;46pkt 46fpkt"];
1044--3056[label="0.292096;85pkt 85fpkt"];
1044--3441[label="0.00687285;2pkt 2fpkt"];
1044--4796[label="0.00343643;1pkt 1fpkt"];
1044--4857[label="0.00343643;1pkt 1fpkt"];
1044--5389[label="0.707904;206pkt 206fpkt"];
1356--2934[label="0.0851064;8pkt 8fpkt"];
1356--3347[label="1;94pkt 94fpkt"];
1356--3441[label="0.382979;36pkt 36fpkt"];
1356--4530[label="0.0851064;8pkt 8fpkt"];
1356--4761[label="0.0106383;1pkt 1fpkt"];
1356--4796[label="0.0531915;5pkt 5fpkt"];
1356--4827[label="0.0106383;1pkt 1fpkt"];
1356--4857[label="0.0531915;5pkt 5fpkt"];
1356--4874[label="0.0106383;1pkt 1fpkt"];
1356--5389[label="0.893617;84pkt 84fpkt"];
1443--3441[label="0.983607;60pkt 60fpkt"];
1443--5389[label="1;61pkt 61fpkt"];
2680--5389[label="1;1pkt 1fpkt"];
2925--3441[label="1;1pkt 1fpkt"];
2925--5389[label="1;1pkt 1fpkt"];
3441--3695[label="0.9;36pkt 36fpkt"];
3441--3998[label="0.020202;2pkt 2fpkt"];
3441--4784[label="0.0123203;6pkt 6fpkt"];
3441--4796[label="0.197125;96pkt 96fpkt"];
3441--4846[label="0.0123203;6pkt 6fpkt"];
3441--4857[label="0.197125;96pkt 96fpkt"];
3441--4890[label="0.0123203;6pkt 6fpkt"];
3441--5389[label="0.989733;482pkt 482fpkt"];
3695--4784[label="0.225;9pkt 9fpkt"];
3695--4796[label="0.775;31pkt 31fpkt"];
3695--4846[label="0.225;9pkt 9fpkt"];
3695--4857[label="0.775;31pkt 31fpkt"];
3695--4890[label="0.225;9pkt 9fpkt"];
3695--5389[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="90.40.253.136" src_ip="163.234.176.147" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
192[label="163.234.100.21;d;13pkt 13fpkt", shape=diamond, color=yellow];
195[label="197.37.140.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
2259[label="197.37.140.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
2927[label="163.234.100.21;d;13pkt 13fpkt", shape=hexagon, color=black];
3443[label="197.37.140.189;s;1pkt 1fpkt", shape=hexagon, color=black];
4029[label="197.37.140.136;s;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 163.234.100.21:*}[46.1538%]&lt;BR/&gt;{*:*, 163.234.100.21:49394}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.6667%)&lt;BR/&gt; 49394: (13.3333%)&lt;BR/&gt; 3819: (6.66667%)&lt;BR/&gt; 3785: (6.66667%)&lt;BR/&gt; 65309: (3.33333%)&gt;];
}
192--195[label="1;1pkt 1fpkt"];
192--2259[label="1;1pkt 1fpkt"];
192--2927[label="1;13pkt 13fpkt"];
192--3443[label="1;1pkt 1fpkt"];
192--4029[label="1;1pkt 1fpkt"];
192--4784[label="0.0769231;1pkt 1fpkt"];
192--4796[label="0.0769231;1pkt 1fpkt"];
192--4846[label="0.0769231;1pkt 1fpkt"];
192--4857[label="0.0769231;1pkt 1fpkt"];
192--4890[label="0.0769231;1pkt 1fpkt"];
195--2927[label="1;1pkt 1fpkt"];
195--3443[label="1;1pkt 1fpkt"];
195--4796[label="1;1pkt 1fpkt"];
195--4857[label="1;1pkt 1fpkt"];
2259--2927[label="1;1pkt 1fpkt"];
2259--4029[label="1;1pkt 1fpkt"];
2259--4784[label="1;1pkt 1fpkt"];
2259--4846[label="1;1pkt 1fpkt"];
2259--4890[label="1;1pkt 1fpkt"];
2927--3443[label="1;1pkt 1fpkt"];
2927--4029[label="1;1pkt 1fpkt"];
2927--4784[label="0.0769231;1pkt 1fpkt"];
2927--4796[label="0.0769231;1pkt 1fpkt"];
2927--4846[label="0.0769231;1pkt 1fpkt"];
2927--4857[label="0.0769231;1pkt 1fpkt"];
2927--4890[label="0.0769231;1pkt 1fpkt"];
3443--4796[label="1;1pkt 1fpkt"];
3443--4857[label="1;1pkt 1fpkt"];
4029--4784[label="1;1pkt 1fpkt"];
4029--4846[label="1;1pkt 1fpkt"];
4029--4890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.100.21" src_port="80"/>
      <filter dst_ip="163.234.100.21" dst_port="49394"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
260[label="209.169.233.68;d;2pkt 2fpkt", shape=diamond, color=yellow];
261[label="163.234.100.24;s;19pkt 19fpkt", shape=diamond, color=yellow];
3039[label="209.169.233.68;d;2pkt 2fpkt", shape=hexagon, color=black];
3450[label="163.234.100.24;s;18pkt 18fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.100.24:*, 91.11.146.83:80}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.3659%)&lt;BR/&gt; 1935: (7.31707%)&lt;BR/&gt; 3161: (4.87805%)&lt;BR/&gt; 5050: (2.43902%)&lt;BR/&gt; 3222: (2.43902%)&gt;];
}
260--261[label="0.5;1pkt 1fpkt"];
260--296[label="0.5;1pkt 1fpkt"];
260--3039[label="1;2pkt 2fpkt"];
260--3450[label="0.5;1pkt 1fpkt"];
261--3039[label="0.5;1pkt 1fpkt"];
261--3450[label="1;18pkt 18fpkt"];
3039--3450[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.11.146.83" dst_port="80" src_ip="163.234.100.24"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,053,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
539[label="206.113.24.68;d;1043pkt 1043fpkt", shape=diamond, color=yellow];
2993[label="206.113.24.68;d;274pkt 274fpkt", shape=hexagon, color=black];
3473[label="140.14.5.220;s;570pkt 570fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.5.220:80, 206.113.24.68:*}[98.8626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38773: (0.0794913%)&lt;BR/&gt; 36727: (0.0794913%)&lt;BR/&gt; 36726: (0.0794913%)&lt;BR/&gt; 36720: (0.0794913%)&gt;];
}
539--2993[label="1;274pkt 274fpkt"];
539--3473[label="0.978947;558pkt 558fpkt"];
539--4784[label="0.012464;13pkt 13fpkt"];
539--4796[label="0.154362;161pkt 161fpkt"];
539--4846[label="0.012464;13pkt 13fpkt"];
539--4857[label="0.154362;161pkt 161fpkt"];
539--4890[label="0.012464;13pkt 13fpkt"];
2993--3473[label="1;274pkt 274fpkt"];
2993--4784[label="0.0474453;13pkt 13fpkt"];
2993--4796[label="0.587591;161pkt 161fpkt"];
2993--4846[label="0.0474453;13pkt 13fpkt"];
2993--4857[label="0.587591;161pkt 161fpkt"];
2993--4890[label="0.0474453;13pkt 13fpkt"];
3473--4784[label="0.022807;13pkt 13fpkt"];
3473--4796[label="0.282456;161pkt 161fpkt"];
3473--4846[label="0.022807;13pkt 13fpkt"];
3473--4857[label="0.282456;161pkt 161fpkt"];
3473--4890[label="0.022807;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="206.113.24.68" src_ip="140.14.5.220" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
452[label="163.234.176.157;s;213pkt 213fpkt", shape=diamond, color=yellow];
506[label="20.37.122.8;d;178pkt 178fpkt", shape=diamond, color=yellow];
3116[label="20.37.122.8;d;139pkt 139fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.176.157:21, 20.37.122.8:*}[57.7465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (34.717%)&lt;BR/&gt; 64975: (0.283019%)&lt;BR/&gt; 64844: (0.283019%)&lt;BR/&gt; 64708: (0.283019%)&lt;BR/&gt; 64299: (0.283019%)&gt;];
}
452--506[label="1;178pkt 178fpkt"];
452--926[label="0.00735294;1pkt 1fpkt"];
452--1189[label="0.145946;27pkt 27fpkt"];
452--3116[label="1;139pkt 139fpkt"];
452--3495[label="1;166pkt 166fpkt"];
452--3527[label="0.00735294;1pkt 1fpkt"];
452--3664[label="0.145946;27pkt 27fpkt"];
506--3116[label="1;139pkt 139fpkt"];
506--3495[label="0.837349;139pkt 139fpkt"];
3116--3495[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.122.8" src_ip="163.234.176.157" src_port="21"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1262[label="203.205.166.6;s;10pkt 10fpkt", shape=diamond, color=yellow];
3500[label="203.205.166.6;s;10pkt 10fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.205.166.6:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1262--2360[label="0.1;1pkt 1fpkt"];
1262--3500[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="203.205.166.6"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
332[label="163.234.103.172;d;76pkt 76fpkt", shape=diamond, color=yellow];
1162[label="36.153.170.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
1266[label="200.22.87.192;s;2pkt 2fpkt", shape=diamond, color=yellow];
3503[label="200.22.87.192;s;2pkt 2fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 163.234.103.172:4305}[76.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4305: (35.8025%)&lt;BR/&gt; 80: (4.32099%)&lt;BR/&gt; 39338: (3.7037%)&lt;BR/&gt; 63931: (1.85185%)&lt;BR/&gt; 49217: (1.85185%)&gt;];
}
332--1162[label="1;1pkt 1fpkt"];
332--1266[label="1;2pkt 2fpkt"];
332--3503[label="1;2pkt 2fpkt"];
1266--3503[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.172" dst_port="4305"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
502[label="209.67.90.73;d;568pkt 568fpkt", shape=diamond, color=yellow];
1802[label="163.234.103.120;d;450pkt 450fpkt", shape=diamond, color=yellow];
2464[label="214.48.245.160;s;8pkt 8fpkt", shape=diamond, color=yellow];
3620[label="163.234.103.120;d;342pkt 342fpkt", shape=hexagon, color=black];
4919[label="19.54.163.6;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5428[label="214.48.245.160;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5479[label="19.54.168.179;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5895[label="214.48.245.160;8pkt 8fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 163.234.103.120:47197}[39.8833%]&lt;BR/&gt;{*:53, 209.67.90.73:*}[26.6537%]&lt;BR/&gt;{*:80, 209.67.90.73:*}[23.0545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47197: (25.4764%)&lt;BR/&gt; 80: (11.1503%)&lt;BR/&gt; 53: (9.77417%)&lt;BR/&gt; 0: (4.94001%)&lt;BR/&gt; 16001: (0.635145%)&gt;];
}
502--732[label="0.00176056;1pkt 1fpkt"];
502--745[label="0.0176056;10pkt 10fpkt"];
502--1271[label="0.0140845;8pkt 8fpkt"];
502--1297[label="0.00528169;3pkt 3fpkt"];
502--1298[label="0.00176056;1pkt 1fpkt"];
502--1299[label="0.00880282;5pkt 5fpkt"];
502--1771[label="0.00176056;1pkt 1fpkt"];
502--1867[label="0.00352113;2pkt 2fpkt"];
502--2193[label="0.8;16pkt 16fpkt"];
502--2464[label="1;8pkt 8fpkt"];
502--2731[label="0.013245;6pkt 6fpkt"];
502--3055[label="0.00176056;1pkt 1fpkt"];
502--3067[label="0.00880282;5pkt 5fpkt"];
502--3317[label="0.00528169;3pkt 3fpkt"];
502--3508[label="0.0140845;8pkt 8fpkt"];
502--3520[label="1;424pkt 424fpkt"];
502--3523[label="0.00176056;1pkt 1fpkt"];
502--3610[label="0.00176056;1pkt 1fpkt"];
502--3716[label="0.00880282;5pkt 5fpkt"];
502--4580[label="0.00176056;1pkt 1fpkt"];
502--4795[label="0.0633803;36pkt 36fpkt"];
502--4796[label="0.0792254;45pkt 45fpkt"];
502--4856[label="0.0633803;36pkt 36fpkt"];
502--4857[label="0.0792254;45pkt 45fpkt"];
502--4919[label="0.64;16pkt 16fpkt"];
502--4924[label="0.00542005;2pkt 2fpkt"];
502--4936[label="0.0148148;2pkt 2fpkt"];
502--5367[label="0.00176056;1pkt 1fpkt"];
502--5428[label="1;8pkt 8fpkt"];
502--5448[label="0.00528169;3pkt 3fpkt"];
502--5450[label="0.00352113;2pkt 2fpkt"];
502--5479[label="0.75;6pkt 6fpkt"];
502--5690[label="0.00542005;2pkt 2fpkt"];
502--5895[label="1;8pkt 8fpkt"];
1802--3620[label="1;342pkt 342fpkt"];
1802--5479[label="0.125;1pkt 1fpkt"];
2464--5428[label="1;8pkt 8fpkt"];
2464--5895[label="1;8pkt 8fpkt"];
3620--5479[label="0.125;1pkt 1fpkt"];
5428--5895[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.67.90.73" src_port="53"/>
      <filter dst_ip="209.67.90.73" src_port="80"/>
      <filter dst_ip="163.234.103.120" dst_port="47197"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1620[label="172.16.64.5;s;168pkt 168fpkt", shape=diamond, color=yellow];
3513[label="172.16.64.5;s;104pkt 104fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.16.64.5:47117, *:623}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47117: (50%)&lt;BR/&gt; 623: (50%)&gt;];
}
1620--3513[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="623" src_ip="172.16.64.5" src_port="47117"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1324[label="163.234.229.192;s;3pkt 3fpkt", shape=diamond, color=yellow];
3537[label="163.234.229.192;s;3pkt 3fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.229.192:80, 170.18.244.35:49629}[33.3333%]&lt;BR/&gt;{163.234.229.192:80, 20.37.125.53:42976}[33.3333%]&lt;BR/&gt;{163.234.229.192:80, 21.100.24.138:33774}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49629: (16.6667%)&lt;BR/&gt; 42976: (16.6667%)&lt;BR/&gt; 33774: (16.6667%)&gt;];
}
1324--3537[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="21.100.24.138" dst_port="33774" src_ip="163.234.229.192" src_port="80"/>
      <filter dst_ip="20.37.125.53" dst_port="42976" src_ip="163.234.229.192" src_port="80"/>
      <filter dst_ip="170.18.244.35" dst_port="49629" src_ip="163.234.229.192" src_port="80"/>
    </slice>
    <from sec="1262322699" usec="0"/>
    <to sec="1262322732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1646[label="208.108.244.107;s;126pkt 126fpkt", shape=diamond, color=yellow];
3538[label="208.108.244.107;s;108pkt 108fpkt", shape=hexagon, color=black];
5272[label="208.108.244.107;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.244.107:25, *:*}[44.7761%]&lt;BR/&gt;{208.108.244.107:*, *:113}[43.2836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (22.5543%)&lt;BR/&gt; 113: (21.7391%)&lt;BR/&gt; 995: (5.29891%)&lt;BR/&gt; 4135: (0.679348%)&lt;BR/&gt; 65107: (0.407609%)&gt;];
}
1646--3019[label="0.00793651;1pkt 1fpkt"];
1646--3538[label="1;108pkt 108fpkt"];
1646--5272[label="1;126pkt 126fpkt"];
3538--5272[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.244.107" src_port="25"/>
      <filter dst_port="113" src_ip="208.108.244.107"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1653[label="140.14.26.6;s;242pkt 242fpkt", shape=diamond, color=yellow];
3541[label="140.14.26.6;s;150pkt 150fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.26.6:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1653--1829[label="0.0103093;1pkt 1fpkt"];
1653--2920[label="0.00413223;1pkt 1fpkt"];
1653--2952[label="0.00413223;1pkt 1fpkt"];
1653--3195[label="0.00413223;1pkt 1fpkt"];
1653--3265[label="0.0075188;1pkt 1fpkt"];
1653--3436[label="0.00413223;1pkt 1fpkt"];
1653--3468[label="0.00840336;1pkt 1fpkt"];
1653--3541[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.26.6"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
998[label="20.37.125.230;d;10pkt 10fpkt", shape=diamond, color=yellow];
999[label="136.6.8.33;s;5pkt 5fpkt", shape=diamond, color=yellow];
3556[label="20.37.125.230;d;7pkt 7fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.8.33:80, 20.37.125.230:*}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56428: (6.81818%)&lt;BR/&gt; 51766: (6.81818%)&lt;BR/&gt; 45949: (6.81818%)&lt;BR/&gt; 36955: (6.81818%)&gt;];
}
998--999[label="1;5pkt 5fpkt"];
998--3556[label="1;7pkt 7fpkt"];
998--3666[label="0.1;1pkt 1fpkt"];
998--3878[label="0.1;1pkt 1fpkt"];
999--3556[label="1;5pkt 5fpkt"];
3556--3878[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.125.230" src_ip="136.6.8.33" src_port="80"/>
    </slice>
    <from sec="1262322027" usec="0"/>
    <to sec="1262322546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
944[label="136.6.101.38;s;82pkt 82fpkt", shape=diamond, color=yellow];
1012[label="20.37.125.168;d;7pkt 7fpkt", shape=diamond, color=yellow];
3128[label="136.6.101.38;s;72pkt 72fpkt", shape=hexagon, color=black];
3561[label="20.37.125.168;d;6pkt 6fpkt", shape=hexagon, color=black];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.101.38:80, 20.37.120.66:*}[67.4419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40992: (1.1976%)&lt;BR/&gt; 33403: (1.1976%)&lt;BR/&gt; 37196: (0.898204%)&lt;BR/&gt; 63682: (0.598802%)&gt;];
}
944--1012[label="0.428571;3pkt 3fpkt"];
944--1642[label="0.707317;58pkt 58fpkt"];
944--3128[label="1;72pkt 72fpkt"];
944--3561[label="0.333333;2pkt 2fpkt"];
944--4233[label="0.707317;58pkt 58fpkt"];
944--4796[label="0.0609756;5pkt 5fpkt"];
944--4857[label="0.0609756;5pkt 5fpkt"];
1012--3128[label="0.428571;3pkt 3fpkt"];
1012--3561[label="1;6pkt 6fpkt"];
1012--3878[label="0.285714;2pkt 2fpkt"];
1012--4796[label="0.142857;1pkt 1fpkt"];
1012--4857[label="0.142857;1pkt 1fpkt"];
3128--3561[label="0.333333;2pkt 2fpkt"];
3128--4233[label="0.722222;52pkt 52fpkt"];
3128--4796[label="0.0694444;5pkt 5fpkt"];
3128--4857[label="0.0694444;5pkt 5fpkt"];
3561--3878[label="0.333333;2pkt 2fpkt"];
3561--4796[label="0.166667;1pkt 1fpkt"];
3561--4857[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.120.66" src_ip="136.6.101.38" src_port="80"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1403[label="19.54.166.157;s;338pkt 338fpkt", shape=diamond, color=yellow];
3564[label="19.54.166.157;s;263pkt 263fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.54.166.157:80, 209.67.91.11:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60909: (0.166389%)&lt;BR/&gt; 60807: (0.166389%)&lt;BR/&gt; 60649: (0.166389%)&lt;BR/&gt; 60525: (0.166389%)&gt;];
}
1403--3564[label="1;263pkt 263fpkt"];
1403--4784[label="0.00591716;2pkt 2fpkt"];
1403--4796[label="0.0295858;10pkt 10fpkt"];
1403--4846[label="0.00591716;2pkt 2fpkt"];
1403--4857[label="0.0295858;10pkt 10fpkt"];
1403--4890[label="0.00591716;2pkt 2fpkt"];
3564--4796[label="0.0380228;10pkt 10fpkt"];
3564--4857[label="0.0380228;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.67.91.11" src_ip="19.54.166.157" src_port="80"/>
    </slice>
    <from sec="1262322047" usec="0"/>
    <to sec="1262322821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1433[label="93.78.48.120;d;22pkt 22fpkt", shape=diamond, color=yellow];
3579[label="93.78.48.120;d;22pkt 22fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.169.56:80, 93.78.48.120:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4848: (2.27273%)&lt;BR/&gt; 4847: (2.27273%)&lt;BR/&gt; 4846: (2.27273%)&lt;BR/&gt; 4781: (2.27273%)&gt;];
}
1433--3579[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="93.78.48.120" src_ip="140.14.169.56" src_port="80"/>
    </slice>
    <from sec="1262322120" usec="0"/>
    <to sec="1262322320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
305[label="163.234.100.32;d;6pkt 6fpkt", shape=diamond, color=yellow];
1097[label="197.37.141.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
3582[label="197.37.141.121;s;1pkt 1fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.241.32.47:80, 163.234.100.32:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2656: (18.75%)&lt;BR/&gt; 38937: (6.25%)&lt;BR/&gt; 23561: (6.25%)&lt;BR/&gt; 2654: (6.25%)&gt;];
}
305--1097[label="1;1pkt 1fpkt"];
305--3582[label="1;1pkt 1fpkt"];
305--4796[label="0.166667;1pkt 1fpkt"];
305--4857[label="0.166667;1pkt 1fpkt"];
305--5183[label="0.2;1pkt 1fpkt"];
305--5552[label="0.25;1pkt 1fpkt"];
1097--3582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.100.32" src_ip="170.241.32.47" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
575[label="32.97.84.9;s;4pkt 4fpkt", shape=diamond, color=yellow];
3593[label="32.97.84.9;s;4pkt 4fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.97.84.9:3553, 209.72.24.104:80}[25%]&lt;BR/&gt;{32.97.84.9:3581, 209.72.24.104:80}[25%]&lt;BR/&gt;{32.97.84.9:3605, 209.72.24.104:80}[25%]&lt;BR/&gt;{32.97.84.9:3641, 209.72.24.104:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3641: (12.5%)&lt;BR/&gt; 3605: (12.5%)&lt;BR/&gt; 3581: (12.5%)&lt;BR/&gt; 3553: (12.5%)&gt;];
}
575--3593[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.97.84.9" src_port="3641"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.97.84.9" src_port="3605"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.97.84.9" src_port="3581"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.97.84.9" src_port="3553"/>
    </slice>
    <from sec="1262322211" usec="0"/>
    <to sec="1262322314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1526[label="38.55.0.238;s;4pkt 4fpkt", shape=diamond, color=yellow];
3598[label="38.55.0.238;s;4pkt 4fpkt", shape=hexagon, color=black];
5638[label="38.55.0.238;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.55.0.238:2450, 208.108.253.82:80}[25%]&lt;BR/&gt;{38.55.0.238:2451, 208.108.253.82:80}[25%]&lt;BR/&gt;{38.55.0.238:2454, 208.108.253.82:80}[25%]&lt;BR/&gt;{38.55.0.238:2456, 208.108.253.82:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2456: (12.5%)&lt;BR/&gt; 2454: (12.5%)&lt;BR/&gt; 2451: (12.5%)&lt;BR/&gt; 2450: (12.5%)&gt;];
}
1526--2926[label="1;4pkt 4fpkt"];
1526--3598[label="1;4pkt 4fpkt"];
1526--5638[label="1;4pkt 4fpkt"];
3598--5638[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.253.82" dst_port="80" src_ip="38.55.0.238" src_port="2456"/>
      <filter dst_ip="208.108.253.82" dst_port="80" src_ip="38.55.0.238" src_port="2454"/>
      <filter dst_ip="208.108.253.82" dst_port="80" src_ip="38.55.0.238" src_port="2451"/>
      <filter dst_ip="208.108.253.82" dst_port="80" src_ip="38.55.0.238" src_port="2450"/>
    </slice>
    <from sec="1262322233" usec="0"/>
    <to sec="1262322338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1537[label="42.148.94.129;s;159pkt 159fpkt", shape=diamond, color=yellow];
3601[label="42.148.94.129;s;159pkt 159fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.148.94.129:*, 136.0.231.8:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 51844: (0.314465%)&lt;BR/&gt; 51843: (0.314465%)&lt;BR/&gt; 51842: (0.314465%)&lt;BR/&gt; 51841: (0.314465%)&gt;];
}
1537--3601[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_ip="136.0.231.8" dst_port="443" src_ip="42.148.94.129"/>
    </slice>
    <from sec="1262322246" usec="0"/>
    <to sec="1262322281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1540[label="219.108.146.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
3603[label="219.108.146.22;d;2pkt 2fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.245.249:22, 219.108.146.22:56133}[50%]&lt;BR/&gt;{208.108.245.249:65161, 219.108.146.22:873}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65161: (25%)&lt;BR/&gt; 56133: (25%)&lt;BR/&gt; 873: (25%)&lt;BR/&gt; 22: (25%)&gt;];
}
1540--3603[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.108.146.22" dst_port="873" src_ip="208.108.245.249" src_port="65161"/>
      <filter dst_ip="219.108.146.22" dst_port="56133" src_ip="208.108.245.249" src_port="22"/>
    </slice>
    <from sec="1262322261" usec="0"/>
    <to sec="1262322308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1703[label="21.100.27.143;d;7pkt 7fpkt", shape=diamond, color=yellow];
1758[label="136.25.49.164;s;4pkt 4fpkt", shape=diamond, color=yellow];
3608[label="136.25.49.164;s;4pkt 4fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.33.83.222:53, 21.100.27.143:*}[60%]&lt;BR/&gt;{136.25.49.164:80, 28.9.51.45:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 53: (20%)&lt;BR/&gt; 50156: (10%)&lt;BR/&gt; 53005: (6.66667%)&lt;BR/&gt; 52995: (6.66667%)&gt;];
}
1703--1758[label="0.25;1pkt 1fpkt"];
1703--2934[label="0.857143;6pkt 6fpkt"];
1703--3580[label="1;7pkt 7fpkt"];
1703--3608[label="0.25;1pkt 1fpkt"];
1703--4530[label="0.857143;6pkt 6fpkt"];
1758--3580[label="0.25;1pkt 1fpkt"];
1758--3608[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="21.100.27.143" src_ip="217.33.83.222" src_port="53"/>
      <filter dst_ip="28.9.51.45" src_ip="136.25.49.164" src_port="80"/>
    </slice>
    <from sec="1262322136" usec="0"/>
    <to sec="1262322371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
692[label="209.164.110.28;d;88pkt 88fpkt", shape=diamond, color=yellow];
3630[label="209.164.110.28;d;74pkt 74fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.164.110.28:28752}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28752: (50%)&lt;BR/&gt; 21549: (2.16049%)&lt;BR/&gt; 24227: (1.85185%)&lt;BR/&gt; 17243: (1.85185%)&lt;BR/&gt; 23130: (1.23457%)&gt;];
}
692--3630[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="209.164.110.28" dst_port="28752"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
267[label="209.84.106.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
3635[label="209.84.106.117;d;1pkt 1fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.26.25:1194, 209.84.106.117:51119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51119: (50%)&lt;BR/&gt; 1194: (50%)&gt;];
}
267--268[label="1;1pkt 1fpkt"];
267--3635[label="1;1pkt 1fpkt"];
267--4999[label="1;1pkt 1fpkt"];
3635--4999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.84.106.117" dst_port="51119" src_ip="140.14.26.25" src_port="1194"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
300[label="197.37.140.203;s;4pkt 4fpkt", shape=diamond, color=yellow];
433[label="197.37.140.83;s;3pkt 3fpkt", shape=diamond, color=yellow];
718[label="163.234.103.121;d;16pkt 16fpkt", shape=diamond, color=yellow];
1098[label="197.37.140.98;s;2pkt 2fpkt", shape=diamond, color=yellow];
1474[label="197.37.140.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
3269[label="197.37.140.83;s;3pkt 3fpkt", shape=hexagon, color=black];
3406[label="197.37.140.232;s;2pkt 2fpkt", shape=hexagon, color=black];
3641[label="163.234.103.121;d;16pkt 16fpkt", shape=hexagon, color=black];
5199[label="197.37.140.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5235[label="197.37.140.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5308[label="30.190.105.121;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5552[label="197.37.140.203;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5626[label="197.37.140.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5956[label="197.37.140.232;2pkt 2fpkt", shape=invtriangle, color=brown];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 163.234.103.121:*}[72.7273%]&lt;BR/&gt;{30.190.105.121:80, *:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57739: (4.6875%)&lt;BR/&gt; 57738: (4.6875%)&lt;BR/&gt; 57744: (3.90625%)&lt;BR/&gt; 57743: (3.125%)&gt;];
}
300--305[label="0.25;1pkt 1fpkt"];
300--718[label="0.75;3pkt 3fpkt"];
300--3641[label="0.75;3pkt 3fpkt"];
300--4796[label="0.25;1pkt 1fpkt"];
300--4857[label="0.25;1pkt 1fpkt"];
300--5552[label="1;4pkt 4fpkt"];
433--718[label="0.666667;2pkt 2fpkt"];
433--2629[label="0.333333;1pkt 1fpkt"];
433--3269[label="1;3pkt 3fpkt"];
433--3641[label="0.666667;2pkt 2fpkt"];
433--4784[label="0.333333;1pkt 1fpkt"];
433--4846[label="0.333333;1pkt 1fpkt"];
433--4890[label="0.333333;1pkt 1fpkt"];
433--5199[label="1;1pkt 1fpkt"];
718--1098[label="1;2pkt 2fpkt"];
718--1474[label="1;2pkt 2fpkt"];
718--3269[label="0.666667;2pkt 2fpkt"];
718--3406[label="1;2pkt 2fpkt"];
718--3641[label="1;16pkt 16fpkt"];
718--4784[label="0.125;2pkt 2fpkt"];
718--4846[label="0.125;2pkt 2fpkt"];
718--4890[label="0.125;2pkt 2fpkt"];
718--5199[label="1;1pkt 1fpkt"];
718--5235[label="1;2pkt 2fpkt"];
718--5308[label="0.2;1pkt 1fpkt"];
718--5552[label="0.75;3pkt 3fpkt"];
718--5626[label="1;2pkt 2fpkt"];
718--5956[label="1;2pkt 2fpkt"];
1098--3641[label="1;2pkt 2fpkt"];
1098--5235[label="1;2pkt 2fpkt"];
1474--3406[label="1;2pkt 2fpkt"];
1474--3641[label="1;2pkt 2fpkt"];
1474--5626[label="1;2pkt 2fpkt"];
1474--5956[label="1;2pkt 2fpkt"];
3269--3641[label="0.666667;2pkt 2fpkt"];
3269--4784[label="0.333333;1pkt 1fpkt"];
3269--4846[label="0.333333;1pkt 1fpkt"];
3269--4890[label="0.333333;1pkt 1fpkt"];
3269--5199[label="1;1pkt 1fpkt"];
3406--3641[label="1;2pkt 2fpkt"];
3406--5626[label="1;2pkt 2fpkt"];
3406--5956[label="1;2pkt 2fpkt"];
3641--4784[label="0.125;2pkt 2fpkt"];
3641--4846[label="0.125;2pkt 2fpkt"];
3641--4890[label="0.125;2pkt 2fpkt"];
3641--5199[label="1;1pkt 1fpkt"];
3641--5235[label="1;2pkt 2fpkt"];
3641--5308[label="0.2;1pkt 1fpkt"];
3641--5552[label="0.75;3pkt 3fpkt"];
3641--5626[label="1;2pkt 2fpkt"];
3641--5956[label="1;2pkt 2fpkt"];
5626--5956[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="30.190.105.121" src_port="80"/>
      <filter dst_ip="163.234.103.121" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1565[label="136.25.212.127;d;14pkt 14fpkt", shape=diamond, color=yellow];
1777[label="27.164.21.20;s;13pkt 13fpkt", shape=diamond, color=yellow];
3653[label="136.25.212.127;d;14pkt 14fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.164.21.20:80, 136.25.212.127:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59316: (3.65854%)&lt;BR/&gt; 59313: (3.65854%)&lt;BR/&gt; 59311: (3.65854%)&lt;BR/&gt; 59248: (3.65854%)&gt;];
}
1565--1777[label="1;13pkt 13fpkt"];
1565--3653[label="1;14pkt 14fpkt"];
1777--3653[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.212.127" src_ip="27.164.21.20" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
389[label="140.14.133.110;s;231pkt 231fpkt", shape=diamond, color=yellow];
488[label="140.14.133.104;s;302pkt 302fpkt", shape=diamond, color=yellow];
645[label="45.36.134.225;d;13pkt 13fpkt", shape=diamond, color=yellow];
661[label="206.53.145.150;d;69pkt 69fpkt", shape=diamond, color=yellow];
1081[label="32.42.83.215;d;6pkt 6fpkt", shape=diamond, color=yellow];
1436[label="18.192.112.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1550[label="200.193.209.196;d;18pkt 18fpkt", shape=diamond, color=yellow];
1678[label="140.14.220.144;s;140pkt 140fpkt", shape=diamond, color=yellow];
1757[label="33.43.107.14;d;28pkt 28fpkt", shape=diamond, color=yellow];
1792[label="218.254.202.164;d;12pkt 12fpkt", shape=diamond, color=yellow];
1924[label="20.37.120.73;d;95pkt 95fpkt", shape=diamond, color=yellow];
1934[label="46.48.10.182;d;114pkt 114fpkt", shape=diamond, color=yellow];
2412[label="140.14.133.98;s;45pkt 45fpkt", shape=diamond, color=yellow];
2468[label="192.3.32.81;d;155pkt 155fpkt", shape=diamond, color=yellow];
2509[label="89.99.114.32;d;12pkt 12fpkt", shape=diamond, color=yellow];
2604[label="140.14.132.116;s;33pkt 33fpkt", shape=diamond, color=yellow];
2682[label="11.22.86.100;d;32pkt 32fpkt", shape=diamond, color=yellow];
2691[label="31.25.176.172;d;6pkt 6fpkt", shape=diamond, color=yellow];
2724[label="37.77.114.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
3014[label="45.36.134.225;d;13pkt 13fpkt", shape=hexagon, color=black];
3604[label="200.193.209.196;d;18pkt 18fpkt", shape=hexagon, color=black];
3666[label="140.14.133.110;s;231pkt 231fpkt", shape=hexagon, color=black];
3751[label="140.14.220.144;s;110pkt 110fpkt", shape=hexagon, color=black];
3811[label="218.254.202.164;d;12pkt 12fpkt", shape=hexagon, color=black];
3971[label="206.53.145.150;d;69pkt 69fpkt", shape=hexagon, color=black];
4129[label="46.48.10.182;d;90pkt 90fpkt", shape=hexagon, color=black];
4273[label="140.14.133.98;s;45pkt 45fpkt", shape=hexagon, color=black];
5393[label="140.14.139.148;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5878[label="140.14.139.148;41pkt 41fpkt", shape=invtriangle, color=brown];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.133.104:80, *:*}[31.6894%]&lt;BR/&gt;{140.14.133.110:80, *:*}[24.2392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7228%)&lt;BR/&gt; 53: (0.201613%)&lt;BR/&gt; 50472: (0.15121%)&lt;BR/&gt; 43096: (0.15121%)&lt;BR/&gt; 50474: (0.100806%)&gt;];
}
389--645[label="0.153846;2pkt 2fpkt"];
389--661[label="0.985507;68pkt 68fpkt"];
389--961[label="0.8;8pkt 8fpkt"];
389--979[label="0.222222;2pkt 2fpkt"];
389--998[label="0.1;1pkt 1fpkt"];
389--1336[label="0.0208333;2pkt 2fpkt"];
389--1757[label="0.214286;6pkt 6fpkt"];
389--1792[label="0.25;3pkt 3fpkt"];
389--1911[label="0.0483871;3pkt 3fpkt"];
389--1932[label="0.031746;2pkt 2fpkt"];
389--1984[label="0.5;1pkt 1fpkt"];
389--2468[label="0.251613;39pkt 39fpkt"];
389--2594[label="0.142857;2pkt 2fpkt"];
389--2682[label="0.09375;3pkt 3fpkt"];
389--2691[label="0.666667;4pkt 4fpkt"];
389--3014[label="0.153846;2pkt 2fpkt"];
389--3340[label="0.0208333;2pkt 2fpkt"];
389--3666[label="1;231pkt 231fpkt"];
389--3811[label="0.25;3pkt 3fpkt"];
389--3971[label="0.985507;68pkt 68fpkt"];
389--4007[label="0.5;1pkt 1fpkt"];
389--4275[label="0.142857;2pkt 2fpkt"];
389--4796[label="0.04329;10pkt 10fpkt"];
389--4857[label="0.04329;10pkt 10fpkt"];
488--645[label="0.384615;5pkt 5fpkt"];
488--1081[label="1;6pkt 6fpkt"];
488--1102[label="0.375;30pkt 30fpkt"];
488--1336[label="0.03125;3pkt 3fpkt"];
488--1436[label="1;1pkt 1fpkt"];
488--1550[label="1;18pkt 18fpkt"];
488--1757[label="0.785714;22pkt 22fpkt"];
488--1792[label="0.25;3pkt 3fpkt"];
488--2468[label="0.2;31pkt 31fpkt"];
488--2509[label="1;12pkt 12fpkt"];
488--2568[label="0.0149254;1pkt 1fpkt"];
488--2682[label="0.71875;23pkt 23fpkt"];
488--2691[label="0.333333;2pkt 2fpkt"];
488--2724[label="1;2pkt 2fpkt"];
488--2758[label="0.05;2pkt 2fpkt"];
488--3014[label="0.384615;5pkt 5fpkt"];
488--3340[label="0.03125;3pkt 3fpkt"];
488--3604[label="1;18pkt 18fpkt"];
488--3776[label="0.405405;30pkt 30fpkt"];
488--3811[label="0.25;3pkt 3fpkt"];
488--4796[label="0.0430464;13pkt 13fpkt"];
488--4857[label="0.0430464;13pkt 13fpkt"];
645--1678[label="0.0769231;1pkt 1fpkt"];
645--2412[label="0.153846;2pkt 2fpkt"];
645--2591[label="0.0769231;1pkt 1fpkt"];
645--2604[label="0.0769231;1pkt 1fpkt"];
645--3014[label="1;13pkt 13fpkt"];
645--3666[label="0.153846;2pkt 2fpkt"];
645--3751[label="0.0769231;1pkt 1fpkt"];
645--4263[label="0.0769231;1pkt 1fpkt"];
645--4273[label="0.153846;2pkt 2fpkt"];
645--4796[label="0.923077;12pkt 12fpkt"];
645--4857[label="0.923077;12pkt 12fpkt"];
661--2412[label="0.0222222;1pkt 1fpkt"];
661--3666[label="0.985507;68pkt 68fpkt"];
661--3971[label="1;69pkt 69fpkt"];
661--4273[label="0.0222222;1pkt 1fpkt"];
661--4796[label="0.0144928;1pkt 1fpkt"];
661--4857[label="0.0144928;1pkt 1fpkt"];
1550--3604[label="1;18pkt 18fpkt"];
1678--1792[label="0.0833333;1pkt 1fpkt"];
1678--1934[label="1;114pkt 114fpkt"];
1678--2468[label="0.05;7pkt 7fpkt"];
1678--2682[label="0.03125;1pkt 1fpkt"];
1678--2914[label="0.00714286;1pkt 1fpkt"];
1678--3014[label="0.0769231;1pkt 1fpkt"];
1678--3751[label="1;110pkt 110fpkt"];
1678--3811[label="0.0833333;1pkt 1fpkt"];
1678--4129[label="1;90pkt 90fpkt"];
1678--4518[label="0.00714286;1pkt 1fpkt"];
1678--4705[label="0.00714286;1pkt 1fpkt"];
1678--4794[label="0.00714286;1pkt 1fpkt"];
1678--4796[label="0.0571429;8pkt 8fpkt"];
1678--4857[label="0.0571429;8pkt 8fpkt"];
1757--3666[label="0.214286;6pkt 6fpkt"];
1792--2412[label="0.166667;2pkt 2fpkt"];
1792--2591[label="0.0833333;1pkt 1fpkt"];
1792--2604[label="0.0833333;1pkt 1fpkt"];
1792--3666[label="0.25;3pkt 3fpkt"];
1792--3751[label="0.0833333;1pkt 1fpkt"];
1792--3811[label="1;12pkt 12fpkt"];
1792--4263[label="0.0833333;1pkt 1fpkt"];
1792--4273[label="0.166667;2pkt 2fpkt"];
1924--2412[label="0.0444444;2pkt 2fpkt"];
1924--3049[label="0.547368;52pkt 52fpkt"];
1924--3878[label="0.0105263;1pkt 1fpkt"];
1924--4273[label="0.0444444;2pkt 2fpkt"];
1924--4796[label="0.0736842;7pkt 7fpkt"];
1924--4857[label="0.0736842;7pkt 7fpkt"];
1924--5129[label="0.757895;72pkt 72fpkt"];
1924--5484[label="0.0833333;1pkt 1fpkt"];
1924--5767[label="0.757895;72pkt 72fpkt"];
1934--3751[label="0.818182;90pkt 90fpkt"];
1934--4129[label="1;90pkt 90fpkt"];
1934--4796[label="0.0614035;7pkt 7fpkt"];
1934--4857[label="0.0614035;7pkt 7fpkt"];
2412--2468[label="0.333333;15pkt 15fpkt"];
2412--2682[label="0.0625;2pkt 2fpkt"];
2412--3014[label="0.153846;2pkt 2fpkt"];
2412--3811[label="0.166667;2pkt 2fpkt"];
2412--3971[label="0.0222222;1pkt 1fpkt"];
2412--4273[label="1;45pkt 45fpkt"];
2412--4796[label="0.0666667;3pkt 3fpkt"];
2412--4857[label="0.0666667;3pkt 3fpkt"];
2468--2591[label="0.0694444;5pkt 5fpkt"];
2468--3066[label="0.00645161;1pkt 1fpkt"];
2468--3666[label="0.251613;39pkt 39fpkt"];
2468--3751[label="0.0272727;3pkt 3fpkt"];
2468--3800[label="0.0078125;1pkt 1fpkt"];
2468--4170[label="0.00645161;1pkt 1fpkt"];
2468--4263[label="0.0714286;5pkt 5fpkt"];
2468--4273[label="0.333333;15pkt 15fpkt"];
2468--4431[label="0.00775194;1pkt 1fpkt"];
2468--5103[label="0.0434783;1pkt 1fpkt"];
2468--5362[label="0.0222222;1pkt 1fpkt"];
2468--5393[label="0.0243902;1pkt 1fpkt"];
2468--5468[label="0.00645161;1pkt 1fpkt"];
2468--5510[label="0.00787402;1pkt 1fpkt"];
2468--5865[label="0.0222222;1pkt 1fpkt"];
2468--5878[label="0.0243902;1pkt 1fpkt"];
2468--5907[label="0.00645161;1pkt 1fpkt"];
2468--5919[label="0.00787402;1pkt 1fpkt"];
2468--6047[label="0.0222222;1pkt 1fpkt"];
2468--6066[label="0.00645161;1pkt 1fpkt"];
2604--2682[label="0.03125;1pkt 1fpkt"];
2604--3014[label="0.0769231;1pkt 1fpkt"];
2604--3811[label="0.0833333;1pkt 1fpkt"];
2604--4796[label="0.0606061;2pkt 2fpkt"];
2604--4857[label="0.0606061;2pkt 2fpkt"];
2682--3666[label="0.09375;3pkt 3fpkt"];
2682--4263[label="0.03125;1pkt 1fpkt"];
2682--4273[label="0.0625;2pkt 2fpkt"];
2691--3666[label="0.666667;4pkt 4fpkt"];
3014--3666[label="0.153846;2pkt 2fpkt"];
3014--3751[label="0.0769231;1pkt 1fpkt"];
3014--4263[label="0.0769231;1pkt 1fpkt"];
3014--4273[label="0.153846;2pkt 2fpkt"];
3014--4796[label="0.923077;12pkt 12fpkt"];
3014--4857[label="0.923077;12pkt 12fpkt"];
3666--3811[label="0.25;3pkt 3fpkt"];
3666--3971[label="0.985507;68pkt 68fpkt"];
3666--4007[label="0.5;1pkt 1fpkt"];
3666--4275[label="0.142857;2pkt 2fpkt"];
3666--4796[label="0.04329;10pkt 10fpkt"];
3666--4857[label="0.04329;10pkt 10fpkt"];
3751--3811[label="0.0833333;1pkt 1fpkt"];
3751--4129[label="1;90pkt 90fpkt"];
3751--4518[label="0.00909091;1pkt 1fpkt"];
3751--4705[label="0.00909091;1pkt 1fpkt"];
3751--4794[label="0.00909091;1pkt 1fpkt"];
3751--4796[label="0.0727273;8pkt 8fpkt"];
3751--4857[label="0.0727273;8pkt 8fpkt"];
3811--4263[label="0.0833333;1pkt 1fpkt"];
3811--4273[label="0.166667;2pkt 2fpkt"];
3971--4273[label="0.0222222;1pkt 1fpkt"];
3971--4796[label="0.0144928;1pkt 1fpkt"];
3971--4857[label="0.0144928;1pkt 1fpkt"];
4129--4796[label="0.0777778;7pkt 7fpkt"];
4129--4857[label="0.0777778;7pkt 7fpkt"];
4273--4796[label="0.0666667;3pkt 3fpkt"];
4273--4857[label="0.0666667;3pkt 3fpkt"];
5393--5878[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.133.104" src_port="80"/>
      <filter src_ip="140.14.133.110" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
816[label="217.169.108.183;d;2131pkt 2131fpkt", shape=diamond, color=yellow];
3680[label="217.169.108.183;d;2131pkt 2131fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.169.108.183:53}[99.9061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.1642%)&lt;BR/&gt; 32768: (0.305021%)&lt;BR/&gt; 32769: (0.140779%)&lt;BR/&gt; 32774: (0.0703895%)&lt;BR/&gt; 1025: (0.0703895%)&gt;];
}
816--837[label="0.00107527;1pkt 1fpkt"];
816--952[label="0.00118624;1pkt 1fpkt"];
816--1213[label="0.00140779;3pkt 3fpkt"];
816--1303[label="0.00281558;6pkt 6fpkt"];
816--1601[label="0.0015873;2pkt 2fpkt"];
816--2339[label="0.00552486;1pkt 1fpkt"];
816--2924[label="0.000881057;1pkt 1fpkt"];
816--2948[label="0.00328484;7pkt 7fpkt"];
816--2957[label="0.00375411;8pkt 8fpkt"];
816--3054[label="0.00187705;4pkt 4fpkt"];
816--3066[label="0.00281558;6pkt 6fpkt"];
816--3086[label="0.00513699;3pkt 3fpkt"];
816--3462[label="0.00281558;6pkt 6fpkt"];
816--3680[label="1;2131pkt 2131fpkt"];
816--3734[label="0.00118624;1pkt 1fpkt"];
816--3828[label="0.00234632;5pkt 5fpkt"];
816--3891[label="0.00117233;1pkt 1fpkt"];
816--4170[label="0.00234632;5pkt 5fpkt"];
816--4215[label="0.00234632;5pkt 5fpkt"];
816--4527[label="0.00164204;1pkt 1fpkt"];
816--4758[label="0.000469263;1pkt 1fpkt"];
816--4795[label="0.000469263;1pkt 1fpkt"];
816--4824[label="0.000469263;1pkt 1fpkt"];
816--4856[label="0.000469263;1pkt 1fpkt"];
816--4864[label="0.000469263;1pkt 1fpkt"];
816--4933[label="0.00140779;3pkt 3fpkt"];
816--5029[label="0.00295858;1pkt 1fpkt"];
816--5210[label="0.00140779;3pkt 3fpkt"];
816--5468[label="0.00328484;7pkt 7fpkt"];
816--5727[label="0.00296736;1pkt 1fpkt"];
816--5907[label="0.00328484;7pkt 7fpkt"];
816--6066[label="0.00328484;7pkt 7fpkt"];
3680--3734[label="0.00118624;1pkt 1fpkt"];
3680--3828[label="0.00234632;5pkt 5fpkt"];
3680--3891[label="0.00117233;1pkt 1fpkt"];
3680--4170[label="0.00234632;5pkt 5fpkt"];
3680--4215[label="0.00234632;5pkt 5fpkt"];
3680--4527[label="0.00164204;1pkt 1fpkt"];
3680--4758[label="0.000469263;1pkt 1fpkt"];
3680--4795[label="0.000469263;1pkt 1fpkt"];
3680--4824[label="0.000469263;1pkt 1fpkt"];
3680--4856[label="0.000469263;1pkt 1fpkt"];
3680--4864[label="0.000469263;1pkt 1fpkt"];
3680--4933[label="0.00140779;3pkt 3fpkt"];
3680--5029[label="0.00295858;1pkt 1fpkt"];
3680--5210[label="0.00140779;3pkt 3fpkt"];
3680--5468[label="0.00328484;7pkt 7fpkt"];
3680--5727[label="0.00296736;1pkt 1fpkt"];
3680--5907[label="0.00328484;7pkt 7fpkt"];
3680--6066[label="0.00328484;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="217.169.108.183" dst_port="53"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1846[label="208.108.254.194;d;477pkt 477fpkt", shape=diamond, color=yellow];
3697[label="208.108.254.194;d;259pkt 259fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.108.254.194:6881}[99.7904%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (49.8641%)&lt;BR/&gt; 2955: (0.203804%)&lt;BR/&gt; 65344: (0.13587%)&lt;BR/&gt; 64987: (0.13587%)&lt;BR/&gt; 64054: (0.13587%)&gt;];
}
1846--3020[label="0.00209644;1pkt 1fpkt"];
1846--3697[label="1;259pkt 259fpkt"];
1846--4525[label="0.00209644;1pkt 1fpkt"];
1846--4718[label="0.00209644;1pkt 1fpkt"];
1846--4797[label="0.00209644;1pkt 1fpkt"];
1846--4858[label="0.00209644;1pkt 1fpkt"];
1846--5395[label="0.00209644;1pkt 1fpkt"];
1846--5879[label="0.00209644;1pkt 1fpkt"];
1846--6053[label="0.00209644;1pkt 1fpkt"];
3697--4525[label="0.003861;1pkt 1fpkt"];
3697--4718[label="0.003861;1pkt 1fpkt"];
3697--4797[label="0.003861;1pkt 1fpkt"];
3697--4858[label="0.003861;1pkt 1fpkt"];
3697--5395[label="0.003861;1pkt 1fpkt"];
3697--5879[label="0.003861;1pkt 1fpkt"];
3697--6053[label="0.003861;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.254.194" dst_port="6881"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1292[label="27.4.238.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
3715[label="27.4.238.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.4.238.217:1112, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 1112: (50%)&gt;];
}
1292--3715[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="27.4.238.217" src_port="1112"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1865[label="209.67.125.42;s;239pkt 239fpkt", shape=diamond, color=yellow];
3717[label="209.67.125.42;s;200pkt 200fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.67.125.42:0, *:0}[97.9079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.9499%)&lt;BR/&gt; 2122: (0.911162%)&lt;BR/&gt; 2121: (0.911162%)&lt;BR/&gt; 37457: (0.113895%)&lt;BR/&gt; 35086: (0.113895%)&gt;];
}
1865--3717[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter src_ip="209.67.125.42"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1366[label="45.68.132.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
3746[label="45.68.132.148;s;1pkt 1fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.68.132.148:8454, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 8454: (50%)&gt;];
}
1366--3746[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="45.68.132.148" src_port="8454"/>
    </slice>
    <from sec="1262322014" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
522[label="163.234.204.10;s;37pkt 37fpkt", shape=diamond, color=yellow];
523[label="93.184.92.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1011[label="206.26.186.100;d;16pkt 16fpkt", shape=diamond, color=yellow];
3757[label="206.26.186.100;d;10pkt 10fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.204.10:995, 206.26.186.100:*}[35.8974%]&lt;BR/&gt;{163.234.204.10:443, *:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (35.9375%)&lt;BR/&gt; 443: (6.25%)&lt;BR/&gt; 993: (4.6875%)&lt;BR/&gt; 80: (3.125%)&lt;BR/&gt; 43026: (2.34375%)&gt;];
}
522--523[label="1;1pkt 1fpkt"];
522--1011[label="0.875;14pkt 14fpkt"];
522--3757[label="0.8;8pkt 8fpkt"];
1011--3757[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="163.234.204.10" src_port="443"/>
      <filter dst_ip="206.26.186.100" src_ip="163.234.204.10" src_port="995"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1944[label="140.14.74.49;s;12pkt 12fpkt", shape=diamond, color=yellow];
1972[label="37.79.161.233;d;9pkt 9fpkt", shape=diamond, color=yellow];
3771[label="140.14.74.49;s;12pkt 12fpkt", shape=hexagon, color=black];
4136[label="37.79.161.233;d;9pkt 9fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.74.49:80, 37.79.161.233:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1203: (4.7619%)&lt;BR/&gt; 1202: (4.7619%)&lt;BR/&gt; 1201: (4.7619%)&lt;BR/&gt; 1200: (4.7619%)&gt;];
}
1944--1972[label="1;9pkt 9fpkt"];
1944--3771[label="1;12pkt 12fpkt"];
1944--4136[label="1;9pkt 9fpkt"];
1972--3771[label="1;9pkt 9fpkt"];
1972--4136[label="1;9pkt 9fpkt"];
3771--4136[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="37.79.161.233" src_ip="140.14.74.49" src_port="80"/>
    </slice>
    <from sec="1262322119" usec="0"/>
    <to sec="1262322717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1767[label="209.72.30.21;s;3pkt 3fpkt", shape=diamond, color=yellow];
1793[label="4.206.181.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
3802[label="209.72.30.21;s;3pkt 3fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.72.30.21:55441, 4.206.181.77:80}[33.3333%]&lt;BR/&gt;{209.72.30.21:59180, 209.147.51.198:25}[33.3333%]&lt;BR/&gt;{209.72.30.21:22, 14.176.165.203:48271}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55441: (21.4286%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 59180: (14.2857%)&lt;BR/&gt; 48271: (14.2857%)&lt;BR/&gt; 25: (14.2857%)&gt;];
}
1767--1793[label="1;1pkt 1fpkt"];
1767--3802[label="1;3pkt 3fpkt"];
1793--3802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="14.176.165.203" dst_port="48271" src_ip="209.72.30.21" src_port="22"/>
      <filter dst_ip="209.147.51.198" dst_port="25" src_ip="209.72.30.21" src_port="59180"/>
      <filter dst_ip="4.206.181.77" dst_port="80" src_ip="209.72.30.21" src_port="55441"/>
    </slice>
    <from sec="1262322305" usec="0"/>
    <to sec="1262322356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1629[label="163.234.103.200;d;8pkt 8fpkt", shape=diamond, color=yellow];
1775[label="197.37.141.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
3525[label="163.234.103.200;d;8pkt 8fpkt", shape=hexagon, color=black];
3804[label="197.37.141.124;s;1pkt 1fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.241.146.154:80, 163.234.103.200:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50587: (11.1111%)&lt;BR/&gt; 64767: (5.55556%)&lt;BR/&gt; 50585: (5.55556%)&lt;BR/&gt; 50583: (5.55556%)&gt;];
}
1629--1775[label="1;1pkt 1fpkt"];
1629--3525[label="1;8pkt 8fpkt"];
1629--3804[label="1;1pkt 1fpkt"];
1629--4716[label="0.125;1pkt 1fpkt"];
1629--4796[label="0.25;2pkt 2fpkt"];
1629--4857[label="0.25;2pkt 2fpkt"];
1629--5407[label="0.375;3pkt 3fpkt"];
1775--3525[label="1;1pkt 1fpkt"];
1775--3804[label="1;1pkt 1fpkt"];
3525--3804[label="1;1pkt 1fpkt"];
3525--4716[label="0.125;1pkt 1fpkt"];
3525--4796[label="0.25;2pkt 2fpkt"];
3525--4857[label="0.25;2pkt 2fpkt"];
3525--5407[label="0.375;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.200" src_ip="170.241.146.154" src_port="80"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1982[label="44.223.1.157;d;87pkt 87fpkt", shape=diamond, color=yellow];
3812[label="44.223.1.157;d;87pkt 87fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.176.210:80, 44.223.1.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28199: (0.574713%)&lt;BR/&gt; 28136: (0.574713%)&lt;BR/&gt; 27914: (0.574713%)&lt;BR/&gt; 27871: (0.574713%)&gt;];
}
1982--3812[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="44.223.1.157" src_ip="163.234.176.210" src_port="80"/>
    </slice>
    <from sec="1262322357" usec="0"/>
    <to sec="1262322424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1167[label="140.14.40.141;d;765pkt 765fpkt", shape=diamond, color=yellow];
3846[label="140.14.40.141;d;765pkt 765fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 140.14.40.141:37437}[96.3399%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37437: (48.1699%)&lt;BR/&gt; 443: (1.56863%)&lt;BR/&gt; 56831: (0.130719%)&lt;BR/&gt; 55001: (0.130719%)&lt;BR/&gt; 46902: (0.130719%)&gt;];
}
1167--3846[label="1;765pkt 765fpkt"];
</description>
    <slice>
      <filter dst_ip="140.14.40.141" dst_port="37437"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
135[label="182.5.83.175;d;2pkt 2fpkt", shape=diamond, color=yellow];
416[label="208.108.242.167;s;334pkt 334fpkt", shape=diamond, color=yellow];
653[label="204.194.72.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
685[label="42.64.89.90;d;2pkt 2fpkt", shape=diamond, color=yellow];
1054[label="222.187.98.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
1085[label="33.179.222.211;d;20pkt 20fpkt", shape=diamond, color=yellow];
1101[label="89.92.18.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
1332[label="200.16.74.188;d;103pkt 103fpkt", shape=diamond, color=yellow];
1480[label="40.74.99.225;d;6pkt 6fpkt", shape=diamond, color=yellow];
2020[label="46.90.65.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
2024[label="209.21.187.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
2257[label="208.42.10.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
2274[label="204.194.72.79;d;2pkt 2fpkt", shape=diamond, color=yellow];
2277[label="209.21.57.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
2278[label="182.48.64.94;d;2pkt 2fpkt", shape=diamond, color=yellow];
2704[label="33.44.239.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
2725[label="205.188.163.17;d;5pkt 5fpkt", shape=diamond, color=yellow];
2900[label="46.48.196.42;d;3pkt 3fpkt", shape=diamond, color=yellow];
3017[label="204.194.72.112;d;2pkt 2fpkt", shape=hexagon, color=black];
3594[label="40.74.99.225;d;6pkt 6fpkt", shape=hexagon, color=black];
3611[label="42.64.89.90;d;2pkt 2fpkt", shape=hexagon, color=black];
3773[label="33.179.222.211;d;10pkt 10fpkt", shape=hexagon, color=black];
3858[label="208.108.242.167;s;334pkt 334fpkt", shape=hexagon, color=black];
4034[label="182.48.64.94;d;2pkt 2fpkt", shape=hexagon, color=black];
4140[label="46.90.65.160;d;2pkt 2fpkt", shape=hexagon, color=black];
4150[label="204.194.72.79;d;2pkt 2fpkt", shape=hexagon, color=black];
4151[label="209.21.57.34;d;2pkt 2fpkt", shape=hexagon, color=black];
4357[label="205.188.163.17;d;5pkt 5fpkt", shape=hexagon, color=black];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.242.167:21, 200.16.74.188:*}[30.6548%]&lt;BR/&gt;{208.108.242.167:80, *:*}[23.5119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.9327%)&lt;BR/&gt; 80: (9.74478%)&lt;BR/&gt; 42118: (0.406032%)&lt;BR/&gt; 41696: (0.290023%)&lt;BR/&gt; 41648: (0.290023%)&gt;];
}
135--416[label="1;2pkt 2fpkt"];
135--3858[label="1;2pkt 2fpkt"];
416--652[label="0.666667;2pkt 2fpkt"];
416--653[label="1;2pkt 2fpkt"];
416--658[label="0.00299401;1pkt 1fpkt"];
416--685[label="1;2pkt 2fpkt"];
416--1054[label="1;2pkt 2fpkt"];
416--1085[label="1;20pkt 20fpkt"];
416--1101[label="1;2pkt 2fpkt"];
416--1332[label="1;103pkt 103fpkt"];
416--1480[label="1;6pkt 6fpkt"];
416--1651[label="0.0785714;11pkt 11fpkt"];
416--1911[label="0.66129;41pkt 41fpkt"];
416--2020[label="1;2pkt 2fpkt"];
416--2024[label="1;2pkt 2fpkt"];
416--2257[label="1;2pkt 2fpkt"];
416--2274[label="1;2pkt 2fpkt"];
416--2277[label="1;2pkt 2fpkt"];
416--2278[label="1;2pkt 2fpkt"];
416--2524[label="0.00299401;1pkt 1fpkt"];
416--2638[label="0.117647;8pkt 8fpkt"];
416--2704[label="1;2pkt 2fpkt"];
416--2725[label="1;5pkt 5fpkt"];
416--2900[label="0.333333;1pkt 1fpkt"];
416--3017[label="1;2pkt 2fpkt"];
416--3019[label="0.00299401;1pkt 1fpkt"];
416--3594[label="1;6pkt 6fpkt"];
416--3611[label="1;2pkt 2fpkt"];
416--3764[label="0.666667;2pkt 2fpkt"];
416--3773[label="1;10pkt 10fpkt"];
416--3858[label="1;334pkt 334fpkt"];
416--3930[label="0.0963855;8pkt 8fpkt"];
416--4034[label="1;2pkt 2fpkt"];
416--4140[label="1;2pkt 2fpkt"];
416--4150[label="1;2pkt 2fpkt"];
416--4151[label="1;2pkt 2fpkt"];
416--4320[label="0.117647;8pkt 8fpkt"];
416--4357[label="1;5pkt 5fpkt"];
416--4784[label="0.00299401;1pkt 1fpkt"];
416--4796[label="0.0209581;7pkt 7fpkt"];
416--4846[label="0.00299401;1pkt 1fpkt"];
416--4857[label="0.0209581;7pkt 7fpkt"];
416--4890[label="0.00299401;1pkt 1fpkt"];
653--3017[label="1;2pkt 2fpkt"];
653--3858[label="1;2pkt 2fpkt"];
685--3611[label="1;2pkt 2fpkt"];
685--3858[label="1;2pkt 2fpkt"];
1054--3858[label="1;2pkt 2fpkt"];
1085--3773[label="1;10pkt 10fpkt"];
1085--3858[label="1;20pkt 20fpkt"];
1101--3858[label="1;2pkt 2fpkt"];
1332--3858[label="1;103pkt 103fpkt"];
1480--3594[label="1;6pkt 6fpkt"];
1480--3858[label="1;6pkt 6fpkt"];
2020--3858[label="1;2pkt 2fpkt"];
2020--4140[label="1;2pkt 2fpkt"];
2024--3858[label="1;2pkt 2fpkt"];
2257--3858[label="1;2pkt 2fpkt"];
2274--3858[label="1;2pkt 2fpkt"];
2274--4150[label="1;2pkt 2fpkt"];
2277--3858[label="1;2pkt 2fpkt"];
2277--4151[label="1;2pkt 2fpkt"];
2278--3858[label="1;2pkt 2fpkt"];
2278--4034[label="1;2pkt 2fpkt"];
2704--3858[label="1;2pkt 2fpkt"];
2725--3858[label="1;5pkt 5fpkt"];
2725--4357[label="1;5pkt 5fpkt"];
2725--4784[label="0.2;1pkt 1fpkt"];
2725--4846[label="0.2;1pkt 1fpkt"];
2725--4890[label="0.2;1pkt 1fpkt"];
2900--3858[label="0.333333;1pkt 1fpkt"];
3017--3858[label="1;2pkt 2fpkt"];
3594--3858[label="1;6pkt 6fpkt"];
3611--3858[label="1;2pkt 2fpkt"];
3773--3858[label="1;10pkt 10fpkt"];
3858--3930[label="0.0963855;8pkt 8fpkt"];
3858--4034[label="1;2pkt 2fpkt"];
3858--4140[label="1;2pkt 2fpkt"];
3858--4150[label="1;2pkt 2fpkt"];
3858--4151[label="1;2pkt 2fpkt"];
3858--4320[label="0.117647;8pkt 8fpkt"];
3858--4357[label="1;5pkt 5fpkt"];
3858--4784[label="0.00299401;1pkt 1fpkt"];
3858--4796[label="0.0209581;7pkt 7fpkt"];
3858--4846[label="0.00299401;1pkt 1fpkt"];
3858--4857[label="0.0209581;7pkt 7fpkt"];
3858--4890[label="0.00299401;1pkt 1fpkt"];
4357--4784[label="0.2;1pkt 1fpkt"];
4357--4846[label="0.2;1pkt 1fpkt"];
4357--4890[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.242.167" src_port="80"/>
      <filter dst_ip="200.16.74.188" src_ip="208.108.242.167" src_port="21"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1834[label="140.14.210.185;s;1107pkt 1107fpkt", shape=diamond, color=yellow];
3871[label="140.14.210.185;s;836pkt 836fpkt", shape=hexagon, color=black];
5496[label="140.14.210.185;1167pkt 1167fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.210.185:32108, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32108: (50%)&lt;BR/&gt; 16001: (0.932476%)&lt;BR/&gt; 6881: (0.385852%)&lt;BR/&gt; 4041: (0.353698%)&lt;BR/&gt; 16881: (0.241158%)&gt;];
}
1834--3871[label="1;836pkt 836fpkt"];
1834--5496[label="1;1107pkt 1107fpkt"];
3871--5496[label="1;836pkt 836fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.210.185" src_port="32108"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1290[label="136.6.101.218;s;137pkt 137fpkt", shape=diamond, color=yellow];
3910[label="136.6.101.218;s;132pkt 132fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.101.218:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1306: (0.743494%)&lt;BR/&gt; 1304: (0.743494%)&lt;BR/&gt; 63659: (0.371747%)&lt;BR/&gt; 63524: (0.371747%)&gt;];
}
1290--1977[label="0.1;2pkt 2fpkt"];
1290--3910[label="1;132pkt 132fpkt"];
1290--4712[label="0.00729927;1pkt 1fpkt"];
3910--4712[label="0.00757576;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.6.101.218" src_port="25"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
2119[label="20.37.120.97;d;94pkt 94fpkt", shape=diamond, color=yellow];
2120[label="156.225.136.177;s;92pkt 92fpkt", shape=diamond, color=yellow];
3913[label="156.225.136.177;s;72pkt 72fpkt", shape=hexagon, color=black];
5478[label="156.225.136.177;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.136.177:80, 20.37.120.97:*}[98.0198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64745: (0.560224%)&lt;BR/&gt; 63587: (0.560224%)&lt;BR/&gt; 63544: (0.560224%)&lt;BR/&gt; 63360: (0.560224%)&gt;];
}
2119--2120[label="1;92pkt 92fpkt"];
2119--3294[label="0.0126582;1pkt 1fpkt"];
2119--3913[label="1;72pkt 72fpkt"];
2119--4089[label="1;74pkt 74fpkt"];
2119--4784[label="0.0106383;1pkt 1fpkt"];
2119--4796[label="0.0319149;3pkt 3fpkt"];
2119--4846[label="0.0106383;1pkt 1fpkt"];
2119--4857[label="0.0319149;3pkt 3fpkt"];
2119--4890[label="0.0106383;1pkt 1fpkt"];
2119--5478[label="0.978723;92pkt 92fpkt"];
2120--3913[label="1;72pkt 72fpkt"];
2120--4089[label="0.972973;72pkt 72fpkt"];
2120--4784[label="0.0108696;1pkt 1fpkt"];
2120--4796[label="0.0326087;3pkt 3fpkt"];
2120--4846[label="0.0108696;1pkt 1fpkt"];
2120--4857[label="0.0326087;3pkt 3fpkt"];
2120--4890[label="0.0108696;1pkt 1fpkt"];
2120--5478[label="1;92pkt 92fpkt"];
3913--4089[label="1;72pkt 72fpkt"];
3913--4784[label="0.0138889;1pkt 1fpkt"];
3913--4796[label="0.0416667;3pkt 3fpkt"];
3913--4846[label="0.0138889;1pkt 1fpkt"];
3913--4857[label="0.0416667;3pkt 3fpkt"];
3913--4890[label="0.0138889;1pkt 1fpkt"];
3913--5478[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.120.97" src_ip="156.225.136.177" src_port="80"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1947[label="197.68.165.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
3977[label="197.68.165.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.165.113:80, 163.234.176.210:60843}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60843: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1947--3977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.176.210" dst_port="60843" src_ip="197.68.165.113" src_port="80"/>
    </slice>
    <from sec="1262322199" usec="0"/>
    <to sec="1262322801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1500[label="28.155.67.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
3983[label="28.155.67.253;s;1pkt 1fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.155.67.253:8673, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 8673: (50%)&gt;];
}
1500--3983[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="28.155.67.253" src_port="8673"/>
    </slice>
    <from sec="1262322219" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1762[label="92.150.248.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
3995[label="92.150.248.42;d;1pkt 1fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.245.249:80, 92.150.248.42:54416}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54416: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1762--3995[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.150.248.42" dst_port="54416" src_ip="208.108.245.249" src_port="80"/>
    </slice>
    <from sec="1262322299" usec="0"/>
    <to sec="1262322383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
2223[label="208.108.243.88;s;28pkt 28fpkt", shape=diamond, color=yellow];
2279[label="4.98.84.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
4011[label="208.108.243.88;s;28pkt 28fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.243.88:*, *:25}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.8276%)&lt;BR/&gt; 80: (5.17241%)&lt;BR/&gt; 61122: (2.58621%)&lt;BR/&gt; 61082: (2.58621%)&lt;BR/&gt; 58781: (1.72414%)&gt;];
}
2223--2279[label="1;2pkt 2fpkt"];
2223--4011[label="1;28pkt 28fpkt"];
2279--4011[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="208.108.243.88"/>
    </slice>
    <from sec="1262322385" usec="0"/>
    <to sec="1262322537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
2019[label="206.174.100.227;d;44pkt 44fpkt", shape=diamond, color=yellow];
4014[label="206.174.100.227;d;42pkt 42fpkt", shape=hexagon, color=black];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.176.210:80, 206.174.100.227:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52812: (1.16279%)&lt;BR/&gt; 52782: (1.16279%)&lt;BR/&gt; 52769: (1.16279%)&lt;BR/&gt; 52759: (1.16279%)&gt;];
}
2019--4014[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="206.174.100.227" src_ip="163.234.176.210" src_port="80"/>
    </slice>
    <from sec="1262322417" usec="0"/>
    <to sec="1262322663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1812[label="197.37.140.89;s;4pkt 4fpkt", shape=diamond, color=yellow];
2242[label="163.234.44.136;d;15pkt 15fpkt", shape=diamond, color=yellow];
2499[label="197.37.140.190;s;2pkt 2fpkt", shape=diamond, color=yellow];
2711[label="197.37.140.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
4019[label="163.234.44.136;d;15pkt 15fpkt", shape=hexagon, color=black];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.37.140.200:80, 163.234.44.136:*}[25%]&lt;BR/&gt;{197.37.140.89:80, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 3522: (3.94737%)&lt;BR/&gt; 3521: (3.94737%)&lt;BR/&gt; 3519: (3.94737%)&lt;BR/&gt; 3515: (3.94737%)&gt;];
}
1812--2242[label="0.75;3pkt 3fpkt"];
1812--3622[label="0.25;1pkt 1fpkt"];
1812--3661[label="1;1pkt 1fpkt"];
1812--4019[label="0.75;3pkt 3fpkt"];
1812--4784[label="0.25;1pkt 1fpkt"];
1812--4796[label="0.25;1pkt 1fpkt"];
1812--4846[label="0.25;1pkt 1fpkt"];
1812--4857[label="0.25;1pkt 1fpkt"];
1812--4890[label="0.25;1pkt 1fpkt"];
2242--2499[label="1;2pkt 2fpkt"];
2242--2711[label="1;2pkt 2fpkt"];
2242--2913[label="1;1pkt 1fpkt"];
2242--4019[label="1;15pkt 15fpkt"];
2242--4784[label="0.0666667;1pkt 1fpkt"];
2242--4846[label="0.0666667;1pkt 1fpkt"];
2242--4890[label="0.0666667;1pkt 1fpkt"];
2499--4019[label="1;2pkt 2fpkt"];
2711--4019[label="1;2pkt 2fpkt"];
4019--4784[label="0.0666667;1pkt 1fpkt"];
4019--4846[label="0.0666667;1pkt 1fpkt"];
4019--4890[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.37.140.89" src_port="80"/>
      <filter dst_ip="163.234.44.136" src_ip="197.37.140.200" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
2247[label="92.72.10.188;s;40pkt 40fpkt", shape=diamond, color=yellow];
4023[label="92.72.10.188;s;40pkt 40fpkt", shape=hexagon, color=black];
5499[label="92.72.10.188;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.72.10.188:*, 208.108.253.89:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2275: (1.25%)&lt;BR/&gt; 2273: (1.25%)&lt;BR/&gt; 2271: (1.25%)&lt;BR/&gt; 2268: (1.25%)&gt;];
}
2247--4023[label="1;40pkt 40fpkt"];
2247--5499[label="1;40pkt 40fpkt"];
4023--5499[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.253.89" dst_port="80" src_ip="92.72.10.188"/>
    </slice>
    <from sec="1262322447" usec="0"/>
    <to sec="1262322553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569143,1.30866,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.140.82.27"/>
      <from sec="1262322455" usec="0"/>
      <to sec="1262322558" usec="0"/>
    </slice>
    <from sec="1262322455" usec="0"/>
    <to sec="1262322558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
1126[label="136.25.192.230;s;448pkt 448fpkt", shape=diamond, color=yellow];
4040[label="136.25.192.230;s;299pkt 299fpkt", shape=hexagon, color=black];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.25.192.230:0, *:0}[99.7768%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7323%)&lt;BR/&gt; 6000: (0.133869%)&lt;BR/&gt; 2967: (0.133869%)&gt;];
}
1126--3195[label="0.00223214;1pkt 1fpkt"];
1126--3787[label="0.00223214;1pkt 1fpkt"];
1126--4040[label="1;299pkt 299fpkt"];
1126--4607[label="0.00223214;1pkt 1fpkt"];
4040--4607[label="0.00334448;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.25.192.230"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
509[label="99.128.251.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
4088[label="99.128.251.12;s;1pkt 1fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.128.251.12:64591, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64591: (50%)&lt;BR/&gt; 15990: (50%)&gt;];
}
509--4088[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="99.128.251.12" src_port="64591"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
2371[label="208.108.246.192;s;157pkt 157fpkt", shape=diamond, color=yellow];
2372[label="8.172.102.32;d;158pkt 158fpkt", shape=diamond, color=yellow];
4096[label="208.108.246.192;s;123pkt 123fpkt", shape=hexagon, color=black];
4419[label="8.172.102.32;d;158pkt 158fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.246.192:445, 8.172.102.32:*}[50%]&lt;BR/&gt;{208.108.246.192:139, 8.172.102.32:*}[49.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0839%)&lt;BR/&gt; 139: (24.7483%)&lt;BR/&gt; 1462: (0.671141%)&lt;BR/&gt; 4904: (0.33557%)&lt;BR/&gt; 4903: (0.33557%)&gt;];
}
2371--2372[label="1;157pkt 157fpkt"];
2371--4096[label="1;123pkt 123fpkt"];
2371--4419[label="1;157pkt 157fpkt"];
2372--4096[label="1;123pkt 123fpkt"];
2372--4419[label="1;158pkt 158fpkt"];
4096--4419[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="8.172.102.32" src_ip="208.108.246.192" src_port="445"/>
      <filter dst_ip="8.172.102.32" src_ip="208.108.246.192" src_port="139"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
431[label="163.234.32.230;d;4pkt 4fpkt", shape=diamond, color=yellow];
2460[label="197.37.140.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
3861[label="163.234.32.230;d;4pkt 4fpkt", shape=hexagon, color=black];
4154[label="197.37.140.202;s;1pkt 1fpkt", shape=hexagon, color=black];
5546[label="197.37.140.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5930[label="197.37.140.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.37.140.83:80, 163.234.32.230:61975}[25%]&lt;BR/&gt;{30.190.95.85:995, 163.234.32.230:61992}[25%]&lt;BR/&gt;{197.37.140.202:80, 163.234.32.230:61996}[25%]&lt;BR/&gt;{197.37.140.205:80, 163.234.32.230:61995}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 61996: (25%)&lt;BR/&gt; 61995: (8.33333%)&lt;BR/&gt; 61992: (8.33333%)&lt;BR/&gt; 61975: (8.33333%)&gt;];
}
431--2149[label="0.25;1pkt 1fpkt"];
431--2460[label="1;1pkt 1fpkt"];
431--3861[label="1;4pkt 4fpkt"];
431--4109[label="0.25;1pkt 1fpkt"];
431--4154[label="1;1pkt 1fpkt"];
431--4784[label="0.25;1pkt 1fpkt"];
431--4796[label="0.25;1pkt 1fpkt"];
431--4846[label="0.25;1pkt 1fpkt"];
431--4857[label="0.25;1pkt 1fpkt"];
431--4890[label="0.25;1pkt 1fpkt"];
431--5206[label="0.25;1pkt 1fpkt"];
431--5546[label="1;1pkt 1fpkt"];
431--5930[label="1;1pkt 1fpkt"];
2460--3861[label="1;1pkt 1fpkt"];
2460--4154[label="1;1pkt 1fpkt"];
2460--4784[label="1;1pkt 1fpkt"];
2460--4846[label="1;1pkt 1fpkt"];
2460--4890[label="1;1pkt 1fpkt"];
2460--5546[label="1;1pkt 1fpkt"];
2460--5930[label="1;1pkt 1fpkt"];
3861--4109[label="0.25;1pkt 1fpkt"];
3861--4154[label="1;1pkt 1fpkt"];
3861--4784[label="0.25;1pkt 1fpkt"];
3861--4796[label="0.25;1pkt 1fpkt"];
3861--4846[label="0.25;1pkt 1fpkt"];
3861--4857[label="0.25;1pkt 1fpkt"];
3861--4890[label="0.25;1pkt 1fpkt"];
3861--5206[label="0.25;1pkt 1fpkt"];
3861--5546[label="1;1pkt 1fpkt"];
3861--5930[label="1;1pkt 1fpkt"];
4154--4784[label="1;1pkt 1fpkt"];
4154--4846[label="1;1pkt 1fpkt"];
4154--4890[label="1;1pkt 1fpkt"];
4154--5546[label="1;1pkt 1fpkt"];
4154--5930[label="1;1pkt 1fpkt"];
5546--5930[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.32.230" dst_port="61995" src_ip="197.37.140.205" src_port="80"/>
      <filter dst_ip="163.234.32.230" dst_port="61996" src_ip="197.37.140.202" src_port="80"/>
      <filter dst_ip="163.234.32.230" dst_port="61992" src_ip="30.190.95.85" src_port="995"/>
      <filter dst_ip="163.234.32.230" dst_port="61975" src_ip="197.37.140.83" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845478,1.33992,999,0 0 0 1 0 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
2159[label="209.67.91.64;s;1008pkt 1008fpkt", shape=diamond, color=yellow];
4691[label="209.67.91.64;s;1008pkt 1008fpkt", shape=polygon, color=gold];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.67.91.64:*, *:53}[96.2302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.2639%)&lt;BR/&gt; 0: (3.47222%)&lt;BR/&gt; 64349: (0.0992063%)&lt;BR/&gt; 63912: (0.0992063%)&lt;BR/&gt; 63800: (0.0992063%)&gt;];
}
2159--2771[label="0.00393701;1pkt 1fpkt"];
2159--2772[label="0.00749064;2pkt 2fpkt"];
2159--2982[label="0.000992063;1pkt 1fpkt"];
2159--3762[label="0.00100402;1pkt 1fpkt"];
2159--4111[label="1;1008pkt 1008fpkt"];
2159--4691[label="1;1008pkt 1008fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="209.67.91.64"/>
    </slice>
    <from sec="1262322009" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
2268[label="205.200.208.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
4145[label="205.200.208.136;s;1pkt 1fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.200.208.136:13684, 163.234.176.210:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13684: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2268--4145[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.176.210" dst_port="80" src_ip="205.200.208.136" src_port="13684"/>
    </slice>
    <from sec="1262322490" usec="0"/>
    <to sec="1262322596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
2450[label="186.17.2.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
4147[label="186.17.2.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{186.17.2.199:1878, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15990: (50%)&lt;BR/&gt; 1878: (50%)&gt;];
}
2450--4147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="186.17.2.199" src_port="1878"/>
    </slice>
    <from sec="1262322494" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
2490[label="209.180.12.83;s;10pkt 10fpkt", shape=diamond, color=yellow];
4157[label="209.180.12.83;s;10pkt 10fpkt", shape=hexagon, color=black];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.180.12.83:80, 163.234.103.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4514: (5%)&lt;BR/&gt; 4431: (5%)&lt;BR/&gt; 3833: (5%)&lt;BR/&gt; 3769: (5%)&gt;];
}
2490--4157[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.195" src_ip="209.180.12.83" src_port="80"/>
    </slice>
    <from sec="1262322593" usec="0"/>
    <to sec="1262322639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
2518[label="136.25.199.2;d;22pkt 22fpkt", shape=diamond, color=yellow];
2519[label="205.164.38.66;s;22pkt 22fpkt", shape=diamond, color=yellow];
4161[label="136.25.199.2;d;22pkt 22fpkt", shape=hexagon, color=black];
5133[label="205.164.38.66;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.164.38.66:*, 136.25.199.2:443}[63.6364%]&lt;BR/&gt;{205.164.38.66:*, 136.25.199.2:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.8182%)&lt;BR/&gt; 80: (18.1818%)&lt;BR/&gt; 51293: (2.27273%)&lt;BR/&gt; 51290: (2.27273%)&lt;BR/&gt; 51287: (2.27273%)&gt;];
}
2518--2519[label="1;22pkt 22fpkt"];
2518--4161[label="1;22pkt 22fpkt"];
2518--4746[label="0.0454545;1pkt 1fpkt"];
2518--4818[label="0.0454545;1pkt 1fpkt"];
2518--5133[label="1;22pkt 22fpkt"];
2519--4161[label="1;22pkt 22fpkt"];
2519--4746[label="0.0454545;1pkt 1fpkt"];
2519--4818[label="0.0454545;1pkt 1fpkt"];
2519--5133[label="1;22pkt 22fpkt"];
4161--4746[label="0.0454545;1pkt 1fpkt"];
4161--4818[label="0.0454545;1pkt 1fpkt"];
4161--5133[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.199.2" dst_port="443" src_ip="205.164.38.66"/>
      <filter dst_ip="136.25.199.2" dst_port="80" src_ip="205.164.38.66"/>
    </slice>
    <from sec="1262322635" usec="0"/>
    <to sec="1262322769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
2520[label="205.200.208.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
4162[label="205.200.208.175;d;1pkt 1fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.253.82:80, 205.200.208.175:46464}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46464: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2520--4162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.200.208.175" dst_port="46464" src_ip="208.108.253.82" src_port="80"/>
    </slice>
    <from sec="1262322639" usec="0"/>
    <to sec="1262322653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
266[label="163.234.103.114;s;22pkt 22fpkt", shape=diamond, color=yellow];
739[label="42.219.92.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
826[label="30.0.68.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="54.82.41.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
1312[label="21.68.54.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1321[label="18.1.174.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
3240[label="42.219.92.250;d;1pkt 1fpkt", shape=hexagon, color=black];
3281[label="30.0.68.48;d;1pkt 1fpkt", shape=hexagon, color=black];
3920[label="18.1.174.121;d;1pkt 1fpkt", shape=hexagon, color=black];
4168[label="163.234.103.114;s;22pkt 22fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.103.114:8858, *:17788}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8858: (38.4615%)&lt;BR/&gt; 17788: (23.0769%)&lt;BR/&gt; 55056: (3.84615%)&lt;BR/&gt; 3724: (3.84615%)&lt;BR/&gt; 2017: (3.84615%)&gt;];
}
266--739[label="1;1pkt 1fpkt"];
266--826[label="1;1pkt 1fpkt"];
266--971[label="1;1pkt 1fpkt"];
266--1312[label="1;1pkt 1fpkt"];
266--1321[label="1;1pkt 1fpkt"];
266--3240[label="1;1pkt 1fpkt"];
266--3281[label="1;1pkt 1fpkt"];
266--3920[label="1;1pkt 1fpkt"];
266--4168[label="1;22pkt 22fpkt"];
266--4710[label="0.0909091;2pkt 2fpkt"];
266--4725[label="0.0909091;2pkt 2fpkt"];
266--4746[label="0.0909091;2pkt 2fpkt"];
266--4767[label="0.0909091;2pkt 2fpkt"];
266--4805[label="0.0909091;2pkt 2fpkt"];
266--4818[label="0.0909091;2pkt 2fpkt"];
266--4831[label="0.0909091;2pkt 2fpkt"];
739--3240[label="1;1pkt 1fpkt"];
739--4168[label="1;1pkt 1fpkt"];
826--3281[label="1;1pkt 1fpkt"];
826--4168[label="1;1pkt 1fpkt"];
971--4168[label="1;1pkt 1fpkt"];
1312--4168[label="1;1pkt 1fpkt"];
1321--3920[label="1;1pkt 1fpkt"];
1321--4168[label="1;1pkt 1fpkt"];
3240--4168[label="1;1pkt 1fpkt"];
3281--4168[label="1;1pkt 1fpkt"];
3920--4168[label="1;1pkt 1fpkt"];
4168--4710[label="0.0909091;2pkt 2fpkt"];
4168--4725[label="0.0909091;2pkt 2fpkt"];
4168--4746[label="0.0909091;2pkt 2fpkt"];
4168--4767[label="0.0909091;2pkt 2fpkt"];
4168--4805[label="0.0909091;2pkt 2fpkt"];
4168--4818[label="0.0909091;2pkt 2fpkt"];
4168--4831[label="0.0909091;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="163.234.103.114" src_port="8858"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1847[label="208.108.254.194;s;453pkt 453fpkt", shape=diamond, color=yellow];
5530[label="208.108.254.194;473pkt 473fpkt", shape=pentagon, color=darkviolet];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.254.194:6881, *:*}[97.0772%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (48.4881%)&lt;BR/&gt; 0: (2.80778%)&lt;BR/&gt; 2955: (0.215983%)&lt;BR/&gt; 65344: (0.107991%)&lt;BR/&gt; 65001: (0.107991%)&gt;];
}
1847--3019[label="0.00220751;1pkt 1fpkt"];
1847--4206[label="1;401pkt 401fpkt"];
1847--5530[label="0.986755;447pkt 447fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.254.194" src_port="6881"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
470[label="1.166.30.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
4208[label="1.166.30.181;d;1pkt 1fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.29.86:2498, 1.166.30.181:9059}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9059: (50%)&lt;BR/&gt; 2498: (50%)&gt;];
}
470--4208[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.166.30.181" dst_port="9059" src_ip="163.234.29.86" src_port="2498"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
2347[label="20.37.122.12;d;91pkt 91fpkt", shape=diamond, color=yellow];
2554[label="156.225.139.133;s;89pkt 89fpkt", shape=diamond, color=yellow];
4225[label="20.37.122.12;d;87pkt 87fpkt", shape=hexagon, color=black];
4226[label="156.225.139.133;s;85pkt 85fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.139.133:80, 20.37.122.12:*}[91.4894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8636%)&lt;BR/&gt; 56348: (0.710227%)&lt;BR/&gt; 65348: (0.568182%)&lt;BR/&gt; 64699: (0.568182%)&lt;BR/&gt; 64417: (0.568182%)&gt;];
}
2347--2554[label="0.966292;86pkt 86fpkt"];
2347--4225[label="1;87pkt 87fpkt"];
2347--4226[label="0.976471;83pkt 83fpkt"];
2347--4796[label="0.0549451;5pkt 5fpkt"];
2347--4857[label="0.0549451;5pkt 5fpkt"];
2554--4225[label="0.954023;83pkt 83fpkt"];
2554--4226[label="1;85pkt 85fpkt"];
2554--4796[label="0.0561798;5pkt 5fpkt"];
2554--4857[label="0.0561798;5pkt 5fpkt"];
4225--4226[label="0.976471;83pkt 83fpkt"];
4225--4796[label="0.0574713;5pkt 5fpkt"];
4225--4857[label="0.0574713;5pkt 5fpkt"];
4226--4796[label="0.0588235;5pkt 5fpkt"];
4226--4857[label="0.0588235;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.122.12" src_ip="156.225.139.133" src_port="80"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
938[label="136.133.194.196;s;22pkt 22fpkt", shape=diamond, color=yellow];
1008[label="21.100.3.105;d;7pkt 7fpkt", shape=diamond, color=yellow];
3964[label="163.234.176.171;s;6pkt 6fpkt", shape=hexagon, color=black];
4230[label="136.133.194.196;s;20pkt 20fpkt", shape=hexagon, color=black];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 21.100.3.105:*}[28.125%]&lt;BR/&gt;{136.133.194.196:80, 32.41.0.134:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3636%)&lt;BR/&gt; 53: (3.63636%)&lt;BR/&gt; 48974: (2.72727%)&lt;BR/&gt; 50407: (1.81818%)&lt;BR/&gt; 50011: (1.81818%)&gt;];
}
938--1008[label="0.142857;1pkt 1fpkt"];
938--1856[label="0.0909091;2pkt 2fpkt"];
938--3898[label="0.0909091;2pkt 2fpkt"];
938--4230[label="1;20pkt 20fpkt"];
938--4796[label="0.0909091;2pkt 2fpkt"];
938--4857[label="0.0909091;2pkt 2fpkt"];
1008--1839[label="0.142857;1pkt 1fpkt"];
1008--2934[label="0.142857;1pkt 1fpkt"];
1008--3877[label="0.142857;1pkt 1fpkt"];
1008--3964[label="0.333333;2pkt 2fpkt"];
1008--4230[label="0.142857;1pkt 1fpkt"];
1008--4530[label="0.142857;1pkt 1fpkt"];
3964--3998[label="0.166667;1pkt 1fpkt"];
4230--4796[label="0.1;2pkt 2fpkt"];
4230--4857[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="21.100.3.105"/>
      <filter dst_ip="32.41.0.134" src_ip="136.133.194.196" src_port="80"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
2140[label="208.108.231.19;d;225pkt 225fpkt", shape=diamond, color=yellow];
4243[label="208.108.231.19;d;198pkt 198fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.108.231.19:25}[50.2222%]&lt;BR/&gt;{*:*, 208.108.231.19:53}[48.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25.6501%)&lt;BR/&gt; 25: (24.8227%)&lt;BR/&gt; 0: (0.472813%)&lt;BR/&gt; 64123: (0.236407%)&lt;BR/&gt; 64113: (0.236407%)&gt;];
}
2140--3020[label="0.00444444;1pkt 1fpkt"];
2140--4243[label="1;198pkt 198fpkt"];
2140--4525[label="0.00444444;1pkt 1fpkt"];
2140--4718[label="0.00444444;1pkt 1fpkt"];
2140--4724[label="0.00888889;2pkt 2fpkt"];
2140--4795[label="0.00444444;1pkt 1fpkt"];
2140--4797[label="0.00444444;1pkt 1fpkt"];
2140--4856[label="0.00444444;1pkt 1fpkt"];
2140--4858[label="0.00444444;1pkt 1fpkt"];
2140--5395[label="0.00444444;1pkt 1fpkt"];
2140--5879[label="0.00444444;1pkt 1fpkt"];
2140--6053[label="0.00444444;1pkt 1fpkt"];
4243--4525[label="0.00505051;1pkt 1fpkt"];
4243--4718[label="0.00505051;1pkt 1fpkt"];
4243--4724[label="0.010101;2pkt 2fpkt"];
4243--4795[label="0.00505051;1pkt 1fpkt"];
4243--4797[label="0.00505051;1pkt 1fpkt"];
4243--4856[label="0.00505051;1pkt 1fpkt"];
4243--4858[label="0.00505051;1pkt 1fpkt"];
4243--5395[label="0.00505051;1pkt 1fpkt"];
4243--5879[label="0.00505051;1pkt 1fpkt"];
4243--6053[label="0.00505051;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.231.19" dst_port="25"/>
      <filter dst_ip="208.108.231.19" dst_port="53"/>
    </slice>
    <from sec="1262322005" usec="0"/>
    <to sec="1262322827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2153[label="140.14.186.178;s;68pkt 68fpkt", shape=diamond, color=yellow];
4251[label="140.14.186.178;s;62pkt 62fpkt", shape=hexagon, color=black];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.186.178:25, *:*}[95.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.0769%)&lt;BR/&gt; 53: (1.92308%)&lt;BR/&gt; 64521: (0.769231%)&lt;BR/&gt; 62751: (0.769231%)&lt;BR/&gt; 61641: (0.769231%)&gt;];
}
2153--4251[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.186.178" src_port="25"/>
    </slice>
    <from sec="1262322008" usec="0"/>
    <to sec="1262322816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1030[label="20.37.125.127;d;23pkt 23fpkt", shape=diamond, color=yellow];
4267[label="140.14.220.150;s;32pkt 32fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.220.150:80, 21.121.67.102:*}[49.0196%]&lt;BR/&gt;{136.6.11.159:80, 20.37.125.127:*}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62140: (1.81818%)&lt;BR/&gt; 59532: (1.81818%)&lt;BR/&gt; 45040: (1.81818%)&lt;BR/&gt; 44728: (1.81818%)&gt;];
}
1030--2405[label="0.173913;4pkt 4fpkt"];
1030--3062[label="0.0434783;1pkt 1fpkt"];
1030--3969[label="1;22pkt 22fpkt"];
1030--4267[label="0.173913;4pkt 4fpkt"];
1030--4796[label="0.0434783;1pkt 1fpkt"];
1030--4857[label="0.0434783;1pkt 1fpkt"];
4267--4437[label="0.78125;25pkt 25fpkt"];
4267--4796[label="0.03125;1pkt 1fpkt"];
4267--4857[label="0.03125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.121.67.102" src_ip="140.14.220.150" src_port="80"/>
      <filter dst_ip="20.37.125.127" src_ip="136.6.11.159" src_port="80"/>
    </slice>
    <from sec="1262322017" usec="0"/>
    <to sec="1262322824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
2037[label="20.148.237.226;s;27pkt 27fpkt", shape=diamond, color=yellow];
4306[label="20.148.237.226;s;27pkt 27fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.148.237.226:80, 163.234.197.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2451: (1.85185%)&lt;BR/&gt; 2448: (1.85185%)&lt;BR/&gt; 2445: (1.85185%)&lt;BR/&gt; 2441: (1.85185%)&gt;];
}
2037--4306[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.197.101" src_ip="20.148.237.226" src_port="80"/>
    </slice>
    <from sec="1262322447" usec="0"/>
    <to sec="1262322700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
2462[label="32.97.42.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
4317[label="32.97.42.209;d;2pkt 2fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.253.89:80, 32.97.42.209:10309}[50%]&lt;BR/&gt;{208.108.253.89:80, 32.97.42.209:10321}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10321: (25%)&lt;BR/&gt; 10309: (25%)&gt;];
}
2462--4317[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.97.42.209" dst_port="10321" src_ip="208.108.253.89" src_port="80"/>
      <filter dst_ip="32.97.42.209" dst_port="10309" src_ip="208.108.253.89" src_port="80"/>
    </slice>
    <from sec="1262322557" usec="0"/>
    <to sec="1262322628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1546[label="197.37.140.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
2497[label="197.37.141.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
2629[label="163.234.103.89;d;8pkt 8fpkt", shape=diamond, color=yellow];
4331[label="197.37.141.70;s;1pkt 1fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.190.105.122:80, 163.234.103.89:*}[25%]&lt;BR/&gt;{30.190.199.226:80, 163.234.103.89:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3740: (13.6364%)&lt;BR/&gt; 3764: (9.09091%)&lt;BR/&gt; 11371: (4.54545%)&lt;BR/&gt; 3765: (4.54545%)&gt;];
}
1546--2629[label="1;1pkt 1fpkt"];
2497--2629[label="1;1pkt 1fpkt"];
2497--4331[label="1;1pkt 1fpkt"];
2629--3269[label="0.333333;1pkt 1fpkt"];
2629--3442[label="0.125;1pkt 1fpkt"];
2629--4331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.103.89" src_ip="30.190.199.226" src_port="80"/>
      <filter dst_ip="163.234.103.89" src_ip="30.190.105.122" src_port="80"/>
    </slice>
    <from sec="1262322489" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
2511[label="40.112.148.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
4337[label="40.112.148.243;d;1pkt 1fpkt", shape=hexagon, color=black];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.245.249:80, 40.112.148.243:2343}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2343: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2511--4337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.112.148.243" dst_port="2343" src_ip="208.108.245.249" src_port="80"/>
    </slice>
    <from sec="1262322626" usec="0"/>
    <to sec="1262322702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
2685[label="30.250.160.221;s;742pkt 742fpkt", shape=diamond, color=yellow];
4347[label="30.250.160.221;s;742pkt 742fpkt", shape=hexagon, color=black];
5601[label="30.250.160.221;742pkt 742fpkt", shape=pentagon, color=darkviolet];
5949[label="30.250.160.221;742pkt 742fpkt", shape=invtriangle, color=brown];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.250.160.221:12200, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12200: (50%)&lt;BR/&gt; 3128: (8.08625%)&lt;BR/&gt; 6588: (6.13208%)&lt;BR/&gt; 8090: (5.39084%)&lt;BR/&gt; 9415: (5.18868%)&gt;];
}
2685--3220[label="0.00134771;1pkt 1fpkt"];
2685--4091[label="0.00436681;1pkt 1fpkt"];
2685--4110[label="0.011236;1pkt 1fpkt"];
2685--4347[label="1;742pkt 742fpkt"];
2685--4649[label="0.00134771;1pkt 1fpkt"];
2685--4667[label="0.00436681;1pkt 1fpkt"];
2685--5601[label="1;742pkt 742fpkt"];
2685--5949[label="1;742pkt 742fpkt"];
4347--4649[label="0.00134771;1pkt 1fpkt"];
4347--4667[label="0.00436681;1pkt 1fpkt"];
4347--5601[label="1;742pkt 742fpkt"];
4347--5949[label="1;742pkt 742fpkt"];
5601--5949[label="1;742pkt 742fpkt"];
</description>
    <slice>
      <filter src_ip="30.250.160.221" src_port="12200"/>
    </slice>
    <from sec="1262322669" usec="0"/>
    <to sec="1262322794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
2707[label="88.189.165.90;s;29pkt 29fpkt", shape=diamond, color=yellow];
4352[label="88.189.165.90;s;29pkt 29fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.189.165.90:*, 208.108.242.166:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1385: (1.72414%)&lt;BR/&gt; 1383: (1.72414%)&lt;BR/&gt; 1381: (1.72414%)&lt;BR/&gt; 1377: (1.72414%)&gt;];
}
2707--4352[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.242.166" dst_port="80" src_ip="88.189.165.90"/>
    </slice>
    <from sec="1262322694" usec="0"/>
    <to sec="1262322716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
226[label="208.108.252.123;s;158pkt 158fpkt", shape=diamond, color=yellow];
227[label="206.27.5.214;d;19pkt 19fpkt", shape=diamond, color=yellow];
704[label="206.26.2.170;d;8pkt 8fpkt", shape=diamond, color=yellow];
856[label="32.44.34.39;d;8pkt 8fpkt", shape=diamond, color=yellow];
4361[label="206.26.2.170;d;8pkt 8fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.252.123:*, *:443}[24.0506%]&lt;BR/&gt;{208.108.252.123:8888, *:*}[20.2532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (17.9104%)&lt;BR/&gt; 443: (10.4478%)&lt;BR/&gt; 62721: (5.72139%)&lt;BR/&gt; 53: (3.9801%)&lt;BR/&gt; 63020: (2.73632%)&gt;];
}
226--227[label="1;19pkt 19fpkt"];
226--536[label="0.0116279;1pkt 1fpkt"];
226--658[label="0.00632911;1pkt 1fpkt"];
226--704[label="1;8pkt 8fpkt"];
226--772[label="0.0580645;9pkt 9fpkt"];
226--856[label="1;8pkt 8fpkt"];
226--964[label="0.00934579;1pkt 1fpkt"];
226--991[label="0.056962;9pkt 9fpkt"];
226--1304[label="0.0679612;7pkt 7fpkt"];
226--1309[label="0.0694444;5pkt 5fpkt"];
226--1818[label="0.0377358;2pkt 2fpkt"];
226--3019[label="0.00632911;1pkt 1fpkt"];
226--3126[label="0.0238095;1pkt 1fpkt"];
226--3136[label="0.0125;1pkt 1fpkt"];
226--3148[label="0.056962;9pkt 9fpkt"];
226--4056[label="0.0642857;9pkt 9fpkt"];
226--4361[label="1;8pkt 8fpkt"];
704--4361[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.252.123" src_port="8888"/>
      <filter dst_port="443" src_ip="208.108.252.123"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
694[label="173.206.232.33;s;45pkt 45fpkt", shape=diamond, color=yellow];
827[label="140.14.26.92;d;25pkt 25fpkt", shape=diamond, color=yellow];
992[label="173.206.232.64;s;163pkt 163fpkt", shape=diamond, color=yellow];
1925[label="136.25.52.98;d;15pkt 15fpkt", shape=diamond, color=yellow];
2810[label="163.234.237.174;d;57pkt 57fpkt", shape=diamond, color=yellow];
3035[label="173.206.232.33;s;45pkt 45fpkt", shape=hexagon, color=black];
3356[label="136.25.232.200;d;161pkt 161fpkt", shape=hexagon, color=black];
3856[label="173.206.224.16;s;48pkt 48fpkt", shape=hexagon, color=black];
4193[label="140.14.26.92;d;22pkt 22fpkt", shape=hexagon, color=black];
4270[label="173.206.232.64;s;163pkt 163fpkt", shape=hexagon, color=black];
4364[label="208.108.246.129;d;7944pkt 7944fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.108.246.129:7282}[92.1782%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7282: (44.4233%)&lt;BR/&gt; 80: (3.36096%)&lt;BR/&gt; 443: (1.95097%)&lt;BR/&gt; 0: (0.471915%)&lt;BR/&gt; 58575: (0.0287753%)&gt;];
}
694--969[label="0.103448;3pkt 3fpkt"];
694--983[label="0.333333;15pkt 15fpkt"];
694--1925[label="0.2;3pkt 3fpkt"];
694--3035[label="1;45pkt 45fpkt"];
694--3356[label="0.111111;5pkt 5fpkt"];
827--992[label="0.92;23pkt 23fpkt"];
827--4193[label="1;22pkt 22fpkt"];
827--4270[label="0.92;23pkt 23fpkt"];
992--1662[label="0.101562;13pkt 13fpkt"];
992--1925[label="0.2;3pkt 3fpkt"];
992--2380[label="0.0833333;2pkt 2fpkt"];
992--2602[label="0.0909091;2pkt 2fpkt"];
992--2795[label="0.117647;2pkt 2fpkt"];
992--2810[label="0.0175439;1pkt 1fpkt"];
992--3356[label="0.0931677;15pkt 15fpkt"];
992--4193[label="0.909091;20pkt 20fpkt"];
992--4270[label="1;163pkt 163fpkt"];
992--4364[label="0.0245399;4pkt 4fpkt"];
992--4796[label="0.0122699;2pkt 2fpkt"];
992--4857[label="0.0122699;2pkt 2fpkt"];
1925--3035[label="0.2;3pkt 3fpkt"];
1925--3111[label="0.2;3pkt 3fpkt"];
1925--4270[label="0.2;3pkt 3fpkt"];
1925--4796[label="0.0666667;1pkt 1fpkt"];
1925--4857[label="0.0666667;1pkt 1fpkt"];
1925--5083[label="0.2;3pkt 3fpkt"];
1925--5752[label="0.2;3pkt 3fpkt"];
2810--4057[label="0.0877193;5pkt 5fpkt"];
2810--4270[label="0.0175439;1pkt 1fpkt"];
2810--4591[label="0.0175439;1pkt 1fpkt"];
2810--4685[label="0.0877193;5pkt 5fpkt"];
2810--5493[label="0.0350877;2pkt 2fpkt"];
3035--3356[label="0.111111;5pkt 5fpkt"];
3356--3723[label="0.4;26pkt 26fpkt"];
3356--3856[label="0.625;30pkt 30fpkt"];
3356--4057[label="0.186335;30pkt 30fpkt"];
3356--4270[label="0.0931677;15pkt 15fpkt"];
3356--4591[label="0.393939;26pkt 26fpkt"];
3356--4685[label="0.186335;30pkt 30fpkt"];
3356--4796[label="0.10559;17pkt 17fpkt"];
3356--4857[label="0.10559;17pkt 17fpkt"];
3356--5493[label="0.118012;19pkt 19fpkt"];
3856--4796[label="0.0416667;2pkt 2fpkt"];
3856--4857[label="0.0416667;2pkt 2fpkt"];
4193--4270[label="0.909091;20pkt 20fpkt"];
4270--4364[label="0.0245399;4pkt 4fpkt"];
4270--4796[label="0.0122699;2pkt 2fpkt"];
4270--4857[label="0.0122699;2pkt 2fpkt"];
4364--4376[label="0.0018315;1pkt 1fpkt"];
4364--4525[label="0.000125881;1pkt 1fpkt"];
4364--4685[label="0.00574713;1pkt 1fpkt"];
4364--4710[label="0.00150773;8pkt 8fpkt"];
4364--4718[label="0.000125881;1pkt 1fpkt"];
4364--4725[label="0.00242845;14pkt 14fpkt"];
4364--4746[label="0.0019573;11pkt 11fpkt"];
4364--4767[label="0.00148865;8pkt 8fpkt"];
4364--4776[label="0.422427;275pkt 275fpkt"];
4364--4784[label="0.000125881;1pkt 1fpkt"];
4364--4796[label="0.000629406;5pkt 5fpkt"];
4364--4797[label="0.000125881;1pkt 1fpkt"];
4364--4805[label="0.00242845;14pkt 14fpkt"];
4364--4818[label="0.0019573;11pkt 11fpkt"];
4364--4831[label="0.00148865;8pkt 8fpkt"];
4364--4838[label="0.422427;275pkt 275fpkt"];
4364--4846[label="0.000125881;1pkt 1fpkt"];
4364--4857[label="0.000629406;5pkt 5fpkt"];
4364--4858[label="0.000125881;1pkt 1fpkt"];
4364--4882[label="0.422427;275pkt 275fpkt"];
4364--4890[label="0.000125881;1pkt 1fpkt"];
4364--5395[label="0.000125881;1pkt 1fpkt"];
4364--5879[label="0.000125881;1pkt 1fpkt"];
4364--6053[label="0.000125881;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.246.129" dst_port="7282"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1823[label="140.14.108.121;s;128pkt 128fpkt", shape=diamond, color=yellow];
4377[label="140.14.108.121;s;128pkt 128fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.108.121:25, 25.157.163.73:*}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6094%)&lt;BR/&gt; 3746: (0.78125%)&lt;BR/&gt; 0: (0.78125%)&lt;BR/&gt; 64727: (0.390625%)&lt;BR/&gt; 64013: (0.390625%)&gt;];
}
1823--4377[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_ip="25.157.163.73" src_ip="140.14.108.121" src_port="25"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
2537[label="136.25.232.226;d;316pkt 316fpkt", shape=diamond, color=yellow];
4386[label="136.25.232.226;d;316pkt 316fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 136.25.232.226:20129}[68.9873%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (84.4937%)&lt;BR/&gt; 33417: (0.316456%)&lt;BR/&gt; 65379: (0.158228%)&lt;BR/&gt; 63895: (0.158228%)&lt;BR/&gt; 63595: (0.158228%)&gt;];
}
2537--4386[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter dst_ip="136.25.232.226" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
338[label="163.234.29.86;d;8pkt 8fpkt", shape=diamond, color=yellow];
471[label="1.166.30.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1417[label="31.81.210.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
3570[label="31.81.210.194;s;1pkt 1fpkt", shape=hexagon, color=black];
3646[label="163.234.29.86;d;4pkt 4fpkt", shape=hexagon, color=black];
4393[label="1.166.30.181;s;1pkt 1fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 163.234.29.86:2498}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2498: (43.75%)&lt;BR/&gt; 55196: (12.5%)&lt;BR/&gt; 17788: (12.5%)&lt;BR/&gt; 9059: (12.5%)&lt;BR/&gt; 11325: (6.25%)&gt;];
}
338--471[label="1;1pkt 1fpkt"];
338--1417[label="1;1pkt 1fpkt"];
338--3442[label="0.125;1pkt 1fpkt"];
338--3570[label="1;1pkt 1fpkt"];
338--3646[label="1;4pkt 4fpkt"];
338--4393[label="1;1pkt 1fpkt"];
471--3646[label="1;1pkt 1fpkt"];
471--4393[label="1;1pkt 1fpkt"];
1417--3570[label="1;1pkt 1fpkt"];
1417--3646[label="1;1pkt 1fpkt"];
3570--3646[label="1;1pkt 1fpkt"];
3646--4393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.29.86" dst_port="2498" src_port="17788"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1656[label="136.6.68.167;s;69pkt 69fpkt", shape=diamond, color=yellow];
2589[label="140.14.66.244;s;61pkt 61fpkt", shape=diamond, color=yellow];
4245[label="18.89.24.160;d;26pkt 26fpkt", shape=hexagon, color=black];
4412[label="20.37.125.58;d;34pkt 34fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.66.244:80, *:*}[36.0947%]&lt;BR/&gt;{136.6.68.167:80, 20.37.120.175:*}[32.5444%]&lt;BR/&gt;{*:*, 20.37.125.58:*}[20.1183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6316%)&lt;BR/&gt; 8080: (7.36842%)&lt;BR/&gt; 64406: (0.526316%)&lt;BR/&gt; 64274: (0.526316%)&lt;BR/&gt; 62683: (0.526316%)&gt;];
}
1656--4412[label="0.352941;12pkt 12fpkt"];
1656--4796[label="0.057971;4pkt 4fpkt"];
1656--4857[label="0.057971;4pkt 4fpkt"];
2589--3340[label="0.0327869;2pkt 2fpkt"];
2589--3968[label="0.0416667;2pkt 2fpkt"];
2589--4245[label="0.0769231;2pkt 2fpkt"];
2589--4261[label="1;55pkt 55fpkt"];
2589--4412[label="0.205882;7pkt 7fpkt"];
2589--4796[label="0.0491803;3pkt 3fpkt"];
2589--4857[label="0.0491803;3pkt 3fpkt"];
4245--4261[label="0.0769231;2pkt 2fpkt"];
4245--4431[label="0.0384615;1pkt 1fpkt"];
4245--4572[label="0.153846;4pkt 4fpkt"];
4245--5013[label="0.115385;3pkt 3fpkt"];
4412--4796[label="0.0294118;1pkt 1fpkt"];
4412--4857[label="0.0294118;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.125.58"/>
      <filter src_ip="140.14.66.244" src_port="80"/>
      <filter dst_ip="20.37.120.175" src_ip="136.6.68.167" src_port="80"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
2760[label="99.89.28.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
4416[label="99.89.28.227;s;1pkt 1fpkt", shape=hexagon, color=black];
5618[label="99.89.28.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.89.28.227:6881, 208.108.242.54:40539}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40539: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
2760--3844[label="1;1pkt 1fpkt"];
2760--4416[label="1;1pkt 1fpkt"];
2760--5618[label="1;1pkt 1fpkt"];
4416--5618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.242.54" dst_port="40539" src_ip="99.89.28.227" src_port="6881"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
2186[label="140.14.133.123;s;81pkt 81fpkt", shape=diamond, color=yellow];
4441[label="140.14.133.123;s;81pkt 81fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.133.123:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65237: (0.617284%)&lt;BR/&gt; 65236: (0.617284%)&lt;BR/&gt; 65235: (0.617284%)&lt;BR/&gt; 65234: (0.617284%)&gt;];
}
2186--4441[label="1;81pkt 81fpkt"];
2186--4732[label="0.0123457;1pkt 1fpkt"];
4441--4732[label="0.0123457;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.133.123" src_port="25"/>
    </slice>
    <from sec="1262322023" usec="0"/>
    <to sec="1262322807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
2793[label="163.234.204.137;s;74pkt 74fpkt", shape=diamond, color=yellow];
4444[label="163.234.204.137;s;74pkt 74fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.204.137:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65461: (0.675676%)&lt;BR/&gt; 63469: (0.675676%)&lt;BR/&gt; 62835: (0.675676%)&lt;BR/&gt; 62713: (0.675676%)&gt;];
}
2793--4444[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter src_ip="163.234.204.137" src_port="25"/>
    </slice>
    <from sec="1262322024" usec="0"/>
    <to sec="1262322821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
2417[label="20.37.125.71;s;53pkt 53fpkt", shape=diamond, color=yellow];
4446[label="20.37.125.71;s;53pkt 53fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.37.125.71:*, 208.108.243.64:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65365: (0.943396%)&lt;BR/&gt; 65256: (0.943396%)&lt;BR/&gt; 64856: (0.943396%)&lt;BR/&gt; 64471: (0.943396%)&gt;];
}
2417--4446[label="1;53pkt 53fpkt"];
2417--4710[label="0.0754717;4pkt 4fpkt"];
2417--4725[label="0.0566038;3pkt 3fpkt"];
2417--4767[label="0.0566038;3pkt 3fpkt"];
2417--4805[label="0.0566038;3pkt 3fpkt"];
2417--4831[label="0.0566038;3pkt 3fpkt"];
4446--4710[label="0.0754717;4pkt 4fpkt"];
4446--4725[label="0.0566038;3pkt 3fpkt"];
4446--4767[label="0.0566038;3pkt 3fpkt"];
4446--4805[label="0.0566038;3pkt 3fpkt"];
4446--4831[label="0.0566038;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.243.64" dst_port="80" src_ip="20.37.125.71"/>
    </slice>
    <from sec="1262322028" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1981[label="197.44.89.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
4468[label="197.44.89.90;s;1pkt 1fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.44.89.90:43128, 163.234.102.228:15990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43128: (50%)&lt;BR/&gt; 15990: (50%)&gt;];
}
1981--4468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.102.228" dst_port="15990" src_ip="197.44.89.90" src_port="43128"/>
    </slice>
    <from sec="1262322344" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
810[label="208.108.242.105;s;3948pkt 3948fpkt", shape=diamond, color=yellow];
1373[label="208.108.242.9;s;52pkt 52fpkt", shape=diamond, color=yellow];
2002[label="209.97.32.162;d;88pkt 88fpkt", shape=diamond, color=yellow];
2438[label="45.21.100.13;d;81pkt 81fpkt", shape=diamond, color=yellow];
2456[label="32.40.224.173;d;81pkt 81fpkt", shape=diamond, color=yellow];
3554[label="208.108.242.9;s;49pkt 49fpkt", shape=hexagon, color=black];
4315[label="32.40.224.173;d;81pkt 81fpkt", shape=hexagon, color=black];
4473[label="209.97.32.162;d;88pkt 88fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.242.105:*, *:*}[98.503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (1.41003%)&lt;BR/&gt; 33475: (0.705013%)&lt;BR/&gt; 33472: (0.705013%)&lt;BR/&gt; 33455: (0.705013%)&lt;BR/&gt; 33452: (0.705013%)&gt;];
}
810--1397[label="0.869565;80pkt 80fpkt"];
810--2002[label="0.909091;80pkt 80fpkt"];
810--2438[label="0.987654;80pkt 80fpkt"];
810--2456[label="0.987654;80pkt 80fpkt"];
810--3019[label="0.130435;99pkt 99fpkt"];
810--4315[label="0.987654;80pkt 80fpkt"];
810--4473[label="0.909091;80pkt 80fpkt"];
1373--2438[label="0.0192308;1pkt 1fpkt"];
1373--2456[label="0.0192308;1pkt 1fpkt"];
1373--3554[label="1;49pkt 49fpkt"];
1373--4315[label="0.0192308;1pkt 1fpkt"];
2002--4473[label="1;88pkt 88fpkt"];
2002--5044[label="0.126984;8pkt 8fpkt"];
2002--5737[label="0.126984;8pkt 8fpkt"];
2438--3554[label="0.0204082;1pkt 1fpkt"];
2456--3554[label="0.0204082;1pkt 1fpkt"];
2456--4315[label="1;81pkt 81fpkt"];
3554--4315[label="0.0204082;1pkt 1fpkt"];
4473--5044[label="0.126984;8pkt 8fpkt"];
4473--5737[label="0.126984;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.242.105"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
2521[label="205.200.208.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
4490[label="205.200.208.175;s;1pkt 1fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.200.208.175:46464, 208.108.253.82:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46464: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2521--4490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.253.82" dst_port="80" src_ip="205.200.208.175" src_port="46464"/>
    </slice>
    <from sec="1262322639" usec="0"/>
    <to sec="1262322653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
2693[label="32.204.192.78;s;2pkt 2fpkt", shape=diamond, color=yellow];
4497[label="32.204.192.78;s;2pkt 2fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.204.192.78:58312, 209.72.24.104:80}[50%]&lt;BR/&gt;{32.204.192.78:58320, 209.72.24.104:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58320: (25%)&lt;BR/&gt; 58312: (25%)&gt;];
}
2693--4497[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.204.192.78" src_port="58320"/>
      <filter dst_ip="209.72.24.104" dst_port="80" src_ip="32.204.192.78" src_port="58312"/>
    </slice>
    <from sec="1262322675" usec="0"/>
    <to sec="1262322708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
2878[label="37.14.132.190;d;23pkt 23fpkt", shape=diamond, color=yellow];
4508[label="37.14.132.190;d;23pkt 23fpkt", shape=hexagon, color=black];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.253.82:80, 37.14.132.190:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2988: (2.17391%)&lt;BR/&gt; 2987: (2.17391%)&lt;BR/&gt; 2986: (2.17391%)&lt;BR/&gt; 2985: (2.17391%)&gt;];
}
2878--4508[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="37.14.132.190" src_ip="208.108.253.82" src_port="80"/>
    </slice>
    <from sec="1262322776" usec="0"/>
    <to sec="1262322786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880048,1.42871,901,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322828" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880048,1.42871,901,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1262322000" usec="0"/>
      <to sec="1262322378" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569143,1.30866,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
4111[label="209.67.91.64;s;1008pkt 1008fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.67.91.64:*, *:53}[96.2302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.2639%)&lt;BR/&gt; 0: (3.47222%)&lt;BR/&gt; 64349: (0.0992063%)&lt;BR/&gt; 63912: (0.0992063%)&lt;BR/&gt; 63800: (0.0992063%)&gt;];
}
4111--4691[label="1;1008pkt 1008fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="209.67.91.64"/>
    </slice>
    <from sec="1262322009" usec="0"/>
    <to sec="1262322828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.129.39.1"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.4.211.2"/>
    </slice>
    <from sec="1262322234" usec="0"/>
    <to sec="1262322895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.36.247.6"/>
    </slice>
    <from sec="1262322458" usec="0"/>
    <to sec="1262322467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.123.100.9"/>
    </slice>
    <from sec="1262322286" usec="0"/>
    <to sec="1262322557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.26.24.10"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.145.218.11"/>
    </slice>
    <from sec="1262322814" usec="0"/>
    <to sec="1262322898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1833[label="136.6.213.12;s;232pkt 232fpkt", shape=diamond, color=yellow];
4070[label="136.6.213.12;s;232pkt 232fpkt", shape=hexagon, color=black];
4948[label="136.6.213.12;250pkt 250fpkt", shape=pentagon, color=darkviolet];
5699[label="136.6.213.12;251pkt 251fpkt", shape=invtriangle, color=brown];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.213.12:61374, *:*}[95.6175%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61374: (47.7202%)&lt;BR/&gt; 443: (1.86528%)&lt;BR/&gt; 47082: (0.414508%)&lt;BR/&gt; 7776: (0.414508%)&lt;BR/&gt; 5413: (0.414508%)&gt;];
}
1833--4070[label="1;232pkt 232fpkt"];
1833--4948[label="0.99569;231pkt 231fpkt"];
1833--5699[label="1;232pkt 232fpkt"];
4070--4948[label="0.99569;231pkt 231fpkt"];
4070--5699[label="1;232pkt 232fpkt"];
4948--5699[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter src_ip="136.6.213.12" src_port="61374"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.14.130.18"/>
    </slice>
    <from sec="1262322015" usec="0"/>
    <to sec="1262322603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.65.151.18"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.92.164.18"/>
    </slice>
    <from sec="1262322889" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.126.96.21"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.55.144.23"/>
    </slice>
    <from sec="1262322687" usec="0"/>
    <to sec="1262322714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.40.232.23"/>
    </slice>
    <from sec="1262322866" usec="0"/>
    <to sec="1262322873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.215.21.24"/>
    </slice>
    <from sec="1262322345" usec="0"/>
    <to sec="1262322369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.178.132.24"/>
    </slice>
    <from sec="1262322663" usec="0"/>
    <to sec="1262322795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.88.11.26"/>
    </slice>
    <from sec="1262322235" usec="0"/>
    <to sec="1262322881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
5017[label="140.14.225.31;290pkt 290fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.225.31:*, *:53}[97.931%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1379%)&lt;BR/&gt; 0: (1.37931%)&lt;BR/&gt; 62359: (0.344828%)&lt;BR/&gt; 54721: (0.344828%)&lt;BR/&gt; 65524: (0.172414%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="140.14.225.31"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.81.27.32"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752914,1.25039,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
1135[label="208.108.242.37;s;14pkt 14fpkt", shape=diamond, color=yellow];
1397[label="32.130.16.123;d;92pkt 92fpkt", shape=diamond, color=yellow];
5044[label="208.108.242.37;63pkt 63fpkt", shape=pentagon, color=darkviolet];
5737[label="208.108.242.37;63pkt 63fpkt", shape=invtriangle, color=brown];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.242.105:*, 32.130.16.123:*}[55.9441%]&lt;BR/&gt;{208.108.242.37:2000, *:*}[22.3776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (16.5948%)&lt;BR/&gt; 10079: (4.09483%)&lt;BR/&gt; 4982: (1.93966%)&lt;BR/&gt; 1859: (1.72414%)&lt;BR/&gt; 30640: (1.2931%)&gt;];
}
1135--5044[label="1;14pkt 14fpkt"];
1135--5737[label="1;14pkt 14fpkt"];
1397--5044[label="0.190476;12pkt 12fpkt"];
1397--5737[label="0.190476;12pkt 12fpkt"];
5044--5737[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="32.130.16.123" src_ip="208.108.242.105"/>
      <filter src_ip="208.108.242.37" src_port="2000"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.88.60.41"/>
    </slice>
    <from sec="1262322394" usec="0"/>
    <to sec="1262322395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.37.120.41"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.25.53.42"/>
    </slice>
    <from sec="1262322672" usec="0"/>
    <to sec="1262322695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.108.245.43"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.83.66.49"/>
    </slice>
    <from sec="1262322687" usec="0"/>
    <to sec="1262322708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
477[label="209.72.153.82;s;53pkt 53fpkt", shape=diamond, color=yellow];
478[label="20.37.120.235;d;103pkt 103fpkt", shape=diamond, color=yellow];
1434[label="136.6.234.54;s;98pkt 98fpkt", shape=diamond, color=yellow];
3701[label="209.72.153.82;s;32pkt 32fpkt", shape=hexagon, color=black];
3897[label="20.37.120.235;d;77pkt 77fpkt", shape=hexagon, color=black];
5097[label="136.6.234.54;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.234.54:80, 20.37.120.235:*}[64.4172%]&lt;BR/&gt;{209.72.153.82:80, *:*}[31.2883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64973: (0.424628%)&lt;BR/&gt; 63993: (0.424628%)&lt;BR/&gt; 63921: (0.424628%)&lt;BR/&gt; 62850: (0.424628%)&gt;];
}
477--478[label="0.113208;6pkt 6fpkt"];
477--504[label="0.301887;16pkt 16fpkt"];
477--3195[label="0.0188679;1pkt 1fpkt"];
477--3701[label="1;32pkt 32fpkt"];
477--3897[label="0.0943396;5pkt 5fpkt"];
477--4784[label="0.0188679;1pkt 1fpkt"];
477--4796[label="0.113208;6pkt 6fpkt"];
477--4846[label="0.0188679;1pkt 1fpkt"];
477--4857[label="0.113208;6pkt 6fpkt"];
477--4890[label="0.0188679;1pkt 1fpkt"];
478--845[label="0.00970874;1pkt 1fpkt"];
478--855[label="0.010989;1pkt 1fpkt"];
478--1434[label="0.969388;95pkt 95fpkt"];
478--3294[label="0.0126582;1pkt 1fpkt"];
478--3701[label="0.125;4pkt 4fpkt"];
478--3878[label="0.00970874;1pkt 1fpkt"];
478--3897[label="1;77pkt 77fpkt"];
478--4784[label="0.00970874;1pkt 1fpkt"];
478--4796[label="0.00970874;1pkt 1fpkt"];
478--4846[label="0.00970874;1pkt 1fpkt"];
478--4857[label="0.00970874;1pkt 1fpkt"];
478--4890[label="0.00970874;1pkt 1fpkt"];
478--5097[label="0.92233;95pkt 95fpkt"];
1434--3897[label="0.922078;71pkt 71fpkt"];
1434--5097[label="1;98pkt 98fpkt"];
3701--3897[label="0.125;4pkt 4fpkt"];
3701--4796[label="0.1875;6pkt 6fpkt"];
3701--4857[label="0.1875;6pkt 6fpkt"];
3897--4796[label="0.012987;1pkt 1fpkt"];
3897--4857[label="0.012987;1pkt 1fpkt"];
3897--5097[label="0.922078;71pkt 71fpkt"];
</description>
    <slice>
      <filter src_ip="209.72.153.82" src_port="80"/>
      <filter dst_ip="20.37.120.235" src_ip="136.6.234.54" src_port="80"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.14.81.57"/>
    </slice>
    <from sec="1262322101" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.176.36.58"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
2394[label="209.72.25.72;d;69pkt 69fpkt", shape=diamond, color=yellow];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.37.120.26:*, 209.72.25.72:80}[71.0145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2754%)&lt;BR/&gt; 65160: (0.724638%)&lt;BR/&gt; 64358: (0.724638%)&lt;BR/&gt; 64269: (0.724638%)&lt;BR/&gt; 64190: (0.724638%)&gt;];
}
2394--4710[label="0.101449;7pkt 7fpkt"];
2394--4725[label="0.0434783;3pkt 3fpkt"];
2394--4805[label="0.0434783;3pkt 3fpkt"];
2394--5003[label="0.830508;49pkt 49fpkt"];
2394--5118[label="0.0144928;1pkt 1fpkt"];
2394--5407[label="0.0289855;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.72.25.72" dst_port="80" src_ip="20.37.120.26"/>
    </slice>
    <from sec="1262322010" usec="0"/>
    <to sec="1262322735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.60.97.63"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.94.20.64"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.133.24.64"/>
    </slice>
    <from sec="1262322770" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.154.88.70"/>
    </slice>
    <from sec="1262322208" usec="0"/>
    <to sec="1262322389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.52.196.72"/>
    </slice>
    <from sec="1262322735" usec="0"/>
    <to sec="1262322862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.29.161.73"/>
    </slice>
    <from sec="1262322007" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.234.196.73"/>
    </slice>
    <from sec="1262322843" usec="0"/>
    <to sec="1262322859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.25.213.74"/>
    </slice>
    <from sec="1262322739" usec="0"/>
    <to sec="1262322743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.225.201.76"/>
    </slice>
    <from sec="1262322809" usec="0"/>
    <to sec="1262322814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.57.11.77"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.108.243.77"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.157.132.78"/>
    </slice>
    <from sec="1262322343" usec="0"/>
    <to sec="1262322350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.192.112.81"/>
    </slice>
    <from sec="1262322131" usec="0"/>
    <to sec="1262322149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.158.182.82"/>
    </slice>
    <from sec="1262322853" usec="0"/>
    <to sec="1262322885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.45.16.83"/>
    </slice>
    <from sec="1262322337" usec="0"/>
    <to sec="1262322413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.131.75.83"/>
    </slice>
    <from sec="1262322225" usec="0"/>
    <to sec="1262322657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.209.236.84"/>
    </slice>
    <from sec="1262322049" usec="0"/>
    <to sec="1262322592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
1654[label="140.14.1.89;s;9pkt 9fpkt", shape=diamond, color=yellow];
5212[label="140.14.1.89;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.1.89:25, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.3043%)&lt;BR/&gt; 110: (8.69565%)&lt;BR/&gt; 63576: (4.34783%)&lt;BR/&gt; 30613: (4.34783%)&lt;BR/&gt; 28425: (4.34783%)&gt;];
}
1654--5212[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.1.89" src_port="25"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.188.246.91"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.25.169.98"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.208.163.100"/>
    </slice>
    <from sec="1262322020" usec="0"/>
    <to sec="1262322896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.179.140.103"/>
    </slice>
    <from sec="1262322477" usec="0"/>
    <to sec="1262322531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.24.251.103"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.19.155.104"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.3.23.107"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
2736[label="208.108.252.97;d;194pkt 194fpkt", shape=diamond, color=yellow];
5267[label="43.38.84.107;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.108.252.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63798: (4.84581%)&lt;BR/&gt; 64672: (4.62555%)&lt;BR/&gt; 64406: (4.62555%)&lt;BR/&gt; 62184: (3.52423%)&lt;BR/&gt; 64092: (3.30396%)&gt;];
}
2736--3020[label="0.00515464;1pkt 1fpkt"];
2736--3442[label="0.0103093;2pkt 2fpkt"];
2736--4525[label="0.00515464;1pkt 1fpkt"];
2736--4714[label="0.00515464;1pkt 1fpkt"];
2736--4718[label="0.00515464;1pkt 1fpkt"];
2736--4796[label="0.00515464;1pkt 1fpkt"];
2736--4797[label="0.00515464;1pkt 1fpkt"];
2736--4857[label="0.00515464;1pkt 1fpkt"];
2736--4858[label="0.00515464;1pkt 1fpkt"];
2736--5267[label="0.909091;30pkt 30fpkt"];
2736--5395[label="0.00515464;1pkt 1fpkt"];
2736--5879[label="0.00515464;1pkt 1fpkt"];
2736--6053[label="0.00515464;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.252.97"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.27.239.107"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.219.214.111"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.14.253.112"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.84.29.116"/>
    </slice>
    <from sec="1262322009" usec="0"/>
    <to sec="1262322893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.94.118.119"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.1.174.121"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.38.85.128"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
5350[label="199.199.61.135;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.199.61.135:0, *:0}[98.1982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1982%)&lt;BR/&gt; 445: (0.900901%)&lt;BR/&gt; 4091: (0.45045%)&lt;BR/&gt; 3239: (0.45045%)&gt;];
}
</description>
    <slice>
      <filter src_ip="199.199.61.135"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
342[label="140.14.40.141;s;3758pkt 3758fpkt", shape=diamond, color=yellow];
5371[label="140.14.40.141;4054pkt 4054fpkt", shape=pentagon, color=darkviolet];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.40.141:37437, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37437: (50%)&lt;BR/&gt; 47935: (0.0768049%)&lt;BR/&gt; 43998: (0.0384025%)&lt;BR/&gt; 8080: (0.0384025%)&lt;BR/&gt; 64952: (0.0256016%)&gt;];
}
342--4710[label="0.000266099;1pkt 1fpkt"];
342--4749[label="0.00084246;1pkt 1fpkt"];
342--5371[label="1;3758pkt 3758fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.40.141" src_port="37437"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.103.65.141"/>
    </slice>
    <from sec="1262322285" usec="0"/>
    <to sec="1262322298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.185.32.149"/>
    </slice>
    <from sec="1262322398" usec="0"/>
    <to sec="1262322402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
802[label="208.108.245.158;d;452pkt 452fpkt", shape=diamond, color=yellow];
861[label="208.108.241.26;d;454pkt 454fpkt", shape=diamond, color=yellow];
2046[label="136.25.192.230;d;137pkt 137fpkt", shape=diamond, color=yellow];
2125[label="140.14.106.91;d;135pkt 135fpkt", shape=diamond, color=yellow];
3502[label="208.108.241.26;d;454pkt 454fpkt", shape=hexagon, color=black];
4039[label="136.25.192.230;d;88pkt 88fpkt", shape=hexagon, color=black];
5415[label="213.171.2.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5491[label="32.0.122.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.108.241.26:0}[38.455%]&lt;BR/&gt;{*:0, 208.108.245.158:0}[38.2852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8261%)&lt;BR/&gt; 6000: (0.0869565%)&lt;BR/&gt; 135: (0.0869565%)&gt;];
}
802--3020[label="0.00221239;1pkt 1fpkt"];
802--4525[label="0.00221239;1pkt 1fpkt"];
802--4718[label="0.00221239;1pkt 1fpkt"];
802--4797[label="0.00221239;1pkt 1fpkt"];
802--4858[label="0.00221239;1pkt 1fpkt"];
802--5395[label="0.00221239;1pkt 1fpkt"];
802--5415[label="0.25;1pkt 1fpkt"];
802--5879[label="0.00221239;1pkt 1fpkt"];
802--6053[label="0.00221239;1pkt 1fpkt"];
861--3020[label="0.00220264;1pkt 1fpkt"];
861--3502[label="1;454pkt 454fpkt"];
861--4525[label="0.00220264;1pkt 1fpkt"];
861--4718[label="0.00220264;1pkt 1fpkt"];
861--4797[label="0.00220264;1pkt 1fpkt"];
861--4858[label="0.00220264;1pkt 1fpkt"];
861--5395[label="0.00220264;1pkt 1fpkt"];
861--5415[label="0.25;1pkt 1fpkt"];
861--5491[label="1;1pkt 1fpkt"];
861--5879[label="0.00220264;1pkt 1fpkt"];
861--6053[label="0.00220264;1pkt 1fpkt"];
2046--4039[label="1;88pkt 88fpkt"];
2046--5415[label="0.25;1pkt 1fpkt"];
2125--5415[label="0.25;1pkt 1fpkt"];
3502--4525[label="0.00220264;1pkt 1fpkt"];
3502--4718[label="0.00220264;1pkt 1fpkt"];
3502--4797[label="0.00220264;1pkt 1fpkt"];
3502--4858[label="0.00220264;1pkt 1fpkt"];
3502--5395[label="0.00220264;1pkt 1fpkt"];
3502--5415[label="0.25;1pkt 1fpkt"];
3502--5491[label="1;1pkt 1fpkt"];
3502--5879[label="0.00220264;1pkt 1fpkt"];
3502--6053[label="0.00220264;1pkt 1fpkt"];
4039--5415[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.241.26"/>
      <filter dst_ip="208.108.245.158"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
1933[label="20.37.126.122;d;4pkt 4fpkt", shape=diamond, color=yellow];
2844[label="141.14.48.164;s;3pkt 3fpkt", shape=diamond, color=yellow];
5441[label="141.14.48.164;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.14.48.164:80, 20.37.126.122:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54270: (11.5385%)&lt;BR/&gt; 46232: (11.5385%)&lt;BR/&gt; 44459: (11.5385%)&lt;BR/&gt; 62538: (3.84615%)&gt;];
}
1933--2844[label="1;3pkt 3fpkt"];
1933--5441[label="0.75;3pkt 3fpkt"];
2844--5441[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.126.122" src_ip="141.14.48.164" src_port="80"/>
    </slice>
    <from sec="1262322077" usec="0"/>
    <to sec="1262322773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.27.34.165"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.97.100.177"/>
    </slice>
    <from sec="1262322697" usec="0"/>
    <to sec="1262322704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.48.38.180"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.197.40.181"/>
    </slice>
    <from sec="1262322535" usec="0"/>
    <to sec="1262322553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.102.162.183"/>
    </slice>
    <from sec="1262322245" usec="0"/>
    <to sec="1262322263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.10.228.190"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.168.187.192"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.108.246.192"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.136.58.193"/>
    </slice>
    <from sec="1262322029" usec="0"/>
    <to sec="1262322891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569143,1.30866,011,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
4206[label="208.108.254.194;s;401pkt 401fpkt", shape=hexagon, color=black];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.254.194:6881, *:*}[97.0075%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (48.5037%)&lt;BR/&gt; 0: (2.74314%)&lt;BR/&gt; 2955: (0.249377%)&lt;BR/&gt; 65344: (0.124688%)&lt;BR/&gt; 65001: (0.124688%)&gt;];
}
4206--5530[label="0.985037;395pkt 395fpkt"];
</description>
    <slice>
      <filter src_ip="208.108.254.194" src_port="6881"/>
    </slice>
    <from sec="1262322000" usec="0"/>
    <to sec="1262322738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.17.2.199"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.76.21.203"/>
    </slice>
    <from sec="1262322223" usec="0"/>
    <to sec="1262322235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
5555[label="208.108.254.204;117pkt 117fpkt", shape=pentagon, color=darkviolet];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.108.254.204:38764, 209.144.216.243:*}[33.3333%]&lt;BR/&gt;{208.108.254.204:38940, 209.144.216.243:*}[33.3333%]&lt;BR/&gt;{208.108.254.204:39127, 209.144.216.243:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38940: (16.6667%)&lt;BR/&gt; 38764: (16.6667%)&lt;BR/&gt; 39127: (10.2564%)&lt;BR/&gt; 38588: (5.55556%)&lt;BR/&gt; 33479: (1.28205%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.144.216.243" src_ip="208.108.254.204" src_port="38940"/>
      <filter dst_ip="209.144.216.243" src_ip="208.108.254.204" src_port="38764"/>
      <filter dst_ip="209.144.216.243" src_ip="208.108.254.204" src_port="39127"/>
    </slice>
    <from sec="1262322007" usec="0"/>
    <to sec="1262322898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.22.128.205"/>
    </slice>
    <from sec="1262322518" usec="0"/>
    <to sec="1262322521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752914,1.25039,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
2409[label="140.14.175.27;d;35pkt 35fpkt", shape=diamond, color=yellow];
5564[label="43.38.25.207;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5935[label="43.38.25.207;38pkt 38fpkt", shape=invtriangle, color=brown];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.38.25.207:*, 140.14.175.27:80}[92.6829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49973: (1.35135%)&lt;BR/&gt; 49971: (1.35135%)&lt;BR/&gt; 49969: (1.35135%)&lt;BR/&gt; 49966: (1.35135%)&gt;];
}
2409--5564[label="0.914286;32pkt 32fpkt"];
2409--5935[label="0.914286;32pkt 32fpkt"];
5564--5935[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="140.14.175.27" dst_port="80" src_ip="43.38.25.207"/>
    </slice>
    <from sec="1262322022" usec="0"/>
    <to sec="1262322821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.190.4.211"/>
    </slice>
    <from sec="1262322567" usec="0"/>
    <to sec="1262322678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577189,1.1827,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1449[label="140.14.89.205;s;6pkt 6fpkt", shape=diamond, color=yellow];
1544[label="20.37.120.13;d;3pkt 3fpkt", shape=diamond, color=yellow];
2805[label="140.14.5.213;s;27pkt 27fpkt", shape=diamond, color=yellow];
3432[label="20.37.120.13;d;1pkt 1fpkt", shape=hexagon, color=black];
5581[label="140.14.5.213;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.5.213:80, *:*}[73.1707%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3662%)&lt;BR/&gt; 0: (11.2676%)&lt;BR/&gt; 64214: (2.11268%)&lt;BR/&gt; 49452: (2.11268%)&lt;BR/&gt; 64166: (1.40845%)&gt;];
}
1449--1544[label="0.333333;1pkt 1fpkt"];
1449--3432[label="1;1pkt 1fpkt"];
1544--2805[label="0.333333;1pkt 1fpkt"];
1544--3432[label="1;1pkt 1fpkt"];
1544--5581[label="0.333333;1pkt 1fpkt"];
2805--2834[label="0.0384615;1pkt 1fpkt"];
2805--4233[label="0.037037;1pkt 1fpkt"];
2805--4493[label="0.0384615;1pkt 1fpkt"];
2805--4784[label="0.0740741;2pkt 2fpkt"];
2805--4846[label="0.0740741;2pkt 2fpkt"];
2805--4890[label="0.0740741;2pkt 2fpkt"];
2805--5581[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.5.213" src_port="80"/>
    </slice>
    <from sec="1262322018" usec="0"/>
    <to sec="1262322894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.14.119.215"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.216.140.219"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.10.8.240"/>
    </slice>
    <from sec="1262322894" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.1.13.241"/>
    </slice>
    <from sec="1262322890" usec="0"/>
    <to sec="1262322897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.55285,1.256,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
2656[label="38.30.199.248;s;643pkt 643fpkt", shape=diamond, color=yellow];
5665[label="38.30.199.248;829pkt 829fpkt", shape=pentagon, color=darkviolet];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.30.199.248:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21333: (0.203804%)&lt;BR/&gt; 31314: (0.13587%)&lt;BR/&gt; 30825: (0.13587%)&lt;BR/&gt; 30296: (0.13587%)&gt;];
}
2656--5665[label="1;643pkt 643fpkt"];
</description>
    <slice>
      <filter src_ip="38.30.199.248" src_port="80"/>
    </slice>
    <from sec="1262322036" usec="0"/>
    <to sec="1262322688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.170.88.254"/>
    </slice>
    <from sec="1262322251" usec="0"/>
    <to sec="1262322880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604396,1.35031,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.54.230.255"/>
    </slice>
    <from sec="1262322733" usec="0"/>
    <to sec="1262322756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
4905[label="136.25.213.2;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5685[label="136.25.213.2;10pkt 10fpkt", shape=invtriangle, color=brown];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.25.213.2:80, 20.37.125.148:*}[72.7273%]&lt;BR/&gt;{136.25.213.2:80, 21.100.24.162:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64810: (4.7619%)&lt;BR/&gt; 60959: (4.7619%)&lt;BR/&gt; 49988: (4.7619%)&lt;BR/&gt; 48888: (4.7619%)&gt;];
}
4905--5685[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.125.148" src_ip="136.25.213.2" src_port="80"/>
      <filter dst_ip="21.100.24.162" src_ip="136.25.213.2" src_port="80"/>
    </slice>
    <from sec="1262322005" usec="0"/>
    <to sec="1262322846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
4930[label="89.205.177.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5692[label="89.205.177.8;6pkt 6fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.205.177.8:*, 163.234.176.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4826: (8.33333%)&lt;BR/&gt; 4825: (8.33333%)&lt;BR/&gt; 4822: (8.33333%)&lt;BR/&gt; 4821: (8.33333%)&gt;];
}
4930--5692[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.176.152" dst_port="80" src_ip="89.205.177.8"/>
    </slice>
    <from sec="1262322860" usec="0"/>
    <to sec="1262322868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.24.237.8"/>
    </slice>
    <from sec="1262322078" usec="0"/>
    <to sec="1262322896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.126.96.21"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.132.195.23"/>
    </slice>
    <from sec="1262322492" usec="0"/>
    <to sec="1262322494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.88.11.26"/>
    </slice>
    <from sec="1262322235" usec="0"/>
    <to sec="1262322881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
5025[label="200.1.107.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5724[label="200.1.107.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.1.107.33:2457, 147.192.234.8:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2457: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5025--5724[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.192.234.8" dst_port="1434" src_ip="200.1.107.33" src_port="2457"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.140.116.33"/>
    </slice>
    <from sec="1262322149" usec="0"/>
    <to sec="1262322155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.24.63.34"/>
    </slice>
    <from sec="1262322154" usec="0"/>
    <to sec="1262322513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.99.112.40"/>
    </slice>
    <from sec="1262322646" usec="0"/>
    <to sec="1262322655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.88.60.41"/>
    </slice>
    <from sec="1262322394" usec="0"/>
    <to sec="1262322395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.108.245.43"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.14.38.52"/>
    </slice>
    <from sec="1262322583" usec="0"/>
    <to sec="1262322585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.52.196.72"/>
    </slice>
    <from sec="1262322735" usec="0"/>
    <to sec="1262322862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.225.201.76"/>
    </slice>
    <from sec="1262322809" usec="0"/>
    <to sec="1262322814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.206.181.77"/>
    </slice>
    <from sec="1262322354" usec="0"/>
    <to sec="1262322357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.190.4.80"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.192.112.81"/>
    </slice>
    <from sec="1262322131" usec="0"/>
    <to sec="1262322149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
5200[label="218.18.180.83;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5799[label="218.18.180.83;21pkt 21fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.18.180.83:443, 163.234.69.13:*}[33.3333%]&lt;BR/&gt;{218.18.180.83:443, 163.234.144.87:*}[33.3333%]&lt;BR/&gt;{218.18.180.83:443, 163.234.238.154:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 55070: (2.38095%)&lt;BR/&gt; 55069: (2.38095%)&lt;BR/&gt; 55067: (2.38095%)&lt;BR/&gt; 55066: (2.38095%)&gt;];
}
5200--5799[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.238.154" src_ip="218.18.180.83" src_port="443"/>
      <filter dst_ip="163.234.144.87" src_ip="218.18.180.83" src_port="443"/>
      <filter dst_ip="163.234.69.13" src_ip="218.18.180.83" src_port="443"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.209.236.84"/>
    </slice>
    <from sec="1262322049" usec="0"/>
    <to sec="1262322592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.85.142.89"/>
    </slice>
    <from sec="1262322339" usec="0"/>
    <to sec="1262322342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.139.160.97"/>
    </slice>
    <from sec="1262322041" usec="0"/>
    <to sec="1262322898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.19.155.104"/>
    </slice>
    <from sec="1262322003" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514074,1.2111,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
1659[label="136.172.128.105;s;156pkt 156fpkt", shape=diamond, color=yellow];
3527[label="211.101.50.31;d;136pkt 136fpkt", shape=hexagon, color=black];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.172.128.105:20, 211.101.50.31:*}[83.5443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (45.2055%)&lt;BR/&gt; 80: (3.25342%)&lt;BR/&gt; 0: (1.0274%)&lt;BR/&gt; 21: (0.684932%)&lt;BR/&gt; 65231: (0.342466%)&gt;];
}
1659--2632[label="0.25;3pkt 3fpkt"];
1659--3527[label="0.985294;134pkt 134fpkt"];
1659--5258[label="1;156pkt 156fpkt"];
1659--5823[label="0.99359;155pkt 155fpkt"];
3527--4529[label="0.00735294;1pkt 1fpkt"];
3527--5258[label="0.985294;134pkt 134fpkt"];
3527--5823[label="0.985294;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="211.101.50.31" src_ip="136.172.128.105" src_port="20"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.7.8.106"/>
    </slice>
    <from sec="1262322288" usec="0"/>
    <to sec="1262322798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770962,1.17674,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
1280[label="163.234.204.60;s;155pkt 155fpkt", shape=diamond, color=yellow];
1339[label="140.14.228.106;s;263pkt 263fpkt", shape=diamond, color=yellow];
2607[label="214.48.246.120;d;13pkt 13fpkt", shape=diamond, color=yellow];
2798[label="209.72.159.98;s;37pkt 37fpkt", shape=diamond, color=yellow];
3307[label="163.234.204.60;s;133pkt 133fpkt", shape=hexagon, color=black];
4449[label="209.72.159.98;s;37pkt 37fpkt", shape=hexagon, color=black];
5264[label="140.14.228.106;284pkt 284fpkt", shape=pentagon, color=darkviolet];
5828[label="140.14.228.106;284pkt 284fpkt", shape=invtriangle, color=brown];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.14.228.106:25, *:*}[58.6777%]&lt;BR/&gt;{163.234.204.60:25, *:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.9171%)&lt;BR/&gt; 1793: (0.248756%)&lt;BR/&gt; 51733: (0.207297%)&lt;BR/&gt; 50455: (0.207297%)&lt;BR/&gt; 30836: (0.165837%)&gt;];
}
1280--2607[label="0.153846;2pkt 2fpkt"];
1280--3195[label="0.00645161;1pkt 1fpkt"];
1280--3307[label="1;133pkt 133fpkt"];
1339--2607[label="0.153846;2pkt 2fpkt"];
1339--5264[label="1;263pkt 263fpkt"];
1339--5828[label="1;263pkt 263fpkt"];
2607--2798[label="0.0769231;1pkt 1fpkt"];
2607--3307[label="0.153846;2pkt 2fpkt"];
2607--3459[label="0.0769231;1pkt 1fpkt"];
2607--3627[label="0.461538;6pkt 6fpkt"];
2607--4449[label="0.0769231;1pkt 1fpkt"];
2607--5264[label="0.153846;2pkt 2fpkt"];
2607--5589[label="0.461538;6pkt 6fpkt"];
2607--5828[label="0.153846;2pkt 2fpkt"];
2798--4449[label="1;37pkt 37fpkt"];
5264--5828[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter src_ip="140.14.228.106" src_port="25"/>
      <filter src_ip="163.234.204.60" src_port="25"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.3.23.107"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
5268[label="55.158.91.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5830[label="55.158.91.107;1pkt 1fpkt", shape=invtriangle, color=brown];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.158.91.107:1273, 163.234.176.147:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1273: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5268--5830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.176.147" dst_port="80" src_ip="55.158.91.107" src_port="1273"/>
    </slice>
    <from sec="1262322266" usec="0"/>
    <to sec="1262322873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.219.214.111"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.55.10.117"/>
    </slice>
    <from sec="1262322562" usec="0"/>
    <to sec="1262322566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
5299[label="136.133.17.119;332pkt 332fpkt", shape=pentagon, color=darkviolet];
5838[label="136.133.17.119;332pkt 332fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.133.17.119:*, 214.78.100.114:53}[27.1084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 28346: (0.301205%)&lt;BR/&gt; 65032: (0.150602%)&lt;BR/&gt; 64986: (0.150602%)&lt;BR/&gt; 64905: (0.150602%)&gt;];
}
5299--5838[label="1;332pkt 332fpkt"];
</description>
    <slice>
      <filter dst_ip="214.78.100.114" dst_port="53" src_ip="136.133.17.119"/>
    </slice>
    <from sec="1262322006" usec="0"/>
    <to sec="1262322890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.100.87.141"/>
    </slice>
    <from sec="1262322093" usec="0"/>
    <to sec="1262322096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
5410[label="163.234.238.154;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5883[label="163.234.238.154;10pkt 10fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.234.238.154:*, 218.18.180.83:443}[80%]&lt;BR/&gt;{163.234.238.154:3195, 38.82.81.230:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40%)&lt;BR/&gt; 3195: (10%)&lt;BR/&gt; 2321: (5%)&lt;BR/&gt; 2296: (5%)&lt;BR/&gt; 2279: (5%)&gt;];
}
5410--5883[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="218.18.180.83" dst_port="443" src_ip="163.234.238.154"/>
      <filter dst_ip="38.82.81.230" src_ip="163.234.238.154" src_port="3195"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
5417[label="156.225.182.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5888[label="156.225.182.156;4pkt 4fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.225.182.156:80, 20.37.126.53:45002}[25%]&lt;BR/&gt;{156.225.182.156:80, 20.37.126.53:56196}[25%]&lt;BR/&gt;{156.225.182.156:80, 20.37.126.53:59757}[25%]&lt;BR/&gt;{156.225.182.156:80, 20.37.126.53:61405}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61405: (12.5%)&lt;BR/&gt; 59757: (12.5%)&lt;BR/&gt; 56196: (12.5%)&lt;BR/&gt; 45002: (12.5%)&gt;];
}
5417--5888[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="20.37.126.53" dst_port="61405" src_ip="156.225.182.156" src_port="80"/>
      <filter dst_ip="20.37.126.53" dst_port="59757" src_ip="156.225.182.156" src_port="80"/>
      <filter dst_ip="20.37.126.53" dst_port="56196" src_ip="156.225.182.156" src_port="80"/>
      <filter dst_ip="20.37.126.53" dst_port="45002" src_ip="156.225.182.156" src_port="80"/>
    </slice>
    <from sec="1262322149" usec="0"/>
    <to sec="1262322702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
5426[label="200.146.232.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5894[label="200.146.232.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.146.232.160:2772, 208.108.253.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2772: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5426--5894[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.108.253.83" dst_port="80" src_ip="200.146.232.160" src_port="2772"/>
    </slice>
    <from sec="1262322698" usec="0"/>
    <to sec="1262322705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
5469[label="38.82.202.175;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5908[label="38.82.202.175;6pkt 6fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.82.202.175:*, 163.234.176.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1191: (8.33333%)&lt;BR/&gt; 1190: (8.33333%)&lt;BR/&gt; 1185: (8.33333%)&lt;BR/&gt; 1184: (8.33333%)&gt;];
}
5469--5908[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="163.234.176.152" dst_port="80" src_ip="38.82.202.175"/>
    </slice>
    <from sec="1262322688" usec="0"/>
    <to sec="1262322704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.168.187.192"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.17.2.199"/>
    </slice>
    <from sec="1262322901" usec="0"/>
    <to sec="1262322902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.76.21.203"/>
    </slice>
    <from sec="1262322223" usec="0"/>
    <to sec="1262322235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.216.140.219"/>
    </slice>
    <from sec="1262322001" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791537,1.3451,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
5598[label="136.6.101.220;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5948[label="136.6.101.220;60pkt 60fpkt", shape=invtriangle, color=brown];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.6.101.220:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62893: (0.833333%)&lt;BR/&gt; 57088: (0.833333%)&lt;BR/&gt; 52572: (0.833333%)&lt;BR/&gt; 50655: (0.833333%)&gt;];
}
5598--5948[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="136.6.101.220" src_port="25"/>
    </slice>
    <from sec="1262322005" usec="0"/>
    <to sec="1262322879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746764,1.37014,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.153.166.245"/>
    </slice>
    <from sec="1262322795" usec="0"/>
    <to sec="1262322800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486588,1.28279,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
2357[label="53.112.157.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.112.157.32:55151, 209.72.24.104:31983}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55151: (50%)&lt;BR/&gt; 31983: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.72.24.104" dst_port="31983" src_ip="53.112.157.32" src_port="55151"/>
    </slice>
    <from sec="1262322002" usec="0"/>
    <to sec="1262322827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.131.84.9"/>
    </slice>
    <from sec="1262322228" usec="0"/>
    <to sec="1262322231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.88.11.26"/>
    </slice>
    <from sec="1262322235" usec="0"/>
    <to sec="1262322881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.103.169.28"/>
    </slice>
    <from sec="1262322884" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.140.116.37"/>
    </slice>
    <from sec="1262322165" usec="0"/>
    <to sec="1262322171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.99.112.40"/>
    </slice>
    <from sec="1262322646" usec="0"/>
    <to sec="1262322655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.25.199.55"/>
    </slice>
    <from sec="1262322233" usec="0"/>
    <to sec="1262322852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.234.201.80"/>
    </slice>
    <from sec="1262322747" usec="0"/>
    <to sec="1262322755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.192.112.81"/>
    </slice>
    <from sec="1262322131" usec="0"/>
    <to sec="1262322149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.9.90.85"/>
    </slice>
    <from sec="1262322004" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.55.10.117"/>
    </slice>
    <from sec="1262322562" usec="0"/>
    <to sec="1262322566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.26.78.125"/>
    </slice>
    <from sec="1262322859" usec="0"/>
    <to sec="1262322861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.37.140.140"/>
    </slice>
    <from sec="1262322820" usec="0"/>
    <to sec="1262322899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.76.21.203"/>
    </slice>
    <from sec="1262322223" usec="0"/>
    <to sec="1262322235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.190.4.211"/>
    </slice>
    <from sec="1262322588" usec="0"/>
    <to sec="1262322678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.113.97.213"/>
    </slice>
    <from sec="1262322639" usec="0"/>
    <to sec="1262322900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907841,1.42903,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.66.32.236"/>
    </slice>
    <from sec="1262322403" usec="0"/>
    <to sec="1262322412" usec="0"/>
  </anomaly>

</admd:annotation>
