<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.4655,2.83697,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.240.21.234" dst_port="80" proto="tcp" src_ip="128.212.143.46" src_port="49575"/>
      <filter dst_ip="195.240.21.234" dst_port="80" proto="udp" src_ip="128.212.143.46" src_port="49575"/>
      <from sec="1273036438" usec="0"/>
      <to sec="1273036463" usec="0"/>
    </slice>
    <from sec="1273036438" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.134.250.97" dst_port="80" proto="tcp" src_ip="204.134.250.97"/>
      <filter dst_ip="204.134.250.97" dst_port="80" proto="tcp" src_ip="204.134.250.97"/>
      <filter dst_ip="204.134.250.97" dst_port="80" proto="tcp" src_ip="204.134.250.97"/>
      <filter dst_ip="204.134.250.97" dst_port="80" proto="tcp" src_ip="204.134.250.97"/>
      <from sec="1273036383" usec="0"/>
      <to sec="1273036497" usec="0"/>
    </slice>
    <from sec="1273036383" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" proto="tcp" src_ip="204.134.250.98"/>
      <filter dst_ip="204.134.250.98" dst_port="80" proto="tcp" src_ip="204.134.250.98"/>
      <filter dst_ip="204.134.250.98" dst_port="80" proto="tcp" src_ip="204.134.250.98"/>
      <filter dst_ip="204.134.250.98" dst_port="80" proto="tcp" src_ip="204.134.250.98"/>
      <from sec="1273035848" usec="0"/>
      <to sec="1273036497" usec="0"/>
    </slice>
    <from sec="1273035848" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="176.108.54.203" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="176.108.54.203" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <from sec="1273036318" usec="0"/>
      <to sec="1273036456" usec="0"/>
    </slice>
    <from sec="1273036318" usec="0"/>
    <to sec="1273036456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.241" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="176.108.54.155" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="204.134.251.249" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3128"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3124"/>
      <filter dst_ip="27.21.114.27" dst_port="23" proto="tcp" src_ip="33.117.72.214" src_port="3124"/>
      <from sec="1273036024" usec="0"/>
      <to sec="1273036026" usec="0"/>
    </slice>
    <from sec="1273036024" usec="0"/>
    <to sec="1273036026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="72.237.121.61" dst_port="80" proto="tcp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="72.237.121.61" dst_port="80" proto="udp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="72.237.121.61" dst_port="53" proto="tcp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="72.237.121.61" dst_port="53" proto="udp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="72.237.121.61" dst_port="80" proto="tcp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="72.237.121.61" dst_port="80" proto="udp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="72.237.121.61" dst_port="53" proto="tcp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="72.237.121.61" dst_port="53" proto="udp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="176.108.139.14" src_port="2008"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="176.108.139.14" src_port="2011"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="176.108.139.14" src_port="2011"/>
      <from sec="1273036358" usec="0"/>
      <to sec="1273036368" usec="0"/>
    </slice>
    <from sec="1273036358" usec="0"/>
    <to sec="1273036369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.179.19.131" dst_port="80" proto="tcp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="80" proto="udp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="443" proto="tcp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="443" proto="udp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="80" proto="tcp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="80" proto="udp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="443" proto="tcp" src_ip="133.249.221.105" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="443" proto="udp" src_ip="133.249.221.105" src_port="64246"/>
      <from sec="1273036491" usec="0"/>
      <to sec="1273036500" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.179.19.131" dst_port="80" proto="tcp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="80" proto="udp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="443" proto="tcp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="212.179.19.131" dst_port="443" proto="udp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="80" proto="tcp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="80" proto="udp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="443" proto="tcp" src_ip="128.212.117.222" src_port="64246"/>
      <filter dst_ip="190.247.159.1" dst_port="443" proto="udp" src_ip="128.212.117.222" src_port="64246"/>
      <from sec="1273036491" usec="0"/>
      <to sec="1273036493" usec="0"/>
    </slice>
    <from sec="1273036491" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.178.67.68" dst_port="443" proto="tcp" src_ip="128.212.109.166" src_port="37039"/>
      <filter dst_ip="201.178.67.68" dst_port="443" proto="udp" src_ip="128.212.109.166" src_port="37039"/>
      <filter dst_ip="201.178.67.68" dst_port="53" proto="tcp" src_ip="128.212.109.166" src_port="37039"/>
      <filter dst_ip="201.178.67.68" dst_port="53" proto="udp" src_ip="128.212.109.166" src_port="37039"/>
      <from sec="1273036495" usec="0"/>
      <to sec="1273036497" usec="0"/>
    </slice>
    <from sec="1273036495" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.80.215.29" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="219.80.215.29" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="219.80.215.29" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="219.80.215.29" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="219.80.215.29" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="219.80.215.29" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="219.80.215.29" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="219.80.215.29" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.128.34.54" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.128.34.54" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.128.34.54" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.128.34.54" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.128.34.54" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.128.34.54" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.128.34.54" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.128.34.54" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.134.196.75" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.134.196.75" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.134.196.75" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.134.196.75" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="46.134.196.75" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.134.196.75" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.134.196.75" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="46.134.196.75" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="204.134.243.20" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="204.134.243.20" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="204.134.243.20" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="204.134.243.20" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62603"/>
      <filter dst_ip="204.134.243.20" dst_port="80" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="204.134.243.20" dst_port="80" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="204.134.243.20" dst_port="53" proto="tcp" src_ip="133.249.43.180" src_port="62489"/>
      <filter dst_ip="204.134.243.20" dst_port="53" proto="udp" src_ip="133.249.43.180" src_port="62489"/>
      <from sec="1273036417" usec="0"/>
      <to sec="1273036419" usec="0"/>
    </slice>
    <from sec="1273036390" usec="0"/>
    <to sec="1273036419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.134.250.99" dst_port="80" proto="tcp" src_ip="204.134.250.99"/>
      <filter dst_ip="204.134.250.99" dst_port="80" proto="tcp" src_ip="204.134.250.99"/>
      <filter dst_ip="204.134.250.99" dst_port="80" proto="tcp" src_ip="204.134.250.99"/>
      <filter dst_ip="204.134.250.99" dst_port="80" proto="tcp" src_ip="204.134.250.99"/>
      <from sec="1273036375" usec="0"/>
      <to sec="1273036497" usec="0"/>
    </slice>
    <from sec="1273036375" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="176.108.138.216" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="80" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <filter dst_ip="205.118.109.123" dst_port="22" proto="tcp" src_ip="6.93.143.141" src_port="51279"/>
      <from sec="1273036438" usec="0"/>
      <to sec="1273036440" usec="0"/>
    </slice>
    <from sec="1273036438" usec="0"/>
    <to sec="1273036440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="161.249.196.101"/>
      <from sec="1273036009" usec="0"/>
      <to sec="1273036011" usec="0"/>
    </slice>
    <from sec="1273036009" usec="0"/>
    <to sec="1273036011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="164.186.148.131"/>
      <from sec="1273036433" usec="0"/>
      <to sec="1273036437" usec="0"/>
    </slice>
    <from sec="1273036433" usec="0"/>
    <to sec="1273036437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="58.244.192.133"/>
      <from sec="1273036335" usec="0"/>
      <to sec="1273036344" usec="0"/>
    </slice>
    <from sec="1273036335" usec="0"/>
    <to sec="1273036344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="50.204.232.142"/>
      <from sec="1273036472" usec="0"/>
      <to sec="1273036474" usec="0"/>
    </slice>
    <from sec="1273036472" usec="0"/>
    <to sec="1273036474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="50.23.120.161"/>
      <from sec="1273035658" usec="0"/>
      <to sec="1273035663" usec="0"/>
    </slice>
    <from sec="1273035658" usec="0"/>
    <to sec="1273035663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="206.172.229.173"/>
      <from sec="1273036341" usec="0"/>
      <to sec="1273036346" usec="0"/>
    </slice>
    <from sec="1273036341" usec="0"/>
    <to sec="1273036346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="54.225.69.207"/>
      <filter dst_port="23" proto="udp" src_ip="54.225.69.207"/>
      <filter dst_port="53" proto="tcp" src_ip="54.225.69.207"/>
      <filter dst_port="53" proto="udp" src_ip="54.225.69.207"/>
      <filter dst_port="80" proto="tcp" src_ip="54.225.69.207"/>
      <filter dst_port="80" proto="udp" src_ip="54.225.69.207"/>
      <from sec="1273036472" usec="0"/>
      <to sec="1273036476" usec="0"/>
    </slice>
    <from sec="1273036472" usec="0"/>
    <to sec="1273036476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="60.86.109.215"/>
      <from sec="1273036250" usec="0"/>
      <to sec="1273036256" usec="0"/>
    </slice>
    <from sec="1273036250" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="60.95.161.252"/>
      <from sec="1273036035" usec="0"/>
      <to sec="1273036038" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="57.23.125.252"/>
      <from sec="1273036034" usec="0"/>
      <to sec="1273036037" usec="0"/>
    </slice>
    <from sec="1273036034" usec="0"/>
    <to sec="1273036038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,011,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.172.229.173" proto="tcp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="udp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="tcp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="udp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="tcp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="udp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="tcp" src_port="23"/>
      <filter dst_ip="206.172.229.173" proto="udp" src_port="23"/>
      <from sec="1273036342" usec="0"/>
      <to sec="1273036346" usec="0"/>
    </slice>
    <from sec="1273036342" usec="0"/>
    <to sec="1273036346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="53" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="22" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="tcp" src_ip="6.93.143.141"/>
      <filter dst_ip="193.149.37.44" dst_port="80" proto="udp" src_ip="6.93.143.141"/>
      <from sec="1273036035" usec="0"/>
      <to sec="1273036443" usec="0"/>
    </slice>
    <from sec="1273036035" usec="0"/>
    <to sec="1273036443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4655,2.83697,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.52.16.244" dst_port="23" proto="tcp" src_ip="9.181.189.239"/>
      <filter dst_ip="47.52.16.244" dst_port="23" proto="udp" src_ip="9.181.189.239"/>
      <filter dst_ip="47.52.16.244" dst_port="80" proto="tcp" src_ip="9.181.189.239"/>
      <filter dst_ip="47.52.16.244" dst_port="80" proto="udp" src_ip="9.181.189.239"/>
      <filter dst_ip="47.52.16.244" dst_port="53" proto="tcp" src_ip="9.181.189.239"/>
      <filter dst_ip="47.52.16.244" dst_port="53" proto="udp" src_ip="9.181.189.239"/>
      <from sec="1273036450" usec="0"/>
      <to sec="1273036452" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="47.52.16.244" dst_port="23" proto="tcp" src_ip="133.249.231.111"/>
      <filter dst_ip="47.52.16.244" dst_port="23" proto="udp" src_ip="133.249.231.111"/>
      <filter dst_ip="47.52.16.244" dst_port="80" proto="tcp" src_ip="133.249.231.111"/>
      <filter dst_ip="47.52.16.244" dst_port="80" proto="udp" src_ip="133.249.231.111"/>
      <filter dst_ip="47.52.16.244" dst_port="53" proto="tcp" src_ip="133.249.231.111"/>
      <filter dst_ip="47.52.16.244" dst_port="53" proto="udp" src_ip="133.249.231.111"/>
      <from sec="1273036450" usec="0"/>
      <to sec="1273036451" usec="0"/>
    </slice>
    <from sec="1273036449" usec="0"/>
    <to sec="1273036452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
302[label="167.9.33.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
303[label="176.108.211.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
5708[label="176.108.211.72;d;1pkt 1fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.9.33.30:8000, 176.108.211.72:51328}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51328: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
302--303[label="1;1pkt 1fpkt"];
302--5708[label="1;1pkt 1fpkt"];
303--5708[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.211.72" dst_port="51328" src_ip="167.9.33.30" src_port="8000"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="39364056" usec="0"/>
    <to sec="39364056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.76.127.210"/>
      <from sec="1273035862" usec="0"/>
      <to sec="1273035991" usec="0"/>
    </slice>
    <from sec="1273035862" usec="0"/>
    <to sec="1273035991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.76.127.210"/>
      <from sec="1273035862" usec="0"/>
      <to sec="1273035991" usec="0"/>
    </slice>
    <from sec="1273035862" usec="0"/>
    <to sec="1273035991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
441[label="204.134.230.168;s;250pkt 250fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.230.168:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4682: (1.2%)&lt;BR/&gt; 65535: (1%)&lt;BR/&gt; 32568: (1%)&lt;BR/&gt; 4444: (1%)&lt;BR/&gt; 31259: (0.8%)&gt;];
}
441--3633[label="0.004;1pkt 1fpkt"];
441--6838[label="0.004;1pkt 1fpkt"];
441--8175[label="0.004;1pkt 1fpkt"];
441--8350[label="0.004;1pkt 1fpkt"];
441--8406[label="0.004;1pkt 1fpkt"];
441--8440[label="0.004;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.230.168"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.16.152.250"/>
      <from sec="1273036097" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036097" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.44.252.204"/>
      <from sec="1273036034" usec="0"/>
      <to sec="1273036173" usec="0"/>
    </slice>
    <from sec="1273036034" usec="0"/>
    <to sec="1273036173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
768[label="176.108.136.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
770[label="6.116.173.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
5781[label="176.108.136.232;d;1pkt 1fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.116.173.3:6836, 176.108.136.232:63779}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63779: (50%)&lt;BR/&gt; 6836: (50%)&gt;];
}
768--770[label="1;1pkt 1fpkt"];
768--5781[label="1;1pkt 1fpkt"];
770--5781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.136.232" dst_port="63779" src_ip="6.116.173.3" src_port="6836"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38742,2.77197,010,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
484[label="133.249.32.5;d;16pkt 16fpkt", shape=diamond, color=yellow];
783[label="164.81.96.103;s;2pkt 2fpkt", shape=diamond, color=yellow];
5475[label="133.249.32.5;d;12pkt 12fpkt", shape=hexagon, color=black];
15440[label="164.81.96.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.233.17.94:*, 133.249.32.5:57062}[50%]&lt;BR/&gt;{38.82.95.151:*, 133.249.32.5:57062}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57062: (45.1613%)&lt;BR/&gt; 17967: (11.2903%)&lt;BR/&gt; 3293: (4.83871%)&lt;BR/&gt; 61770: (3.22581%)&lt;BR/&gt; 61680: (3.22581%)&gt;];
}
484--783[label="1;2pkt 2fpkt"];
484--5475[label="1;12pkt 12fpkt"];
484--15440[label="1;1pkt 1fpkt"];
783--5475[label="1;2pkt 2fpkt"];
783--15440[label="1;1pkt 1fpkt"];
5475--15440[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.32.5" dst_port="57062" src_ip="44.233.17.94"/>
      <filter dst_ip="133.249.32.5" dst_port="57062" src_ip="38.82.95.151"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
886[label="21.6.209.88;d;4pkt 4fpkt", shape=diamond, color=yellow];
887[label="152.85.150.209;s;99pkt 99fpkt", shape=diamond, color=yellow];
5578[label="21.6.209.88;d;1pkt 1fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.150.209:12956, *:*}[98.9899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12956: (49.0385%)&lt;BR/&gt; 36547: (1.92308%)&lt;BR/&gt; 10000: (1.92308%)&lt;BR/&gt; 27684: (0.961538%)&lt;BR/&gt; 16005: (0.961538%)&gt;];
}
886--887[label="1;4pkt 4fpkt"];
886--5578[label="1;1pkt 1fpkt"];
887--5578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="152.85.150.209" src_port="12956"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
1092[label="152.85.96.24;s;47pkt 47fpkt", shape=diamond, color=yellow];
1135[label="73.160.229.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
2031[label="73.160.86.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.96.24:32158, *:*}[57.4468%]&lt;BR/&gt;{152.85.96.24:20129, *:*}[34.0426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32158: (27.551%)&lt;BR/&gt; 20129: (20.4082%)&lt;BR/&gt; 13566: (6.12245%)&lt;BR/&gt; 60590: (2.04082%)&lt;BR/&gt; 16001: (2.04082%)&gt;];
}
1092--1135[label="1;1pkt 1fpkt"];
1092--2031[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="152.85.96.24" src_port="32158"/>
      <filter src_ip="152.85.96.24" src_port="20129"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.95.68.239"/>
      <from sec="1273036190" usec="0"/>
      <to sec="1273036323" usec="0"/>
    </slice>
    <from sec="1273036190" usec="0"/>
    <to sec="1273036323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.95.68.239"/>
      <from sec="1273036190" usec="0"/>
      <to sec="1273036323" usec="0"/>
    </slice>
    <from sec="1273036190" usec="0"/>
    <to sec="1273036323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
340[label="215.104.135.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1357[label="176.108.139.38;s;196pkt 196fpkt", shape=diamond, color=yellow];
9193[label="176.108.139.38;196pkt 196fpkt", shape=pentagon, color=darkviolet];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.38:47197, *:*}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47197: (47.8372%)&lt;BR/&gt; 16001: (0.763359%)&lt;BR/&gt; 6881: (0.508906%)&lt;BR/&gt; 12340: (0.381679%)&lt;BR/&gt; 2346: (0.381679%)&gt;];
}
340--1357[label="1;1pkt 1fpkt"];
340--9193[label="1;1pkt 1fpkt"];
1357--2231[label="0.0123457;1pkt 1fpkt"];
1357--9193[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.139.38" src_port="47197"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26501,2.76189,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
453[label="133.249.108.32;d;309pkt 309fpkt", shape=diamond, color=yellow];
1391[label="13.220.82.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
5470[label="133.249.108.32;d;229pkt 229fpkt", shape=hexagon, color=black];
11314[label="13.220.82.175;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.249.108.32:63344}[55.9871%]&lt;BR/&gt;{*:*, 133.249.108.32:60150}[25.89%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63344: (27.7778%)&lt;BR/&gt; 60150: (13.1481%)&lt;BR/&gt; 0: (4.07407%)&lt;BR/&gt; 46957: (3.33333%)&lt;BR/&gt; 16001: (2.12963%)&gt;];
}
453--1391[label="1;1pkt 1fpkt"];
453--5470[label="1;229pkt 229fpkt"];
453--8373[label="0.00970874;3pkt 3fpkt"];
453--11314[label="1;1pkt 1fpkt"];
1391--5470[label="1;1pkt 1fpkt"];
1391--11314[label="1;1pkt 1fpkt"];
5470--11314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.108.32" dst_port="63344"/>
      <filter dst_ip="133.249.108.32" dst_port="60150"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
571[label="176.108.139.121;d;157pkt 157fpkt", shape=diamond, color=yellow];
1425[label="208.105.190.148;s;78pkt 78fpkt", shape=diamond, color=yellow];
5755[label="176.108.139.121;d;82pkt 82fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.105.190.148:*, 176.108.139.121:*}[96.8153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50166: (0.946372%)&lt;BR/&gt; 80: (0.788644%)&lt;BR/&gt; 54554: (0.630915%)&lt;BR/&gt; 42326: (0.630915%)&lt;BR/&gt; 65312: (0.473186%)&gt;];
}
571--1425[label="1;78pkt 78fpkt"];
571--5755[label="1;82pkt 82fpkt"];
1425--5755[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.121" src_ip="208.105.190.148"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
769[label="6.116.173.3;d;2pkt 2fpkt", shape=diamond, color=yellow];
1497[label="176.108.136.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
12125[label="176.108.136.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.136.232:0, 6.116.173.3:0}[50%]&lt;BR/&gt;{176.108.136.232:63779, 6.116.173.3:6836}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 63779: (25%)&lt;BR/&gt; 6836: (25%)&gt;];
}
769--1497[label="1;2pkt 2fpkt"];
769--12125[label="1;2pkt 2fpkt"];
1497--12125[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="6.116.173.3" dst_port="6836" src_ip="176.108.136.232" src_port="63779"/>
      <filter dst_ip="6.116.173.3" src_ip="176.108.136.232"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
1628[label="203.10.202.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1629[label="133.249.220.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.220.170:1045, 203.10.202.171:8292}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 1045: (50%)&gt;];
}
1628--1629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.10.202.171" dst_port="8292" src_ip="133.249.220.170" src_port="1045"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
1672[label="219.103.166.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1673[label="150.150.198.132;s;6pkt 6fpkt", shape=diamond, color=yellow];
5829[label="219.103.166.180;d;1pkt 1fpkt", shape=hexagon, color=black];
10679[label="150.150.198.132;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13751[label="150.150.198.132;7pkt 7fpkt", shape=invtriangle, color=brown];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.150.198.132:4178, *:*}[71.4286%]&lt;BR/&gt;{150.150.198.132:15000, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4178: (31.8182%)&lt;BR/&gt; 15000: (29.5455%)&lt;BR/&gt; 55451: (6.81818%)&lt;BR/&gt; 44228: (6.81818%)&lt;BR/&gt; 44119: (6.81818%)&gt;];
}
1672--1673[label="1;1pkt 1fpkt"];
1672--5829[label="1;1pkt 1fpkt"];
1672--10679[label="1;1pkt 1fpkt"];
1672--13751[label="1;1pkt 1fpkt"];
1673--5829[label="1;1pkt 1fpkt"];
1673--10679[label="1;6pkt 6fpkt"];
1673--13751[label="1;6pkt 6fpkt"];
5829--10679[label="1;1pkt 1fpkt"];
5829--13751[label="1;1pkt 1fpkt"];
10679--13751[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="150.150.198.132" src_port="4178"/>
      <filter src_ip="150.150.198.132" src_port="15000"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.52.198.1"/>
      <from sec="1273035604" usec="0"/>
      <to sec="1273035765" usec="0"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
980[label="176.108.139.160;d;13pkt 13fpkt", shape=diamond, color=yellow];
1826[label="59.172.9.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
5602[label="176.108.139.160;d;13pkt 13fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 176.108.139.160:13048}[38.4615%]&lt;BR/&gt;{*:8800, 176.108.139.160:13048}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13048: (50%)&lt;BR/&gt; 17788: (18.5185%)&lt;BR/&gt; 8800: (11.1111%)&lt;BR/&gt; 1758: (5.55556%)&lt;BR/&gt; 11323: (3.7037%)&gt;];
}
980--1826[label="1;1pkt 1fpkt"];
980--5602[label="1;13pkt 13fpkt"];
1826--5602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.160" dst_port="13048" src_port="17788"/>
      <filter dst_ip="176.108.139.160" dst_port="13048" src_port="8800"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="97.154.106.124"/>
      <from sec="1273035899" usec="0"/>
      <to sec="1273035949" usec="0"/>
    </slice>
    <from sec="1273035899" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036249" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1666[label="133.249.204.39;s;74pkt 74fpkt", shape=diamond, color=yellow];
3161[label="213.150.44.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
3549[label="8.143.153.146;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.204.39:995, *:*}[50.6667%]&lt;BR/&gt;{133.249.204.39:80, *:*}[34.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (26.2821%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 0: (8.97436%)&lt;BR/&gt; 25: (2.5641%)&lt;BR/&gt; 60977: (1.28205%)&gt;];
}
1666--3161[label="1;1pkt 1fpkt"];
1666--3549[label="0.666667;2pkt 2fpkt"];
1666--8322[label="0.0810811;6pkt 6fpkt"];
1666--8393[label="0.0810811;6pkt 6fpkt"];
1666--8428[label="0.0810811;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.204.39" src_port="995"/>
      <filter src_ip="133.249.204.39" src_port="80"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
727[label="176.108.231.140;d;2pkt 2fpkt", shape=diamond, color=yellow];
2164[label="0.115.102.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
2238[label="6.176.214.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
5975[label="176.108.231.140;d;2pkt 2fpkt", shape=hexagon, color=black];
12334[label="0.115.102.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14760[label="0.115.102.246;1pkt 1fpkt", shape=invtriangle, color=brown];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.176.214.245:16039, 176.108.231.140:4500}[50%]&lt;BR/&gt;{0.115.102.246:4500, 176.108.231.140:4500}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (81.25%)&lt;BR/&gt; 16039: (18.75%)&gt;];
}
727--2164[label="1;1pkt 1fpkt"];
727--2238[label="1;1pkt 1fpkt"];
727--5975[label="1;2pkt 2fpkt"];
727--12334[label="1;1pkt 1fpkt"];
727--14760[label="1;1pkt 1fpkt"];
2164--5975[label="1;1pkt 1fpkt"];
2164--12334[label="1;1pkt 1fpkt"];
2164--14760[label="1;1pkt 1fpkt"];
2238--5975[label="1;1pkt 1fpkt"];
5975--12334[label="1;1pkt 1fpkt"];
5975--14760[label="1;1pkt 1fpkt"];
12334--14760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.231.140" dst_port="4500" src_ip="0.115.102.246" src_port="4500"/>
      <filter dst_ip="176.108.231.140" dst_port="4500" src_ip="6.176.214.245" src_port="16039"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.249.23.86"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036069" usec="0"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="150.198.54.195"/>
      <from sec="1273035604" usec="0"/>
      <to sec="1273036337" usec="0"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="51.164.129.205"/>
      <from sec="1273035784" usec="0"/>
      <to sec="1273035868" usec="0"/>
    </slice>
    <from sec="1273035784" usec="0"/>
    <to sec="1273035868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
2558[label="133.249.234.37;s;37pkt 37fpkt", shape=diamond, color=yellow];
2632[label="45.171.78.154;d;3pkt 3fpkt", shape=diamond, color=yellow];
6176[label="45.171.78.154;d;3pkt 3fpkt", shape=hexagon, color=black];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.234.37:80, 213.150.23.96:*}[56.7568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57496: (3.48837%)&lt;BR/&gt; 55694: (3.48837%)&lt;BR/&gt; 46587: (3.48837%)&lt;BR/&gt; 65513: (1.16279%)&gt;];
}
2558--2632[label="1;3pkt 3fpkt"];
2558--6176[label="1;3pkt 3fpkt"];
2558--8322[label="0.0810811;3pkt 3fpkt"];
2558--8393[label="0.0810811;3pkt 3fpkt"];
2558--8428[label="0.0810811;3pkt 3fpkt"];
2632--6176[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.150.23.96" src_ip="133.249.234.37" src_port="80"/>
    </slice>
    <from sec="1273035650" usec="0"/>
    <to sec="1273035894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
2521[label="176.108.82.198;d;8pkt 8fpkt", shape=diamond, color=yellow];
2634[label="49.40.0.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
6793[label="176.108.82.198;d;8pkt 8fpkt", shape=hexagon, color=black];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.171.80.84:*, 176.108.82.198:80}[37.5%]&lt;BR/&gt;{52.4.132.149:*, 176.108.82.198:80}[25%]&lt;BR/&gt;{60.61.42.186:*, 176.108.82.198:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37706: (8.82353%)&lt;BR/&gt; 59081: (5.88235%)&lt;BR/&gt; 57752: (5.88235%)&lt;BR/&gt; 52224: (5.88235%)&gt;];
}
2521--2634[label="1;1pkt 1fpkt"];
2521--6793[label="1;8pkt 8fpkt"];
2634--6793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.82.198" dst_port="80" src_ip="45.171.80.84"/>
      <filter dst_ip="176.108.82.198" dst_port="80" src_ip="60.61.42.186"/>
      <filter dst_ip="176.108.82.198" dst_port="80" src_ip="52.4.132.149"/>
    </slice>
    <from sec="1273035623" usec="0"/>
    <to sec="1273035914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="62.212.103.67"/>
      <from sec="1273035809" usec="0"/>
      <to sec="1273035886" usec="0"/>
    </slice>
    <from sec="1273035809" usec="0"/>
    <to sec="1273035886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.219.245.67"/>
      <from sec="1273036341" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036341" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.175.139.140"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.108.194.200"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.109.35.251"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.109.35.251"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035889" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.228.178.188"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="76.228.178.188"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.149.24.87"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="190.170.181.244"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="190.170.181.244"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26501,2.76189,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
517[label="204.134.244.25;d;399pkt 399fpkt", shape=diamond, color=yellow];
519[label="53.206.250.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
905[label="76.2.8.114;s;2pkt 2fpkt", shape=diamond, color=yellow];
1080[label="33.192.205.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
2818[label="22.181.5.209;s;3pkt 3fpkt", shape=diamond, color=yellow];
5246[label="45.219.112.85;s;6pkt 6fpkt", shape=diamond, color=yellow];
5739[label="204.134.244.25;d;252pkt 252fpkt", shape=hexagon, color=black];
8627[label="49.144.221.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.134.244.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (13.6637%)&lt;BR/&gt; 1500: (4.42943%)&lt;BR/&gt; 33492: (2.32733%)&lt;BR/&gt; 35433: (1.87688%)&lt;BR/&gt; 32343: (1.8018%)&gt;];
}
517--519[label="1;2pkt 2fpkt"];
517--905[label="1;2pkt 2fpkt"];
517--1080[label="1;1pkt 1fpkt"];
517--2818[label="1;3pkt 3fpkt"];
517--3634[label="0.00250627;1pkt 1fpkt"];
517--5246[label="1;6pkt 6fpkt"];
517--5739[label="1;252pkt 252fpkt"];
517--8350[label="0.00250627;1pkt 1fpkt"];
517--8406[label="0.00250627;1pkt 1fpkt"];
517--8440[label="0.00250627;1pkt 1fpkt"];
517--8627[label="1;1pkt 1fpkt"];
519--5739[label="1;2pkt 2fpkt"];
905--5739[label="1;2pkt 2fpkt"];
1080--5739[label="1;1pkt 1fpkt"];
2818--5739[label="0.333333;1pkt 1fpkt"];
5246--5739[label="0.666667;4pkt 4fpkt"];
5739--8350[label="0.00396825;1pkt 1fpkt"];
5739--8406[label="0.00396825;1pkt 1fpkt"];
5739--8440[label="0.00396825;1pkt 1fpkt"];
5739--8627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.244.25"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1935[label="12.151.52.163;d;4pkt 4fpkt", shape=diamond, color=yellow];
2890[label="133.249.172.135;s;4pkt 4fpkt", shape=diamond, color=yellow];
7639[label="12.151.52.163;d;1pkt 1fpkt", shape=hexagon, color=black];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.172.135:443, 12.151.52.163:3333}[25%]&lt;BR/&gt;{133.249.172.135:443, 12.151.52.163:3339}[25%]&lt;BR/&gt;{133.249.172.135:443, 12.151.52.163:3340}[25%]&lt;BR/&gt;{133.249.172.135:443, 12.151.52.163:3341}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3333: (16.6667%)&lt;BR/&gt; 3341: (11.1111%)&lt;BR/&gt; 3340: (11.1111%)&lt;BR/&gt; 3339: (11.1111%)&gt;];
}
1935--2890[label="1;4pkt 4fpkt"];
1935--7639[label="1;1pkt 1fpkt"];
2890--7639[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.151.52.163" dst_port="3341" src_ip="133.249.172.135" src_port="443"/>
      <filter dst_ip="12.151.52.163" dst_port="3340" src_ip="133.249.172.135" src_port="443"/>
      <filter dst_ip="12.151.52.163" dst_port="3339" src_ip="133.249.172.135" src_port="443"/>
      <filter dst_ip="12.151.52.163" dst_port="3333" src_ip="133.249.172.135" src_port="443"/>
    </slice>
    <from sec="1273036202" usec="0"/>
    <to sec="1273036416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
2633[label="49.40.0.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
3028[label="176.108.82.198;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.82.198:80, 45.171.80.84:*}[42.8571%]&lt;BR/&gt;{176.108.82.198:80, 60.61.42.186:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37706: (12.5%)&lt;BR/&gt; 59303: (6.25%)&lt;BR/&gt; 59081: (6.25%)&lt;BR/&gt; 57752: (6.25%)&gt;];
}
2633--3028[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="45.171.80.84" src_ip="176.108.82.198" src_port="80"/>
      <filter dst_ip="60.61.42.186" src_ip="176.108.82.198" src_port="80"/>
    </slice>
    <from sec="1273035623" usec="0"/>
    <to sec="1273035914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="27.230.158.97"/>
      <from sec="1273035799" usec="0"/>
      <to sec="1273036112" usec="0"/>
    </slice>
    <from sec="1273035799" usec="0"/>
    <to sec="1273036112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="59.222.166.64"/>
      <from sec="1273035819" usec="0"/>
      <to sec="1273036420" usec="0"/>
    </slice>
    <from sec="1273035819" usec="0"/>
    <to sec="1273036420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.188.243.220"/>
      <from sec="1273035862" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035862" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.64.14.231"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.138.179.223"/>
      <from sec="1273035872" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="73.138.179.223"/>
      <from sec="1273035872" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.197.170.60"/>
      <from sec="1273036088" usec="0"/>
      <to sec="1273036171" usec="0"/>
    </slice>
    <from sec="1273036088" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3207[label="128.194.177.16;d;82pkt 82fpkt", shape=diamond, color=yellow];
3208[label="205.188.134.26;s;82pkt 82fpkt", shape=diamond, color=yellow];
6612[label="128.194.177.16;d;74pkt 74fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.188.134.26:21, 128.194.177.16:*}[45.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.6891%)&lt;BR/&gt; 65102: (0.630252%)&lt;BR/&gt; 65027: (0.630252%)&lt;BR/&gt; 64955: (0.630252%)&lt;BR/&gt; 64339: (0.630252%)&gt;];
}
3207--3208[label="1;82pkt 82fpkt"];
3207--6612[label="1;74pkt 74fpkt"];
3208--6612[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="128.194.177.16" src_ip="205.188.134.26" src_port="21"/>
    </slice>
    <from sec="1273035961" usec="0"/>
    <to sec="1273035991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1345[label="167.9.33.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
3219[label="176.108.211.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
7377[label="167.9.33.30;d;1pkt 1fpkt", shape=hexagon, color=black];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.211.72:51328, 167.9.33.30:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51328: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
1345--3219[label="1;1pkt 1fpkt"];
1345--7377[label="1;1pkt 1fpkt"];
3219--7377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.9.33.30" dst_port="8000" src_ip="176.108.211.72" src_port="51328"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
1165[label="59.172.9.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
3305[label="176.108.139.160;s;27pkt 27fpkt", shape=diamond, color=yellow];
5654[label="59.172.9.162;d;1pkt 1fpkt", shape=hexagon, color=black];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.160:13048, *:17788}[74.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13048: (50%)&lt;BR/&gt; 17788: (34.4828%)&lt;BR/&gt; 8800: (5.17241%)&lt;BR/&gt; 1758: (5.17241%)&lt;BR/&gt; 8400: (3.44828%)&gt;];
}
1165--3305[label="1;1pkt 1fpkt"];
1165--5654[label="1;1pkt 1fpkt"];
3305--5654[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="176.108.139.160" src_port="13048"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
3317[label="221.92.125.62;s;1013pkt 1013fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.92.125.62:1176, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1176: (50%)&gt;];
}
3317--5148[label="0.00520833;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="221.92.125.62" src_port="1176"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
1040[label="13.221.43.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
3330[label="150.150.198.136;s;19pkt 19fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.150.198.136:22596, *:*}[57.8947%]&lt;BR/&gt;{150.150.198.136:*, 13.233.242.154:62905}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22596: (27.5%)&lt;BR/&gt; 62905: (17.5%)&lt;BR/&gt; 21796: (5%)&lt;BR/&gt; 3525: (5%)&lt;BR/&gt; 61813: (2.5%)&gt;];
}
1040--3330[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="150.150.198.136" src_port="22596"/>
      <filter dst_ip="13.233.242.154" dst_port="62905" src_ip="150.150.198.136"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.171.76.80"/>
      <from sec="1273036162" usec="0"/>
      <to sec="1273036300" usec="0"/>
    </slice>
    <from sec="1273036162" usec="0"/>
    <to sec="1273036300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="73.64.14.231"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
3133[label="75.177.224.200;d;182pkt 182fpkt", shape=diamond, color=yellow];
3581[label="204.134.240.4;s;182pkt 182fpkt", shape=diamond, color=yellow];
6594[label="75.177.224.200;d;182pkt 182fpkt", shape=hexagon, color=black];
8561[label="204.134.240.4;181pkt 181fpkt", shape=pentagon, color=darkviolet];
12471[label="204.134.240.4;181pkt 181fpkt", shape=invtriangle, color=brown];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.240.4:*, 75.177.224.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61196: (0.27533%)&lt;BR/&gt; 61195: (0.27533%)&lt;BR/&gt; 61194: (0.27533%)&lt;BR/&gt; 61193: (0.27533%)&gt;];
}
3133--3581[label="1;182pkt 182fpkt"];
3133--6594[label="1;182pkt 182fpkt"];
3133--8561[label="1;181pkt 181fpkt"];
3133--12471[label="1;181pkt 181fpkt"];
3581--6594[label="1;182pkt 182fpkt"];
3581--8561[label="1;181pkt 181fpkt"];
3581--12471[label="1;181pkt 181fpkt"];
6594--8561[label="1;181pkt 181fpkt"];
6594--12471[label="1;181pkt 181fpkt"];
8561--12471[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_ip="75.177.224.200" dst_port="80" src_ip="204.134.240.4"/>
    </slice>
    <from sec="1273035877" usec="0"/>
    <to sec="1273035982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.53.50.66"/>
      <from sec="1273035932" usec="0"/>
      <to sec="1273036034" usec="0"/>
    </slice>
    <from sec="1273035932" usec="0"/>
    <to sec="1273036034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.105.46.252"/>
      <from sec="1273035966" usec="0"/>
      <to sec="1273036328" usec="0"/>
    </slice>
    <from sec="1273035966" usec="0"/>
    <to sec="1273036328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.93.186.175"/>
      <from sec="1273036007" usec="0"/>
      <to sec="1273036405" usec="0"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.26.75.145"/>
      <from sec="1273036008" usec="0"/>
      <to sec="1273036405" usec="0"/>
    </slice>
    <from sec="1273036008" usec="0"/>
    <to sec="1273036405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
3688[label="5.163.163.14;s;1023pkt 1023fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.163.14:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 3304: (0.146628%)&lt;BR/&gt; 2940: (0.146628%)&lt;BR/&gt; 2708: (0.146628%)&lt;BR/&gt; 2636: (0.146628%)&gt;];
}
3688--7687[label="0.000977517;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="5.163.163.14"/>
    </slice>
    <from sec="1273036015" usec="0"/>
    <to sec="1273036069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.170.128.1"/>
      <from sec="1273036024" usec="0"/>
      <to sec="1273036183" usec="0"/>
    </slice>
    <from sec="1273036024" usec="0"/>
    <to sec="1273036183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="46.125.21.7"/>
      <from sec="1273036028" usec="0"/>
      <to sec="1273036050" usec="0"/>
    </slice>
    <from sec="1273036028" usec="0"/>
    <to sec="1273036050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="176.108.82.91"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036427" usec="0"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
3747[label="204.134.238.237;s;123pkt 123fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.238.237:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4444: (3.65854%)&lt;BR/&gt; 4682: (1.62602%)&lt;BR/&gt; 32568: (1.21951%)&lt;BR/&gt; 30000: (0.813008%)&lt;BR/&gt; 10000: (0.813008%)&gt;];
}
3747--6838[label="0.00813008;1pkt 1fpkt"];
3747--8175[label="0.00813008;1pkt 1fpkt"];
3747--8350[label="0.00813008;1pkt 1fpkt"];
3747--8406[label="0.00813008;1pkt 1fpkt"];
3747--8440[label="0.00813008;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.238.237"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.84.113.28"/>
      <from sec="1273035842" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035842" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="37.50.158.205"/>
      <from sec="1273035983" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035983" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.170.128.1"/>
      <from sec="1273036024" usec="0"/>
      <to sec="1273036183" usec="0"/>
    </slice>
    <from sec="1273036024" usec="0"/>
    <to sec="1273036183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="54.77.168.120"/>
      <from sec="1273036060" usec="0"/>
      <to sec="1273036366" usec="0"/>
    </slice>
    <from sec="1273036060" usec="0"/>
    <to sec="1273036366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.245.220.42"/>
      <from sec="1273036072" usec="0"/>
      <to sec="1273036088" usec="0"/>
    </slice>
    <from sec="1273036072" usec="0"/>
    <to sec="1273036088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="12.33.231.151"/>
      <from sec="1273036111" usec="0"/>
      <to sec="1273036207" usec="0"/>
    </slice>
    <from sec="1273036111" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.206.69.183"/>
      <from sec="1273035604" usec="0"/>
      <to sec="1273036424" usec="0"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.196.219.199"/>
      <from sec="1273035848" usec="0"/>
      <to sec="1273036225" usec="0"/>
    </slice>
    <from sec="1273035848" usec="0"/>
    <to sec="1273036225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
3970[label="205.121.108.165;s;45pkt 45fpkt", shape=diamond, color=yellow];
4143[label="55.209.85.255;d;10pkt 10fpkt", shape=diamond, color=yellow];
4148[label="5.40.31.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
4447[label="133.249.174.118;s;17pkt 17fpkt", shape=diamond, color=yellow];
4514[label="12.150.134.60;d;7pkt 7fpkt", shape=diamond, color=yellow];
11167[label="205.121.108.165;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.121.108.165:54642, *:*}[69.0722%]&lt;BR/&gt;{*:80, *:*}[22.6804%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54642: (34.0909%)&lt;BR/&gt; 80: (12.987%)&lt;BR/&gt; 52436: (2.5974%)&lt;BR/&gt; 443: (1.62338%)&lt;BR/&gt; 57037: (0.974026%)&gt;];
}
3970--4148[label="1;1pkt 1fpkt"];
3970--4514[label="0.142857;1pkt 1fpkt"];
3970--11167[label="0.977778;44pkt 44fpkt"];
4143--4447[label="0.8;8pkt 8fpkt"];
4148--11167[label="1;1pkt 1fpkt"];
4447--4514[label="0.428571;3pkt 3fpkt"];
4447--8357[label="0.0588235;1pkt 1fpkt"];
4447--8414[label="0.0588235;1pkt 1fpkt"];
4514--11167[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter src_ip="205.121.108.165" src_port="54642"/>
    </slice>
    <from sec="1273035622" usec="0"/>
    <to sec="1273036484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="156.58.44.11"/>
      <from sec="1273035967" usec="0"/>
      <to sec="1273036428" usec="0"/>
    </slice>
    <from sec="1273035967" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="12.174.4.228"/>
      <from sec="1273036007" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.53.50.85"/>
      <from sec="1273036033" usec="0"/>
      <to sec="1273036274" usec="0"/>
    </slice>
    <from sec="1273036033" usec="0"/>
    <to sec="1273036274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
3931[label="176.108.136.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
4504[label="86.37.104.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.37.104.95:61282, 176.108.136.200:63814}[50%]&lt;BR/&gt;{117.210.47.165:80, 176.108.136.200:54316}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63814: (33.3333%)&lt;BR/&gt; 61282: (33.3333%)&lt;BR/&gt; 54316: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
3931--4504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.136.200" dst_port="54316" src_ip="117.210.47.165" src_port="80"/>
      <filter dst_ip="176.108.136.200" dst_port="63814" src_ip="86.37.104.95" src_port="61282"/>
    </slice>
    <from sec="1273035610" usec="0"/>
    <to sec="1273036409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.44.19.11"/>
      <from sec="1273036084" usec="0"/>
      <to sec="1273036428" usec="0"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.67.117.159"/>
      <from sec="1273036122" usec="0"/>
      <to sec="1273036401" usec="0"/>
    </slice>
    <from sec="1273036122" usec="0"/>
    <to sec="1273036401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.34.208.16"/>
      <from sec="1273036162" usec="0"/>
      <to sec="1273036308" usec="0"/>
    </slice>
    <from sec="1273036162" usec="0"/>
    <to sec="1273036308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.146.212.216"/>
      <from sec="1273036165" usec="0"/>
      <to sec="1273036185" usec="0"/>
    </slice>
    <from sec="1273036165" usec="0"/>
    <to sec="1273036185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.251.121.161"/>
      <from sec="1273036167" usec="0"/>
      <to sec="1273036288" usec="0"/>
    </slice>
    <from sec="1273036167" usec="0"/>
    <to sec="1273036288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.108.151.228"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.108.151.228"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.203.106.17"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="6.203.106.17"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.164.246.7"/>
      <from sec="1273036186" usec="0"/>
      <to sec="1273036211" usec="0"/>
    </slice>
    <from sec="1273036186" usec="0"/>
    <to sec="1273036211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.182.86.66"/>
      <from sec="1273036205" usec="0"/>
      <to sec="1273036424" usec="0"/>
    </slice>
    <from sec="1273036205" usec="0"/>
    <to sec="1273036424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="176.108.216.63"/>
      <from sec="1273035625" usec="0"/>
      <to sec="1273036425" usec="0"/>
    </slice>
    <from sec="1273035625" usec="0"/>
    <to sec="1273036425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
2678[label="128.3.82.98;d;386pkt 386fpkt", shape=diamond, color=yellow];
4856[label="133.249.201.158;s;391pkt 391fpkt", shape=diamond, color=yellow];
11066[label="133.249.201.158;392pkt 392fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.201.158:*, 128.3.82.98:80}[65.8163%]&lt;BR/&gt;{133.249.201.158:*, 128.3.82.98:443}[32.6531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.2763%)&lt;BR/&gt; 443: (16.7237%)&lt;BR/&gt; 26678: (0.342173%)&lt;BR/&gt; 26674: (0.342173%)&lt;BR/&gt; 26726: (0.25663%)&gt;];
}
2678--4856[label="1;386pkt 386fpkt"];
2678--11066[label="1;386pkt 386fpkt"];
4856--11066[label="1;391pkt 391fpkt"];
</description>
    <slice>
      <filter dst_ip="128.3.82.98" dst_port="80" src_ip="133.249.201.158"/>
      <filter dst_ip="128.3.82.98" dst_port="443" src_ip="133.249.201.158"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.80.64.101"/>
      <from sec="1273035895" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.161.0.41"/>
      <from sec="1273035899" usec="0"/>
      <to sec="1273036421" usec="0"/>
    </slice>
    <from sec="1273035899" usec="0"/>
    <to sec="1273036421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="57.227.208.153"/>
      <from sec="1273035916" usec="0"/>
      <to sec="1273036418" usec="0"/>
    </slice>
    <from sec="1273035916" usec="0"/>
    <to sec="1273036418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
3639[label="44.86.150.127;d;2pkt 2fpkt", shape=diamond, color=yellow];
4877[label="176.108.139.204;s;7pkt 7fpkt", shape=diamond, color=yellow];
11749[label="176.108.139.204;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14400[label="176.108.139.204;7pkt 7fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.204:*, 190.73.229.18:80}[42.8571%]&lt;BR/&gt;{176.108.139.204:*, 44.86.150.127:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2982: (8.69565%)&lt;BR/&gt; 2981: (8.69565%)&lt;BR/&gt; 2980: (6.52174%)&lt;BR/&gt; 2979: (6.52174%)&gt;];
}
3639--4877[label="1;2pkt 2fpkt"];
3639--11749[label="1;2pkt 2fpkt"];
3639--14400[label="1;2pkt 2fpkt"];
4877--11749[label="1;7pkt 7fpkt"];
4877--14400[label="1;7pkt 7fpkt"];
11749--14400[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="190.73.229.18" dst_port="80" src_ip="176.108.139.204"/>
      <filter dst_ip="44.86.150.127" dst_port="80" src_ip="176.108.139.204"/>
    </slice>
    <from sec="1273035973" usec="0"/>
    <to sec="1273036287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.218.131.27"/>
      <from sec="1273035974" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035974" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.239.216.32"/>
      <from sec="1273036074" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036074" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
4923[label="128.33.53.89;d;298pkt 298fpkt", shape=diamond, color=yellow];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 128.33.53.89:1863}[37.9195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (68.7919%)&lt;BR/&gt; 4750: (4.19463%)&lt;BR/&gt; 13705: (0.33557%)&lt;BR/&gt; 13501: (0.33557%)&lt;BR/&gt; 64503: (0.167785%)&gt;];
}
4923--5034[label="0.0033557;1pkt 1fpkt"];
4923--10807[label="0.0033557;1pkt 1fpkt"];
4923--13825[label="0.0033557;1pkt 1fpkt"];
4923--15625[label="0.0033557;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.33.53.89" dst_port="1863" src_port="1863"/>
    </slice>
    <from sec="1273036158" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.88.232.89"/>
      <from sec="1273036185" usec="0"/>
      <to sec="1273036339" usec="0"/>
    </slice>
    <from sec="1273036185" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.60.136.184"/>
      <from sec="1273036187" usec="0"/>
      <to sec="1273036319" usec="0"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="5.60.136.184"/>
      <from sec="1273036187" usec="0"/>
      <to sec="1273036319" usec="0"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
4602[label="204.134.244.74;d;12pkt 12fpkt", shape=diamond, color=yellow];
4945[label="195.254.146.114;s;10pkt 10fpkt", shape=diamond, color=yellow];
7642[label="204.134.244.74;d;12pkt 12fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.254.146.114:80, 204.134.244.74:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55396: (4.41176%)&lt;BR/&gt; 55395: (4.41176%)&lt;BR/&gt; 55394: (4.41176%)&lt;BR/&gt; 55393: (4.41176%)&gt;];
}
4602--4945[label="1;10pkt 10fpkt"];
4602--7642[label="1;12pkt 12fpkt"];
4945--7642[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.244.74" src_ip="195.254.146.114" src_port="80"/>
    </slice>
    <from sec="1273036211" usec="0"/>
    <to sec="1273036234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.32.100.77"/>
      <from sec="1273036251" usec="0"/>
      <to sec="1273036416" usec="0"/>
    </slice>
    <from sec="1273036251" usec="0"/>
    <to sec="1273036416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.178.66.38"/>
      <from sec="1273036251" usec="0"/>
      <to sec="1273036289" usec="0"/>
    </slice>
    <from sec="1273036251" usec="0"/>
    <to sec="1273036289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.237.50.51"/>
      <from sec="1273036252" usec="0"/>
      <to sec="1273036417" usec="0"/>
    </slice>
    <from sec="1273036252" usec="0"/>
    <to sec="1273036417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.41.213.33"/>
      <from sec="1273036258" usec="0"/>
      <to sec="1273036414" usec="0"/>
    </slice>
    <from sec="1273036258" usec="0"/>
    <to sec="1273036414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="50.216.163.216"/>
      <from sec="1273036283" usec="0"/>
      <to sec="1273036351" usec="0"/>
    </slice>
    <from sec="1273036283" usec="0"/>
    <to sec="1273036351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.114.181.16"/>
      <from sec="1273036286" usec="0"/>
      <to sec="1273036312" usec="0"/>
    </slice>
    <from sec="1273036286" usec="0"/>
    <to sec="1273036312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.160.43.137"/>
      <from sec="1273036288" usec="0"/>
      <to sec="1273036426" usec="0"/>
    </slice>
    <from sec="1273036288" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.23.131.7"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036425" usec="0"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.33.163.69"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
5098[label="179.114.82.195;d;128pkt 128fpkt", shape=diamond, color=yellow];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 179.114.82.195:36141}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36141: (48.4375%)&lt;BR/&gt; 80: (0.78125%)&lt;BR/&gt; 64314: (0.390625%)&lt;BR/&gt; 63455: (0.390625%)&lt;BR/&gt; 61599: (0.390625%)&gt;];
}
5098--6854[label="0.0078125;1pkt 1fpkt"];
5098--8129[label="0.0078125;1pkt 1fpkt"];
5098--8362[label="0.0078125;1pkt 1fpkt"];
5098--8418[label="0.0078125;1pkt 1fpkt"];
5098--8449[label="0.0078125;1pkt 1fpkt"];
5098--10573[label="0.0078125;1pkt 1fpkt"];
5098--13678[label="0.0078125;1pkt 1fpkt"];
5098--15551[label="0.0078125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="179.114.82.195" dst_port="36141"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
5107[label="179.114.16.192;d;148pkt 148fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 179.114.16.192:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23911: (5.74324%)&lt;BR/&gt; 23904: (5.06757%)&lt;BR/&gt; 23649: (5.06757%)&lt;BR/&gt; 23873: (4.05405%)&lt;BR/&gt; 23900: (3.71622%)&gt;];
}
5107--8349[label="0.00675676;1pkt 1fpkt"];
5107--8405[label="0.00675676;1pkt 1fpkt"];
5107--8439[label="0.00675676;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="179.114.16.192"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
4704[label="223.72.36.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
5115[label="133.249.68.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.68.55:2515, 223.72.36.80:6667}[50%]&lt;BR/&gt;{133.249.68.55:2520, 223.72.36.80:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2520: (25%)&lt;BR/&gt; 2515: (25%)&gt;];
}
4704--5115[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="223.72.36.80" dst_port="6667" src_ip="133.249.68.55" src_port="2520"/>
      <filter dst_ip="223.72.36.80" dst_port="6667" src_ip="133.249.68.55" src_port="2515"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
5148[label="128.23.32.215;d;192pkt 192fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.23.32.215:17247}[66.1458%]&lt;BR/&gt;{*:*, 128.23.32.215:17246}[21.3542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17247: (33.0729%)&lt;BR/&gt; 17246: (10.6771%)&lt;BR/&gt; 17244: (1.30208%)&lt;BR/&gt; 17243: (1.04167%)&lt;BR/&gt; 17330: (0.78125%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="128.23.32.215" dst_port="17247"/>
      <filter dst_ip="128.23.32.215" dst_port="17246"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.187.194.24"/>
      <from sec="1273035907" usec="0"/>
      <to sec="1273036418" usec="0"/>
    </slice>
    <from sec="1273035907" usec="0"/>
    <to sec="1273036418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
4893[label="73.164.37.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
5278[label="152.85.248.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
7618[label="73.164.37.85;d;1pkt 1fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.248.156:16116, 73.164.37.85:15652}[50%]&lt;BR/&gt;{152.85.248.156:16116, 73.160.11.140:11409}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16116: (50%)&lt;BR/&gt; 15652: (37.5%)&lt;BR/&gt; 11409: (12.5%)&gt;];
}
4893--5278[label="1;1pkt 1fpkt"];
4893--7618[label="1;1pkt 1fpkt"];
5278--7618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="73.160.11.140" dst_port="11409" src_ip="152.85.248.156" src_port="16116"/>
      <filter dst_ip="73.164.37.85" dst_port="15652" src_ip="152.85.248.156" src_port="16116"/>
    </slice>
    <from sec="1273036039" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.33.100.180"/>
      <from sec="1273036172" usec="0"/>
      <to sec="1273036428" usec="0"/>
    </slice>
    <from sec="1273036172" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.228.146.195"/>
      <from sec="1273036253" usec="0"/>
      <to sec="1273036415" usec="0"/>
    </slice>
    <from sec="1273036253" usec="0"/>
    <to sec="1273036415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
5319[label="205.119.25.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
5320[label="193.240.137.31;s;2pkt 2fpkt", shape=diamond, color=yellow];
7935[label="205.119.25.2;d;2pkt 2fpkt", shape=hexagon, color=black];
9060[label="193.240.137.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12774[label="193.240.137.31;2pkt 2fpkt", shape=invtriangle, color=brown];
15009[label="193.240.137.31;3pkt 3fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.240.137.31:38558, 205.119.25.2:80}[33.3333%]&lt;BR/&gt;{193.240.137.31:38559, 205.119.25.2:80}[33.3333%]&lt;BR/&gt;{193.240.137.31:38998, 205.119.25.2:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38559: (21.4286%)&lt;BR/&gt; 38558: (17.8571%)&lt;BR/&gt; 38998: (10.7143%)&gt;];
}
5319--5320[label="1;2pkt 2fpkt"];
5319--7935[label="1;2pkt 2fpkt"];
5319--9060[label="1;2pkt 2fpkt"];
5319--12774[label="0.5;1pkt 1fpkt"];
5319--15009[label="1;2pkt 2fpkt"];
5320--7935[label="1;2pkt 2fpkt"];
5320--9060[label="1;2pkt 2fpkt"];
5320--12774[label="0.5;1pkt 1fpkt"];
5320--15009[label="1;2pkt 2fpkt"];
7935--9060[label="1;2pkt 2fpkt"];
7935--12774[label="0.5;1pkt 1fpkt"];
7935--15009[label="1;2pkt 2fpkt"];
9060--12774[label="1;2pkt 2fpkt"];
9060--15009[label="1;3pkt 3fpkt"];
12774--15009[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.119.25.2" dst_port="80" src_ip="193.240.137.31" src_port="38998"/>
      <filter dst_ip="205.119.25.2" dst_port="80" src_ip="193.240.137.31" src_port="38559"/>
      <filter dst_ip="205.119.25.2" dst_port="80" src_ip="193.240.137.31" src_port="38558"/>
    </slice>
    <from sec="1273036264" usec="0"/>
    <to sec="1273036464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.62305,2.79834,504,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
1[label="133.249.192.8s;2pkt 2fpkt", shape=rectangle, color=red];
5321[label="59.221.184.243;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.192.8:2173, 59.221.184.243:443}[33.3333%]&lt;BR/&gt;{133.249.192.8:55677, 59.221.184.243:443}[33.3333%]&lt;BR/&gt;{133.249.192.8:55678, 59.221.184.243:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 55677: (20%)&lt;BR/&gt; 2173: (20%)&lt;BR/&gt; 55678: (10%)&gt;];
}
1--5321[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="59.221.184.243" dst_port="443" src_ip="133.249.192.8" src_port="55678"/>
      <filter dst_ip="59.221.184.243" dst_port="443" src_ip="133.249.192.8" src_port="55677"/>
      <filter dst_ip="59.221.184.243" dst_port="443" src_ip="133.249.192.8" src_port="2173"/>
    </slice>
    <from sec="1273036272" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.181.237.220"/>
      <from sec="1273036333" usec="0"/>
      <to sec="1273036427" usec="0"/>
    </slice>
    <from sec="1273036333" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="56.61.234.234"/>
      <from sec="1273036346" usec="0"/>
      <to sec="1273036366" usec="0"/>
    </slice>
    <from sec="1273036346" usec="0"/>
    <to sec="1273036366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.4.80.60"/>
      <from sec="1273036349" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036349" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.192.68.233"/>
      <from sec="1273036350" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036350" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
5316[label="133.249.134.6;d;111pkt 111fpkt", shape=diamond, color=yellow];
5370[label="205.188.128.41;s;111pkt 111fpkt", shape=diamond, color=yellow];
7932[label="133.249.134.6;d;111pkt 111fpkt", shape=hexagon, color=black];
9240[label="205.188.128.41;111pkt 111fpkt", shape=pentagon, color=darkviolet];
12883[label="205.188.128.41;111pkt 111fpkt", shape=invtriangle, color=brown];
15084[label="205.188.128.41;111pkt 111fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.188.128.41:443, 133.249.134.6:*}[99.0991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.5495%)&lt;BR/&gt; 53562: (0.45045%)&lt;BR/&gt; 53561: (0.45045%)&lt;BR/&gt; 53560: (0.45045%)&lt;BR/&gt; 53559: (0.45045%)&gt;];
}
5316--5370[label="1;111pkt 111fpkt"];
5316--7932[label="1;111pkt 111fpkt"];
5316--9240[label="1;111pkt 111fpkt"];
5316--12883[label="1;111pkt 111fpkt"];
5316--15084[label="1;111pkt 111fpkt"];
5370--7932[label="1;111pkt 111fpkt"];
5370--9240[label="1;111pkt 111fpkt"];
5370--12883[label="1;111pkt 111fpkt"];
5370--15084[label="1;111pkt 111fpkt"];
7932--9240[label="1;111pkt 111fpkt"];
7932--12883[label="1;111pkt 111fpkt"];
7932--15084[label="1;111pkt 111fpkt"];
9240--12883[label="1;111pkt 111fpkt"];
9240--15084[label="1;111pkt 111fpkt"];
12883--15084[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.134.6" src_ip="205.188.128.41" src_port="443"/>
    </slice>
    <from sec="1273036259" usec="0"/>
    <to sec="1273036406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806598,2.81362,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="46.128.34.54"/>
      <from sec="1273036381" usec="0"/>
      <to sec="1273036404" usec="0"/>
    </slice>
    <from sec="1273036381" usec="0"/>
    <to sec="1273036404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.6214,2.77306,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
14[label="176.108.239.52s;1pkt 1fpkt", shape=rectangle, color=red];
5408[label="213.18.92.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
9429[label="176.108.239.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.239.52:46386, 213.18.92.13:1935}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46386: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
14--5408[label="1;1pkt 1fpkt"];
14--9429[label="1;1pkt 1fpkt"];
5408--9429[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.18.92.13" dst_port="1935" src_ip="176.108.239.52" src_port="46386"/>
    </slice>
    <from sec="1273036333" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1273035601" usec="0"/>
      <to sec="1273036339" usec="0"/>
    </slice>
    <from sec="38648024" usec="0"/>
    <to sec="38648024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.44.252.204"/>
      <from sec="1273036034" usec="0"/>
      <to sec="1273036173" usec="0"/>
    </slice>
    <from sec="1273036034" usec="0"/>
    <to sec="1273036173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
518[label="53.206.250.196;d;5pkt 5fpkt", shape=diamond, color=yellow];
789[label="49.144.221.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
904[label="76.2.8.114;d;2pkt 2fpkt", shape=diamond, color=yellow];
937[label="22.181.5.209;d;4pkt 4fpkt", shape=diamond, color=yellow];
1079[label="33.192.205.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1400[label="204.134.244.25;s;1214pkt 1214fpkt", shape=diamond, color=yellow];
4838[label="45.219.112.85;d;6pkt 6fpkt", shape=diamond, color=yellow];
5585[label="76.2.8.114;d;2pkt 2fpkt", shape=hexagon, color=black];
5593[label="22.181.5.209;d;3pkt 3fpkt", shape=hexagon, color=black];
5740[label="53.206.250.196;d;2pkt 2fpkt", shape=hexagon, color=black];
6902[label="49.144.221.7;d;2pkt 2fpkt", shape=hexagon, color=black];
8963[label="204.134.244.25;1320pkt 1320fpkt", shape=pentagon, color=darkviolet];
12719[label="204.134.244.25;1320pkt 1320fpkt", shape=invtriangle, color=brown];
14978[label="204.134.244.25;1319pkt 1319fpkt", shape=invhouse, color=bisque];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.244.25:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (2.93156%)&lt;BR/&gt; 0: (2.3837%)&lt;BR/&gt; 10488: (1.76855%)&lt;BR/&gt; 48737: (1.58593%)&lt;BR/&gt; 40822: (1.57632%)&gt;];
}
518--1400[label="1;5pkt 5fpkt"];
518--5740[label="1;2pkt 2fpkt"];
518--8963[label="1;5pkt 5fpkt"];
518--12719[label="1;5pkt 5fpkt"];
518--14978[label="1;5pkt 5fpkt"];
789--1400[label="1;2pkt 2fpkt"];
789--6902[label="1;2pkt 2fpkt"];
789--8963[label="1;2pkt 2fpkt"];
789--12719[label="1;2pkt 2fpkt"];
789--14978[label="1;2pkt 2fpkt"];
904--1400[label="1;2pkt 2fpkt"];
904--5585[label="1;2pkt 2fpkt"];
904--8963[label="1;2pkt 2fpkt"];
904--12719[label="1;2pkt 2fpkt"];
904--14978[label="1;2pkt 2fpkt"];
937--1400[label="1;4pkt 4fpkt"];
937--5593[label="1;3pkt 3fpkt"];
937--8963[label="1;4pkt 4fpkt"];
937--12719[label="1;4pkt 4fpkt"];
937--14978[label="1;4pkt 4fpkt"];
1079--1400[label="1;1pkt 1fpkt"];
1079--8963[label="1;1pkt 1fpkt"];
1079--12719[label="1;1pkt 1fpkt"];
1079--14978[label="1;1pkt 1fpkt"];
1400--3633[label="0.00114025;1pkt 1fpkt"];
1400--4838[label="1;6pkt 6fpkt"];
1400--5585[label="1;2pkt 2fpkt"];
1400--5593[label="1;3pkt 3fpkt"];
1400--5740[label="1;2pkt 2fpkt"];
1400--6838[label="0.00114025;1pkt 1fpkt"];
1400--6902[label="1;2pkt 2fpkt"];
1400--8175[label="0.00114025;1pkt 1fpkt"];
1400--8963[label="1;1214pkt 1214fpkt"];
1400--12719[label="1;1214pkt 1214fpkt"];
1400--14978[label="0.999176;1213pkt 1213fpkt"];
4838--8963[label="1;6pkt 6fpkt"];
4838--12719[label="1;6pkt 6fpkt"];
4838--14978[label="1;6pkt 6fpkt"];
5585--8963[label="1;2pkt 2fpkt"];
5585--12719[label="1;2pkt 2fpkt"];
5585--14978[label="1;2pkt 2fpkt"];
5593--8963[label="1;3pkt 3fpkt"];
5593--12719[label="1;3pkt 3fpkt"];
5593--14978[label="1;3pkt 3fpkt"];
5740--8963[label="1;2pkt 2fpkt"];
5740--12719[label="1;2pkt 2fpkt"];
5740--14978[label="1;2pkt 2fpkt"];
6902--8963[label="1;2pkt 2fpkt"];
6902--12719[label="1;2pkt 2fpkt"];
6902--14978[label="1;2pkt 2fpkt"];
8963--12719[label="1;1320pkt 1320fpkt"];
8963--14978[label="1;1319pkt 1319fpkt"];
12719--14978[label="1;1319pkt 1319fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.244.25"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
960[label="6.176.214.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
5598[label="6.176.214.245;d;1pkt 1fpkt", shape=hexagon, color=black];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.231.140:4500, 6.176.214.245:16039}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16039: (50%)&lt;BR/&gt; 4500: (50%)&gt;];
}
960--5598[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.176.214.245" dst_port="16039" src_ip="176.108.231.140" src_port="4500"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
2046[label="8.30.98.66;d;31pkt 31fpkt", shape=diamond, color=yellow];
5905[label="8.30.98.66;d;18pkt 18fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.174.117:80, 8.30.98.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19316: (2.04082%)&lt;BR/&gt; 19315: (2.04082%)&lt;BR/&gt; 19314: (2.04082%)&lt;BR/&gt; 19313: (2.04082%)&gt;];
}
2046--5905[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="8.30.98.66" src_ip="133.249.174.117" src_port="80"/>
    </slice>
    <from sec="1273035739" usec="0"/>
    <to sec="1273035872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
728[label="0.115.102.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
5976[label="0.115.102.246;d;1pkt 1fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.231.140:4500, 0.115.102.246:4500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (100%)&gt;];
}
728--5976[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.115.102.246" dst_port="4500" src_ip="176.108.231.140" src_port="4500"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.22.142.90"/>
      <from sec="1273035842" usec="0"/>
      <to sec="1273035860" usec="0"/>
    </slice>
    <from sec="1273035842" usec="0"/>
    <to sec="1273035860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.228.178.188"/>
      <from sec="1273035869" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
2851[label="128.33.197.93;d;260pkt 260fpkt", shape=diamond, color=yellow];
6385[label="128.33.197.93;d;138pkt 138fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.33.197.93:60255}[61.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60255: (31.7839%)&lt;BR/&gt; 60254: (3.76884%)&lt;BR/&gt; 60348: (2.76382%)&lt;BR/&gt; 60253: (2.13568%)&lt;BR/&gt; 60251: (1.50754%)&gt;];
}
2851--6385[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="128.33.197.93" dst_port="60255"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
2604[label="73.164.38.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
6570[label="73.164.38.185;d;1pkt 1fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.182.49:80, 73.164.38.185:4024}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4024: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2604--6570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="73.164.38.185" dst_port="4024" src_ip="152.85.182.49" src_port="80"/>
    </slice>
    <from sec="1273035758" usec="0"/>
    <to sec="1273035877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="59.222.166.64"/>
      <from sec="1273035819" usec="0"/>
      <to sec="1273035979" usec="0"/>
    </slice>
    <from sec="1273035819" usec="0"/>
    <to sec="1273035979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.188.243.220"/>
      <from sec="1273035862" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035862" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.138.179.223"/>
      <from sec="1273035872" usec="0"/>
      <to sec="1273035928" usec="0"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
2722[label="8.142.140.15;d;7pkt 7fpkt", shape=diamond, color=yellow];
6596[label="8.142.140.15;d;7pkt 7fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.174.117:80, 8.142.140.15:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51644: (7.14286%)&lt;BR/&gt; 51643: (7.14286%)&lt;BR/&gt; 51642: (7.14286%)&lt;BR/&gt; 51641: (7.14286%)&gt;];
}
2722--6596[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="8.142.140.15" src_ip="133.249.174.117" src_port="80"/>
    </slice>
    <from sec="1273035882" usec="0"/>
    <to sec="1273035889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1535[label="205.162.96.148;d;295pkt 295fpkt", shape=diamond, color=yellow];
1536[label="50.48.66.19;s;139pkt 139fpkt", shape=diamond, color=yellow];
1627[label="205.162.96.149;d;286pkt 286fpkt", shape=diamond, color=yellow];
6358[label="205.162.96.149;d;132pkt 132fpkt", shape=hexagon, color=black];
6677[label="205.162.96.148;d;233pkt 233fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.48.66.19:*, 205.162.96.148:22}[49.9139%]&lt;BR/&gt;{50.48.66.19:*, 205.162.96.149:22}[48.537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.2627%)&lt;BR/&gt; 445: (0.414747%)&lt;BR/&gt; 42541: (0.184332%)&lt;BR/&gt; 60981: (0.138249%)&lt;BR/&gt; 60903: (0.138249%)&gt;];
}
1535--1536[label="0.510791;71pkt 71fpkt"];
1535--3695[label="0.00338983;1pkt 1fpkt"];
1535--4043[label="0.00338983;1pkt 1fpkt"];
1535--6677[label="1;233pkt 233fpkt"];
1535--8361[label="0.00338983;1pkt 1fpkt"];
1535--8415[label="0.00338983;1pkt 1fpkt"];
1535--8446[label="0.00338983;1pkt 1fpkt"];
1535--9542[label="0.00338983;1pkt 1fpkt"];
1535--10978[label="0.00338983;1pkt 1fpkt"];
1535--13053[label="0.00338983;1pkt 1fpkt"];
1535--15189[label="0.00338983;1pkt 1fpkt"];
1536--1627[label="0.489209;68pkt 68fpkt"];
1536--6358[label="0.515152;68pkt 68fpkt"];
1536--6677[label="0.510791;71pkt 71fpkt"];
1627--3695[label="0.0034965;1pkt 1fpkt"];
1627--6358[label="1;132pkt 132fpkt"];
1627--8361[label="0.0034965;1pkt 1fpkt"];
1627--8415[label="0.0034965;1pkt 1fpkt"];
1627--8446[label="0.0034965;1pkt 1fpkt"];
1627--9542[label="0.0034965;1pkt 1fpkt"];
1627--13053[label="0.0034965;1pkt 1fpkt"];
1627--15189[label="0.0034965;1pkt 1fpkt"];
6677--8361[label="0.00429185;1pkt 1fpkt"];
6677--8415[label="0.00429185;1pkt 1fpkt"];
6677--8446[label="0.00429185;1pkt 1fpkt"];
6677--9542[label="0.00429185;1pkt 1fpkt"];
6677--10978[label="0.00429185;1pkt 1fpkt"];
6677--13053[label="0.00429185;1pkt 1fpkt"];
6677--15189[label="0.00429185;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.162.96.148" dst_port="22" src_ip="50.48.66.19"/>
      <filter dst_ip="205.162.96.149" dst_port="22" src_ip="50.48.66.19"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
2397[label="150.198.54.195;d;311pkt 311fpkt", shape=diamond, color=yellow];
6751[label="150.198.54.195;d;199pkt 199fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 150.198.54.195:13910}[26.6881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13910: (49.2157%)&lt;BR/&gt; 1863: (13.4314%)&lt;BR/&gt; 16797: (1.76471%)&lt;BR/&gt; 445: (0.588235%)&lt;BR/&gt; 13457: (0.294118%)&gt;];
}
2397--5896[label="0.00321543;1pkt 1fpkt"];
2397--6751[label="1;199pkt 199fpkt"];
2397--8012[label="0.00321543;1pkt 1fpkt"];
2397--8334[label="0.00321543;1pkt 1fpkt"];
2397--8394[label="0.00321543;1pkt 1fpkt"];
2397--8429[label="0.00321543;1pkt 1fpkt"];
2397--10108[label="0.00321543;1pkt 1fpkt"];
2397--13402[label="0.00321543;1pkt 1fpkt"];
2397--15401[label="0.00321543;1pkt 1fpkt"];
6751--8012[label="0.00502513;1pkt 1fpkt"];
6751--8334[label="0.00502513;1pkt 1fpkt"];
6751--8394[label="0.00502513;1pkt 1fpkt"];
6751--8429[label="0.00502513;1pkt 1fpkt"];
6751--10108[label="0.00502513;1pkt 1fpkt"];
6751--13402[label="0.00502513;1pkt 1fpkt"];
6751--15401[label="0.00502513;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.198.54.195" dst_port="13910" src_port="1863"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
3455[label="179.114.163.31;d;20pkt 20fpkt", shape=diamond, color=yellow];
6774[label="179.114.163.31;d;18pkt 18fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.87.152.169:*, 179.114.163.31:3389}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (50%)&lt;BR/&gt; 4960: (2.63158%)&lt;BR/&gt; 4684: (2.63158%)&lt;BR/&gt; 4127: (2.63158%)&lt;BR/&gt; 3753: (2.63158%)&gt;];
}
3455--6774[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="179.114.163.31" dst_port="3389" src_ip="219.87.152.169"/>
    </slice>
    <from sec="1273035610" usec="0"/>
    <to sec="1273036413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
2991[label="150.198.33.1;d;342pkt 342fpkt", shape=diamond, color=yellow];
6775[label="150.198.33.1;d;299pkt 299fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 150.198.33.1:1863}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (63.8846%)&lt;BR/&gt; 4750: (2.88612%)&lt;BR/&gt; 40142: (0.624025%)&lt;BR/&gt; 0: (0.468019%)&lt;BR/&gt; 13501: (0.234009%)&gt;];
}
2991--5896[label="0.00292398;1pkt 1fpkt"];
2991--6775[label="1;299pkt 299fpkt"];
2991--8012[label="0.00292398;1pkt 1fpkt"];
2991--8334[label="0.00292398;1pkt 1fpkt"];
2991--8394[label="0.00292398;1pkt 1fpkt"];
2991--8429[label="0.00292398;1pkt 1fpkt"];
2991--9853[label="0.00813008;1pkt 1fpkt"];
2991--10108[label="0.00292398;1pkt 1fpkt"];
2991--13402[label="0.00292398;1pkt 1fpkt"];
2991--15401[label="0.00292398;1pkt 1fpkt"];
6775--8012[label="0.00334448;1pkt 1fpkt"];
6775--8334[label="0.00334448;1pkt 1fpkt"];
6775--8394[label="0.00334448;1pkt 1fpkt"];
6775--8429[label="0.00334448;1pkt 1fpkt"];
6775--9853[label="0.00813008;1pkt 1fpkt"];
6775--10108[label="0.00334448;1pkt 1fpkt"];
6775--13402[label="0.00334448;1pkt 1fpkt"];
6775--15401[label="0.00334448;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.198.33.1" dst_port="1863" src_port="1863"/>
    </slice>
    <from sec="1273035611" usec="0"/>
    <to sec="1273036417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
2661[label="0.175.98.29;d;112pkt 112fpkt", shape=diamond, color=yellow];
3937[label="204.134.243.18;s;274pkt 274fpkt", shape=diamond, color=yellow];
6811[label="0.175.98.29;d;112pkt 112fpkt", shape=hexagon, color=black];
8829[label="204.134.243.18;325pkt 325fpkt", shape=pentagon, color=darkviolet];
12636[label="204.134.243.18;325pkt 325fpkt", shape=invtriangle, color=brown];
14938[label="204.134.243.18;325pkt 325fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.243.18:80, 54.161.118.79:*}[44.1718%]&lt;BR/&gt;{204.134.243.18:80, 0.175.98.29:*}[34.3558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2519: (0.203666%)&lt;BR/&gt; 2518: (0.203666%)&lt;BR/&gt; 2517: (0.203666%)&lt;BR/&gt; 2516: (0.203666%)&gt;];
}
2661--3937[label="1;112pkt 112fpkt"];
2661--6811[label="1;112pkt 112fpkt"];
2661--8829[label="1;112pkt 112fpkt"];
2661--12636[label="1;112pkt 112fpkt"];
2661--14938[label="1;112pkt 112fpkt"];
3937--6811[label="1;112pkt 112fpkt"];
3937--8322[label="0.0291971;8pkt 8fpkt"];
3937--8349[label="0.0328467;9pkt 9fpkt"];
3937--8357[label="0.0255474;7pkt 7fpkt"];
3937--8393[label="0.0291971;8pkt 8fpkt"];
3937--8405[label="0.0328467;9pkt 9fpkt"];
3937--8414[label="0.0255474;7pkt 7fpkt"];
3937--8428[label="0.0291971;8pkt 8fpkt"];
3937--8439[label="0.0328467;9pkt 9fpkt"];
3937--8829[label="0.99635;273pkt 273fpkt"];
3937--12636[label="0.99635;273pkt 273fpkt"];
3937--14938[label="0.99635;273pkt 273fpkt"];
6811--8829[label="1;112pkt 112fpkt"];
6811--12636[label="1;112pkt 112fpkt"];
6811--14938[label="1;112pkt 112fpkt"];
8829--12636[label="1;325pkt 325fpkt"];
8829--14938[label="1;325pkt 325fpkt"];
12636--14938[label="1;325pkt 325fpkt"];
</description>
    <slice>
      <filter dst_ip="54.161.118.79" src_ip="204.134.243.18" src_port="80"/>
      <filter dst_ip="0.175.98.29" src_ip="204.134.243.18" src_port="80"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
265[label="9.66.249.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
2288[label="15.0.204.94;d;9pkt 9fpkt", shape=diamond, color=yellow];
2578[label="14.229.47.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
2665[label="221.229.22.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
2723[label="176.108.136.175;s;182pkt 182fpkt", shape=diamond, color=yellow];
3104[label="41.80.107.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
5704[label="9.66.249.202;d;1pkt 1fpkt", shape=hexagon, color=black];
6392[label="15.0.204.94;d;9pkt 9fpkt", shape=hexagon, color=black];
6812[label="221.229.22.145;d;1pkt 1fpkt", shape=hexagon, color=black];
6814[label="41.80.107.175;d;1pkt 1fpkt", shape=hexagon, color=black];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.136.175:8183, *:*}[94.086%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8183: (51.9324%)&lt;BR/&gt; 15000: (3.86473%)&lt;BR/&gt; 80: (1.93237%)&lt;BR/&gt; 35050: (0.724638%)&lt;BR/&gt; 33875: (0.724638%)&gt;];
}
265--2723[label="1;1pkt 1fpkt"];
265--5704[label="1;1pkt 1fpkt"];
2288--2723[label="0.555556;5pkt 5fpkt"];
2288--6392[label="1;9pkt 9fpkt"];
2578--2723[label="1;1pkt 1fpkt"];
2665--2723[label="1;1pkt 1fpkt"];
2665--6812[label="1;1pkt 1fpkt"];
2723--2904[label="0.00549451;1pkt 1fpkt"];
2723--3104[label="1;1pkt 1fpkt"];
2723--5704[label="1;1pkt 1fpkt"];
2723--6392[label="0.555556;5pkt 5fpkt"];
2723--6812[label="1;1pkt 1fpkt"];
2723--6814[label="1;1pkt 1fpkt"];
2723--7497[label="0.00549451;1pkt 1fpkt"];
2723--8324[label="0.00549451;1pkt 1fpkt"];
3104--6814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.136.175" src_port="8183"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
3573[label="133.249.174.118;d;16pkt 16fpkt", shape=diamond, color=yellow];
6821[label="133.249.174.118;d;13pkt 13fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.247.139.235:*, 133.249.174.118:80}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63815: (3.44828%)&lt;BR/&gt; 63616: (3.44828%)&lt;BR/&gt; 63480: (3.44828%)&lt;BR/&gt; 63058: (3.44828%)&gt;];
}
3573--6821[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.174.118" dst_port="80" src_ip="72.247.139.235"/>
    </slice>
    <from sec="1273035864" usec="0"/>
    <to sec="1273036393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.93.186.175"/>
      <from sec="1273036007" usec="0"/>
      <to sec="1273036339" usec="0"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
2782[label="205.119.43.242;d;367pkt 367fpkt", shape=diamond, color=yellow];
6900[label="205.119.43.242;d;263pkt 263fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.119.43.242:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19839: (2.14286%)&lt;BR/&gt; 19458: (1.8254%)&lt;BR/&gt; 20327: (1.74603%)&lt;BR/&gt; 19809: (1.66667%)&lt;BR/&gt; 19817: (1.34921%)&gt;];
}
2782--4043[label="0.0027248;1pkt 1fpkt"];
2782--6900[label="1;263pkt 263fpkt"];
2782--10978[label="0.0027248;1pkt 1fpkt"];
6900--10978[label="0.00380228;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.119.43.242"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
2832[label="128.197.106.34;s;130pkt 130fpkt", shape=diamond, color=yellow];
3092[label="1.24.144.10;d;16pkt 16fpkt", shape=diamond, color=yellow];
7099[label="1.24.144.10;d;9pkt 9fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.197.106.34:30697, *:*}[51.0949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30697: (22.5806%)&lt;BR/&gt; 8080: (10.9677%)&lt;BR/&gt; 80: (7.41935%)&lt;BR/&gt; 8090: (4.19355%)&lt;BR/&gt; 53: (2.25806%)&gt;];
}
2832--3092[label="0.5625;9pkt 9fpkt"];
2832--7099[label="1;9pkt 9fpkt"];
2832--8322[label="0.00769231;1pkt 1fpkt"];
2832--8393[label="0.00769231;1pkt 1fpkt"];
2832--8428[label="0.00769231;1pkt 1fpkt"];
3092--7099[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="128.197.106.34" src_port="30697"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.84.113.28"/>
      <from sec="1273035842" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035842" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.170.128.1"/>
      <from sec="1273036024" usec="0"/>
      <to sec="1273036183" usec="0"/>
    </slice>
    <from sec="1273036024" usec="0"/>
    <to sec="1273036183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
341[label="176.108.139.38;d;715pkt 715fpkt", shape=diamond, color=yellow];
7161[label="176.108.139.38;d;715pkt 715fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.139.38:47197}[99.021%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47197: (49.5105%)&lt;BR/&gt; 16001: (0.629371%)&lt;BR/&gt; 6881: (0.629371%)&lt;BR/&gt; 55555: (0.20979%)&lt;BR/&gt; 35691: (0.20979%)&gt;];
}
341--7161[label="1;715pkt 715fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.38" dst_port="47197"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
4207[label="150.198.64.238;d;233pkt 233fpkt", shape=diamond, color=yellow];
7191[label="150.198.64.238;d;194pkt 194fpkt", shape=hexagon, color=black];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 150.198.64.238:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54682: (5.26932%)&lt;BR/&gt; 55514: (2.9274%)&lt;BR/&gt; 55456: (2.34192%)&lt;BR/&gt; 55345: (2.34192%)&lt;BR/&gt; 53593: (1.99063%)&gt;];
}
4207--5896[label="0.00429185;1pkt 1fpkt"];
4207--7191[label="1;194pkt 194fpkt"];
4207--8012[label="0.00429185;1pkt 1fpkt"];
4207--8334[label="0.00429185;1pkt 1fpkt"];
4207--8394[label="0.00429185;1pkt 1fpkt"];
4207--8429[label="0.00429185;1pkt 1fpkt"];
4207--10108[label="0.00429185;1pkt 1fpkt"];
4207--13402[label="0.00429185;1pkt 1fpkt"];
4207--15401[label="0.00429185;1pkt 1fpkt"];
7191--8012[label="0.00515464;1pkt 1fpkt"];
7191--8334[label="0.00515464;1pkt 1fpkt"];
7191--8394[label="0.00515464;1pkt 1fpkt"];
7191--8429[label="0.00515464;1pkt 1fpkt"];
7191--10108[label="0.00515464;1pkt 1fpkt"];
7191--13402[label="0.00515464;1pkt 1fpkt"];
7191--15401[label="0.00515464;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.198.64.238"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
4085[label="21.72.68.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
7332[label="21.72.68.91;d;1pkt 1fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.136.175:8183, 21.72.68.91:12117}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12117: (50%)&lt;BR/&gt; 8183: (50%)&gt;];
}
4085--7332[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.72.68.91" dst_port="12117" src_ip="176.108.136.175" src_port="8183"/>
    </slice>
    <from sec="1273036025" usec="0"/>
    <to sec="1273036122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
4155[label="219.9.182.122;d;2pkt 2fpkt", shape=diamond, color=yellow];
7346[label="219.9.182.122;d;2pkt 2fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.198.74:80, 219.9.182.122:2370}[50%]&lt;BR/&gt;{133.249.198.74:80, 219.9.182.122:2375}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2375: (25%)&lt;BR/&gt; 2370: (25%)&gt;];
}
4155--7346[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.9.182.122" dst_port="2375" src_ip="133.249.198.74" src_port="80"/>
      <filter dst_ip="219.9.182.122" dst_port="2370" src_ip="133.249.198.74" src_port="80"/>
    </slice>
    <from sec="1273036103" usec="0"/>
    <to sec="1273036148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
2823[label="128.212.143.4;s;66pkt 66fpkt", shape=diamond, color=yellow];
3145[label="205.230.79.132;d;39pkt 39fpkt", shape=diamond, color=yellow];
4529[label="137.1.161.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
6598[label="205.230.79.132;d;39pkt 39fpkt", shape=hexagon, color=black];
7351[label="137.1.161.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.143.4:*, 205.230.79.132:80}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9178%)&lt;BR/&gt; 62102: (2.05479%)&lt;BR/&gt; 54321: (1.0274%)&lt;BR/&gt; 49918: (1.0274%)&lt;BR/&gt; 49913: (1.0274%)&gt;];
}
2823--3145[label="1;39pkt 39fpkt"];
2823--4529[label="1;1pkt 1fpkt"];
2823--6598[label="1;39pkt 39fpkt"];
2823--7351[label="1;1pkt 1fpkt"];
2823--8325[label="0.0151515;1pkt 1fpkt"];
2823--8342[label="0.030303;2pkt 2fpkt"];
3145--6598[label="1;39pkt 39fpkt"];
4529--7351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.230.79.132" dst_port="80" src_ip="128.212.143.4"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.149.24.87"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.108.151.228"/>
      <from sec="1273036181" usec="0"/>
      <to sec="1273036246" usec="0"/>
    </slice>
    <from sec="1273036181" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
4638[label="128.212.198.121;d;170pkt 170fpkt", shape=diamond, color=yellow];
7400[label="128.212.198.121;d;159pkt 159fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.212.198.121:37857}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37857: (48.4802%)&lt;BR/&gt; 443: (0.911854%)&lt;BR/&gt; 7493: (0.607903%)&lt;BR/&gt; 80: (0.607903%)&lt;BR/&gt; 1174: (0.455927%)&gt;];
}
4638--7400[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.198.121" dst_port="37857"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
4306[label="150.198.78.48;d;248pkt 248fpkt", shape=diamond, color=yellow];
7499[label="150.198.78.48;d;222pkt 222fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 150.198.78.48:6780}[27.0161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6780: (13.4043%)&lt;BR/&gt; 6778: (9.46809%)&lt;BR/&gt; 6779: (4.68085%)&lt;BR/&gt; 6770: (2.97872%)&lt;BR/&gt; 6755: (2.23404%)&gt;];
}
4306--5896[label="0.00403226;1pkt 1fpkt"];
4306--7499[label="1;222pkt 222fpkt"];
4306--8012[label="0.00403226;1pkt 1fpkt"];
4306--8334[label="0.00403226;1pkt 1fpkt"];
4306--8394[label="0.00403226;1pkt 1fpkt"];
4306--8429[label="0.00403226;1pkt 1fpkt"];
4306--10108[label="0.00403226;1pkt 1fpkt"];
4306--13402[label="0.00403226;1pkt 1fpkt"];
4306--15401[label="0.00403226;1pkt 1fpkt"];
7499--8012[label="0.0045045;1pkt 1fpkt"];
7499--8334[label="0.0045045;1pkt 1fpkt"];
7499--8394[label="0.0045045;1pkt 1fpkt"];
7499--8429[label="0.0045045;1pkt 1fpkt"];
7499--10108[label="0.0045045;1pkt 1fpkt"];
7499--13402[label="0.0045045;1pkt 1fpkt"];
7499--15401[label="0.0045045;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.198.78.48" dst_port="6780"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26501,2.76189,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1830[label="176.108.138.51;d;4pkt 4fpkt", shape=diamond, color=yellow];
2087[label="219.164.246.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
7032[label="176.108.138.51;d;3pkt 3fpkt", shape=hexagon, color=black];
8771[label="219.164.246.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.164.246.15:1025, 176.108.138.51:1026}[25%]&lt;BR/&gt;{44.151.187.156:5062, 176.108.138.51:9001}[25%]&lt;BR/&gt;{117.210.47.165:80, 176.108.138.51:2304}[25%]&lt;BR/&gt;{40.26.156.240:80, 176.108.138.51:2323}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (22.2222%)&lt;BR/&gt; 1025: (22.2222%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 9001: (11.1111%)&lt;BR/&gt; 5062: (11.1111%)&gt;];
}
1830--2087[label="1;1pkt 1fpkt"];
1830--7032[label="1;3pkt 3fpkt"];
1830--8771[label="1;1pkt 1fpkt"];
1830--12261[label="0.25;1pkt 1fpkt"];
2087--7032[label="1;1pkt 1fpkt"];
2087--8771[label="1;1pkt 1fpkt"];
7032--8771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.138.51" dst_port="2323" src_ip="40.26.156.240" src_port="80"/>
      <filter dst_ip="176.108.138.51" dst_port="2304" src_ip="117.210.47.165" src_port="80"/>
      <filter dst_ip="176.108.138.51" dst_port="9001" src_ip="44.151.187.156" src_port="5062"/>
      <filter dst_ip="176.108.138.51" dst_port="1026" src_ip="219.164.246.15" src_port="1025"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.80.64.101"/>
      <from sec="1273035895" usec="0"/>
      <to sec="1273036339" usec="0"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26501,2.76189,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
4868[label="38.57.6.214;d;41pkt 41fpkt", shape=diamond, color=yellow];
5343[label="196.169.175.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
7596[label="38.57.6.214;d;41pkt 41fpkt", shape=hexagon, color=black];
11995[label="176.108.198.222;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.198.222:*, 38.57.6.214:80}[45.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62013: (0.931677%)&lt;BR/&gt; 62008: (0.931677%)&lt;BR/&gt; 62006: (0.931677%)&lt;BR/&gt; 62005: (0.931677%)&gt;];
}
4868--7596[label="1;41pkt 41fpkt"];
4868--11995[label="0.902439;37pkt 37fpkt"];
5343--11995[label="1;1pkt 1fpkt"];
7596--11995[label="0.902439;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="38.57.6.214" dst_port="80" src_ip="176.108.198.222"/>
    </slice>
    <from sec="1273035920" usec="0"/>
    <to sec="1273036462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="37.50.158.205"/>
      <from sec="1273035983" usec="0"/>
      <to sec="1273036338" usec="0"/>
    </slice>
    <from sec="1273035983" usec="0"/>
    <to sec="1273036338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="12.174.4.228"/>
      <from sec="1273036007" usec="0"/>
      <to sec="1273036339" usec="0"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
4886[label="77.103.131.20;d;39pkt 39fpkt", shape=diamond, color=yellow];
7612[label="77.103.131.20;d;39pkt 39fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.252.5:80, 77.103.131.20:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6557: (1.28205%)&lt;BR/&gt; 6554: (1.28205%)&lt;BR/&gt; 6547: (1.28205%)&lt;BR/&gt; 6546: (1.28205%)&gt;];
}
4886--7612[label="1;39pkt 39fpkt"];
4886--8357[label="0.025641;1pkt 1fpkt"];
4886--8414[label="0.025641;1pkt 1fpkt"];
7612--8357[label="0.025641;1pkt 1fpkt"];
7612--8414[label="0.025641;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.103.131.20" src_ip="204.134.252.5" src_port="80"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="54.77.168.120"/>
      <from sec="1273036060" usec="0"/>
      <to sec="1273036303" usec="0"/>
    </slice>
    <from sec="1273036060" usec="0"/>
    <to sec="1273036303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.34.208.16"/>
      <from sec="1273036162" usec="0"/>
      <to sec="1273036308" usec="0"/>
    </slice>
    <from sec="1273036162" usec="0"/>
    <to sec="1273036308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26501,2.76189,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
4601[label="195.254.146.114;d;10pkt 10fpkt", shape=diamond, color=yellow];
7641[label="195.254.146.114;d;10pkt 10fpkt", shape=hexagon, color=black];
9833[label="204.134.244.74;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.244.74:*, 195.254.146.114:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55396: (4.6875%)&lt;BR/&gt; 55395: (4.6875%)&lt;BR/&gt; 55394: (4.6875%)&lt;BR/&gt; 55393: (4.6875%)&gt;];
}
4601--7641[label="1;10pkt 10fpkt"];
4601--9833[label="1;10pkt 10fpkt"];
7641--9833[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="195.254.146.114" dst_port="80" src_ip="204.134.244.74"/>
    </slice>
    <from sec="1273036211" usec="0"/>
    <to sec="1273036235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
4606[label="9.70.136.55;d;10pkt 10fpkt", shape=diamond, color=yellow];
7646[label="9.70.136.55;d;10pkt 10fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.252.5:80, 9.70.136.55:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56644: (5%)&lt;BR/&gt; 56640: (5%)&lt;BR/&gt; 56638: (5%)&lt;BR/&gt; 56594: (5%)&gt;];
}
4606--7646[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="9.70.136.55" src_ip="204.134.252.5" src_port="80"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
5011[label="197.36.218.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
7664[label="197.36.218.179;d;1pkt 1fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.250.98:80, 197.36.218.179:49224}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49224: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5011--7664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.36.218.179" dst_port="49224" src_ip="204.134.250.98" src_port="80"/>
    </slice>
    <from sec="1273036284" usec="0"/>
    <to sec="1273036295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="73.160.43.137"/>
      <from sec="1273036288" usec="0"/>
      <to sec="1273036426" usec="0"/>
    </slice>
    <from sec="1273036288" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
5035[label="6.176.33.180;d;7pkt 7fpkt", shape=diamond, color=yellow];
7669[label="6.176.33.180;d;7pkt 7fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.174.117:80, 6.176.33.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47354: (7.14286%)&lt;BR/&gt; 47348: (7.14286%)&lt;BR/&gt; 47347: (7.14286%)&lt;BR/&gt; 47345: (7.14286%)&gt;];
}
5035--7669[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="6.176.33.180" src_ip="133.249.174.117" src_port="80"/>
    </slice>
    <from sec="1273036303" usec="0"/>
    <to sec="1273036312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
548[label="217.144.68.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
1994[label="26.128.224.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
3622[label="73.68.114.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
3675[label="5.228.44.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
4194[label="128.212.115.156;s;39pkt 39fpkt", shape=diamond, color=yellow];
11030[label="128.212.115.156;43pkt 43fpkt", shape=pentagon, color=darkviolet];
13960[label="128.212.115.156;43pkt 43fpkt", shape=invtriangle, color=brown];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.115.156:5041, *:5041}[39.5349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (65.1163%)&lt;BR/&gt; 80: (4.65116%)&lt;BR/&gt; 8000: (2.32558%)&lt;BR/&gt; 63575: (1.55039%)&lt;BR/&gt; 65326: (1.16279%)&gt;];
}
548--4194[label="1;1pkt 1fpkt"];
548--11030[label="1;1pkt 1fpkt"];
548--13960[label="1;1pkt 1fpkt"];
1994--4194[label="1;1pkt 1fpkt"];
1994--11030[label="1;1pkt 1fpkt"];
1994--13960[label="1;1pkt 1fpkt"];
3622--4194[label="1;1pkt 1fpkt"];
3622--11030[label="1;1pkt 1fpkt"];
3622--13960[label="1;1pkt 1fpkt"];
3675--4194[label="1;1pkt 1fpkt"];
3675--11030[label="1;1pkt 1fpkt"];
3675--13960[label="1;1pkt 1fpkt"];
4194--5052[label="0.025641;1pkt 1fpkt"];
4194--7688[label="0.025641;1pkt 1fpkt"];
4194--8324[label="0.0512821;2pkt 2fpkt"];
4194--8342[label="0.0512821;2pkt 2fpkt"];
4194--11030[label="1;39pkt 39fpkt"];
4194--13960[label="1;39pkt 39fpkt"];
11030--13960[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="5041" src_ip="128.212.115.156" src_port="5041"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1543[label="204.7.3.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
1544[label="176.108.139.167;d;105pkt 105fpkt", shape=diamond, color=yellow];
6310[label="176.108.139.167;d;105pkt 105fpkt", shape=hexagon, color=black];
11319[label="0.145.128.175;15pkt 15fpkt", shape=pentagon, color=darkviolet];
14138[label="0.145.128.175;15pkt 15fpkt", shape=invtriangle, color=brown];
15797[label="0.145.128.175;15pkt 15fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 176.108.139.167:*}[37.6147%]&lt;BR/&gt;{*:5041, 176.108.139.167:5041}[31.1927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (37.5%)&lt;BR/&gt; 80: (24.8047%)&lt;BR/&gt; 8000: (1.5625%)&lt;BR/&gt; 50393: (0.976562%)&lt;BR/&gt; 50391: (0.976562%)&gt;];
}
1543--1544[label="1;1pkt 1fpkt"];
1543--6310[label="1;1pkt 1fpkt"];
1544--1792[label="0.0761905;8pkt 8fpkt"];
1544--2130[label="0.00952381;1pkt 1fpkt"];
1544--4758[label="0.11828;11pkt 11fpkt"];
1544--6310[label="1;105pkt 105fpkt"];
1544--8826[label="0.0434783;1pkt 1fpkt"];
1544--9249[label="0.0952381;10pkt 10fpkt"];
1544--10280[label="0.0434783;1pkt 1fpkt"];
1544--11020[label="0.00952381;1pkt 1fpkt"];
1544--11319[label="0.733333;11pkt 11fpkt"];
1544--13953[label="0.00952381;1pkt 1fpkt"];
1544--14138[label="0.733333;11pkt 11fpkt"];
1544--15797[label="0.733333;11pkt 11fpkt"];
6310--8826[label="0.0434783;1pkt 1fpkt"];
6310--9249[label="0.0952381;10pkt 10fpkt"];
6310--10280[label="0.0434783;1pkt 1fpkt"];
6310--11020[label="0.00952381;1pkt 1fpkt"];
6310--11319[label="0.733333;11pkt 11fpkt"];
6310--13953[label="0.00952381;1pkt 1fpkt"];
6310--14138[label="0.733333;11pkt 11fpkt"];
6310--15797[label="0.733333;11pkt 11fpkt"];
11319--14138[label="1;15pkt 15fpkt"];
11319--15797[label="1;15pkt 15fpkt"];
14138--15797[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.167" src_port="80"/>
      <filter dst_ip="176.108.139.167" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
4662[label="204.134.172.254;d;187pkt 187fpkt", shape=diamond, color=yellow];
7744[label="204.134.172.254;d;187pkt 187fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.134.172.254:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22811: (4.81283%)&lt;BR/&gt; 22731: (4.81283%)&lt;BR/&gt; 22816: (2.6738%)&lt;BR/&gt; 20127: (2.6738%)&lt;BR/&gt; 22800: (1.60428%)&gt;];
}
4662--7744[label="1;187pkt 187fpkt"];
4662--8350[label="0.00534759;1pkt 1fpkt"];
4662--8406[label="0.00534759;1pkt 1fpkt"];
4662--8440[label="0.00534759;1pkt 1fpkt"];
7744--8350[label="0.00534759;1pkt 1fpkt"];
7744--8406[label="0.00534759;1pkt 1fpkt"];
7744--8440[label="0.00534759;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.172.254"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.218.131.27"/>
      <from sec="1273035974" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273035974" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.44.19.11"/>
      <from sec="1273036084" usec="0"/>
      <to sec="1273036428" usec="0"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.33.100.180"/>
      <from sec="1273036172" usec="0"/>
      <to sec="1273036428" usec="0"/>
    </slice>
    <from sec="1273036172" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
5305[label="42.63.163.81;d;23pkt 23fpkt", shape=diamond, color=yellow];
7925[label="42.63.163.81;d;23pkt 23fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.219.20:*, 42.63.163.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49676: (2.17391%)&lt;BR/&gt; 49675: (2.17391%)&lt;BR/&gt; 49674: (2.17391%)&lt;BR/&gt; 49672: (2.17391%)&gt;];
}
5305--7925[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="42.63.163.81" dst_port="80" src_ip="176.108.219.20"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26713,2.78727,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
5003[label="47.53.50.100;d;11pkt 11fpkt", shape=diamond, color=yellow];
7937[label="47.53.50.100;d;11pkt 11fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.136.184:*, 47.53.50.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51837: (4.54545%)&lt;BR/&gt; 51764: (4.54545%)&lt;BR/&gt; 51711: (4.54545%)&lt;BR/&gt; 51678: (4.54545%)&gt;];
}
5003--7937[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="47.53.50.100" dst_port="80" src_ip="176.108.136.184"/>
    </slice>
    <from sec="1273036273" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05783,2.82605,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.192.68.233"/>
      <from sec="1273036350" usec="0"/>
      <to sec="1273036429" usec="0"/>
    </slice>
    <from sec="1273036350" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
2546[label="179.114.46.185;d;30pkt 30fpkt", shape=diamond, color=yellow];
7952[label="179.114.46.185;d;30pkt 30fpkt", shape=hexagon, color=black];
11994[label="219.113.178.222;34pkt 34fpkt", shape=pentagon, color=darkviolet];
14555[label="219.113.178.222;34pkt 34fpkt", shape=invtriangle, color=brown];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.113.178.222:*, 179.114.46.185:80}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1506: (1.5625%)&lt;BR/&gt; 1504: (1.5625%)&lt;BR/&gt; 1503: (1.5625%)&lt;BR/&gt; 1502: (1.5625%)&gt;];
}
2546--7952[label="1;30pkt 30fpkt"];
2546--11994[label="0.966667;29pkt 29fpkt"];
2546--14555[label="0.966667;29pkt 29fpkt"];
7952--11994[label="0.966667;29pkt 29fpkt"];
7952--14555[label="0.966667;29pkt 29fpkt"];
11994--14555[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="179.114.46.185" dst_port="80" src_ip="219.113.178.222"/>
    </slice>
    <from sec="1273036377" usec="0"/>
    <to sec="1273036486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
650[label="76.251.16.254;d;3pkt 3fpkt", shape=diamond, color=yellow];
651[label="128.197.70.129;s;109pkt 109fpkt", shape=diamond, color=yellow];
943[label="72.199.25.125;d;445pkt 445fpkt", shape=diamond, color=yellow];
1229[label="133.249.43.128;s;226pkt 226fpkt", shape=diamond, color=yellow];
2026[label="7.61.132.93;d;24pkt 24fpkt", shape=diamond, color=yellow];
2027[label="152.85.242.70;s;34pkt 34fpkt", shape=diamond, color=yellow];
2959[label="76.248.8.213;d;4pkt 4fpkt", shape=diamond, color=yellow];
3696[label="192.201.13.99;d;68pkt 68fpkt", shape=diamond, color=yellow];
3966[label="176.108.23.15;s;104pkt 104fpkt", shape=diamond, color=yellow];
4059[label="190.249.249.99;d;29pkt 29fpkt", shape=diamond, color=yellow];
4598[label="57.90.176.199;d;4pkt 4fpkt", shape=diamond, color=yellow];
4904[label="128.197.123.61;s;45pkt 45fpkt", shape=diamond, color=yellow];
5594[label="72.199.25.125;d;110pkt 110fpkt", shape=hexagon, color=black];
5899[label="7.61.132.93;d;14pkt 14fpkt", shape=hexagon, color=black];
6851[label="192.201.13.99;d;68pkt 68fpkt", shape=hexagon, color=black];
7394[label="76.251.16.254;d;3pkt 3fpkt", shape=hexagon, color=black];
7532[label="76.248.8.213;d;4pkt 4fpkt", shape=hexagon, color=black];
8635[label="152.85.25.8;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8744[label="128.197.214.13;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8758[label="176.108.23.15;143pkt 143fpkt", shape=pentagon, color=darkviolet];
9259[label="128.197.192.42;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9570[label="128.197.123.61;45pkt 45fpkt", shape=pentagon, color=darkviolet];
9746[label="128.197.205.70;16pkt 16fpkt", shape=pentagon, color=darkviolet];
9750[label="152.85.242.70;35pkt 35fpkt", shape=pentagon, color=darkviolet];
10612[label="128.197.70.129;115pkt 115fpkt", shape=pentagon, color=darkviolet];
11400[label="152.85.25.181;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11568[label="152.85.156.192;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11682[label="152.85.18.200;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12581[label="128.197.214.13;9pkt 9fpkt", shape=invtriangle, color=brown];
13169[label="128.197.205.70;16pkt 16fpkt", shape=invtriangle, color=brown];
13173[label="152.85.242.70;35pkt 35fpkt", shape=invtriangle, color=brown];
13704[label="128.197.70.129;115pkt 115fpkt", shape=invtriangle, color=brown];
14183[label="152.85.25.181;12pkt 12fpkt", shape=invtriangle, color=brown];
14281[label="152.85.156.192;10pkt 10fpkt", shape=invtriangle, color=brown];
15257[label="128.197.205.70;16pkt 16fpkt", shape=invhouse, color=bisque];
15259[label="152.85.242.70;35pkt 35fpkt", shape=invhouse, color=bisque];
15563[label="128.197.70.129;115pkt 115fpkt", shape=invhouse, color=bisque];
15824[label="152.85.25.181;12pkt 12fpkt", shape=invhouse, color=bisque];
15870[label="152.85.156.192;10pkt 10fpkt", shape=invhouse, color=bisque];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 72.199.25.125:80}[45.6635%]&lt;BR/&gt;{133.249.43.128:*, *:*}[23.6155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.8297%)&lt;BR/&gt; 9544: (3.22201%)&lt;BR/&gt; 0: (1.59925%)&lt;BR/&gt; 15645: (1.12888%)&lt;BR/&gt; 16881: (1.03481%)&gt;];
}
650--651[label="1;3pkt 3fpkt"];
650--7394[label="1;3pkt 3fpkt"];
650--10612[label="1;3pkt 3fpkt"];
650--13704[label="1;3pkt 3fpkt"];
650--15563[label="1;3pkt 3fpkt"];
651--943[label="0.100917;11pkt 11fpkt"];
651--2959[label="1;4pkt 4fpkt"];
651--5594[label="0.0458716;5pkt 5fpkt"];
651--7394[label="1;3pkt 3fpkt"];
651--7532[label="1;4pkt 4fpkt"];
651--8324[label="0.00917431;1pkt 1fpkt"];
651--8342[label="0.0183486;2pkt 2fpkt"];
651--10612[label="1;109pkt 109fpkt"];
651--13704[label="1;109pkt 109fpkt"];
651--15563[label="1;109pkt 109fpkt"];
943--970[label="0.011236;5pkt 5fpkt"];
943--1229[label="0.0265487;6pkt 6fpkt"];
943--2027[label="0.294118;10pkt 10fpkt"];
943--2386[label="0.0206897;3pkt 3fpkt"];
943--2492[label="0.0961538;5pkt 5fpkt"];
943--2820[label="0.126761;9pkt 9fpkt"];
943--3487[label="0.00934579;2pkt 2fpkt"];
943--3558[label="0.290323;9pkt 9fpkt"];
943--4904[label="1;45pkt 45fpkt"];
943--5229[label="0.123077;8pkt 8fpkt"];
943--5594[label="1;110pkt 110fpkt"];
943--8324[label="0.0696629;31pkt 31fpkt"];
943--8342[label="0.0314607;14pkt 14fpkt"];
943--8635[label="1;19pkt 19fpkt"];
943--8693[label="0.25;11pkt 11fpkt"];
943--8744[label="1;10pkt 10fpkt"];
943--9259[label="1;21pkt 21fpkt"];
943--9570[label="1;45pkt 45fpkt"];
943--9746[label="1;16pkt 16fpkt"];
943--9750[label="0.285714;10pkt 10fpkt"];
943--9814[label="0.0176991;2pkt 2fpkt"];
943--9997[label="0.09;9pkt 9fpkt"];
943--10207[label="0.0202703;3pkt 3fpkt"];
943--10312[label="0.142857;1pkt 1fpkt"];
943--10612[label="0.0956522;11pkt 11fpkt"];
943--11055[label="0.121212;8pkt 8fpkt"];
943--11400[label="1;12pkt 12fpkt"];
943--11568[label="1;10pkt 10fpkt"];
943--11682[label="0.0952381;2pkt 2fpkt"];
943--12546[label="0.25;11pkt 11fpkt"];
943--12581[label="1;9pkt 9fpkt"];
943--12589[label="0.0320856;12pkt 12fpkt"];
943--13169[label="1;16pkt 16fpkt"];
943--13173[label="0.285714;10pkt 10fpkt"];
943--13329[label="0.09;9pkt 9fpkt"];
943--13457[label="0.0202703;3pkt 3fpkt"];
943--13704[label="0.0956522;11pkt 11fpkt"];
943--13976[label="0.121212;8pkt 8fpkt"];
943--14183[label="1;12pkt 12fpkt"];
943--14281[label="1;10pkt 10fpkt"];
943--14887[label="0.25;11pkt 11fpkt"];
943--15257[label="1;16pkt 16fpkt"];
943--15259[label="0.285714;10pkt 10fpkt"];
943--15357[label="0.09;9pkt 9fpkt"];
943--15430[label="0.0202703;3pkt 3fpkt"];
943--15563[label="0.0956522;11pkt 11fpkt"];
943--15710[label="0.121212;8pkt 8fpkt"];
943--15824[label="1;12pkt 12fpkt"];
943--15870[label="1;10pkt 10fpkt"];
1229--1406[label="0.0273973;4pkt 4fpkt"];
1229--3250[label="0.0337838;5pkt 5fpkt"];
1229--3425[label="0.0141844;2pkt 2fpkt"];
1229--4059[label="0.551724;16pkt 16fpkt"];
1229--4598[label="1;4pkt 4fpkt"];
1229--5594[label="0.0545455;6pkt 6fpkt"];
1229--5743[label="0.0754717;4pkt 4fpkt"];
1229--6765[label="0.0229885;2pkt 2fpkt"];
1229--7392[label="0.0347222;5pkt 5fpkt"];
1229--8324[label="0.371681;84pkt 84fpkt"];
1229--8325[label="0.0176991;4pkt 4fpkt"];
2026--2027[label="1;24pkt 24fpkt"];
2026--5899[label="1;14pkt 14fpkt"];
2026--9750[label="0.958333;23pkt 23fpkt"];
2026--13173[label="0.958333;23pkt 23fpkt"];
2026--15259[label="0.958333;23pkt 23fpkt"];
2027--5899[label="1;14pkt 14fpkt"];
2027--9750[label="0.970588;33pkt 33fpkt"];
2027--13173[label="0.970588;33pkt 33fpkt"];
2027--15259[label="0.970588;33pkt 33fpkt"];
2959--7532[label="1;4pkt 4fpkt"];
2959--10612[label="1;4pkt 4fpkt"];
2959--13704[label="1;4pkt 4fpkt"];
2959--15563[label="1;4pkt 4fpkt"];
3696--3966[label="0.838235;57pkt 57fpkt"];
3696--6851[label="1;68pkt 68fpkt"];
3696--8758[label="1;68pkt 68fpkt"];
3966--4059[label="0.448276;13pkt 13fpkt"];
3966--6851[label="0.838235;57pkt 57fpkt"];
3966--8324[label="0.0865385;9pkt 9fpkt"];
3966--8758[label="1;104pkt 104fpkt"];
4059--8758[label="0.448276;13pkt 13fpkt"];
4904--9570[label="1;45pkt 45fpkt"];
5594--8324[label="0.145455;16pkt 16fpkt"];
5594--8635[label="0.578947;11pkt 11fpkt"];
5594--10612[label="0.0454545;5pkt 5fpkt"];
5594--11400[label="1;12pkt 12fpkt"];
5594--12589[label="0.0909091;10pkt 10fpkt"];
5594--13704[label="0.0454545;5pkt 5fpkt"];
5594--14183[label="1;12pkt 12fpkt"];
5594--15563[label="0.0454545;5pkt 5fpkt"];
5594--15824[label="1;12pkt 12fpkt"];
5899--9750[label="0.928571;13pkt 13fpkt"];
5899--13173[label="0.928571;13pkt 13fpkt"];
5899--15259[label="0.928571;13pkt 13fpkt"];
6851--8758[label="1;68pkt 68fpkt"];
7394--10612[label="1;3pkt 3fpkt"];
7394--13704[label="1;3pkt 3fpkt"];
7394--15563[label="1;3pkt 3fpkt"];
7532--10612[label="1;4pkt 4fpkt"];
7532--13704[label="1;4pkt 4fpkt"];
7532--15563[label="1;4pkt 4fpkt"];
8744--12581[label="1;9pkt 9fpkt"];
9746--13169[label="1;16pkt 16fpkt"];
9746--15257[label="1;16pkt 16fpkt"];
9750--13173[label="1;35pkt 35fpkt"];
9750--15259[label="1;35pkt 35fpkt"];
10612--13704[label="1;115pkt 115fpkt"];
10612--15563[label="1;115pkt 115fpkt"];
11400--14183[label="1;12pkt 12fpkt"];
11400--15824[label="1;12pkt 12fpkt"];
11568--14281[label="1;10pkt 10fpkt"];
11568--15870[label="1;10pkt 10fpkt"];
13169--15257[label="1;16pkt 16fpkt"];
13173--15259[label="1;35pkt 35fpkt"];
13704--15563[label="1;115pkt 115fpkt"];
14183--15824[label="1;12pkt 12fpkt"];
14281--15870[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.43.128"/>
      <filter dst_ip="72.199.25.125" dst_port="80"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.96351,2.97143,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.93.186.175"/>
      <from sec="1273036007" usec="0"/>
      <to sec="1273036069" usec="0"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.64.12.0"/>
    </slice>
    <from sec="1273036174" usec="0"/>
    <to sec="1273036179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.9.18.0"/>
    </slice>
    <from sec="1273035831" usec="0"/>
    <to sec="1273035838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.169.38.0"/>
    </slice>
    <from sec="1273036168" usec="0"/>
    <to sec="1273036179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.22.46.0"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60542,2.7762,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
106[label="32.248.81.0s;200pkt 200fpkt", shape=rectangle, color=red];
8462[label="32.248.81.0;253pkt 253fpkt", shape=pentagon, color=darkviolet];
12419[label="32.248.81.0;253pkt 253fpkt", shape=invtriangle, color=brown];
14811[label="32.248.81.0;253pkt 253fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.248.81.0:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4097: (0.208551%)&lt;BR/&gt; 4096: (0.208551%)&lt;BR/&gt; 4095: (0.208551%)&lt;BR/&gt; 4094: (0.208551%)&gt;];
}
106--8462[label="1;200pkt 200fpkt"];
106--12419[label="1;200pkt 200fpkt"];
106--14811[label="1;200pkt 200fpkt"];
8462--12419[label="1;253pkt 253fpkt"];
8462--14811[label="1;253pkt 253fpkt"];
12419--14811[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="32.248.81.0"/>
    </slice>
    <from sec="1273036089" usec="0"/>
    <to sec="1273036100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.192.240.0"/>
    </slice>
    <from sec="1273035647" usec="0"/>
    <to sec="1273035672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.18.1"/>
    </slice>
    <from sec="1273035622" usec="0"/>
    <to sec="1273036424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
2992[label="150.198.33.1;s;309pkt 309fpkt", shape=diamond, color=yellow];
8482[label="150.198.33.1;329pkt 329fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.33.1:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2992--6397[label="0.00854701;1pkt 1fpkt"];
2992--8482[label="1;309pkt 309fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.33.1"/>
    </slice>
    <from sec="1273035611" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.216.33.1"/>
    </slice>
    <from sec="1273035974" usec="0"/>
    <to sec="1273036000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.0.197.1"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.78.241.1"/>
    </slice>
    <from sec="1273036142" usec="0"/>
    <to sec="1273036157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.42.2"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.192.105.2"/>
    </slice>
    <from sec="1273036196" usec="0"/>
    <to sec="1273036258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.112.160.2"/>
    </slice>
    <from sec="1273035961" usec="0"/>
    <to sec="1273035974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.54.194.2"/>
    </slice>
    <from sec="1273035637" usec="0"/>
    <to sec="1273035659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.87.69.3"/>
    </slice>
    <from sec="1273035705" usec="0"/>
    <to sec="1273035717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.116.173.3"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.106.183.3"/>
    </slice>
    <from sec="1273036250" usec="0"/>
    <to sec="1273036258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.24.195.3"/>
    </slice>
    <from sec="1273036131" usec="0"/>
    <to sec="1273036141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.199.3"/>
    </slice>
    <from sec="1273036184" usec="0"/>
    <to sec="1273036234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.12.202.3"/>
    </slice>
    <from sec="1273036076" usec="0"/>
    <to sec="1273036340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.49.231.3"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.248.3"/>
    </slice>
    <from sec="1273036168" usec="0"/>
    <to sec="1273036228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.227.32.4"/>
    </slice>
    <from sec="1273036388" usec="0"/>
    <to sec="1273036407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.70.4"/>
    </slice>
    <from sec="1273035974" usec="0"/>
    <to sec="1273036026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.200.71.4"/>
    </slice>
    <from sec="1273036101" usec="0"/>
    <to sec="1273036114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.170.208.4"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.6.2.5"/>
    </slice>
    <from sec="1273035855" usec="0"/>
    <to sec="1273035930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.119.24.5"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.49.5"/>
    </slice>
    <from sec="1273036212" usec="0"/>
    <to sec="1273036241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.48.180.5"/>
    </slice>
    <from sec="1273035988" usec="0"/>
    <to sec="1273036046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.210.225.5"/>
    </slice>
    <from sec="1273036099" usec="0"/>
    <to sec="1273036159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.248.5"/>
    </slice>
    <from sec="1273035887" usec="0"/>
    <to sec="1273035901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.48.6"/>
    </slice>
    <from sec="1273035678" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.50.6"/>
    </slice>
    <from sec="1273035738" usec="0"/>
    <to sec="1273035763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.22.69.6"/>
    </slice>
    <from sec="1273035930" usec="0"/>
    <to sec="1273036150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.107.124.6"/>
    </slice>
    <from sec="1273036212" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.154.6"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.201.6"/>
    </slice>
    <from sec="1273036120" usec="0"/>
    <to sec="1273036145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.37.227.6"/>
    </slice>
    <from sec="1273036027" usec="0"/>
    <to sec="1273036037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
4301[label="204.134.244.6;s;86pkt 86fpkt", shape=diamond, color=yellow];
8601[label="204.134.244.6;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.244.6:2000, *:*}[51.5464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (25.8242%)&lt;BR/&gt; 27357: (7.41758%)&lt;BR/&gt; 24074: (1.64835%)&lt;BR/&gt; 10354: (1.64835%)&lt;BR/&gt; 7743: (1.64835%)&gt;];
}
4301--8601[label="0.988372;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.244.6" src_port="2000"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.254.6"/>
    </slice>
    <from sec="1273036066" usec="0"/>
    <to sec="1273036092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.26.26.7"/>
    </slice>
    <from sec="1273035903" usec="0"/>
    <to sec="1273036007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.21.29.7"/>
    </slice>
    <from sec="1273036062" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.193.32.7"/>
    </slice>
    <from sec="1273035847" usec="0"/>
    <to sec="1273035877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.37.35.7"/>
    </slice>
    <from sec="1273036322" usec="0"/>
    <to sec="1273036336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.36.66.7"/>
    </slice>
    <from sec="1273036213" usec="0"/>
    <to sec="1273036218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.210.73.7"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.7.129.7"/>
    </slice>
    <from sec="1273036051" usec="0"/>
    <to sec="1273036070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.250.143.7"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.143.173.7"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.175.187.7"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.105.240.7"/>
    </slice>
    <from sec="1273036136" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.164.246.7"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.193.0.8"/>
    </slice>
    <from sec="1273035901" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.217.76.8"/>
    </slice>
    <from sec="1273036157" usec="0"/>
    <to sec="1273036162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.76.120.8"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
2748[label="176.108.138.8;s;90pkt 90fpkt", shape=diamond, color=yellow];
4051[label="72.234.77.106;d;20pkt 20fpkt", shape=diamond, color=yellow];
7118[label="72.234.77.106;d;20pkt 20fpkt", shape=hexagon, color=black];
8639[label="176.108.138.8;276pkt 276fpkt", shape=pentagon, color=darkviolet];
12515[label="176.108.138.8;276pkt 276fpkt", shape=invtriangle, color=brown];
14866[label="176.108.138.8;276pkt 276fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.138.8:*, *:80}[98.917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4781%)&lt;BR/&gt; 8000: (0.521921%)&lt;BR/&gt; 4034: (0.365344%)&lt;BR/&gt; 3830: (0.313152%)&lt;BR/&gt; 3828: (0.313152%)&gt;];
}
2748--4051[label="0.1;2pkt 2fpkt"];
2748--7118[label="0.1;2pkt 2fpkt"];
2748--8324[label="0.0333333;3pkt 3fpkt"];
2748--8342[label="0.0333333;3pkt 3fpkt"];
2748--8639[label="0.988889;89pkt 89fpkt"];
2748--12515[label="0.988889;89pkt 89fpkt"];
2748--14866[label="0.988889;89pkt 89fpkt"];
4051--7118[label="1;20pkt 20fpkt"];
4051--8639[label="1;20pkt 20fpkt"];
4051--12515[label="1;20pkt 20fpkt"];
4051--14866[label="1;20pkt 20fpkt"];
7118--8639[label="1;20pkt 20fpkt"];
7118--12515[label="1;20pkt 20fpkt"];
7118--14866[label="1;20pkt 20fpkt"];
8639--12515[label="1;276pkt 276fpkt"];
8639--14866[label="1;276pkt 276fpkt"];
12515--14866[label="1;276pkt 276fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.108.138.8"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.79.188.8"/>
    </slice>
    <from sec="1273036465" usec="0"/>
    <to sec="1273036479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.201.206.8"/>
    </slice>
    <from sec="1273036122" usec="0"/>
    <to sec="1273036141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.37.9"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.61.42.9"/>
    </slice>
    <from sec="1273036290" usec="0"/>
    <to sec="1273036305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.130.42.9"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273035683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.119.61.9"/>
    </slice>
    <from sec="1273035627" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.24.82.9"/>
    </slice>
    <from sec="1273036267" usec="0"/>
    <to sec="1273036348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.82.9"/>
    </slice>
    <from sec="1273036011" usec="0"/>
    <to sec="1273036058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.143.9"/>
    </slice>
    <from sec="1273036007" usec="0"/>
    <to sec="1273036060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.120.195.9"/>
    </slice>
    <from sec="1273036164" usec="0"/>
    <to sec="1273036183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.207.208.9"/>
    </slice>
    <from sec="1273036483" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.158.3.10"/>
    </slice>
    <from sec="1273035831" usec="0"/>
    <to sec="1273035848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.156.74.10"/>
    </slice>
    <from sec="1273036067" usec="0"/>
    <to sec="1273036075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.146.76.10"/>
    </slice>
    <from sec="1273036236" usec="0"/>
    <to sec="1273036464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.200.103.10"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.198.113.10"/>
    </slice>
    <from sec="1273035621" usec="0"/>
    <to sec="1273036460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.181.170.10"/>
    </slice>
    <from sec="1273036067" usec="0"/>
    <to sec="1273036071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.176.10"/>
    </slice>
    <from sec="1273036065" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.148.194.10"/>
    </slice>
    <from sec="1273036348" usec="0"/>
    <to sec="1273036371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.112.200.10"/>
    </slice>
    <from sec="1273036354" usec="0"/>
    <to sec="1273036370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.47.49.11"/>
    </slice>
    <from sec="1273036143" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.88.11"/>
    </slice>
    <from sec="1273036139" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.20.12"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.197.12"/>
    </slice>
    <from sec="1273035612" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.207.12"/>
    </slice>
    <from sec="1273036114" usec="0"/>
    <to sec="1273036128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.210.12"/>
    </slice>
    <from sec="1273035814" usec="0"/>
    <to sec="1273035888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.18.92.13"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.53.115.13"/>
    </slice>
    <from sec="1273036385" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.162.13"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.243.168.13"/>
    </slice>
    <from sec="1273036280" usec="0"/>
    <to sec="1273036294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.247.174.13"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.181.4.14"/>
    </slice>
    <from sec="1273036056" usec="0"/>
    <to sec="1273036147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.197.14"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.102.38.15"/>
    </slice>
    <from sec="1273035781" usec="0"/>
    <to sec="1273036489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.134.210.15"/>
    </slice>
    <from sec="1273035987" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.12.16"/>
    </slice>
    <from sec="1273035980" usec="0"/>
    <to sec="1273036048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.55.28.16"/>
    </slice>
    <from sec="1273036380" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.41.167.16"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.46.17"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
5031[label="196.247.174.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
8797[label="133.249.108.17;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12616[label="133.249.108.17;3pkt 3fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.108.17:3354, 196.247.174.13:1935}[33.3333%]&lt;BR/&gt;{133.249.108.17:3370, 196.247.173.23:1935}[33.3333%]&lt;BR/&gt;{133.249.108.17:3390, 192.168.0.179:9100}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (35.7143%)&lt;BR/&gt; 3354: (21.4286%)&lt;BR/&gt; 9100: (14.2857%)&lt;BR/&gt; 3390: (14.2857%)&lt;BR/&gt; 3370: (14.2857%)&gt;];
}
5031--8797[label="1;1pkt 1fpkt"];
5031--12616[label="1;1pkt 1fpkt"];
8797--12616[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.179" dst_port="9100" src_ip="133.249.108.17" src_port="3390"/>
      <filter dst_ip="196.247.173.23" dst_port="1935" src_ip="133.249.108.17" src_port="3370"/>
      <filter dst_ip="196.247.174.13" dst_port="1935" src_ip="133.249.108.17" src_port="3354"/>
    </slice>
    <from sec="1273036299" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
1936[label="133.249.220.17;s;19pkt 19fpkt", shape=diamond, color=yellow];
8805[label="133.249.220.17;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12622[label="133.249.220.17;21pkt 21fpkt", shape=invtriangle, color=brown];
14930[label="133.249.220.17;20pkt 20fpkt", shape=invhouse, color=bisque];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.220.17:443, 12.151.52.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3292: (2.46914%)&lt;BR/&gt; 3291: (2.46914%)&lt;BR/&gt; 3288: (2.46914%)&lt;BR/&gt; 3287: (2.46914%)&gt;];
}
1936--8805[label="1;19pkt 19fpkt"];
1936--12622[label="1;19pkt 19fpkt"];
1936--14930[label="0.947368;18pkt 18fpkt"];
8805--12622[label="1;21pkt 21fpkt"];
8805--14930[label="1;20pkt 20fpkt"];
12622--14930[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="12.151.52.163" src_ip="133.249.220.17" src_port="443"/>
    </slice>
    <from sec="1273035628" usec="0"/>
    <to sec="1273035830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.243.17"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.78.154.18"/>
    </slice>
    <from sec="1273036154" usec="0"/>
    <to sec="1273036172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.16.198.18"/>
    </slice>
    <from sec="1273036156" usec="0"/>
    <to sec="1273036371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.26.201.18"/>
    </slice>
    <from sec="1273036092" usec="0"/>
    <to sec="1273036212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.4.38.19"/>
    </slice>
    <from sec="1273035970" usec="0"/>
    <to sec="1273035998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.129.232.20"/>
    </slice>
    <from sec="1273036292" usec="0"/>
    <to sec="1273036317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.32.79.21"/>
    </slice>
    <from sec="1273035664" usec="0"/>
    <to sec="1273036223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.169.101.21"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.26.49.22"/>
    </slice>
    <from sec="1273036334" usec="0"/>
    <to sec="1273036345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.206.168.22"/>
    </slice>
    <from sec="1273036453" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.224.246.22"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.246.22"/>
    </slice>
    <from sec="1273036254" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.168.233.23"/>
    </slice>
    <from sec="1273035920" usec="0"/>
    <to sec="1273035932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.97.22.24"/>
    </slice>
    <from sec="1273035625" usec="0"/>
    <to sec="1273036114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.35.97.24"/>
    </slice>
    <from sec="1273035992" usec="0"/>
    <to sec="1273036017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.36.99.24"/>
    </slice>
    <from sec="1273035890" usec="0"/>
    <to sec="1273035956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.196.24"/>
    </slice>
    <from sec="1273036036" usec="0"/>
    <to sec="1273036103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.208.214.24"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.238.24"/>
    </slice>
    <from sec="1273036062" usec="0"/>
    <to sec="1273036210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.32.24.25"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.221.32.25"/>
    </slice>
    <from sec="1273036183" usec="0"/>
    <to sec="1273036200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.145.0.26"/>
    </slice>
    <from sec="1273035733" usec="0"/>
    <to sec="1273035824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.210.215.26"/>
    </slice>
    <from sec="1273036198" usec="0"/>
    <to sec="1273036209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.226.13.27"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273035726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.99.203.27"/>
    </slice>
    <from sec="1273035947" usec="0"/>
    <to sec="1273035968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.220.27"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273035636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.251.27"/>
    </slice>
    <from sec="1273036472" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.75.14.28"/>
    </slice>
    <from sec="1273036202" usec="0"/>
    <to sec="1273036214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.76.37.28"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.70.28"/>
    </slice>
    <from sec="1273036190" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.203.75.28"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.31.96.28"/>
    </slice>
    <from sec="1273035999" usec="0"/>
    <to sec="1273036024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.221.117.28"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.251.28"/>
    </slice>
    <from sec="1273036104" usec="0"/>
    <to sec="1273036132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.32.167.29"/>
    </slice>
    <from sec="1273036021" usec="0"/>
    <to sec="1273036029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.213.3.30"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
2065[label="176.108.96.162;s;226pkt 226fpkt", shape=diamond, color=yellow];
2579[label="197.99.107.226;d;94pkt 94fpkt", shape=diamond, color=yellow];
7086[label="197.99.107.226;d;94pkt 94fpkt", shape=hexagon, color=black];
9493[label="133.249.58.57;68pkt 68fpkt", shape=pentagon, color=darkviolet];
10365[label="176.108.141.112;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11117[label="176.108.96.162;226pkt 226fpkt", shape=pentagon, color=darkviolet];
13026[label="133.249.58.57;68pkt 68fpkt", shape=invtriangle, color=brown];
13560[label="176.108.141.112;21pkt 21fpkt", shape=invtriangle, color=brown];
14011[label="176.108.96.162;226pkt 226fpkt", shape=invtriangle, color=brown];
15172[label="133.249.58.57;68pkt 68fpkt", shape=invhouse, color=bisque];
15726[label="176.108.96.162;226pkt 226fpkt", shape=invhouse, color=bisque];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.96.162:*, 197.99.107.226:80}[29.4304%]&lt;BR/&gt;{133.249.58.57:*, *:*}[21.519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0299%)&lt;BR/&gt; 1029: (1.68161%)&lt;BR/&gt; 37: (1.34529%)&lt;BR/&gt; 0: (0.971599%)&lt;BR/&gt; 43828: (0.896861%)&gt;];
}
2065--2579[label="0.989362;93pkt 93fpkt"];
2065--4717[label="0.0103093;1pkt 1fpkt"];
2065--5135[label="0.0212766;1pkt 1fpkt"];
2065--6285[label="0.00917431;2pkt 2fpkt"];
2065--7086[label="0.989362;93pkt 93fpkt"];
2065--7800[label="0.0212766;1pkt 1fpkt"];
2065--8342[label="0.0442478;10pkt 10fpkt"];
2065--11117[label="1;226pkt 226fpkt"];
2065--14011[label="1;226pkt 226fpkt"];
2065--15726[label="1;226pkt 226fpkt"];
2579--7086[label="1;94pkt 94fpkt"];
2579--8324[label="0.0106383;1pkt 1fpkt"];
2579--8342[label="0.0106383;1pkt 1fpkt"];
2579--8377[label="0.0106383;1pkt 1fpkt"];
2579--11009[label="0.0106383;1pkt 1fpkt"];
2579--11117[label="0.989362;93pkt 93fpkt"];
2579--14011[label="0.989362;93pkt 93fpkt"];
2579--15726[label="0.989362;93pkt 93fpkt"];
7086--8324[label="0.0106383;1pkt 1fpkt"];
7086--8342[label="0.0106383;1pkt 1fpkt"];
7086--8377[label="0.0106383;1pkt 1fpkt"];
7086--11009[label="0.0106383;1pkt 1fpkt"];
7086--11117[label="0.989362;93pkt 93fpkt"];
7086--14011[label="0.989362;93pkt 93fpkt"];
7086--15726[label="0.989362;93pkt 93fpkt"];
9493--13026[label="1;68pkt 68fpkt"];
9493--15172[label="1;68pkt 68fpkt"];
10365--13560[label="1;21pkt 21fpkt"];
11117--14011[label="1;226pkt 226fpkt"];
11117--15726[label="1;226pkt 226fpkt"];
13026--15172[label="1;68pkt 68fpkt"];
14011--15726[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.58.57"/>
      <filter dst_ip="197.99.107.226" dst_port="80" src_ip="176.108.96.162"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.8.37.30"/>
    </slice>
    <from sec="1273036315" usec="0"/>
    <to sec="1273036326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.241.168.30"/>
    </slice>
    <from sec="1273035836" usec="0"/>
    <to sec="1273035857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.7.177.30"/>
    </slice>
    <from sec="1273035952" usec="0"/>
    <to sec="1273036063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.244.30"/>
    </slice>
    <from sec="1273035874" usec="0"/>
    <to sec="1273035917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.77.31"/>
    </slice>
    <from sec="1273036009" usec="0"/>
    <to sec="1273036035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.216.160.31"/>
    </slice>
    <from sec="1273036401" usec="0"/>
    <to sec="1273036415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.220.16.32"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.118.32"/>
    </slice>
    <from sec="1273036141" usec="0"/>
    <to sec="1273036179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.144.32"/>
    </slice>
    <from sec="1273035886" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.172.32"/>
    </slice>
    <from sec="1273036034" usec="0"/>
    <to sec="1273036060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.239.216.32"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.83.33"/>
    </slice>
    <from sec="1273036048" usec="0"/>
    <to sec="1273036066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.207.33"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.127.43.34"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273036012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.224.122.34"/>
    </slice>
    <from sec="1273036380" usec="0"/>
    <to sec="1273036446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.32.144.34"/>
    </slice>
    <from sec="1273035976" usec="0"/>
    <to sec="1273035985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
4485[label="152.85.224.34;s;3pkt 3fpkt", shape=diamond, color=yellow];
9125[label="152.85.224.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12812[label="152.85.224.34;3pkt 3fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.224.34:11751, 73.160.241.4:16298}[33.3333%]&lt;BR/&gt;{152.85.224.34:11751, 12.172.184.87:23907}[33.3333%]&lt;BR/&gt;{152.85.224.34:11751, 12.175.230.217:18708}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11751: (50%)&lt;BR/&gt; 23907: (16.6667%)&lt;BR/&gt; 18708: (16.6667%)&lt;BR/&gt; 16298: (16.6667%)&gt;];
}
4485--9125[label="1;3pkt 3fpkt"];
4485--12812[label="1;3pkt 3fpkt"];
9125--12812[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="12.175.230.217" dst_port="18708" src_ip="152.85.224.34" src_port="11751"/>
      <filter dst_ip="12.172.184.87" dst_port="23907" src_ip="152.85.224.34" src_port="11751"/>
      <filter dst_ip="73.160.241.4" dst_port="16298" src_ip="152.85.224.34" src_port="11751"/>
    </slice>
    <from sec="1273036018" usec="0"/>
    <to sec="1273036173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.68.60.36"/>
    </slice>
    <from sec="1273036295" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.138.36"/>
    </slice>
    <from sec="1273035985" usec="0"/>
    <to sec="1273036016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.150.228.36"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.66.44.37"/>
    </slice>
    <from sec="1273036086" usec="0"/>
    <to sec="1273036113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.150.158.37"/>
    </slice>
    <from sec="1273035887" usec="0"/>
    <to sec="1273035939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.234.241.37"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.32.54.38"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.221.86.38"/>
    </slice>
    <from sec="1273036180" usec="0"/>
    <to sec="1273036217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.234.100.38"/>
    </slice>
    <from sec="1273036067" usec="0"/>
    <to sec="1273036094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.198.111.38"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.250.173.38"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.78.201.38"/>
    </slice>
    <from sec="1273035925" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.169.205.38"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.103.194.39"/>
    </slice>
    <from sec="1273035855" usec="0"/>
    <to sec="1273035864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.45.44.40"/>
    </slice>
    <from sec="1273036288" usec="0"/>
    <to sec="1273036314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.205.106.40"/>
    </slice>
    <from sec="1273036071" usec="0"/>
    <to sec="1273036084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.16.136.40"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.144.40"/>
    </slice>
    <from sec="1273036368" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.130.15.41"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.27.41"/>
    </slice>
    <from sec="1273036030" usec="0"/>
    <to sec="1273036066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.160.153.41"/>
    </slice>
    <from sec="1273035746" usec="0"/>
    <to sec="1273035752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.188.194.41"/>
    </slice>
    <from sec="1273035624" usec="0"/>
    <to sec="1273035634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.185.42"/>
    </slice>
    <from sec="1273036142" usec="0"/>
    <to sec="1273036168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.165.185.42"/>
    </slice>
    <from sec="1273036138" usec="0"/>
    <to sec="1273036145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.185.232.42"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.10.82.43"/>
    </slice>
    <from sec="1273036147" usec="0"/>
    <to sec="1273036172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.105.43"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.18.114.43"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.48.132.44"/>
    </slice>
    <from sec="1273036156" usec="0"/>
    <to sec="1273036192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.101.160.44"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.104.219.44"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.248.69.45"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.34.97.45"/>
    </slice>
    <from sec="1273035931" usec="0"/>
    <to sec="1273035938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.201.163.45"/>
    </slice>
    <from sec="1273035676" usec="0"/>
    <to sec="1273035679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.211.45"/>
    </slice>
    <from sec="1273036034" usec="0"/>
    <to sec="1273036109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.40.4.46"/>
    </slice>
    <from sec="1273035850" usec="0"/>
    <to sec="1273035853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.152.35.46"/>
    </slice>
    <from sec="1273035736" usec="0"/>
    <to sec="1273035761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.39.46"/>
    </slice>
    <from sec="1273035612" usec="0"/>
    <to sec="1273035651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.46367,2.81204,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
113[label="58.39.99.46s;241pkt 241fpkt", shape=rectangle, color=red];
9325[label="58.39.99.46;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.39.99.46:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4999: (0.20202%)&lt;BR/&gt; 4998: (0.20202%)&lt;BR/&gt; 4997: (0.20202%)&lt;BR/&gt; 4996: (0.20202%)&gt;];
}
113--9325[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="58.39.99.46"/>
    </slice>
    <from sec="1273036456" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.105.116.46"/>
    </slice>
    <from sec="1273036127" usec="0"/>
    <to sec="1273036153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.13.147.46"/>
    </slice>
    <from sec="1273036290" usec="0"/>
    <to sec="1273036298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.90.217.46"/>
    </slice>
    <from sec="1273035709" usec="0"/>
    <to sec="1273035752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.7.3.47"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.169.104.47"/>
    </slice>
    <from sec="1273036268" usec="0"/>
    <to sec="1273036278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.197.175.47"/>
    </slice>
    <from sec="1273035965" usec="0"/>
    <to sec="1273035971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.27.224.47"/>
    </slice>
    <from sec="1273036228" usec="0"/>
    <to sec="1273036286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.40.75.49"/>
    </slice>
    <from sec="1273036275" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.16.232.49"/>
    </slice>
    <from sec="1273036124" usec="0"/>
    <to sec="1273036155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.236.49"/>
    </slice>
    <from sec="1273036012" usec="0"/>
    <to sec="1273036051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.242.49"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.133.18.50"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.146.51"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.231.169.51"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.241.51"/>
    </slice>
    <from sec="1273036160" usec="0"/>
    <to sec="1273036204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.102.55.52"/>
    </slice>
    <from sec="1273036349" usec="0"/>
    <to sec="1273036414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.200.101.52"/>
    </slice>
    <from sec="1273036138" usec="0"/>
    <to sec="1273036154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.165.52"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.132.215.52"/>
    </slice>
    <from sec="1273036447" usec="0"/>
    <to sec="1273036477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.72.33.54"/>
    </slice>
    <from sec="1273035878" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2163[label="128.212.104.54;s;508pkt 508fpkt", shape=diamond, color=yellow];
9451[label="128.212.104.54;508pkt 508fpkt", shape=pentagon, color=darkviolet];
12996[label="128.212.104.54;508pkt 508fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.104.54:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2163--9451[label="1;508pkt 508fpkt"];
2163--12996[label="1;508pkt 508fpkt"];
9451--12996[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter src_ip="128.212.104.54"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.237.13.55"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.89.55"/>
    </slice>
    <from sec="1273036169" usec="0"/>
    <to sec="1273036472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.32.154.55"/>
    </slice>
    <from sec="1273035721" usec="0"/>
    <to sec="1273035730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.25.57.56"/>
    </slice>
    <from sec="1273036111" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.105.56"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.28.119.56"/>
    </slice>
    <from sec="1273035628" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.99.129.56"/>
    </slice>
    <from sec="1273036333" usec="0"/>
    <to sec="1273036350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.248.215.57"/>
    </slice>
    <from sec="1273036175" usec="0"/>
    <to sec="1273036220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.146.48.58"/>
    </slice>
    <from sec="1273035718" usec="0"/>
    <to sec="1273035751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.58.58"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.207.76.59"/>
    </slice>
    <from sec="1273036120" usec="0"/>
    <to sec="1273036138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.30.93.59"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.175.160.59"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.169.111.60"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.123.157.60"/>
    </slice>
    <from sec="1273036061" usec="0"/>
    <to sec="1273036315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.42.242.60"/>
    </slice>
    <from sec="1273036070" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
116[label="63.42.147.61s;229pkt 229fpkt", shape=rectangle, color=red];
9571[label="63.42.147.61;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13069[label="63.42.147.61;254pkt 254fpkt", shape=invtriangle, color=brown];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.42.147.61:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4999: (0.203528%)&lt;BR/&gt; 4998: (0.203528%)&lt;BR/&gt; 4997: (0.203528%)&lt;BR/&gt; 4996: (0.203528%)&gt;];
}
116--9571[label="1;229pkt 229fpkt"];
116--13069[label="1;229pkt 229fpkt"];
9571--13069[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="63.42.147.61"/>
    </slice>
    <from sec="1273036103" usec="0"/>
    <to sec="1273036114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.22.232.61"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.80.62"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.105.98.62"/>
    </slice>
    <from sec="1273035981" usec="0"/>
    <to sec="1273035994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.178.112.62"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.147.120.62"/>
    </slice>
    <from sec="1273035865" usec="0"/>
    <to sec="1273035994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.29.205.62"/>
    </slice>
    <from sec="1273035959" usec="0"/>
    <to sec="1273035988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.26.63"/>
    </slice>
    <from sec="1273036018" usec="0"/>
    <to sec="1273036076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60542,2.7762,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
117[label="85.236.40.63s;100pkt 100fpkt", shape=rectangle, color=red];
9599[label="85.236.40.63;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13087[label="85.236.40.63;254pkt 254fpkt", shape=invtriangle, color=brown];
15211[label="85.236.40.63;254pkt 254fpkt", shape=invhouse, color=bisque];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.236.40.63:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4369: (0.232019%)&lt;BR/&gt; 4368: (0.232019%)&lt;BR/&gt; 4367: (0.232019%)&lt;BR/&gt; 4366: (0.232019%)&gt;];
}
117--9599[label="1;100pkt 100fpkt"];
117--13087[label="1;100pkt 100fpkt"];
117--15211[label="1;100pkt 100fpkt"];
9599--13087[label="1;254pkt 254fpkt"];
9599--15211[label="1;254pkt 254fpkt"];
13087--15211[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="85.236.40.63"/>
    </slice>
    <from sec="1273036245" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.43.134.64"/>
    </slice>
    <from sec="1273036398" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.161.64"/>
    </slice>
    <from sec="1273035639" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.16.236.64"/>
    </slice>
    <from sec="1273036404" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.240.64"/>
    </slice>
    <from sec="1273036082" usec="0"/>
    <to sec="1273036124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.8.2.65"/>
    </slice>
    <from sec="1273036321" usec="0"/>
    <to sec="1273036364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.121.133.65"/>
    </slice>
    <from sec="1273036048" usec="0"/>
    <to sec="1273036063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.37.168.65"/>
    </slice>
    <from sec="1273036383" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.177.65"/>
    </slice>
    <from sec="1273036426" usec="0"/>
    <to sec="1273036470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.176.208.65"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.152.24.66"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.150.36.66"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.145.66"/>
    </slice>
    <from sec="1273036311" usec="0"/>
    <to sec="1273036325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.217.160.66"/>
    </slice>
    <from sec="1273036055" usec="0"/>
    <to sec="1273036092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.253.66"/>
    </slice>
    <from sec="1273035884" usec="0"/>
    <to sec="1273035922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.36.90.67"/>
    </slice>
    <from sec="1273036082" usec="0"/>
    <to sec="1273036104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.162.67"/>
    </slice>
    <from sec="1273035981" usec="0"/>
    <to sec="1273036018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.202.2.68"/>
    </slice>
    <from sec="1273035881" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.132.189.68"/>
    </slice>
    <from sec="1273036355" usec="0"/>
    <to sec="1273036367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.170.250.68"/>
    </slice>
    <from sec="1273035612" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.197.3.69"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.15.69"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.69"/>
    </slice>
    <from sec="1273035799" usec="0"/>
    <to sec="1273035993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.68.106.70"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.45.194.70"/>
    </slice>
    <from sec="1273035911" usec="0"/>
    <to sec="1273035914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.88.235.70"/>
    </slice>
    <from sec="1273036035" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.30.28.71"/>
    </slice>
    <from sec="1273036146" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.57.71"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
686[label="176.108.165.61;d;2pkt 2fpkt", shape=diamond, color=yellow];
2766[label="223.72.59.71;s;4pkt 4fpkt", shape=diamond, color=yellow];
4222[label="60.231.74.122;s;3pkt 3fpkt", shape=diamond, color=yellow];
7699[label="176.108.165.61;d;2pkt 2fpkt", shape=hexagon, color=black];
9758[label="223.72.59.71;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13179[label="223.72.59.71;4pkt 4fpkt", shape=invtriangle, color=brown];
15263[label="223.72.59.71;4pkt 4fpkt", shape=invhouse, color=bisque];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.72.59.71:12975, *:*}[57.1429%]&lt;BR/&gt;{60.231.74.122:*, 176.108.165.136:52212}[28.5714%]&lt;BR/&gt;{60.231.74.122:12000, *:*}[28.5714%]&lt;BR/&gt;{*:*, 176.108.165.61:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12975: (39.1304%)&lt;BR/&gt; 51548: (13.0435%)&lt;BR/&gt; 63202: (8.69565%)&lt;BR/&gt; 60069: (8.69565%)&lt;BR/&gt; 12000: (8.69565%)&gt;];
}
686--2766[label="0.5;1pkt 1fpkt"];
686--4222[label="0.5;1pkt 1fpkt"];
686--7699[label="1;2pkt 2fpkt"];
686--9758[label="0.5;1pkt 1fpkt"];
686--13179[label="0.5;1pkt 1fpkt"];
686--15263[label="0.5;1pkt 1fpkt"];
2766--7699[label="0.5;1pkt 1fpkt"];
2766--9758[label="1;4pkt 4fpkt"];
2766--13179[label="1;4pkt 4fpkt"];
2766--15263[label="1;4pkt 4fpkt"];
4222--7699[label="0.5;1pkt 1fpkt"];
7699--9758[label="0.5;1pkt 1fpkt"];
7699--13179[label="0.5;1pkt 1fpkt"];
7699--15263[label="0.5;1pkt 1fpkt"];
9758--13179[label="1;4pkt 4fpkt"];
9758--15263[label="1;4pkt 4fpkt"];
13179--15263[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.165.61"/>
      <filter src_ip="223.72.59.71" src_port="12975"/>
      <filter src_ip="60.231.74.122" src_port="12000"/>
      <filter dst_ip="176.108.165.136" dst_port="52212" src_ip="60.231.74.122"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.166.71"/>
    </slice>
    <from sec="1273035856" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.101.67.72"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.36.210.72"/>
    </slice>
    <from sec="1273036066" usec="0"/>
    <to sec="1273036105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.211.72"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.248.72"/>
    </slice>
    <from sec="1273035894" usec="0"/>
    <to sec="1273035932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.42.24.73"/>
    </slice>
    <from sec="1273035818" usec="0"/>
    <to sec="1273036017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.32.28.74"/>
    </slice>
    <from sec="1273036091" usec="0"/>
    <to sec="1273036250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.242.49.74"/>
    </slice>
    <from sec="1273036420" usec="0"/>
    <to sec="1273036479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.86.74"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.212.217.74"/>
    </slice>
    <from sec="1273036470" usec="0"/>
    <to sec="1273036493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.213.244.74"/>
    </slice>
    <from sec="1273035795" usec="0"/>
    <to sec="1273035806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.197.35.75"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.164.75"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.40.241.75"/>
    </slice>
    <from sec="1273036424" usec="0"/>
    <to sec="1273036437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.40.31.76"/>
    </slice>
    <from sec="1273036099" usec="0"/>
    <to sec="1273036149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.83.82.76"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
3375[label="176.108.139.76;s;1139pkt 1139fpkt", shape=diamond, color=yellow];
9851[label="176.108.139.76;1204pkt 1204fpkt", shape=pentagon, color=darkviolet];
13237[label="176.108.139.76;1202pkt 1202fpkt", shape=invtriangle, color=brown];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.76:63913, *:*}[99.8339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63913: (49.9154%)&lt;BR/&gt; 16001: (0.592384%)&lt;BR/&gt; 6881: (0.507757%)&lt;BR/&gt; 51413: (0.253879%)&lt;BR/&gt; 35691: (0.253879%)&gt;];
}
3375--7497[label="0.00520833;1pkt 1fpkt"];
3375--9851[label="1;1139pkt 1139fpkt"];
3375--13237[label="0.998244;1137pkt 1137fpkt"];
9851--13237[label="1;1202pkt 1202fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.139.76" src_port="63913"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
118[label="54.239.142.76s;91pkt 91fpkt", shape=rectangle, color=red];
9852[label="54.239.142.76;256pkt 256fpkt", shape=pentagon, color=darkviolet];
13238[label="54.239.142.76;256pkt 256fpkt", shape=invtriangle, color=brown];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.239.142.76:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 2715: (0.248756%)&lt;BR/&gt; 2714: (0.248756%)&lt;BR/&gt; 2713: (0.248756%)&lt;BR/&gt; 2712: (0.248756%)&gt;];
}
118--9852[label="1;91pkt 91fpkt"];
118--13238[label="1;91pkt 91fpkt"];
9852--13238[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="54.239.142.76"/>
    </slice>
    <from sec="1273036121" usec="0"/>
    <to sec="1273036135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.183.2.78"/>
    </slice>
    <from sec="1273036030" usec="0"/>
    <to sec="1273036054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.240.79"/>
    </slice>
    <from sec="1273035868" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.236.58.80"/>
    </slice>
    <from sec="1273036133" usec="0"/>
    <to sec="1273036146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.179.146.80"/>
    </slice>
    <from sec="1273036105" usec="0"/>
    <to sec="1273036305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.99.152.80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.218.170.80"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273036013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.46.100.81"/>
    </slice>
    <from sec="1273036225" usec="0"/>
    <to sec="1273036239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.240.225.81"/>
    </slice>
    <from sec="1273036352" usec="0"/>
    <to sec="1273036388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.21.82"/>
    </slice>
    <from sec="1273035873" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.49.82"/>
    </slice>
    <from sec="1273035864" usec="0"/>
    <to sec="1273035913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.129.71.82"/>
    </slice>
    <from sec="1273035897" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.166.128.82"/>
    </slice>
    <from sec="1273036335" usec="0"/>
    <to sec="1273036354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.88.83"/>
    </slice>
    <from sec="1273036449" usec="0"/>
    <to sec="1273036461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.182.138.83"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.136.159.84"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.172.199.84"/>
    </slice>
    <from sec="1273036067" usec="0"/>
    <to sec="1273036077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.3.99.85"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.145.128.85"/>
    </slice>
    <from sec="1273035994" usec="0"/>
    <to sec="1273036134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.86"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
3242[label="176.108.139.86;s;310pkt 310fpkt", shape=diamond, color=yellow];
4731[label="40.140.26.224;d;70pkt 70fpkt", shape=diamond, color=yellow];
7500[label="40.140.26.224;d;68pkt 68fpkt", shape=hexagon, color=black];
10000[label="176.108.139.86;349pkt 349fpkt", shape=pentagon, color=darkviolet];
13332[label="176.108.139.86;349pkt 349fpkt", shape=invtriangle, color=brown];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.86:*, 40.140.26.224:80}[21.7765%]&lt;BR/&gt;{176.108.139.86:*, 34.71.102.210:80}[21.2034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52356: (0.21815%)&lt;BR/&gt; 52355: (0.21815%)&lt;BR/&gt; 52268: (0.21815%)&lt;BR/&gt; 52267: (0.21815%)&gt;];
}
3242--4731[label="0.971429;68pkt 68fpkt"];
3242--7500[label="1;68pkt 68fpkt"];
3242--8324[label="0.0741935;23pkt 23fpkt"];
3242--8342[label="0.0419355;13pkt 13fpkt"];
3242--10000[label="1;310pkt 310fpkt"];
3242--13332[label="1;310pkt 310fpkt"];
4731--7500[label="1;68pkt 68fpkt"];
4731--8324[label="0.0857143;6pkt 6fpkt"];
4731--8342[label="0.0285714;2pkt 2fpkt"];
4731--10000[label="1;70pkt 70fpkt"];
4731--13332[label="1;70pkt 70fpkt"];
7500--8324[label="0.0882353;6pkt 6fpkt"];
7500--8342[label="0.0294118;2pkt 2fpkt"];
7500--10000[label="1;68pkt 68fpkt"];
7500--13332[label="1;68pkt 68fpkt"];
10000--13332[label="1;349pkt 349fpkt"];
</description>
    <slice>
      <filter dst_ip="40.140.26.224" dst_port="80" src_ip="176.108.139.86"/>
      <filter dst_ip="34.71.102.210" dst_port="80" src_ip="176.108.139.86"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
314[label="133.249.201.103;d;403pkt 403fpkt", shape=diamond, color=yellow];
396[label="76.200.221.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="9.144.43.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="21.76.81.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
500[label="5.89.57.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
1445[label="5.44.252.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
1802[label="0.158.82.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1880[label="219.78.190.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
1947[label="221.89.209.116;s;2pkt 2fpkt", shape=diamond, color=yellow];
1991[label="72.21.3.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
2010[label="0.156.64.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
2551[label="76.92.176.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
2606[label="5.25.131.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
2659[label="1.182.197.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
2667[label="8.30.24.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
2705[label="9.175.139.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
3078[label="20.230.206.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
3124[label="5.231.211.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
3131[label="221.133.65.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
3204[label="221.111.64.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
3566[label="8.6.2.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
3685[label="72.37.80.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
3712[label="13.85.225.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
3722[label="221.79.5.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
4475[label="8.87.17.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
4503[label="5.2.237.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
4581[label="1.229.0.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
4955[label="15.204.245.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
5301[label="8.192.56.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
5337[label="0.149.30.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
5339[label="76.88.117.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
5351[label="73.143.43.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
5374[label="5.10.26.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
5445[label="133.249.201.103;d;211pkt 211fpkt", shape=hexagon, color=black];
8847[label="12.23.125.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8862[label="6.9.237.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8863[label="5.19.241.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9046[label="13.172.81.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9072[label="0.156.64.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9106[label="217.41.213.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9341[label="21.76.81.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9447[label="215.194.65.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9498[label="5.25.131.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9545[label="4.136.67.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9560[label="218.89.52.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9583[label="13.163.90.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9709[label="76.81.48.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9977[label="73.76.164.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10004[label="219.78.190.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10065[label="5.51.145.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10195[label="221.111.64.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10303[label="221.41.235.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10333[label="73.143.43.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10438[label="8.87.17.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10590[label="72.21.3.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10615[label="221.108.90.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10628[label="219.86.37.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10765[label="9.33.217.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10776[label="72.37.80.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10795[label="9.175.139.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11134[label="8.192.56.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11162[label="76.193.30.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11210[label="221.79.5.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11258[label="13.85.225.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11447[label="76.111.66.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11452[label="5.60.136.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11509[label="76.228.178.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11563[label="221.91.87.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11660[label="0.158.82.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11757[label="5.44.252.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11835[label="8.76.127.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11973[label="9.144.43.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12005[label="73.138.179.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12106[label="73.64.14.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12367[label="77.104.62.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12374[label="5.231.211.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12379[label="221.109.35.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12473[label="8.6.2.5;1pkt 1fpkt", shape=invtriangle, color=brown];
12646[label="12.23.125.20;1pkt 1fpkt", shape=invtriangle, color=brown];
12657[label="5.19.241.20;1pkt 1fpkt", shape=invtriangle, color=brown];
12992[label="215.194.65.54;1pkt 1fpkt", shape=invtriangle, color=brown];
13055[label="4.136.67.60;1pkt 1fpkt", shape=invtriangle, color=brown];
13335[label="219.78.190.86;1pkt 1fpkt", shape=invtriangle, color=brown];
13513[label="221.41.235.107;1pkt 1fpkt", shape=invtriangle, color=brown];
13532[label="5.192.189.109;1pkt 1fpkt", shape=invtriangle, color=brown];
13537[label="73.143.43.110;1pkt 1fpkt", shape=invtriangle, color=brown];
13602[label="8.87.17.116;1pkt 1fpkt", shape=invtriangle, color=brown];
13717[label="219.86.37.130;1pkt 1fpkt", shape=invtriangle, color=brown];
13798[label="9.33.217.138;1pkt 1fpkt", shape=invtriangle, color=brown];
13806[label="72.37.80.139;1pkt 1fpkt", shape=invtriangle, color=brown];
13816[label="9.175.139.140;1pkt 1fpkt", shape=invtriangle, color=brown];
14023[label="8.192.56.163;1pkt 1fpkt", shape=invtriangle, color=brown];
14079[label="221.79.5.168;1pkt 1fpkt", shape=invtriangle, color=brown];
14107[label="13.85.225.170;1pkt 1fpkt", shape=invtriangle, color=brown];
14216[label="5.60.136.184;1pkt 1fpkt", shape=invtriangle, color=brown];
14277[label="221.91.87.192;1pkt 1fpkt", shape=invtriangle, color=brown];
14347[label="0.158.82.198;1pkt 1fpkt", shape=invtriangle, color=brown];
14460[label="8.76.127.210;1pkt 1fpkt", shape=invtriangle, color=brown];
14539[label="9.144.43.221;1pkt 1fpkt", shape=invtriangle, color=brown];
14621[label="73.64.14.231;1pkt 1fpkt", shape=invtriangle, color=brown];
14779[label="77.104.62.250;1pkt 1fpkt", shape=invtriangle, color=brown];
14944[label="12.23.125.20;1pkt 1fpkt", shape=invhouse, color=bisque];
15005[label="13.172.81.30;1pkt 1fpkt", shape=invhouse, color=bisque];
15015[label="0.156.64.32;1pkt 1fpkt", shape=invhouse, color=bisque];
15190[label="4.136.67.60;1pkt 1fpkt", shape=invhouse, color=bisque];
15359[label="219.78.190.86;1pkt 1fpkt", shape=invhouse, color=bisque];
15460[label="221.41.235.107;1pkt 1fpkt", shape=invhouse, color=bisque];
15473[label="73.143.43.110;1pkt 1fpkt", shape=invhouse, color=bisque];
15613[label="9.33.217.138;1pkt 1fpkt", shape=invhouse, color=bisque];
15734[label="8.192.56.163;1pkt 1fpkt", shape=invhouse, color=bisque];
15763[label="221.79.5.168;1pkt 1fpkt", shape=invhouse, color=bisque];
15781[label="13.85.225.170;1pkt 1fpkt", shape=invhouse, color=bisque];
15844[label="5.60.136.184;1pkt 1fpkt", shape=invhouse, color=bisque];
15867[label="221.91.87.192;1pkt 1fpkt", shape=invhouse, color=bisque];
15973[label="8.76.127.210;1pkt 1fpkt", shape=invhouse, color=bisque];
16133[label="77.104.62.250;1pkt 1fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 133.249.201.103:5041}[40.9429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (68.7929%)&lt;BR/&gt; 8001: (2.74348%)&lt;BR/&gt; 80: (1.44033%)&lt;BR/&gt; 8000: (1.37174%)&lt;BR/&gt; 0: (1.09739%)&gt;];
}
314--396[label="1;1pkt 1fpkt"];
314--413[label="1;1pkt 1fpkt"];
314--420[label="1;1pkt 1fpkt"];
314--500[label="1;1pkt 1fpkt"];
314--1445[label="1;1pkt 1fpkt"];
314--1802[label="1;1pkt 1fpkt"];
314--1880[label="1;1pkt 1fpkt"];
314--1947[label="1;2pkt 2fpkt"];
314--1991[label="1;1pkt 1fpkt"];
314--2010[label="1;1pkt 1fpkt"];
314--2551[label="1;1pkt 1fpkt"];
314--2606[label="1;1pkt 1fpkt"];
314--2659[label="1;1pkt 1fpkt"];
314--2667[label="1;1pkt 1fpkt"];
314--2705[label="1;1pkt 1fpkt"];
314--3078[label="1;1pkt 1fpkt"];
314--3124[label="1;1pkt 1fpkt"];
314--3131[label="1;1pkt 1fpkt"];
314--3204[label="1;1pkt 1fpkt"];
314--3566[label="1;1pkt 1fpkt"];
314--3685[label="1;1pkt 1fpkt"];
314--3712[label="1;1pkt 1fpkt"];
314--3722[label="1;1pkt 1fpkt"];
314--4475[label="1;1pkt 1fpkt"];
314--4503[label="1;1pkt 1fpkt"];
314--4581[label="1;1pkt 1fpkt"];
314--4955[label="1;1pkt 1fpkt"];
314--5301[label="1;1pkt 1fpkt"];
314--5337[label="1;1pkt 1fpkt"];
314--5339[label="1;1pkt 1fpkt"];
314--5351[label="1;1pkt 1fpkt"];
314--5374[label="1;1pkt 1fpkt"];
314--5445[label="1;211pkt 211fpkt"];
314--8349[label="0.00496278;2pkt 2fpkt"];
314--8357[label="0.00248139;1pkt 1fpkt"];
314--8405[label="0.00496278;2pkt 2fpkt"];
314--8414[label="0.00248139;1pkt 1fpkt"];
314--8439[label="0.00496278;2pkt 2fpkt"];
314--8847[label="1;1pkt 1fpkt"];
314--8862[label="1;1pkt 1fpkt"];
314--8863[label="1;1pkt 1fpkt"];
314--9046[label="1;1pkt 1fpkt"];
314--9072[label="1;1pkt 1fpkt"];
314--9106[label="1;1pkt 1fpkt"];
314--9341[label="1;1pkt 1fpkt"];
314--9447[label="1;1pkt 1fpkt"];
314--9498[label="1;1pkt 1fpkt"];
314--9545[label="1;1pkt 1fpkt"];
314--9560[label="1;1pkt 1fpkt"];
314--9583[label="1;1pkt 1fpkt"];
314--9709[label="1;1pkt 1fpkt"];
314--9977[label="1;1pkt 1fpkt"];
314--10004[label="1;1pkt 1fpkt"];
314--10065[label="1;1pkt 1fpkt"];
314--10195[label="1;1pkt 1fpkt"];
314--10303[label="1;1pkt 1fpkt"];
314--10333[label="1;1pkt 1fpkt"];
314--10438[label="1;1pkt 1fpkt"];
314--10590[label="1;1pkt 1fpkt"];
314--10615[label="1;1pkt 1fpkt"];
314--10628[label="1;1pkt 1fpkt"];
314--10765[label="1;1pkt 1fpkt"];
314--10776[label="1;1pkt 1fpkt"];
314--10795[label="1;1pkt 1fpkt"];
314--11134[label="1;1pkt 1fpkt"];
314--11162[label="1;1pkt 1fpkt"];
314--11210[label="1;1pkt 1fpkt"];
314--11258[label="1;1pkt 1fpkt"];
314--11296[label="0.125;1pkt 1fpkt"];
314--11447[label="1;1pkt 1fpkt"];
314--11452[label="1;1pkt 1fpkt"];
314--11509[label="1;1pkt 1fpkt"];
314--11563[label="1;1pkt 1fpkt"];
314--11660[label="1;1pkt 1fpkt"];
314--11757[label="1;1pkt 1fpkt"];
314--11835[label="1;1pkt 1fpkt"];
314--11973[label="1;1pkt 1fpkt"];
314--12005[label="1;1pkt 1fpkt"];
314--12106[label="1;1pkt 1fpkt"];
314--12367[label="1;1pkt 1fpkt"];
314--12374[label="1;1pkt 1fpkt"];
314--12379[label="1;1pkt 1fpkt"];
314--12473[label="1;1pkt 1fpkt"];
314--12646[label="1;1pkt 1fpkt"];
314--12657[label="1;1pkt 1fpkt"];
314--12992[label="1;1pkt 1fpkt"];
314--13055[label="1;1pkt 1fpkt"];
314--13335[label="1;1pkt 1fpkt"];
314--13513[label="1;1pkt 1fpkt"];
314--13532[label="1;1pkt 1fpkt"];
314--13537[label="1;1pkt 1fpkt"];
314--13602[label="1;1pkt 1fpkt"];
314--13717[label="1;1pkt 1fpkt"];
314--13798[label="1;1pkt 1fpkt"];
314--13806[label="1;1pkt 1fpkt"];
314--13816[label="1;1pkt 1fpkt"];
314--14023[label="1;1pkt 1fpkt"];
314--14079[label="1;1pkt 1fpkt"];
314--14107[label="1;1pkt 1fpkt"];
314--14216[label="1;1pkt 1fpkt"];
314--14277[label="1;1pkt 1fpkt"];
314--14347[label="1;1pkt 1fpkt"];
314--14460[label="1;1pkt 1fpkt"];
314--14539[label="1;1pkt 1fpkt"];
314--14621[label="1;1pkt 1fpkt"];
314--14779[label="1;1pkt 1fpkt"];
314--14944[label="1;1pkt 1fpkt"];
314--15005[label="1;1pkt 1fpkt"];
314--15015[label="1;1pkt 1fpkt"];
314--15190[label="1;1pkt 1fpkt"];
314--15359[label="1;1pkt 1fpkt"];
314--15460[label="1;1pkt 1fpkt"];
314--15473[label="1;1pkt 1fpkt"];
314--15613[label="1;1pkt 1fpkt"];
314--15734[label="1;1pkt 1fpkt"];
314--15763[label="1;1pkt 1fpkt"];
314--15781[label="1;1pkt 1fpkt"];
314--15844[label="1;1pkt 1fpkt"];
314--15867[label="1;1pkt 1fpkt"];
314--15973[label="1;1pkt 1fpkt"];
314--16133[label="1;1pkt 1fpkt"];
396--5445[label="1;1pkt 1fpkt"];
413--5445[label="1;1pkt 1fpkt"];
413--11973[label="1;1pkt 1fpkt"];
413--14539[label="1;1pkt 1fpkt"];
420--5445[label="1;1pkt 1fpkt"];
420--9341[label="1;1pkt 1fpkt"];
500--5445[label="1;1pkt 1fpkt"];
1445--5445[label="1;1pkt 1fpkt"];
1445--11757[label="1;1pkt 1fpkt"];
1802--5445[label="1;1pkt 1fpkt"];
1802--11660[label="1;1pkt 1fpkt"];
1802--14347[label="1;1pkt 1fpkt"];
1880--5445[label="1;1pkt 1fpkt"];
1880--10004[label="1;1pkt 1fpkt"];
1880--13335[label="1;1pkt 1fpkt"];
1880--15359[label="1;1pkt 1fpkt"];
1947--5445[label="1;2pkt 2fpkt"];
1991--5445[label="1;1pkt 1fpkt"];
1991--10590[label="1;1pkt 1fpkt"];
2010--5445[label="1;1pkt 1fpkt"];
2010--9072[label="1;1pkt 1fpkt"];
2010--15015[label="1;1pkt 1fpkt"];
2551--5445[label="1;1pkt 1fpkt"];
2606--5445[label="1;1pkt 1fpkt"];
2606--9498[label="1;1pkt 1fpkt"];
2659--5445[label="1;1pkt 1fpkt"];
2667--5445[label="1;1pkt 1fpkt"];
2705--5445[label="1;1pkt 1fpkt"];
2705--10795[label="1;1pkt 1fpkt"];
2705--13816[label="1;1pkt 1fpkt"];
3078--5445[label="1;1pkt 1fpkt"];
3124--5445[label="1;1pkt 1fpkt"];
3124--12374[label="1;1pkt 1fpkt"];
3131--5445[label="1;1pkt 1fpkt"];
3204--5445[label="1;1pkt 1fpkt"];
3204--10195[label="1;1pkt 1fpkt"];
3566--5445[label="1;1pkt 1fpkt"];
3566--12473[label="1;1pkt 1fpkt"];
3685--10776[label="1;1pkt 1fpkt"];
3685--13806[label="1;1pkt 1fpkt"];
3712--11258[label="1;1pkt 1fpkt"];
3712--14107[label="1;1pkt 1fpkt"];
3712--15781[label="1;1pkt 1fpkt"];
3722--11210[label="1;1pkt 1fpkt"];
3722--14079[label="1;1pkt 1fpkt"];
3722--15763[label="1;1pkt 1fpkt"];
4475--10438[label="1;1pkt 1fpkt"];
4475--13602[label="1;1pkt 1fpkt"];
5301--11134[label="1;1pkt 1fpkt"];
5301--14023[label="1;1pkt 1fpkt"];
5301--15734[label="1;1pkt 1fpkt"];
5351--10333[label="1;1pkt 1fpkt"];
5351--13537[label="1;1pkt 1fpkt"];
5351--15473[label="1;1pkt 1fpkt"];
5445--8349[label="0.00947867;2pkt 2fpkt"];
5445--8405[label="0.00947867;2pkt 2fpkt"];
5445--8439[label="0.00947867;2pkt 2fpkt"];
5445--8862[label="1;1pkt 1fpkt"];
5445--9072[label="1;1pkt 1fpkt"];
5445--9106[label="1;1pkt 1fpkt"];
5445--9341[label="1;1pkt 1fpkt"];
5445--9447[label="1;1pkt 1fpkt"];
5445--9498[label="1;1pkt 1fpkt"];
5445--9545[label="1;1pkt 1fpkt"];
5445--9560[label="1;1pkt 1fpkt"];
5445--9709[label="1;1pkt 1fpkt"];
5445--9977[label="1;1pkt 1fpkt"];
5445--10004[label="1;1pkt 1fpkt"];
5445--10065[label="1;1pkt 1fpkt"];
5445--10195[label="1;1pkt 1fpkt"];
5445--10590[label="1;1pkt 1fpkt"];
5445--10615[label="1;1pkt 1fpkt"];
5445--10628[label="1;1pkt 1fpkt"];
5445--10795[label="1;1pkt 1fpkt"];
5445--11162[label="1;1pkt 1fpkt"];
5445--11452[label="1;1pkt 1fpkt"];
5445--11509[label="1;1pkt 1fpkt"];
5445--11660[label="1;1pkt 1fpkt"];
5445--11757[label="1;1pkt 1fpkt"];
5445--11835[label="1;1pkt 1fpkt"];
5445--11973[label="1;1pkt 1fpkt"];
5445--12005[label="1;1pkt 1fpkt"];
5445--12106[label="1;1pkt 1fpkt"];
5445--12367[label="1;1pkt 1fpkt"];
5445--12374[label="1;1pkt 1fpkt"];
5445--12379[label="1;1pkt 1fpkt"];
5445--12473[label="1;1pkt 1fpkt"];
5445--12992[label="1;1pkt 1fpkt"];
5445--13055[label="1;1pkt 1fpkt"];
5445--13335[label="1;1pkt 1fpkt"];
5445--13717[label="1;1pkt 1fpkt"];
5445--13816[label="1;1pkt 1fpkt"];
5445--14216[label="1;1pkt 1fpkt"];
5445--14347[label="1;1pkt 1fpkt"];
5445--14460[label="1;1pkt 1fpkt"];
5445--14539[label="1;1pkt 1fpkt"];
5445--14621[label="1;1pkt 1fpkt"];
5445--14779[label="1;1pkt 1fpkt"];
5445--15015[label="1;1pkt 1fpkt"];
5445--15190[label="1;1pkt 1fpkt"];
5445--15359[label="1;1pkt 1fpkt"];
5445--15844[label="1;1pkt 1fpkt"];
5445--15973[label="1;1pkt 1fpkt"];
5445--16133[label="1;1pkt 1fpkt"];
8847--12646[label="1;1pkt 1fpkt"];
8847--14944[label="1;1pkt 1fpkt"];
8863--12657[label="1;1pkt 1fpkt"];
9046--15005[label="1;1pkt 1fpkt"];
9072--15015[label="1;1pkt 1fpkt"];
9447--12992[label="1;1pkt 1fpkt"];
9545--13055[label="1;1pkt 1fpkt"];
9545--15190[label="1;1pkt 1fpkt"];
10004--13335[label="1;1pkt 1fpkt"];
10004--15359[label="1;1pkt 1fpkt"];
10303--13513[label="1;1pkt 1fpkt"];
10303--15460[label="1;1pkt 1fpkt"];
10333--13537[label="1;1pkt 1fpkt"];
10333--15473[label="1;1pkt 1fpkt"];
10438--13602[label="1;1pkt 1fpkt"];
10628--13717[label="1;1pkt 1fpkt"];
10765--13798[label="1;1pkt 1fpkt"];
10765--15613[label="1;1pkt 1fpkt"];
10776--13806[label="1;1pkt 1fpkt"];
10795--13816[label="1;1pkt 1fpkt"];
11134--14023[label="1;1pkt 1fpkt"];
11134--15734[label="1;1pkt 1fpkt"];
11210--14079[label="1;1pkt 1fpkt"];
11210--15763[label="1;1pkt 1fpkt"];
11258--14107[label="1;1pkt 1fpkt"];
11258--15781[label="1;1pkt 1fpkt"];
11452--14216[label="1;1pkt 1fpkt"];
11452--15844[label="1;1pkt 1fpkt"];
11563--14277[label="1;1pkt 1fpkt"];
11563--15867[label="1;1pkt 1fpkt"];
11660--14347[label="1;1pkt 1fpkt"];
11835--14460[label="1;1pkt 1fpkt"];
11835--15973[label="1;1pkt 1fpkt"];
11973--14539[label="1;1pkt 1fpkt"];
12106--14621[label="1;1pkt 1fpkt"];
12367--14779[label="1;1pkt 1fpkt"];
12367--16133[label="1;1pkt 1fpkt"];
12646--14944[label="1;1pkt 1fpkt"];
13055--15190[label="1;1pkt 1fpkt"];
13335--15359[label="1;1pkt 1fpkt"];
13513--15460[label="1;1pkt 1fpkt"];
13537--15473[label="1;1pkt 1fpkt"];
13798--15613[label="1;1pkt 1fpkt"];
14023--15734[label="1;1pkt 1fpkt"];
14079--15763[label="1;1pkt 1fpkt"];
14107--15781[label="1;1pkt 1fpkt"];
14216--15844[label="1;1pkt 1fpkt"];
14277--15867[label="1;1pkt 1fpkt"];
14460--15973[label="1;1pkt 1fpkt"];
14779--16133[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.201.103" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.253.86"/>
    </slice>
    <from sec="1273036085" usec="0"/>
    <to sec="1273036106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.28.27.87"/>
    </slice>
    <from sec="1273035940" usec="0"/>
    <to sec="1273035945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.36.87"/>
    </slice>
    <from sec="1273035823" usec="0"/>
    <to sec="1273035862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.83.99.87"/>
    </slice>
    <from sec="1273035648" usec="0"/>
    <to sec="1273036324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.254.172.87"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.72.175.87"/>
    </slice>
    <from sec="1273035673" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.249.87"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.85.88"/>
    </slice>
    <from sec="1273036002" usec="0"/>
    <to sec="1273036048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.88.88"/>
    </slice>
    <from sec="1273035829" usec="0"/>
    <to sec="1273035851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.12.89"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.93.67.89"/>
    </slice>
    <from sec="1273036355" usec="0"/>
    <to sec="1273036374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.105.125.89"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
119[label="58.246.149.89s;129pkt 129fpkt", shape=rectangle, color=red];
10055[label="58.246.149.89;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13370[label="58.246.149.89;254pkt 254fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.246.149.89:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3759: (0.235479%)&lt;BR/&gt; 3758: (0.235479%)&lt;BR/&gt; 3757: (0.235479%)&lt;BR/&gt; 3756: (0.235479%)&gt;];
}
119--10055[label="1;129pkt 129fpkt"];
119--13370[label="1;129pkt 129fpkt"];
10055--13370[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="58.246.149.89"/>
    </slice>
    <from sec="1273036327" usec="0"/>
    <to sec="1273036338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.21.203.89"/>
    </slice>
    <from sec="1273036003" usec="0"/>
    <to sec="1273036021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.12.95.90"/>
    </slice>
    <from sec="1273036421" usec="0"/>
    <to sec="1273036440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.96.90"/>
    </slice>
    <from sec="1273036307" usec="0"/>
    <to sec="1273036480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.100.240.90"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.85.92"/>
    </slice>
    <from sec="1273035900" usec="0"/>
    <to sec="1273035922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.175.136.92"/>
    </slice>
    <from sec="1273035875" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.132.132.93"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.162.93"/>
    </slice>
    <from sec="1273036142" usec="0"/>
    <to sec="1273036174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.110.192.94"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.208.95"/>
    </slice>
    <from sec="1273035889" usec="0"/>
    <to sec="1273035927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.49.96"/>
    </slice>
    <from sec="1273035876" usec="0"/>
    <to sec="1273035909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.10.129.96"/>
    </slice>
    <from sec="1273036274" usec="0"/>
    <to sec="1273036349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
5051[label="128.212.108.20;d;29pkt 29fpkt", shape=diamond, color=yellow];
10148[label="21.198.6.97;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.212.108.20:80}[77.7778%]&lt;BR/&gt;{21.198.6.97:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6842%)&lt;BR/&gt; 51010: (2.63158%)&lt;BR/&gt; 51009: (2.63158%)&lt;BR/&gt; 0: (2.63158%)&lt;BR/&gt; 63852: (1.31579%)&gt;];
}
5051--8324[label="0.0344828;1pkt 1fpkt"];
5051--8342[label="0.0344828;1pkt 1fpkt"];
5051--10148[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="21.198.6.97"/>
      <filter dst_ip="128.212.108.20" dst_port="80"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.198.192.97"/>
    </slice>
    <from sec="1273035620" usec="0"/>
    <to sec="1273036486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.189.199.97"/>
    </slice>
    <from sec="1273036412" usec="0"/>
    <to sec="1273036435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.93.98"/>
    </slice>
    <from sec="1273036176" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.10.129.98"/>
    </slice>
    <from sec="1273036169" usec="0"/>
    <to sec="1273036269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.103.20.99"/>
    </slice>
    <from sec="1273036114" usec="0"/>
    <to sec="1273036135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.229.47.99"/>
    </slice>
    <from sec="1273035707" usec="0"/>
    <to sec="1273036053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.200.200.99"/>
    </slice>
    <from sec="1273036489" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.27.9.100"/>
    </slice>
    <from sec="1273036374" usec="0"/>
    <to sec="1273036388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.14.91.100"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.102.100"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.225.100"/>
    </slice>
    <from sec="1273036246" usec="0"/>
    <to sec="1273036283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.80.67.101"/>
    </slice>
    <from sec="1273035835" usec="0"/>
    <to sec="1273035877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.42.169.101"/>
    </slice>
    <from sec="1273035926" usec="0"/>
    <to sec="1273035942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.93.25.102"/>
    </slice>
    <from sec="1273035986" usec="0"/>
    <to sec="1273036222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.205.96.102"/>
    </slice>
    <from sec="1273036129" usec="0"/>
    <to sec="1273036435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.212.197.102"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.0.6.103"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.81.96.103"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.112.103"/>
    </slice>
    <from sec="1273035715" usec="0"/>
    <to sec="1273035730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.153.103"/>
    </slice>
    <from sec="1273036473" usec="0"/>
    <to sec="1273036487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.39.104"/>
    </slice>
    <from sec="1273035929" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.216.100.104"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.212.126.104"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.136.104"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.168.152.106"/>
    </slice>
    <from sec="1273035914" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.99.183.106"/>
    </slice>
    <from sec="1273035978" usec="0"/>
    <to sec="1273036004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.54.61.107"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.179.109"/>
    </slice>
    <from sec="1273036138" usec="0"/>
    <to sec="1273036250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.220.50.110"/>
    </slice>
    <from sec="1273036083" usec="0"/>
    <to sec="1273036103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.65.110"/>
    </slice>
    <from sec="1273036173" usec="0"/>
    <to sec="1273036236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.25.150.110"/>
    </slice>
    <from sec="1273036330" usec="0"/>
    <to sec="1273036362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.52.157.110"/>
    </slice>
    <from sec="1273036424" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.237.196.110"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.73.224.110"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.91.145.111"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273035910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.203.214.111"/>
    </slice>
    <from sec="1273036003" usec="0"/>
    <to sec="1273036087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
881[label="193.128.129.112;s;597pkt 597fpkt", shape=diamond, color=yellow];
10364[label="193.128.129.112;607pkt 607fpkt", shape=pentagon, color=darkviolet];
13559[label="193.128.129.112;607pkt 607fpkt", shape=invtriangle, color=brown];
15487[label="193.128.129.112;607pkt 607fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.128.129.112:6667, *:*}[42.1746%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (21.1538%)&lt;BR/&gt; 6660: (2.89495%)&lt;BR/&gt; 6666: (2.72953%)&lt;BR/&gt; 6664: (2.5641%)&lt;BR/&gt; 6661: (2.54342%)&gt;];
}
881--8324[label="0.00167504;1pkt 1fpkt"];
881--10364[label="1;597pkt 597fpkt"];
881--13559[label="1;597pkt 597fpkt"];
881--15487[label="1;597pkt 597fpkt"];
10364--13559[label="1;607pkt 607fpkt"];
10364--15487[label="1;607pkt 607fpkt"];
13559--15487[label="1;607pkt 607fpkt"];
</description>
    <slice>
      <filter src_ip="193.128.129.112" src_port="6667"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
3077[label="133.249.221.108;d;242pkt 242fpkt", shape=diamond, color=yellow];
10380[label="134.179.85.113;225pkt 225fpkt", shape=pentagon, color=darkviolet];
13569[label="134.179.85.113;225pkt 225fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.179.85.113:80, 133.249.221.108:*}[92.9752%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2660: (0.216763%)&lt;BR/&gt; 2658: (0.216763%)&lt;BR/&gt; 2656: (0.216763%)&lt;BR/&gt; 2655: (0.216763%)&gt;];
}
3077--10380[label="1;225pkt 225fpkt"];
3077--13569[label="1;225pkt 225fpkt"];
10380--13569[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.221.108" src_ip="134.179.85.113" src_port="80"/>
    </slice>
    <from sec="1273035751" usec="0"/>
    <to sec="1273036365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.107.113"/>
    </slice>
    <from sec="1273035699" usec="0"/>
    <to sec="1273035723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.134.113"/>
    </slice>
    <from sec="1273035811" usec="0"/>
    <to sec="1273035830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.2.8.114"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.218.20.114"/>
    </slice>
    <from sec="1273036222" usec="0"/>
    <to sec="1273036249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.65.114"/>
    </slice>
    <from sec="1273036340" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.26.88.114"/>
    </slice>
    <from sec="1273036031" usec="0"/>
    <to sec="1273036050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.169.146.114"/>
    </slice>
    <from sec="1273035926" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.162.114"/>
    </slice>
    <from sec="1273036406" usec="0"/>
    <to sec="1273036430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.64.237.114"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.133.4.115"/>
    </slice>
    <from sec="1273035719" usec="0"/>
    <to sec="1273035739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.237.235.115"/>
    </slice>
    <from sec="1273036439" usec="0"/>
    <to sec="1273036451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.51.33.116"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.196.33.116"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.14.42.116"/>
    </slice>
    <from sec="1273035728" usec="0"/>
    <to sec="1273035761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.216.59.116"/>
    </slice>
    <from sec="1273035905" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.197.81.116"/>
    </slice>
    <from sec="1273035736" usec="0"/>
    <to sec="1273036478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.113.92.116"/>
    </slice>
    <from sec="1273035785" usec="0"/>
    <to sec="1273036013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.212.108.116"/>
    </slice>
    <from sec="1273035738" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.249.198.116"/>
    </slice>
    <from sec="1273036287" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.130.228.116"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.196.46.118"/>
    </slice>
    <from sec="1273035998" usec="0"/>
    <to sec="1273036071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.180.187.118"/>
    </slice>
    <from sec="1273036160" usec="0"/>
    <to sec="1273036173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.15.91.119"/>
    </slice>
    <from sec="1273036310" usec="0"/>
    <to sec="1273036353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.199.119"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.68.51.120"/>
    </slice>
    <from sec="1273035637" usec="0"/>
    <to sec="1273036482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.130.120"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.216.178.120"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.92.2.121"/>
    </slice>
    <from sec="1273035912" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.161.88.121"/>
    </slice>
    <from sec="1273035697" usec="0"/>
    <to sec="1273035744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
570[label="208.105.190.148;d;152pkt 152fpkt", shape=diamond, color=yellow];
1426[label="176.108.139.121;s;38pkt 38fpkt", shape=diamond, color=yellow];
10522[label="176.108.139.121;177pkt 177fpkt", shape=pentagon, color=darkviolet];
13650[label="176.108.139.121;177pkt 177fpkt", shape=invtriangle, color=brown];
15535[label="176.108.139.121;177pkt 177fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.121:*, 208.105.190.148:*}[97.1751%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (0.762829%)&lt;BR/&gt; 54554: (0.554785%)&lt;BR/&gt; 50166: (0.554785%)&lt;BR/&gt; 42326: (0.554785%)&lt;BR/&gt; 64355: (0.346741%)&gt;];
}
570--1426[label="0.921053;35pkt 35fpkt"];
570--10522[label="1;152pkt 152fpkt"];
570--13650[label="1;152pkt 152fpkt"];
570--15535[label="1;152pkt 152fpkt"];
1426--3441[label="0.0263158;1pkt 1fpkt"];
1426--10522[label="1;38pkt 38fpkt"];
1426--13650[label="1;38pkt 38fpkt"];
1426--15535[label="1;38pkt 38fpkt"];
10522--13650[label="1;177pkt 177fpkt"];
10522--15535[label="1;177pkt 177fpkt"];
13650--15535[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_ip="208.105.190.148" src_ip="176.108.139.121"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.85.146.121"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
1493[label="176.108.139.40;d;94pkt 94fpkt", shape=diamond, color=yellow];
3228[label="205.118.77.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
4188[label="176.108.139.98;d;63pkt 63fpkt", shape=diamond, color=yellow];
4230[label="205.118.77.122;s;2pkt 2fpkt", shape=diamond, color=yellow];
6288[label="176.108.139.40;d;83pkt 83fpkt", shape=hexagon, color=black];
9496[label="205.118.77.57;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10361[label="205.118.77.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10527[label="205.118.77.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13556[label="205.118.77.112;1pkt 1fpkt", shape=invtriangle, color=brown];
13653[label="205.118.77.122;2pkt 2fpkt", shape=invtriangle, color=brown];
15485[label="205.118.77.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.139.98:47448}[33.5443%]&lt;BR/&gt;{205.118.77.12:80, 176.108.139.40:*}[27.2152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.63%)&lt;BR/&gt; 47448: (9.70696%)&lt;BR/&gt; 57783: (0.915751%)&lt;BR/&gt; 57554: (0.915751%)&lt;BR/&gt; 56789: (0.915751%)&gt;];
}
1493--1744[label="0.0319149;3pkt 3fpkt"];
1493--1934[label="0.0212766;2pkt 2fpkt"];
1493--2410[label="0.010989;1pkt 1fpkt"];
1493--2911[label="0.0212766;2pkt 2fpkt"];
1493--3228[label="0.5;1pkt 1fpkt"];
1493--3468[label="0.106061;7pkt 7fpkt"];
1493--3987[label="0.457447;43pkt 43fpkt"];
1493--4230[label="1;2pkt 2fpkt"];
1493--6288[label="1;83pkt 83fpkt"];
1493--8322[label="0.0531915;5pkt 5fpkt"];
1493--8349[label="0.0531915;5pkt 5fpkt"];
1493--8357[label="0.0531915;5pkt 5fpkt"];
1493--8373[label="0.0425532;4pkt 4fpkt"];
1493--8393[label="0.0531915;5pkt 5fpkt"];
1493--8405[label="0.0531915;5pkt 5fpkt"];
1493--8414[label="0.0531915;5pkt 5fpkt"];
1493--8428[label="0.0531915;5pkt 5fpkt"];
1493--8439[label="0.0531915;5pkt 5fpkt"];
1493--8454[label="0.0319149;3pkt 3fpkt"];
1493--8814[label="0.0106383;1pkt 1fpkt"];
1493--9496[label="0.954545;21pkt 21fpkt"];
1493--10402[label="0.0212766;2pkt 2fpkt"];
1493--10527[label="1;2pkt 2fpkt"];
1493--12046[label="0.0106383;1pkt 1fpkt"];
1493--12627[label="0.0106383;1pkt 1fpkt"];
1493--13583[label="0.0212766;2pkt 2fpkt"];
1493--13653[label="1;2pkt 2fpkt"];
1493--14934[label="0.0106383;1pkt 1fpkt"];
3228--4188[label="0.5;1pkt 1fpkt"];
3228--6288[label="0.5;1pkt 1fpkt"];
3228--10361[label="1;1pkt 1fpkt"];
3228--13556[label="1;1pkt 1fpkt"];
3228--15485[label="1;1pkt 1fpkt"];
4188--8373[label="0.031746;2pkt 2fpkt"];
4188--8454[label="0.015873;1pkt 1fpkt"];
4188--10361[label="1;1pkt 1fpkt"];
4188--10402[label="0.111111;7pkt 7fpkt"];
4188--13556[label="1;1pkt 1fpkt"];
4188--13583[label="0.111111;7pkt 7fpkt"];
4188--15485[label="1;1pkt 1fpkt"];
4230--6288[label="1;2pkt 2fpkt"];
4230--10527[label="1;2pkt 2fpkt"];
4230--13653[label="1;2pkt 2fpkt"];
6288--8322[label="0.060241;5pkt 5fpkt"];
6288--8349[label="0.060241;5pkt 5fpkt"];
6288--8357[label="0.060241;5pkt 5fpkt"];
6288--8393[label="0.060241;5pkt 5fpkt"];
6288--8405[label="0.060241;5pkt 5fpkt"];
6288--8414[label="0.060241;5pkt 5fpkt"];
6288--8428[label="0.060241;5pkt 5fpkt"];
6288--8439[label="0.060241;5pkt 5fpkt"];
6288--8814[label="0.0120482;1pkt 1fpkt"];
6288--9496[label="0.772727;17pkt 17fpkt"];
6288--10402[label="0.0240964;2pkt 2fpkt"];
6288--10527[label="1;2pkt 2fpkt"];
6288--12627[label="0.0120482;1pkt 1fpkt"];
6288--13583[label="0.0240964;2pkt 2fpkt"];
6288--13653[label="1;2pkt 2fpkt"];
6288--14934[label="0.0120482;1pkt 1fpkt"];
10361--13556[label="1;1pkt 1fpkt"];
10361--15485[label="1;1pkt 1fpkt"];
10527--13653[label="1;2pkt 2fpkt"];
13556--15485[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.98" dst_port="47448"/>
      <filter dst_ip="176.108.139.40" src_ip="205.118.77.12" src_port="80"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
1358[label="128.33.106.122;s;2504pkt 2504fpkt", shape=diamond, color=yellow];
10529[label="128.33.106.122;2683pkt 2683fpkt", shape=pentagon, color=darkviolet];
13655[label="128.33.106.122;2683pkt 2683fpkt", shape=invtriangle, color=brown];
15539[label="128.33.106.122;2683pkt 2683fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.33.106.122:0, *:0}[99.9627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9621%)&lt;BR/&gt; 41896: (0.018952%)&lt;BR/&gt; 22: (0.018952%)&gt;];
}
1358--4633[label="0.00316456;1pkt 1fpkt"];
1358--4636[label="0.00373134;1pkt 1fpkt"];
1358--5033[label="0.00440529;2pkt 2fpkt"];
1358--7689[label="0.00316456;1pkt 1fpkt"];
1358--7941[label="0.00440529;2pkt 2fpkt"];
1358--10529[label="1;2504pkt 2504fpkt"];
1358--13655[label="1;2504pkt 2504fpkt"];
1358--15539[label="1;2504pkt 2504fpkt"];
10529--13655[label="1;2683pkt 2683fpkt"];
10529--15539[label="1;2683pkt 2683fpkt"];
13655--15539[label="1;2683pkt 2683fpkt"];
</description>
    <slice>
      <filter src_ip="128.33.106.122"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.122"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.215.198.122"/>
    </slice>
    <from sec="1273035733" usec="0"/>
    <to sec="1273035753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.203.24.124"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.46.124"/>
    </slice>
    <from sec="1273035704" usec="0"/>
    <to sec="1273035735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.7.144.124"/>
    </slice>
    <from sec="1273035782" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.208.124"/>
    </slice>
    <from sec="1273035920" usec="0"/>
    <to sec="1273036003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.19.210.124"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.249.124"/>
    </slice>
    <from sec="1273035999" usec="0"/>
    <to sec="1273036033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.226.227.125"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273036369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.45.246.125"/>
    </slice>
    <from sec="1273036068" usec="0"/>
    <to sec="1273036082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.186.213.126"/>
    </slice>
    <from sec="1273036328" usec="0"/>
    <to sec="1273036347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.12.127"/>
    </slice>
    <from sec="1273035979" usec="0"/>
    <to sec="1273036022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.42.38.127"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.240.224.127"/>
    </slice>
    <from sec="1273036197" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.50.128"/>
    </slice>
    <from sec="1273036163" usec="0"/>
    <to sec="1273036177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.159.89.128"/>
    </slice>
    <from sec="1273036455" usec="0"/>
    <to sec="1273036479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.236.128"/>
    </slice>
    <from sec="1273035673" usec="0"/>
    <to sec="1273035704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.110.5.129"/>
    </slice>
    <from sec="1273036094" usec="0"/>
    <to sec="1273036106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.215.13.129"/>
    </slice>
    <from sec="1273036207" usec="0"/>
    <to sec="1273036216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.158.23.129"/>
    </slice>
    <from sec="1273035905" usec="0"/>
    <to sec="1273035916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.88.82.129"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.198.47.130"/>
    </slice>
    <from sec="1273035633" usec="0"/>
    <to sec="1273036384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.176.88.130"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273035621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.183.137.130"/>
    </slice>
    <from sec="1273036045" usec="0"/>
    <to sec="1273036057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.165.169.130"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.246.130"/>
    </slice>
    <from sec="1273035617" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.71.20.131"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.225.64.131"/>
    </slice>
    <from sec="1273036115" usec="0"/>
    <to sec="1273036159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.145.131"/>
    </slice>
    <from sec="1273036172" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.10.149.131"/>
    </slice>
    <from sec="1273035952" usec="0"/>
    <to sec="1273035955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.153.132"/>
    </slice>
    <from sec="1273035951" usec="0"/>
    <to sec="1273035977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.34.181.132"/>
    </slice>
    <from sec="1273035910" usec="0"/>
    <to sec="1273035959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.40.133"/>
    </slice>
    <from sec="1273036049" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.9.171.134"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.54.135"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.93.68.135"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.213.194.135"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.36.136"/>
    </slice>
    <from sec="1273035935" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.47.164.136"/>
    </slice>
    <from sec="1273035702" usec="0"/>
    <to sec="1273035724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.45.216.136"/>
    </slice>
    <from sec="1273035921" usec="0"/>
    <to sec="1273035948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.152.137"/>
    </slice>
    <from sec="1273035995" usec="0"/>
    <to sec="1273036029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.23.169.137"/>
    </slice>
    <from sec="1273036189" usec="0"/>
    <to sec="1273036226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.24.138"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.177.129.138"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.214.138"/>
    </slice>
    <from sec="1273036155" usec="0"/>
    <to sec="1273036188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.236.138"/>
    </slice>
    <from sec="1273036371" usec="0"/>
    <to sec="1273036407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.6.67.139"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.99.116.139"/>
    </slice>
    <from sec="1273036131" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.150.139"/>
    </slice>
    <from sec="1273036444" usec="0"/>
    <to sec="1273036469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.16.197.140"/>
    </slice>
    <from sec="1273036101" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.21.199.140"/>
    </slice>
    <from sec="1273036290" usec="0"/>
    <to sec="1273036303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.135.40.141"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.197.181.141"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.93.18.142"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.233.139.142"/>
    </slice>
    <from sec="1273035879" usec="0"/>
    <to sec="1273035907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.204.142"/>
    </slice>
    <from sec="1273036023" usec="0"/>
    <to sec="1273036063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.177.7.143"/>
    </slice>
    <from sec="1273036011" usec="0"/>
    <to sec="1273036014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.143"/>
    </slice>
    <from sec="1273035633" usec="0"/>
    <to sec="1273035685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.245.128.143"/>
    </slice>
    <from sec="1273036419" usec="0"/>
    <to sec="1273036433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.203.52.144"/>
    </slice>
    <from sec="1273036002" usec="0"/>
    <to sec="1273036015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.109.176.144"/>
    </slice>
    <from sec="1273035845" usec="0"/>
    <to sec="1273035851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
264[label="176.108.136.175;d;395pkt 395fpkt", shape=diamond, color=yellow];
2673[label="41.80.107.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
3102[label="221.229.22.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
4256[label="15.0.204.94;s;7pkt 7fpkt", shape=diamond, color=yellow];
5428[label="176.108.136.175;d;73pkt 73fpkt", shape=hexagon, color=black];
9461[label="221.109.49.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10076[label="21.72.68.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10115[label="15.0.204.94;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10856[label="221.229.22.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11074[label="14.67.117.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11729[label="9.66.249.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13003[label="221.109.49.55;1pkt 1fpkt", shape=invtriangle, color=brown];
13383[label="21.72.68.91;1pkt 1fpkt", shape=invtriangle, color=brown];
13407[label="15.0.204.94;8pkt 8fpkt", shape=invtriangle, color=brown];
13855[label="221.229.22.145;1pkt 1fpkt", shape=invtriangle, color=brown];
15389[label="21.72.68.91;1pkt 1fpkt", shape=invhouse, color=bisque];
15642[label="221.229.22.145;1pkt 1fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.136.175:8183}[82.7848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8183: (47.2167%)&lt;BR/&gt; 8284: (5.36779%)&lt;BR/&gt; 15000: (2.8827%)&lt;BR/&gt; 80: (1.68986%)&lt;BR/&gt; 0: (0.596421%)&gt;];
}
264--2673[label="1;1pkt 1fpkt"];
264--3102[label="1;1pkt 1fpkt"];
264--3238[label="0.00253165;1pkt 1fpkt"];
264--4256[label="1;7pkt 7fpkt"];
264--5428[label="1;73pkt 73fpkt"];
264--8322[label="0.00253165;1pkt 1fpkt"];
264--8349[label="0.00253165;1pkt 1fpkt"];
264--8357[label="0.00253165;1pkt 1fpkt"];
264--8393[label="0.00253165;1pkt 1fpkt"];
264--8405[label="0.00253165;1pkt 1fpkt"];
264--8414[label="0.00253165;1pkt 1fpkt"];
264--8428[label="0.00253165;1pkt 1fpkt"];
264--8439[label="0.00253165;1pkt 1fpkt"];
264--9461[label="1;1pkt 1fpkt"];
264--10076[label="1;1pkt 1fpkt"];
264--10115[label="1;8pkt 8fpkt"];
264--10856[label="1;1pkt 1fpkt"];
264--11074[label="1;1pkt 1fpkt"];
264--11729[label="1;1pkt 1fpkt"];
264--12166[label="0.00253165;1pkt 1fpkt"];
264--13003[label="1;1pkt 1fpkt"];
264--13383[label="1;1pkt 1fpkt"];
264--13407[label="1;8pkt 8fpkt"];
264--13855[label="1;1pkt 1fpkt"];
264--14656[label="0.00253165;1pkt 1fpkt"];
264--15389[label="1;1pkt 1fpkt"];
264--15642[label="1;1pkt 1fpkt"];
264--16075[label="0.00253165;1pkt 1fpkt"];
3102--10856[label="1;1pkt 1fpkt"];
3102--13855[label="1;1pkt 1fpkt"];
3102--15642[label="1;1pkt 1fpkt"];
4256--5428[label="0.428571;3pkt 3fpkt"];
4256--10115[label="0.857143;6pkt 6fpkt"];
4256--13407[label="0.857143;6pkt 6fpkt"];
5428--9461[label="1;1pkt 1fpkt"];
5428--10115[label="0.25;2pkt 2fpkt"];
5428--11729[label="1;1pkt 1fpkt"];
5428--13003[label="1;1pkt 1fpkt"];
5428--13407[label="0.25;2pkt 2fpkt"];
9461--13003[label="1;1pkt 1fpkt"];
10076--13383[label="1;1pkt 1fpkt"];
10076--15389[label="1;1pkt 1fpkt"];
10115--13407[label="1;8pkt 8fpkt"];
10856--13855[label="1;1pkt 1fpkt"];
10856--15642[label="1;1pkt 1fpkt"];
13383--15389[label="1;1pkt 1fpkt"];
13855--15642[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.136.175" dst_port="8183"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.51.145"/>
    </slice>
    <from sec="1273036037" usec="0"/>
    <to sec="1273036054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.128.145"/>
    </slice>
    <from sec="1273035973" usec="0"/>
    <to sec="1273036012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.90.189.145"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.161.211.145"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.248.145"/>
    </slice>
    <from sec="1273036154" usec="0"/>
    <to sec="1273036445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.106.158.146"/>
    </slice>
    <from sec="1273035695" usec="0"/>
    <to sec="1273036425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.198.171.146"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.221.181.146"/>
    </slice>
    <from sec="1273036228" usec="0"/>
    <to sec="1273036255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.145.14.147"/>
    </slice>
    <from sec="1273035784" usec="0"/>
    <to sec="1273035796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.19.24.147"/>
    </slice>
    <from sec="1273036320" usec="0"/>
    <to sec="1273036343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.80.182.148"/>
    </slice>
    <from sec="1273036203" usec="0"/>
    <to sec="1273036232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.150.198.148"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.157.204.149"/>
    </slice>
    <from sec="1273036130" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.192.32.150"/>
    </slice>
    <from sec="1273035670" usec="0"/>
    <to sec="1273035718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.89.180.150"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.182.183.150"/>
    </slice>
    <from sec="1273035730" usec="0"/>
    <to sec="1273035746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.133.48.152"/>
    </slice>
    <from sec="1273035877" usec="0"/>
    <to sec="1273035920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.228.149.152"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.162.229.152"/>
    </slice>
    <from sec="1273036173" usec="0"/>
    <to sec="1273036401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.27.230.153"/>
    </slice>
    <from sec="1273035636" usec="0"/>
    <to sec="1273035642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.109.176.154"/>
    </slice>
    <from sec="1273035656" usec="0"/>
    <to sec="1273035663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.96.195.154"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.152.155"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.62.36.156"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.114.147.156"/>
    </slice>
    <from sec="1273036079" usec="0"/>
    <to sec="1273036088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.207.21.157"/>
    </slice>
    <from sec="1273036101" usec="0"/>
    <to sec="1273036142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.150.135.157"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.238.158.157"/>
    </slice>
    <from sec="1273035758" usec="0"/>
    <to sec="1273035772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.88.180.157"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273036370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
702[label="204.134.238.237;d;138pkt 138fpkt", shape=diamond, color=yellow];
6280[label="204.134.238.237;d;138pkt 138fpkt", shape=hexagon, color=black];
9098[label="20.160.112.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9414[label="72.247.232.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9528[label="9.71.3.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9955[label="4.228.130.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10913[label="9.152.164.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11045[label="221.164.200.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11516[label="217.160.82.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12796[label="20.160.112.33;1pkt 1fpkt", shape=invtriangle, color=brown];
13045[label="9.71.3.59;1pkt 1fpkt", shape=invtriangle, color=brown];
13886[label="9.152.164.148;1pkt 1fpkt", shape=invtriangle, color=brown];
13970[label="221.164.200.157;1pkt 1fpkt", shape=invtriangle, color=brown];
14844[label="41.210.225.5;1pkt 1fpkt", shape=invhouse, color=bisque];
15025[label="20.160.112.33;1pkt 1fpkt", shape=invhouse, color=bisque];
15185[label="9.71.3.59;1pkt 1fpkt", shape=invhouse, color=bisque];
15659[label="9.152.164.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.134.238.237:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (8.24742%)&lt;BR/&gt; 4444: (3.09278%)&lt;BR/&gt; 4682: (2.92096%)&lt;BR/&gt; 32568: (1.20275%)&lt;BR/&gt; 52738: (0.859107%)&gt;];
}
702--3634[label="0.00724638;1pkt 1fpkt"];
702--6280[label="1;138pkt 138fpkt"];
702--8350[label="0.00724638;1pkt 1fpkt"];
702--8406[label="0.00724638;1pkt 1fpkt"];
702--8440[label="0.00724638;1pkt 1fpkt"];
702--9098[label="1;1pkt 1fpkt"];
702--9414[label="1;1pkt 1fpkt"];
702--9528[label="1;1pkt 1fpkt"];
702--9955[label="1;1pkt 1fpkt"];
702--10913[label="1;1pkt 1fpkt"];
702--11045[label="1;1pkt 1fpkt"];
702--11516[label="1;1pkt 1fpkt"];
702--12796[label="1;1pkt 1fpkt"];
702--13045[label="1;1pkt 1fpkt"];
702--13886[label="1;1pkt 1fpkt"];
702--13970[label="1;1pkt 1fpkt"];
702--14844[label="1;1pkt 1fpkt"];
702--15025[label="1;1pkt 1fpkt"];
702--15185[label="1;1pkt 1fpkt"];
702--15659[label="1;1pkt 1fpkt"];
6280--8350[label="0.00724638;1pkt 1fpkt"];
6280--8406[label="0.00724638;1pkt 1fpkt"];
6280--8440[label="0.00724638;1pkt 1fpkt"];
6280--9098[label="1;1pkt 1fpkt"];
6280--9414[label="1;1pkt 1fpkt"];
6280--9528[label="1;1pkt 1fpkt"];
6280--9955[label="1;1pkt 1fpkt"];
6280--10913[label="1;1pkt 1fpkt"];
6280--11045[label="1;1pkt 1fpkt"];
6280--11516[label="1;1pkt 1fpkt"];
6280--12796[label="1;1pkt 1fpkt"];
6280--13045[label="1;1pkt 1fpkt"];
6280--13886[label="1;1pkt 1fpkt"];
6280--13970[label="1;1pkt 1fpkt"];
6280--14844[label="1;1pkt 1fpkt"];
6280--15025[label="1;1pkt 1fpkt"];
6280--15185[label="1;1pkt 1fpkt"];
6280--15659[label="1;1pkt 1fpkt"];
9098--12796[label="1;1pkt 1fpkt"];
9098--15025[label="1;1pkt 1fpkt"];
9528--13045[label="1;1pkt 1fpkt"];
9528--15185[label="1;1pkt 1fpkt"];
10913--13886[label="1;1pkt 1fpkt"];
10913--15659[label="1;1pkt 1fpkt"];
11045--13970[label="1;1pkt 1fpkt"];
12796--15025[label="1;1pkt 1fpkt"];
13045--15185[label="1;1pkt 1fpkt"];
13886--15659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.238.237"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.243.68.158"/>
    </slice>
    <from sec="1273035942" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.170.158"/>
    </slice>
    <from sec="1273035907" usec="0"/>
    <to sec="1273035952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.218.184.158"/>
    </slice>
    <from sec="1273036056" usec="0"/>
    <to sec="1273036081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.105.48.159"/>
    </slice>
    <from sec="1273035928" usec="0"/>
    <to sec="1273035940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.142.245.159"/>
    </slice>
    <from sec="1273036247" usec="0"/>
    <to sec="1273036270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.83.160"/>
    </slice>
    <from sec="1273036221" usec="0"/>
    <to sec="1273036248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.169.83.160"/>
    </slice>
    <from sec="1273036178" usec="0"/>
    <to sec="1273036218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.34.117.160"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.139.160"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.129.198.160"/>
    </slice>
    <from sec="1273036226" usec="0"/>
    <to sec="1273036251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.93.73.161"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.255.88.161"/>
    </slice>
    <from sec="1273036289" usec="0"/>
    <to sec="1273036303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.42.119.161"/>
    </slice>
    <from sec="1273036027" usec="0"/>
    <to sec="1273036306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.12.180.162"/>
    </slice>
    <from sec="1273036069" usec="0"/>
    <to sec="1273036091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.118.163"/>
    </slice>
    <from sec="1273035962" usec="0"/>
    <to sec="1273036016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
1359[label="133.249.215.5;d;49pkt 49fpkt", shape=diamond, color=yellow];
2169[label="133.249.215.0;d;57pkt 57fpkt", shape=diamond, color=yellow];
2569[label="72.247.139.235;s;46pkt 46fpkt", shape=diamond, color=yellow];
3498[label="133.249.138.71;d;25pkt 25fpkt", shape=diamond, color=yellow];
3562[label="20.160.8.55;s;19pkt 19fpkt", shape=diamond, color=yellow];
6206[label="133.249.215.5;d;38pkt 38fpkt", shape=hexagon, color=black];
6899[label="133.249.215.0;d;33pkt 33fpkt", shape=hexagon, color=black];
9608[label="0.80.18.64;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11147[label="20.231.245.163;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14031[label="20.231.245.163;14pkt 14fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.249.215.5:80}[34.2857%]&lt;BR/&gt;{72.247.139.235:*, 133.249.215.0:80}[23.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.835%)&lt;BR/&gt; 63962: (0.49505%)&lt;BR/&gt; 63920: (0.49505%)&lt;BR/&gt; 63802: (0.49505%)&lt;BR/&gt; 63623: (0.49505%)&gt;];
}
1359--2569[label="0.0869565;4pkt 4fpkt"];
1359--3562[label="0.315789;6pkt 6fpkt"];
1359--5062[label="0.0204082;1pkt 1fpkt"];
1359--6206[label="1;38pkt 38fpkt"];
1359--8324[label="0.102041;5pkt 5fpkt"];
1359--8342[label="0.0204082;1pkt 1fpkt"];
1359--8349[label="0.0204082;1pkt 1fpkt"];
1359--8405[label="0.0204082;1pkt 1fpkt"];
1359--8439[label="0.0204082;1pkt 1fpkt"];
1359--9608[label="1;8pkt 8fpkt"];
2169--2569[label="0.717391;33pkt 33fpkt"];
2169--6899[label="1;33pkt 33fpkt"];
2169--11147[label="1;14pkt 14fpkt"];
2169--14031[label="1;14pkt 14fpkt"];
2569--6206[label="0.105263;4pkt 4fpkt"];
2569--6456[label="0.195652;9pkt 9fpkt"];
2569--6899[label="1;33pkt 33fpkt"];
2569--8324[label="0.282609;13pkt 13fpkt"];
3498--3562[label="0.684211;13pkt 13fpkt"];
3498--8324[label="0.08;2pkt 2fpkt"];
3562--6206[label="0.315789;6pkt 6fpkt"];
6206--8324[label="0.131579;5pkt 5fpkt"];
6206--8342[label="0.0263158;1pkt 1fpkt"];
6206--8349[label="0.0263158;1pkt 1fpkt"];
6206--8405[label="0.0263158;1pkt 1fpkt"];
6206--8439[label="0.0263158;1pkt 1fpkt"];
6206--9608[label="1;8pkt 8fpkt"];
11147--14031[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.215.5" dst_port="80"/>
      <filter dst_ip="133.249.215.0" dst_port="80" src_ip="72.247.139.235"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.163.65.164"/>
    </slice>
    <from sec="1273036293" usec="0"/>
    <to sec="1273036304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.114.102.164"/>
    </slice>
    <from sec="1273036008" usec="0"/>
    <to sec="1273036063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.9.132.164"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.78.104.165"/>
    </slice>
    <from sec="1273035850" usec="0"/>
    <to sec="1273036102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.240.133.165"/>
    </slice>
    <from sec="1273036116" usec="0"/>
    <to sec="1273036131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.1.166"/>
    </slice>
    <from sec="1273036285" usec="0"/>
    <to sec="1273036340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.46367,2.81204,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
130[label="208.51.41.166s;225pkt 225fpkt", shape=rectangle, color=red];
11181[label="208.51.41.166;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.51.41.166:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4999: (0.208768%)&lt;BR/&gt; 4998: (0.208768%)&lt;BR/&gt; 4997: (0.208768%)&lt;BR/&gt; 4996: (0.208768%)&gt;];
}
130--11181[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="208.51.41.166"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
5290[label="133.249.48.1;d;33pkt 33fpkt", shape=diamond, color=yellow];
7915[label="133.249.48.1;d;33pkt 33fpkt", shape=hexagon, color=black];
11183[label="76.215.65.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14054[label="76.215.65.166;2pkt 2fpkt", shape=invtriangle, color=brown];
15751[label="76.215.65.166;2pkt 2fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.80.160.240:80, 133.249.48.1:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 8000: (8.33333%)&lt;BR/&gt; 443: (8.33333%)&lt;BR/&gt; 48948: (6.94444%)&lt;BR/&gt; 60807: (1.38889%)&gt;];
}
5290--7915[label="1;33pkt 33fpkt"];
5290--8373[label="0.151515;5pkt 5fpkt"];
5290--11183[label="1;2pkt 2fpkt"];
5290--14054[label="1;2pkt 2fpkt"];
5290--15751[label="1;2pkt 2fpkt"];
7915--8373[label="0.151515;5pkt 5fpkt"];
7915--11183[label="1;2pkt 2fpkt"];
7915--14054[label="1;2pkt 2fpkt"];
7915--15751[label="1;2pkt 2fpkt"];
11183--14054[label="1;2pkt 2fpkt"];
11183--15751[label="1;2pkt 2fpkt"];
14054--15751[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.48.1" src_ip="219.80.160.240" src_port="80"/>
    </slice>
    <from sec="1273036129" usec="0"/>
    <to sec="1273036492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
4331[label="205.121.151.67;d;64pkt 64fpkt", shape=diamond, color=yellow];
7521[label="205.121.151.67;d;55pkt 55fpkt", shape=hexagon, color=black];
11187[label="76.195.115.166;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14057[label="76.195.115.166;5pkt 5fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.171.81.200:*, 205.121.151.67:80}[32.8125%]&lt;BR/&gt;{76.244.46.226:*, 205.121.151.67:80}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49368: (1.55039%)&lt;BR/&gt; 49274: (1.55039%)&lt;BR/&gt; 49247: (1.55039%)&lt;BR/&gt; 49244: (1.55039%)&gt;];
}
4331--7521[label="1;55pkt 55fpkt"];
4331--8324[label="0.015625;1pkt 1fpkt"];
4331--8342[label="0.03125;2pkt 2fpkt"];
4331--11187[label="1;5pkt 5fpkt"];
4331--14057[label="1;5pkt 5fpkt"];
7521--8324[label="0.0181818;1pkt 1fpkt"];
7521--8342[label="0.0363636;2pkt 2fpkt"];
7521--11187[label="1;5pkt 5fpkt"];
7521--14057[label="1;5pkt 5fpkt"];
11187--14057[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="205.121.151.67" dst_port="80" src_ip="45.171.81.200"/>
      <filter dst_ip="205.121.151.67" dst_port="80" src_ip="76.244.46.226"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.156.166"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.118.167"/>
    </slice>
    <from sec="1273036286" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.224.66.168"/>
    </slice>
    <from sec="1273036383" usec="0"/>
    <to sec="1273036394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.76.185.168"/>
    </slice>
    <from sec="1273035846" usec="0"/>
    <to sec="1273036462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.74.147.169"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.218.45.170"/>
    </slice>
    <from sec="1273036006" usec="0"/>
    <to sec="1273036025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.140.109.171"/>
    </slice>
    <from sec="1273035946" usec="0"/>
    <to sec="1273035970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.198.133.171"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.34.90.172"/>
    </slice>
    <from sec="1273035667" usec="0"/>
    <to sec="1273035687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.92.214.173"/>
    </slice>
    <from sec="1273035764" usec="0"/>
    <to sec="1273035766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.129.39.174"/>
    </slice>
    <from sec="1273035610" usec="0"/>
    <to sec="1273036209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.128.174"/>
    </slice>
    <from sec="1273036208" usec="0"/>
    <to sec="1273036257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.171.182.174"/>
    </slice>
    <from sec="1273035857" usec="0"/>
    <to sec="1273035904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.77.225.174"/>
    </slice>
    <from sec="1273035927" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.106.44.175"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.80.107.175"/>
    </slice>
    <from sec="1273035826" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.45.187.175"/>
    </slice>
    <from sec="1273036469" usec="0"/>
    <to sec="1273036488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.176"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.44.128.176"/>
    </slice>
    <from sec="1273036158" usec="0"/>
    <to sec="1273036227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.134.153.176"/>
    </slice>
    <from sec="1273036454" usec="0"/>
    <to sec="1273036465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.79.228.176"/>
    </slice>
    <from sec="1273036096" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.18.68.177"/>
    </slice>
    <from sec="1273035724" usec="0"/>
    <to sec="1273036022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.201.109.177"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
5308[label="133.249.130.177;s;59pkt 59fpkt", shape=diamond, color=yellow];
11349[label="133.249.130.177;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.130.177:*, 213.239.184.172:80}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.187%)&lt;BR/&gt; 4566: (0.813008%)&lt;BR/&gt; 4562: (0.813008%)&lt;BR/&gt; 4554: (0.813008%)&lt;BR/&gt; 4552: (0.813008%)&gt;];
}
5308--11349[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="213.239.184.172" dst_port="80" src_ip="133.249.130.177"/>
    </slice>
    <from sec="1273036237" usec="0"/>
    <to sec="1273036447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.114.180.177"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.187.88.178"/>
    </slice>
    <from sec="1273035981" usec="0"/>
    <to sec="1273035985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.56.162.178"/>
    </slice>
    <from sec="1273036231" usec="0"/>
    <to sec="1273036240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.222.28.179"/>
    </slice>
    <from sec="1273035933" usec="0"/>
    <to sec="1273035938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.103.6.180"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273035675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.197.180"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273035637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.201.109.181"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.181"/>
    </slice>
    <from sec="1273036093" usec="0"/>
    <to sec="1273036134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.62.131.181"/>
    </slice>
    <from sec="1273035786" usec="0"/>
    <to sec="1273035799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.18.80.182"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.87.178.182"/>
    </slice>
    <from sec="1273036095" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.196.184.182"/>
    </slice>
    <from sec="1273035985" usec="0"/>
    <to sec="1273035997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.212.220.182"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.48.24.183"/>
    </slice>
    <from sec="1273036093" usec="0"/>
    <to sec="1273036115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.197.183"/>
    </slice>
    <from sec="1273035848" usec="0"/>
    <to sec="1273035914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.16.248.183"/>
    </slice>
    <from sec="1273036147" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.218.81.184"/>
    </slice>
    <from sec="1273036019" usec="0"/>
    <to sec="1273036033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.6.192.184"/>
    </slice>
    <from sec="1273036189" usec="0"/>
    <to sec="1273036269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.51.42.186"/>
    </slice>
    <from sec="1273035609" usec="0"/>
    <to sec="1273035773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
4680[label="152.85.163.186;s;478pkt 478fpkt", shape=diamond, color=yellow];
11482[label="152.85.163.186;500pkt 500fpkt", shape=pentagon, color=darkviolet];
14232[label="152.85.163.186;500pkt 500fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.163.186:49613, *:*}[96.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49613: (48.3762%)&lt;BR/&gt; 443: (1.11637%)&lt;BR/&gt; 80: (0.507442%)&lt;BR/&gt; 59059: (0.202977%)&lt;BR/&gt; 41344: (0.202977%)&gt;];
}
4680--8322[label="0.00209205;1pkt 1fpkt"];
4680--8349[label="0.00627615;3pkt 3fpkt"];
4680--8357[label="0.00627615;3pkt 3fpkt"];
4680--8373[label="0.00209205;1pkt 1fpkt"];
4680--8393[label="0.00209205;1pkt 1fpkt"];
4680--8405[label="0.00627615;3pkt 3fpkt"];
4680--8414[label="0.00627615;3pkt 3fpkt"];
4680--8428[label="0.00209205;1pkt 1fpkt"];
4680--8439[label="0.00627615;3pkt 3fpkt"];
4680--8454[label="0.00209205;1pkt 1fpkt"];
4680--11482[label="1;478pkt 478fpkt"];
4680--14232[label="1;478pkt 478fpkt"];
11482--14232[label="1;500pkt 500fpkt"];
</description>
    <slice>
      <filter src_ip="152.85.163.186" src_port="49613"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.24.187"/>
    </slice>
    <from sec="1273035621" usec="0"/>
    <to sec="1273035660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.137.67.187"/>
    </slice>
    <from sec="1273036247" usec="0"/>
    <to sec="1273036291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.7.136.188"/>
    </slice>
    <from sec="1273035919" usec="0"/>
    <to sec="1273036066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.66.228.188"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.17.189"/>
    </slice>
    <from sec="1273035987" usec="0"/>
    <to sec="1273036019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.224.189"/>
    </slice>
    <from sec="1273035729" usec="0"/>
    <to sec="1273036024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.152.130.190"/>
    </slice>
    <from sec="1273036380" usec="0"/>
    <to sec="1273036417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.54.191"/>
    </slice>
    <from sec="1273035645" usec="0"/>
    <to sec="1273035687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.11.147.191"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.212.172.191"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.142.23.192"/>
    </slice>
    <from sec="1273036447" usec="0"/>
    <to sec="1273036452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.46367,2.81204,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
50[label="76.236.28.192s;1pkt 1fpkt", shape=rectangle, color=red];
11557[label="76.236.28.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.236.28.192:51258, 205.119.25.8:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51258: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
50--11557[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.119.25.8" dst_port="25" src_ip="76.236.28.192" src_port="51258"/>
    </slice>
    <from sec="1273036394" usec="0"/>
    <to sec="1273036401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.203.33.192"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.8.52.192"/>
    </slice>
    <from sec="1273035946" usec="0"/>
    <to sec="1273035957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.156.164.192"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.7.204.192"/>
    </slice>
    <from sec="1273036213" usec="0"/>
    <to sec="1273036242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.6.193"/>
    </slice>
    <from sec="1273035918" usec="0"/>
    <to sec="1273035930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.10.193"/>
    </slice>
    <from sec="1273036048" usec="0"/>
    <to sec="1273036074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.40.18.193"/>
    </slice>
    <from sec="1273036108" usec="0"/>
    <to sec="1273036138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.46367,2.81204,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
133[label="85.237.87.193s;79pkt 79fpkt", shape=rectangle, color=red];
11586[label="85.237.87.193;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.237.87.193:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 2826: (0.3003%)&lt;BR/&gt; 2825: (0.3003%)&lt;BR/&gt; 2824: (0.3003%)&lt;BR/&gt; 2823: (0.3003%)&gt;];
}
133--11586[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="85.237.87.193"/>
    </slice>
    <from sec="1273036340" usec="0"/>
    <to sec="1273036352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.131.5.194"/>
    </slice>
    <from sec="1273035971" usec="0"/>
    <to sec="1273035975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60542,2.7762,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
134[label="32.234.27.194s;75pkt 75fpkt", shape=rectangle, color=red];
11601[label="32.234.27.194;256pkt 256fpkt", shape=pentagon, color=darkviolet];
14306[label="32.234.27.194;256pkt 256fpkt", shape=invtriangle, color=brown];
15890[label="32.234.27.194;256pkt 256fpkt", shape=invhouse, color=bisque];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.234.27.194:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3934: (0.237248%)&lt;BR/&gt; 3933: (0.237248%)&lt;BR/&gt; 3932: (0.237248%)&lt;BR/&gt; 3931: (0.237248%)&gt;];
}
134--11601[label="1;75pkt 75fpkt"];
134--14306[label="1;75pkt 75fpkt"];
134--15890[label="1;75pkt 75fpkt"];
11601--14306[label="1;256pkt 256fpkt"];
11601--15890[label="1;256pkt 256fpkt"];
14306--15890[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="32.234.27.194"/>
    </slice>
    <from sec="1273036264" usec="0"/>
    <to sec="1273036278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.108.194"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.80.136.195"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.231.195"/>
    </slice>
    <from sec="1273036339" usec="0"/>
    <to sec="1273036380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.61.73.196"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.194.130.196"/>
    </slice>
    <from sec="1273035648" usec="0"/>
    <to sec="1273036332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.37.161.196"/>
    </slice>
    <from sec="1273036146" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.209.176.196"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
1412[label="217.144.68.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
1413[label="128.212.115.156;d;37pkt 37fpkt", shape=diamond, color=yellow];
3623[label="73.68.114.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
3676[label="5.228.44.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
5946[label="128.212.115.156;d;37pkt 37fpkt", shape=hexagon, color=black];
11201[label="217.151.96.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14071[label="217.151.96.167;1pkt 1fpkt", shape=invtriangle, color=brown];
15760[label="217.151.96.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 128.212.115.156:5041}[29.7297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (58.75%)&lt;BR/&gt; 80: (5%)&lt;BR/&gt; 61482: (3.125%)&lt;BR/&gt; 8000: (2.5%)&lt;BR/&gt; 63575: (1.875%)&gt;];
}
1412--1413[label="1;1pkt 1fpkt"];
1412--5946[label="1;1pkt 1fpkt"];
1413--3623[label="1;1pkt 1fpkt"];
1413--3676[label="1;1pkt 1fpkt"];
1413--5946[label="1;37pkt 37fpkt"];
1413--8322[label="0.0540541;2pkt 2fpkt"];
1413--8373[label="0.027027;1pkt 1fpkt"];
1413--8393[label="0.0540541;2pkt 2fpkt"];
1413--8428[label="0.0540541;2pkt 2fpkt"];
1413--11201[label="1;1pkt 1fpkt"];
1413--11642[label="0.027027;1pkt 1fpkt"];
1413--14071[label="1;1pkt 1fpkt"];
1413--15760[label="1;1pkt 1fpkt"];
3623--5946[label="1;1pkt 1fpkt"];
3676--5946[label="1;1pkt 1fpkt"];
5946--8322[label="0.0540541;2pkt 2fpkt"];
5946--8373[label="0.027027;1pkt 1fpkt"];
5946--8393[label="0.0540541;2pkt 2fpkt"];
5946--8428[label="0.0540541;2pkt 2fpkt"];
5946--11201[label="1;1pkt 1fpkt"];
5946--11642[label="0.027027;1pkt 1fpkt"];
5946--14071[label="1;1pkt 1fpkt"];
5946--15760[label="1;1pkt 1fpkt"];
11201--14071[label="1;1pkt 1fpkt"];
11201--15760[label="1;1pkt 1fpkt"];
14071--15760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.115.156" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.154.116.197"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.137.155.198"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.100.12.199"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.199"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
372[label="128.194.11.60;d;504pkt 504fpkt", shape=diamond, color=yellow];
373[label="12.137.27.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
3081[label="86.37.100.84;s;50pkt 50fpkt", shape=diamond, color=yellow];
3535[label="219.101.157.143;s;326pkt 326fpkt", shape=diamond, color=yellow];
3589[label="128.194.80.115;d;30pkt 30fpkt", shape=diamond, color=yellow];
4894[label="220.61.123.199;s;34pkt 34fpkt", shape=diamond, color=yellow];
5928[label="128.194.11.60;d;234pkt 234fpkt", shape=hexagon, color=black];
6828[label="128.194.80.115;d;21pkt 21fpkt", shape=hexagon, color=black];
10419[label="8.200.237.114;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10837[label="219.101.157.143;396pkt 396fpkt", shape=pentagon, color=darkviolet];
11670[label="220.61.123.199;34pkt 34fpkt", shape=pentagon, color=darkviolet];
13846[label="219.101.157.143;396pkt 396fpkt", shape=invtriangle, color=brown];
15638[label="219.101.157.143;396pkt 396fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.101.157.143:*, 128.194.11.60:80}[65.5971%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7537%)&lt;BR/&gt; 443: (0.164204%)&lt;BR/&gt; 50382: (0.143678%)&lt;BR/&gt; 60994: (0.123153%)&lt;BR/&gt; 60952: (0.123153%)&gt;];
}
372--373[label="1;1pkt 1fpkt"];
372--3081[label="0.52;26pkt 26fpkt"];
372--3535[label="0.960123;313pkt 313fpkt"];
372--4894[label="0.941176;32pkt 32fpkt"];
372--5928[label="1;234pkt 234fpkt"];
372--8324[label="0.0218254;11pkt 11fpkt"];
372--8342[label="0.299603;151pkt 151fpkt"];
372--8376[label="0.00198413;1pkt 1fpkt"];
372--10419[label="0.928571;13pkt 13fpkt"];
372--10837[label="0.929293;368pkt 368fpkt"];
372--11670[label="0.941176;32pkt 32fpkt"];
372--13846[label="0.929293;368pkt 368fpkt"];
372--15638[label="0.929293;368pkt 368fpkt"];
373--5928[label="1;1pkt 1fpkt"];
3535--3589[label="0.433333;13pkt 13fpkt"];
3535--5928[label="0.880342;206pkt 206fpkt"];
3535--6828[label="0.619048;13pkt 13fpkt"];
3535--8342[label="0.447853;146pkt 146fpkt"];
3535--10837[label="1;326pkt 326fpkt"];
3535--13846[label="1;326pkt 326fpkt"];
3535--15638[label="1;326pkt 326fpkt"];
3589--6828[label="1;21pkt 21fpkt"];
3589--10837[label="0.933333;28pkt 28fpkt"];
3589--13846[label="0.933333;28pkt 28fpkt"];
3589--15638[label="0.933333;28pkt 28fpkt"];
4894--11670[label="1;34pkt 34fpkt"];
5928--8324[label="0.0470085;11pkt 11fpkt"];
5928--8342[label="0.645299;151pkt 151fpkt"];
5928--10837[label="0.880342;206pkt 206fpkt"];
5928--13846[label="0.880342;206pkt 206fpkt"];
5928--15638[label="0.880342;206pkt 206fpkt"];
6828--10837[label="0.904762;19pkt 19fpkt"];
6828--13846[label="0.904762;19pkt 19fpkt"];
6828--15638[label="0.904762;19pkt 19fpkt"];
10837--13846[label="1;396pkt 396fpkt"];
10837--15638[label="1;396pkt 396fpkt"];
13846--15638[label="1;396pkt 396fpkt"];
</description>
    <slice>
      <filter dst_ip="128.194.11.60" dst_port="80" src_ip="219.101.157.143"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.212.136.199"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.196.219.199"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.171.71.200"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.183.71.200"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.172.200"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.55.201"/>
    </slice>
    <from sec="1273035822" usec="0"/>
    <to sec="1273035937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.165.147.202"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.168.136.203"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.168.203"/>
    </slice>
    <from sec="1273035960" usec="0"/>
    <to sec="1273035987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.185.203"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.168.136.204"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.172.172.205"/>
    </slice>
    <from sec="1273036041" usec="0"/>
    <to sec="1273036062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
3401[label="133.249.51.206;s;118pkt 118fpkt", shape=diamond, color=yellow];
11765[label="133.249.51.206;141pkt 141fpkt", shape=pentagon, color=darkviolet];
14410[label="133.249.51.206;141pkt 141fpkt", shape=invtriangle, color=brown];
15948[label="133.249.51.206;141pkt 141fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.51.206:*, 194.5.113.200:*}[39.7163%]&lt;BR/&gt;{133.249.51.206:113, *:*}[34.0426%]&lt;BR/&gt;{133.249.51.206:*, *:6667}[28.3688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (17.0055%)&lt;BR/&gt; 6667: (14.1405%)&lt;BR/&gt; 6662: (5.63771%)&lt;BR/&gt; 7000: (2.86506%)&lt;BR/&gt; 6669: (2.86506%)&gt;];
}
3401--8325[label="0.00847458;1pkt 1fpkt"];
3401--11765[label="1;118pkt 118fpkt"];
3401--14410[label="1;118pkt 118fpkt"];
3401--15948[label="1;118pkt 118fpkt"];
11765--14410[label="1;141pkt 141fpkt"];
11765--15948[label="1;141pkt 141fpkt"];
14410--15948[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="194.5.113.200" src_ip="133.249.51.206"/>
      <filter src_ip="133.249.51.206" src_port="113"/>
      <filter dst_port="6667" src_ip="133.249.51.206"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.14.40.207"/>
    </slice>
    <from sec="1273035700" usec="0"/>
    <to sec="1273035719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.48.196.207"/>
    </slice>
    <from sec="1273035885" usec="0"/>
    <to sec="1273035944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
1464[label="73.1.222.207;s;1986pkt 1986fpkt", shape=diamond, color=yellow];
11784[label="73.1.222.207;2406pkt 2406fpkt", shape=pentagon, color=darkviolet];
14422[label="73.1.222.207;2406pkt 2406fpkt", shape=invtriangle, color=brown];
15954[label="73.1.222.207;2406pkt 2406fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.1.222.207:1035, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1035: (50%)&gt;];
}
1464--11784[label="1;1986pkt 1986fpkt"];
1464--14422[label="1;1986pkt 1986fpkt"];
1464--15954[label="1;1986pkt 1986fpkt"];
11784--14422[label="1;2406pkt 2406fpkt"];
11784--15954[label="1;2406pkt 2406fpkt"];
14422--15954[label="1;2406pkt 2406fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="73.1.222.207" src_port="1035"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.53.228.207"/>
    </slice>
    <from sec="1273035795" usec="0"/>
    <to sec="1273035808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
11807[label="133.249.157.208;82pkt 82fpkt", shape=pentagon, color=darkviolet];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.157.208:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="133.249.157.208"/>
    </slice>
    <from sec="1273035616" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.86.178.208"/>
    </slice>
    <from sec="1273035893" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.185.182.208"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.134.192.208"/>
    </slice>
    <from sec="1273035986" usec="0"/>
    <to sec="1273036007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.37.211.208"/>
    </slice>
    <from sec="1273036384" usec="0"/>
    <to sec="1273036422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.171.50.209"/>
    </slice>
    <from sec="1273035745" usec="0"/>
    <to sec="1273036416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.95.209"/>
    </slice>
    <from sec="1273036157" usec="0"/>
    <to sec="1273036200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.250.161.209"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
136[label="32.241.177.209s;228pkt 228fpkt", shape=rectangle, color=red];
11827[label="32.241.177.209;256pkt 256fpkt", shape=pentagon, color=darkviolet];
14454[label="32.241.177.209;256pkt 256fpkt", shape=invtriangle, color=brown];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.241.177.209:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3620: (0.202703%)&lt;BR/&gt; 3619: (0.202703%)&lt;BR/&gt; 3618: (0.202703%)&lt;BR/&gt; 3617: (0.202703%)&gt;];
}
136--11827[label="1;228pkt 228fpkt"];
136--14454[label="1;228pkt 228fpkt"];
11827--14454[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="32.241.177.209"/>
    </slice>
    <from sec="1273036346" usec="0"/>
    <to sec="1273036364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.228.155.210"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.73.199.210"/>
    </slice>
    <from sec="1273035794" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.41.161.211"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.177.243.211"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.185.254.211"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.146.152.212"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273035984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.244.161.212"/>
    </slice>
    <from sec="1273036054" usec="0"/>
    <to sec="1273036488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.95.145.213"/>
    </slice>
    <from sec="1273035991" usec="0"/>
    <to sec="1273036005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.31.162.213"/>
    </slice>
    <from sec="1273035700" usec="0"/>
    <to sec="1273035727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
4869[label="38.57.6.214;s;40pkt 40fpkt", shape=diamond, color=yellow];
5020[label="176.108.198.222;d;78pkt 78fpkt", shape=diamond, color=yellow];
5042[label="196.169.175.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
7666[label="176.108.198.222;d;69pkt 69fpkt", shape=hexagon, color=black];
10369[label="196.169.175.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11859[label="38.57.6.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11887[label="38.57.6.214;45pkt 45fpkt", shape=pentagon, color=darkviolet];
13563[label="196.169.175.112;1pkt 1fpkt", shape=invtriangle, color=brown];
14473[label="38.57.6.212;1pkt 1fpkt", shape=invtriangle, color=brown];
15489[label="196.169.175.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.57.6.214:80, 176.108.198.222:*}[41.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62019: (1.2605%)&lt;BR/&gt; 62013: (0.840336%)&lt;BR/&gt; 62008: (0.840336%)&lt;BR/&gt; 62006: (0.840336%)&gt;];
}
4869--5020[label="0.9;36pkt 36fpkt"];
4869--5721[label="0.1;4pkt 4fpkt"];
4869--7666[label="0.9;36pkt 36fpkt"];
4869--8357[label="0.025;1pkt 1fpkt"];
4869--8373[label="0.025;1pkt 1fpkt"];
4869--8414[label="0.025;1pkt 1fpkt"];
4869--8454[label="0.025;1pkt 1fpkt"];
4869--11887[label="1;40pkt 40fpkt"];
5020--5042[label="1;1pkt 1fpkt"];
5020--7666[label="1;69pkt 69fpkt"];
5020--8373[label="0.102564;8pkt 8fpkt"];
5020--8454[label="0.0128205;1pkt 1fpkt"];
5020--9543[label="0.25;1pkt 1fpkt"];
5020--10369[label="1;1pkt 1fpkt"];
5020--11649[label="0.0641026;5pkt 5fpkt"];
5020--11859[label="1;1pkt 1fpkt"];
5020--11887[label="0.8;36pkt 36fpkt"];
5020--13563[label="1;1pkt 1fpkt"];
5020--14337[label="0.0641026;5pkt 5fpkt"];
5020--14473[label="1;1pkt 1fpkt"];
5020--15489[label="1;1pkt 1fpkt"];
5042--7666[label="1;1pkt 1fpkt"];
5042--10369[label="1;1pkt 1fpkt"];
5042--13563[label="1;1pkt 1fpkt"];
5042--15489[label="1;1pkt 1fpkt"];
7666--8373[label="0.0144928;1pkt 1fpkt"];
7666--8454[label="0.0144928;1pkt 1fpkt"];
7666--9543[label="0.25;1pkt 1fpkt"];
7666--10369[label="1;1pkt 1fpkt"];
7666--11649[label="0.0724638;5pkt 5fpkt"];
7666--11859[label="1;1pkt 1fpkt"];
7666--11887[label="0.8;36pkt 36fpkt"];
7666--13563[label="1;1pkt 1fpkt"];
7666--14337[label="0.0724638;5pkt 5fpkt"];
7666--14473[label="1;1pkt 1fpkt"];
7666--15489[label="1;1pkt 1fpkt"];
10369--13563[label="1;1pkt 1fpkt"];
10369--15489[label="1;1pkt 1fpkt"];
11859--14473[label="1;1pkt 1fpkt"];
13563--15489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.198.222" src_ip="38.57.6.214" src_port="80"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.44.49.214"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.38.181.214"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.166.74.215"/>
    </slice>
    <from sec="1273036200" usec="0"/>
    <to sec="1273036213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.201.122.215"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.235.180.215"/>
    </slice>
    <from sec="1273036348" usec="0"/>
    <to sec="1273036365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.36.216.215"/>
    </slice>
    <from sec="1273035978" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.96.226.216"/>
    </slice>
    <from sec="1273036033" usec="0"/>
    <to sec="1273036049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.24.70.217"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.218.136.218"/>
    </slice>
    <from sec="1273036211" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.129.162.218"/>
    </slice>
    <from sec="1273036451" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.76.182.218"/>
    </slice>
    <from sec="1273036094" usec="0"/>
    <to sec="1273036113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.249.5.221"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.236.11.221"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.222.157.221"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.201.123.223"/>
    </slice>
    <from sec="1273036083" usec="0"/>
    <to sec="1273036129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.36.174.223"/>
    </slice>
    <from sec="1273036102" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.137.93.224"/>
    </slice>
    <from sec="1273035628" usec="0"/>
    <to sec="1273035778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.169.244.224"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.96.6.225"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.16.11.225"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
73[label="176.108.54.154d;1pkt 1fpkt", shape=rectangle, color=red];
12022[label="34.8.22.225;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14568[label="34.8.22.225;5pkt 5fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.8.22.225:57825, 176.108.54.154:80}[20%]&lt;BR/&gt;{34.8.22.225:57826, 176.108.54.154:80}[20%]&lt;BR/&gt;{34.8.22.225:57827, 176.108.54.154:80}[20%]&lt;BR/&gt;{34.8.22.225:57828, 176.108.54.154:80}[20%]&lt;BR/&gt;{34.8.22.225:57829, 176.108.54.154:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57829: (13.6364%)&lt;BR/&gt; 57828: (9.09091%)&lt;BR/&gt; 57827: (9.09091%)&lt;BR/&gt; 57826: (9.09091%)&gt;];
}
73--12022[label="1;1pkt 1fpkt"];
73--14568[label="1;1pkt 1fpkt"];
12022--14568[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.154" dst_port="80" src_ip="34.8.22.225" src_port="57829"/>
      <filter dst_ip="176.108.54.154" dst_port="80" src_ip="34.8.22.225" src_port="57828"/>
      <filter dst_ip="176.108.54.154" dst_port="80" src_ip="34.8.22.225" src_port="57827"/>
      <filter dst_ip="176.108.54.154" dst_port="80" src_ip="34.8.22.225" src_port="57826"/>
      <filter dst_ip="176.108.54.154" dst_port="80" src_ip="34.8.22.225" src_port="57825"/>
    </slice>
    <from sec="1273036398" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.4.250.225"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.54.226"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
3864[label="176.108.138.84;d;48pkt 48fpkt", shape=diamond, color=yellow];
4971[label="23.106.44.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
11254[label="41.42.184.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.138.84:61936}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61936: (30.7692%)&lt;BR/&gt; 443: (7.69231%)&lt;BR/&gt; 47919: (3.84615%)&lt;BR/&gt; 33144: (3.84615%)&lt;BR/&gt; 63000: (1.92308%)&gt;];
}
3864--4971[label="1;2pkt 2fpkt"];
3864--8322[label="0.0208333;1pkt 1fpkt"];
3864--8349[label="0.0208333;1pkt 1fpkt"];
3864--8357[label="0.0208333;1pkt 1fpkt"];
3864--8373[label="0.0208333;1pkt 1fpkt"];
3864--8393[label="0.0208333;1pkt 1fpkt"];
3864--8405[label="0.0208333;1pkt 1fpkt"];
3864--8414[label="0.0208333;1pkt 1fpkt"];
3864--8428[label="0.0208333;1pkt 1fpkt"];
3864--8439[label="0.0208333;1pkt 1fpkt"];
3864--8454[label="0.0208333;1pkt 1fpkt"];
3864--9215[label="0.0416667;2pkt 2fpkt"];
3864--11254[label="1;2pkt 2fpkt"];
3864--12046[label="0.125;6pkt 6fpkt"];
3864--12868[label="0.0416667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.138.84" dst_port="61936"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.106.93.228"/>
    </slice>
    <from sec="1273036227" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.21.197.228"/>
    </slice>
    <from sec="1273036492" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.240.21.229"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.186.52.230"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.192.96.230"/>
    </slice>
    <from sec="1273036161" usec="0"/>
    <to sec="1273036175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.97.224.230"/>
    </slice>
    <from sec="1273035669" usec="0"/>
    <to sec="1273035707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.203.54.231"/>
    </slice>
    <from sec="1273036195" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.37.8.232"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.169.16.232"/>
    </slice>
    <from sec="1273035747" usec="0"/>
    <to sec="1273035919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.58.232"/>
    </slice>
    <from sec="1273035803" usec="0"/>
    <to sec="1273035827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.57.193.232"/>
    </slice>
    <from sec="1273035690" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.162.12.233"/>
    </slice>
    <from sec="1273036158" usec="0"/>
    <to sec="1273036184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.65.55.234"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.177.234"/>
    </slice>
    <from sec="1273035688" usec="0"/>
    <to sec="1273035731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.188.234"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.5.48.235"/>
    </slice>
    <from sec="1273035984" usec="0"/>
    <to sec="1273036450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.119.98.235"/>
    </slice>
    <from sec="1273036299" usec="0"/>
    <to sec="1273036313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.108.54.236"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.121.109.236"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803264,2.78848,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
3301[label="133.249.45.81;d;178pkt 178fpkt", shape=diamond, color=yellow];
12202[label="221.0.220.236;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:123, 133.249.45.81:123}[30.3371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (57.5521%)&lt;BR/&gt; 53: (5.46875%)&lt;BR/&gt; 0: (1.5625%)&lt;BR/&gt; 1027: (0.78125%)&lt;BR/&gt; 1026: (0.78125%)&gt;];
}
3301--8359[label="0.00561798;1pkt 1fpkt"];
3301--8372[label="0.00561798;1pkt 1fpkt"];
3301--12202[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.45.81" dst_port="123" src_port="123"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.64.249.236"/>
    </slice>
    <from sec="1273036331" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50268,2.79148,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
139[label="207.99.12.237s;245pkt 245fpkt", shape=rectangle, color=red];
12207[label="207.99.12.237;245pkt 245fpkt", shape=pentagon, color=darkviolet];
14683[label="207.99.12.237;245pkt 245fpkt", shape=invtriangle, color=brown];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.99.12.237:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4385: (0.204082%)&lt;BR/&gt; 4384: (0.204082%)&lt;BR/&gt; 4383: (0.204082%)&lt;BR/&gt; 4382: (0.204082%)&gt;];
}
139--12207[label="1;245pkt 245fpkt"];
139--14683[label="1;245pkt 245fpkt"];
12207--14683[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="207.99.12.237"/>
    </slice>
    <from sec="1273036440" usec="0"/>
    <to sec="1273036450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.188.116.237"/>
    </slice>
    <from sec="1273036095" usec="0"/>
    <to sec="1273036106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.238.237"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.158.209.238"/>
    </slice>
    <from sec="1273035835" usec="0"/>
    <to sec="1273035911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.212.229.238"/>
    </slice>
    <from sec="1273035920" usec="0"/>
    <to sec="1273035932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.39.86.239"/>
    </slice>
    <from sec="1273035937" usec="0"/>
    <to sec="1273035965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.9.132.239"/>
    </slice>
    <from sec="1273035678" usec="0"/>
    <to sec="1273035735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.181.189.239"/>
    </slice>
    <from sec="1273036446" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.104.187.240"/>
    </slice>
    <from sec="1273035999" usec="0"/>
    <to sec="1273036006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.249.240"/>
    </slice>
    <from sec="1273035976" usec="0"/>
    <to sec="1273036001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.152.168.241"/>
    </slice>
    <from sec="1273035896" usec="0"/>
    <to sec="1273036245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.134.177.241"/>
    </slice>
    <from sec="1273036086" usec="0"/>
    <to sec="1273036097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.159.249.241"/>
    </slice>
    <from sec="1273035967" usec="0"/>
    <to sec="1273035992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.252.241"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.117.114.242"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.205.175.242"/>
    </slice>
    <from sec="1273035837" usec="0"/>
    <to sec="1273036455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.45.244"/>
    </slice>
    <from sec="1273035629" usec="0"/>
    <to sec="1273035655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.170.181.244"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.201.181.244"/>
    </slice>
    <from sec="1273036335" usec="0"/>
    <to sec="1273036346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.229.201.244"/>
    </slice>
    <from sec="1273036188" usec="0"/>
    <to sec="1273036243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.180.202.244"/>
    </slice>
    <from sec="1273035955" usec="0"/>
    <to sec="1273035975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.97.238.244"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.109.64.245"/>
    </slice>
    <from sec="1273035790" usec="0"/>
    <to sec="1273035811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.40.154.245"/>
    </slice>
    <from sec="1273035836" usec="0"/>
    <to sec="1273036038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.176.214.245"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.10.29.249"/>
    </slice>
    <from sec="1273036192" usec="0"/>
    <to sec="1273036265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.222.49.249"/>
    </slice>
    <from sec="1273036286" usec="0"/>
    <to sec="1273036292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.42.132.251"/>
    </slice>
    <from sec="1273035931" usec="0"/>
    <to sec="1273035940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.222.49.252"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.220.116.252"/>
    </slice>
    <from sec="1273035959" usec="0"/>
    <to sec="1273036020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.222.49.253"/>
    </slice>
    <from sec="1273036307" usec="0"/>
    <to sec="1273036414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.26.245.253"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.398282,2.82724,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.200.171.254"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.9.18.0"/>
    </slice>
    <from sec="1273035831" usec="0"/>
    <to sec="1273035838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.22.46.0"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
8472[label="133.249.194.0;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12424[label="133.249.194.0;6pkt 6fpkt", shape=invtriangle, color=brown];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.194.0:993, 1.6.25.233:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (41.6667%)&lt;BR/&gt; 52354: (8.33333%)&lt;BR/&gt; 24459: (8.33333%)&lt;BR/&gt; 2727: (8.33333%)&lt;BR/&gt; 1728: (8.33333%)&gt;];
}
8472--12424[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="1.6.25.233" src_ip="133.249.194.0" src_port="993"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.120.41.1"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273035915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
8494[label="128.33.107.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12432[label="128.33.107.1;3pkt 3fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.33.107.1:53, 49.76.29.29:58452}[33.3333%]&lt;BR/&gt;{128.33.107.1:53, 72.106.59.70:43281}[33.3333%]&lt;BR/&gt;{128.33.107.1:53, 214.168.30.116:23170}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 58452: (16.6667%)&lt;BR/&gt; 43281: (16.6667%)&lt;BR/&gt; 23170: (16.6667%)&gt;];
}
8494--12432[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.168.30.116" dst_port="23170" src_ip="128.33.107.1" src_port="53"/>
      <filter dst_ip="72.106.59.70" dst_port="43281" src_ip="128.33.107.1" src_port="53"/>
      <filter dst_ip="49.76.29.29" dst_port="58452" src_ip="128.33.107.1" src_port="53"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.78.241.1"/>
    </slice>
    <from sec="1273036142" usec="0"/>
    <to sec="1273036157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.42.2"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.192.105.2"/>
    </slice>
    <from sec="1273036196" usec="0"/>
    <to sec="1273036258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.112.160.2"/>
    </slice>
    <from sec="1273035961" usec="0"/>
    <to sec="1273035974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
8512[label="133.249.165.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12439[label="133.249.165.2;6pkt 6fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.165.2:*, 212.179.18.43:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63085: (8.33333%)&lt;BR/&gt; 63083: (8.33333%)&lt;BR/&gt; 63073: (8.33333%)&lt;BR/&gt; 63067: (8.33333%)&gt;];
}
8512--12439[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.179.18.43" dst_port="80" src_ip="133.249.165.2"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.87.69.3"/>
    </slice>
    <from sec="1273035705" usec="0"/>
    <to sec="1273035717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.116.110.3"/>
    </slice>
    <from sec="1273035984" usec="0"/>
    <to sec="1273035990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
8537[label="20.190.172.3;32pkt 32fpkt", shape=pentagon, color=darkviolet];
12456[label="20.190.172.3;33pkt 33fpkt", shape=invtriangle, color=brown];
14832[label="20.190.172.3;32pkt 32fpkt", shape=invhouse, color=bisque];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.190.172.3:*, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65397: (1.54639%)&lt;BR/&gt; 64607: (1.54639%)&lt;BR/&gt; 61453: (1.54639%)&lt;BR/&gt; 61329: (1.54639%)&gt;];
}
8537--12456[label="1;32pkt 32fpkt"];
8537--14832[label="1;32pkt 32fpkt"];
12456--14832[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="20.190.172.3"/>
    </slice>
    <from sec="1273036430" usec="0"/>
    <to sec="1273036445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.199.3"/>
    </slice>
    <from sec="1273036184" usec="0"/>
    <to sec="1273036234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.248.3"/>
    </slice>
    <from sec="1273036168" usec="0"/>
    <to sec="1273036228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.70.4"/>
    </slice>
    <from sec="1273035974" usec="0"/>
    <to sec="1273036026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
8568[label="150.198.61.5;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12475[label="150.198.61.5;36pkt 36fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.61.5:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8568--12475[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.61.5"/>
    </slice>
    <from sec="1273035629" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
8569[label="172.16.64.5;168pkt 168fpkt", shape=pentagon, color=darkviolet];
12476[label="172.16.64.5;168pkt 168fpkt", shape=invtriangle, color=brown];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.16.64.5:47117, *:623}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47117: (50%)&lt;BR/&gt; 623: (50%)&gt;];
}
8569--12476[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="623" src_ip="172.16.64.5" src_port="47117"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.122.5"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.210.225.5"/>
    </slice>
    <from sec="1273036099" usec="0"/>
    <to sec="1273036159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.248.5"/>
    </slice>
    <from sec="1273035887" usec="0"/>
    <to sec="1273035901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.249.48.6"/>
    </slice>
    <from sec="1273035678" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="191.22.69.6"/>
    </slice>
    <from sec="1273035930" usec="0"/>
    <to sec="1273036150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
8586[label="85.238.98.6;254pkt 254fpkt", shape=pentagon, color=darkviolet];
12488[label="85.238.98.6;254pkt 254fpkt", shape=invtriangle, color=brown];
14847[label="85.238.98.6;254pkt 254fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.238.98.6:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4999: (0.19685%)&lt;BR/&gt; 4998: (0.19685%)&lt;BR/&gt; 4997: (0.19685%)&lt;BR/&gt; 4996: (0.19685%)&gt;];
}
8586--12488[label="1;254pkt 254fpkt"];
8586--14847[label="1;254pkt 254fpkt"];
12488--14847[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="85.238.98.6"/>
    </slice>
    <from sec="1273036250" usec="0"/>
    <to sec="1273036261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.107.124.6"/>
    </slice>
    <from sec="1273036212" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
8597[label="219.108.208.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12493[label="219.108.208.6;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.108.208.6:443, 133.249.192.8:2227}[50%]&lt;BR/&gt;{219.108.208.6:443, 133.249.192.14:1466}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2227: (33.3333%)&lt;BR/&gt; 1466: (16.6667%)&gt;];
}
8597--12493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.192.14" dst_port="1466" src_ip="219.108.208.6" src_port="443"/>
      <filter dst_ip="133.249.192.8" dst_port="2227" src_ip="219.108.208.6" src_port="443"/>
    </slice>
    <from sec="1273036412" usec="0"/>
    <to sec="1273036479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.26.26.7"/>
    </slice>
    <from sec="1273035903" usec="0"/>
    <to sec="1273036007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.21.29.7"/>
    </slice>
    <from sec="1273036062" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.37.35.7"/>
    </slice>
    <from sec="1273036322" usec="0"/>
    <to sec="1273036336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.36.66.7"/>
    </slice>
    <from sec="1273036213" usec="0"/>
    <to sec="1273036218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.210.73.7"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60542,2.7762,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
108[label="85.238.107.7s;175pkt 175fpkt", shape=rectangle, color=red];
8620[label="85.238.107.7;253pkt 253fpkt", shape=pentagon, color=darkviolet];
12505[label="85.238.107.7;253pkt 253fpkt", shape=invtriangle, color=brown];
14858[label="85.238.107.7;253pkt 253fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.238.107.7:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4414: (0.214133%)&lt;BR/&gt; 4413: (0.214133%)&lt;BR/&gt; 4412: (0.214133%)&lt;BR/&gt; 4411: (0.214133%)&gt;];
}
108--8620[label="0.994286;174pkt 174fpkt"];
108--12505[label="0.994286;174pkt 174fpkt"];
108--14858[label="0.994286;174pkt 174fpkt"];
8620--12505[label="1;253pkt 253fpkt"];
8620--14858[label="1;253pkt 253fpkt"];
12505--14858[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="85.238.107.7"/>
    </slice>
    <from sec="1273036254" usec="0"/>
    <to sec="1273036265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.7.129.7"/>
    </slice>
    <from sec="1273036051" usec="0"/>
    <to sec="1273036070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.250.143.7"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.143.173.7"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.175.187.7"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.164.246.7"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.193.0.8"/>
    </slice>
    <from sec="1273035901" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.76.120.8"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.201.206.8"/>
    </slice>
    <from sec="1273036122" usec="0"/>
    <to sec="1273036141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.37.9"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.130.42.9"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273035683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.24.82.9"/>
    </slice>
    <from sec="1273036267" usec="0"/>
    <to sec="1273036348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.82.9"/>
    </slice>
    <from sec="1273036011" usec="0"/>
    <to sec="1273036058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.207.208.9"/>
    </slice>
    <from sec="1273036483" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
8677[label="176.108.36.10;51pkt 51fpkt", shape=pentagon, color=darkviolet];
12536[label="176.108.36.10;51pkt 51fpkt", shape=invtriangle, color=brown];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.36.10:*, *:80}[96.0784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0392%)&lt;BR/&gt; 443: (1.96078%)&lt;BR/&gt; 2828: (0.980392%)&lt;BR/&gt; 2826: (0.980392%)&lt;BR/&gt; 2798: (0.980392%)&gt;];
}
8677--12536[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="176.108.36.10"/>
    </slice>
    <from sec="1273035779" usec="0"/>
    <to sec="1273036276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
1362[label="204.134.243.176;d;533pkt 533fpkt", shape=diamond, color=yellow];
1562[label="204.134.243.65;d;538pkt 538fpkt", shape=diamond, color=yellow];
2771[label="128.212.104.54;d;137pkt 137fpkt", shape=diamond, color=yellow];
6208[label="204.134.243.176;d;531pkt 531fpkt", shape=hexagon, color=black];
8678[label="72.98.51.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8806[label="72.147.229.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9481[label="1.46.108.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10018[label="204.22.80.87;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10213[label="1.46.111.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11226[label="8.152.154.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11313[label="204.2.69.175;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11361[label="1.46.113.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12112[label="76.164.220.231;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12155[label="8.243.65.234;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12172[label="134.28.65.235;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12537[label="72.98.51.10;2pkt 2fpkt", shape=invtriangle, color=brown];
13345[label="204.22.80.87;3pkt 3fpkt", shape=invtriangle, color=brown];
14088[label="8.152.154.168;2pkt 2fpkt", shape=invtriangle, color=brown];
14134[label="204.2.69.175;3pkt 3fpkt", shape=invtriangle, color=brown];
14879[label="72.98.51.10;2pkt 2fpkt", shape=invhouse, color=bisque];
15362[label="204.22.80.87;3pkt 3fpkt", shape=invhouse, color=bisque];
15795[label="204.2.69.175;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 204.134.243.65:0}[44.4536%]&lt;BR/&gt;{*:0, 204.134.243.176:0}[44.0397%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7757%)&lt;BR/&gt; 110: (0.168256%)&lt;BR/&gt; 8257: (0.0280426%)&lt;BR/&gt; 445: (0.0280426%)&gt;];
}
1362--3634[label="0.00187617;1pkt 1fpkt"];
1362--6208[label="1;531pkt 531fpkt"];
1362--8350[label="0.00187617;1pkt 1fpkt"];
1362--8406[label="0.00187617;1pkt 1fpkt"];
1362--8440[label="0.00187617;1pkt 1fpkt"];
1362--8678[label="0.5;1pkt 1fpkt"];
1362--8806[label="1;1pkt 1fpkt"];
1362--9481[label="0.333333;1pkt 1fpkt"];
1362--10018[label="0.333333;1pkt 1fpkt"];
1362--10213[label="0.5;1pkt 1fpkt"];
1362--11226[label="0.5;1pkt 1fpkt"];
1362--11313[label="0.333333;1pkt 1fpkt"];
1362--11361[label="0.5;1pkt 1fpkt"];
1362--12112[label="0.5;1pkt 1fpkt"];
1362--12155[label="0.333333;1pkt 1fpkt"];
1362--12172[label="0.333333;1pkt 1fpkt"];
1362--12537[label="0.5;1pkt 1fpkt"];
1362--13345[label="0.333333;1pkt 1fpkt"];
1362--14088[label="0.5;1pkt 1fpkt"];
1362--14134[label="0.333333;1pkt 1fpkt"];
1362--14879[label="0.5;1pkt 1fpkt"];
1362--15362[label="0.333333;1pkt 1fpkt"];
1362--15795[label="0.333333;1pkt 1fpkt"];
1562--3634[label="0.00185874;1pkt 1fpkt"];
1562--8350[label="0.00185874;1pkt 1fpkt"];
1562--8406[label="0.00185874;1pkt 1fpkt"];
1562--8440[label="0.00185874;1pkt 1fpkt"];
1562--8678[label="0.5;1pkt 1fpkt"];
1562--9481[label="0.333333;1pkt 1fpkt"];
1562--10018[label="0.333333;1pkt 1fpkt"];
1562--10213[label="0.5;1pkt 1fpkt"];
1562--11226[label="0.5;1pkt 1fpkt"];
1562--11313[label="0.333333;1pkt 1fpkt"];
1562--11361[label="0.5;1pkt 1fpkt"];
1562--12112[label="0.5;1pkt 1fpkt"];
1562--12155[label="0.333333;1pkt 1fpkt"];
1562--12172[label="0.333333;1pkt 1fpkt"];
1562--12537[label="0.5;1pkt 1fpkt"];
1562--13345[label="0.333333;1pkt 1fpkt"];
1562--14088[label="0.5;1pkt 1fpkt"];
1562--14134[label="0.333333;1pkt 1fpkt"];
1562--14879[label="0.5;1pkt 1fpkt"];
1562--15362[label="0.333333;1pkt 1fpkt"];
1562--15795[label="0.333333;1pkt 1fpkt"];
2771--9481[label="0.333333;1pkt 1fpkt"];
2771--10018[label="0.333333;1pkt 1fpkt"];
2771--11313[label="0.333333;1pkt 1fpkt"];
2771--12155[label="0.333333;1pkt 1fpkt"];
2771--12172[label="0.333333;1pkt 1fpkt"];
2771--13345[label="0.333333;1pkt 1fpkt"];
2771--14134[label="0.333333;1pkt 1fpkt"];
2771--15362[label="0.333333;1pkt 1fpkt"];
2771--15795[label="0.333333;1pkt 1fpkt"];
6208--8350[label="0.00188324;1pkt 1fpkt"];
6208--8406[label="0.00188324;1pkt 1fpkt"];
6208--8440[label="0.00188324;1pkt 1fpkt"];
6208--8678[label="0.5;1pkt 1fpkt"];
6208--8806[label="1;1pkt 1fpkt"];
6208--9481[label="0.333333;1pkt 1fpkt"];
6208--10018[label="0.333333;1pkt 1fpkt"];
6208--10213[label="0.5;1pkt 1fpkt"];
6208--11226[label="0.5;1pkt 1fpkt"];
6208--11313[label="0.333333;1pkt 1fpkt"];
6208--11361[label="0.5;1pkt 1fpkt"];
6208--12112[label="0.5;1pkt 1fpkt"];
6208--12155[label="0.333333;1pkt 1fpkt"];
6208--12172[label="0.333333;1pkt 1fpkt"];
6208--12537[label="0.5;1pkt 1fpkt"];
6208--13345[label="0.333333;1pkt 1fpkt"];
6208--14088[label="0.5;1pkt 1fpkt"];
6208--14134[label="0.333333;1pkt 1fpkt"];
6208--14879[label="0.5;1pkt 1fpkt"];
6208--15362[label="0.333333;1pkt 1fpkt"];
6208--15795[label="0.333333;1pkt 1fpkt"];
8678--12537[label="1;2pkt 2fpkt"];
8678--14879[label="1;2pkt 2fpkt"];
10018--13345[label="1;3pkt 3fpkt"];
10018--15362[label="1;3pkt 3fpkt"];
11226--14088[label="1;2pkt 2fpkt"];
11313--14134[label="1;3pkt 3fpkt"];
11313--15795[label="1;3pkt 3fpkt"];
12537--14879[label="1;2pkt 2fpkt"];
13345--15362[label="1;3pkt 3fpkt"];
14134--15795[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.243.65"/>
      <filter dst_ip="204.134.243.176"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.181.170.10"/>
    </slice>
    <from sec="1273036067" usec="0"/>
    <to sec="1273036071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.176.10"/>
    </slice>
    <from sec="1273036065" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.148.194.10"/>
    </slice>
    <from sec="1273036348" usec="0"/>
    <to sec="1273036371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.47.49.11"/>
    </slice>
    <from sec="1273036143" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
8700[label="150.198.59.11;109pkt 109fpkt", shape=pentagon, color=darkviolet];
12552[label="150.198.59.11;109pkt 109fpkt", shape=invtriangle, color=brown];
14893[label="150.198.59.11;110pkt 110fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.59.11:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8700--12552[label="1;109pkt 109fpkt"];
8700--14893[label="1;109pkt 109fpkt"];
12552--14893[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.59.11"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.88.11"/>
    </slice>
    <from sec="1273036139" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.20.12"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.173.42.12"/>
    </slice>
    <from sec="1273035907" usec="0"/>
    <to sec="1273035932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.163.12"/>
    </slice>
    <from sec="1273035933" usec="0"/>
    <to sec="1273035960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.210.12"/>
    </slice>
    <from sec="1273035814" usec="0"/>
    <to sec="1273035888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.169.17.13"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.53.115.13"/>
    </slice>
    <from sec="1273036385" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.229.162.13"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.243.168.13"/>
    </slice>
    <from sec="1273036280" usec="0"/>
    <to sec="1273036294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.166.201.13"/>
    </slice>
    <from sec="1273036130" usec="0"/>
    <to sec="1273036150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.118.14"/>
    </slice>
    <from sec="1273036238" usec="0"/>
    <to sec="1273036455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
3216[label="205.119.26.15;s;135pkt 135fpkt", shape=diamond, color=yellow];
8759[label="205.119.26.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12591[label="205.119.26.15;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.119.26.15:*, *:22}[99.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.6377%)&lt;BR/&gt; 61950: (0.724638%)&lt;BR/&gt; 61914: (0.724638%)&lt;BR/&gt; 61935: (0.362319%)&lt;BR/&gt; 61934: (0.362319%)&gt;];
}
3216--12591[label="0.5;1pkt 1fpkt"];
8759--12591[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="205.119.26.15"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.102.38.15"/>
    </slice>
    <from sec="1273035781" usec="0"/>
    <to sec="1273036489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.134.210.15"/>
    </slice>
    <from sec="1273035987" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
8775[label="0.37.13.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12603[label="0.37.13.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.37.13.16:11191, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11191: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8775--12603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="0.37.13.16" src_port="11191"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.44.16"/>
    </slice>
    <from sec="1273036020" usec="0"/>
    <to sec="1273036050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.46.17"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.42.160.17"/>
    </slice>
    <from sec="1273036178" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
8800[label="166.22.163.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12619[label="166.22.163.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.22.163.17:49384, 176.108.54.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8800--12619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="80" src_ip="166.22.163.17" src_port="49384"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.193.179.17"/>
    </slice>
    <from sec="1273035703" usec="0"/>
    <to sec="1273035725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.37.251.17"/>
    </slice>
    <from sec="1273035843" usec="0"/>
    <to sec="1273035856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
8810[label="152.85.25.18;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12625[label="152.85.25.18;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.85.25.18:*, 215.114.168.213:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60189: (3.84615%)&lt;BR/&gt; 57847: (3.84615%)&lt;BR/&gt; 55110: (3.84615%)&lt;BR/&gt; 51983: (3.84615%)&gt;];
}
8810--12625[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="215.114.168.213" dst_port="80" src_ip="152.85.25.18"/>
    </slice>
    <from sec="1273036031" usec="0"/>
    <to sec="1273036494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.26.201.18"/>
    </slice>
    <from sec="1273036092" usec="0"/>
    <to sec="1273036212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
8834[label="50.48.66.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12638[label="50.48.66.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.48.66.19:37156, 205.162.96.148:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37156: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8834--12638[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.162.96.148" dst_port="22" src_ip="50.48.66.19" src_port="37156"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.129.232.20"/>
    </slice>
    <from sec="1273036292" usec="0"/>
    <to sec="1273036317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.32.79.21"/>
    </slice>
    <from sec="1273035664" usec="0"/>
    <to sec="1273036223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.169.101.21"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
8882[label="61.83.208.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12668[label="61.83.208.21;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.83.208.21:44113, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44113: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8882--12668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="61.83.208.21" src_port="44113"/>
    </slice>
    <from sec="1273035834" usec="0"/>
    <to sec="1273036455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
8887[label="40.130.41.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12672[label="40.130.41.22;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.130.41.22:80, 205.119.24.103:32976}[33.3333%]&lt;BR/&gt;{40.130.41.22:80, 205.119.24.103:34510}[33.3333%]&lt;BR/&gt;{40.130.41.22:80, 205.119.24.103:35965}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35965: (16.6667%)&lt;BR/&gt; 34510: (16.6667%)&lt;BR/&gt; 32976: (16.6667%)&gt;];
}
8887--12672[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.119.24.103" dst_port="35965" src_ip="40.130.41.22" src_port="80"/>
      <filter dst_ip="205.119.24.103" dst_port="34510" src_ip="40.130.41.22" src_port="80"/>
      <filter dst_ip="205.119.24.103" dst_port="32976" src_ip="40.130.41.22" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.24.65.22"/>
    </slice>
    <from sec="1273036121" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.4.121.22"/>
    </slice>
    <from sec="1273036004" usec="0"/>
    <to sec="1273036010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.7.153.22"/>
    </slice>
    <from sec="1273035686" usec="0"/>
    <to sec="1273035715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.206.168.22"/>
    </slice>
    <from sec="1273036453" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.51.178.22"/>
    </slice>
    <from sec="1273036118" usec="0"/>
    <to sec="1273036154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.224.246.22"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
8908[label="9.170.40.23;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12687[label="9.170.40.23;10pkt 10fpkt", shape=invtriangle, color=brown];
14963[label="9.170.40.23;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.170.40.23:443, 176.108.98.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 58813: (4.83871%)&lt;BR/&gt; 58812: (4.83871%)&lt;BR/&gt; 58811: (4.83871%)&lt;BR/&gt; 58808: (4.83871%)&gt;];
}
8908--12687[label="1;10pkt 10fpkt"];
8908--14963[label="1;10pkt 10fpkt"];
12687--14963[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.98.163" src_ip="9.170.40.23" src_port="443"/>
    </slice>
    <from sec="1273035621" usec="0"/>
    <to sec="1273035727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.120.42.23"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.229.162.23"/>
    </slice>
    <from sec="1273036218" usec="0"/>
    <to sec="1273036249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.18.241.23"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
8925[label="176.108.30.24;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12694[label="176.108.30.24;6pkt 6fpkt", shape=invtriangle, color=brown];
14967[label="176.108.30.24;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.30.24:*, *:1863}[50%]&lt;BR/&gt;{176.108.30.24:*, *:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 443: (16.6667%)&lt;BR/&gt; 62123: (8.33333%)&lt;BR/&gt; 62119: (8.33333%)&lt;BR/&gt; 62118: (8.33333%)&gt;];
}
8925--12694[label="1;6pkt 6fpkt"];
8925--14967[label="1;6pkt 6fpkt"];
12694--14967[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="176.108.30.24"/>
      <filter dst_port="443" src_ip="176.108.30.24"/>
    </slice>
    <from sec="1273036464" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.36.99.24"/>
    </slice>
    <from sec="1273035890" usec="0"/>
    <to sec="1273035956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.134.194.24"/>
    </slice>
    <from sec="1273036017" usec="0"/>
    <to sec="1273036074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.196.24"/>
    </slice>
    <from sec="1273036036" usec="0"/>
    <to sec="1273036103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.238.24"/>
    </slice>
    <from sec="1273036062" usec="0"/>
    <to sec="1273036210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.32.24.25"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.160.25"/>
    </slice>
    <from sec="1273036298" usec="0"/>
    <to sec="1273036326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
8961[label="150.198.194.25;71pkt 71fpkt", shape=pentagon, color=darkviolet];
12717[label="150.198.194.25;70pkt 70fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.194.25:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8961--12717[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.194.25"/>
    </slice>
    <from sec="1273035611" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.145.0.26"/>
    </slice>
    <from sec="1273035733" usec="0"/>
    <to sec="1273035824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.167.19.26"/>
    </slice>
    <from sec="1273036121" usec="0"/>
    <to sec="1273036131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.210.215.26"/>
    </slice>
    <from sec="1273036198" usec="0"/>
    <to sec="1273036209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.210.251.26"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.226.13.27"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273035726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.187.27"/>
    </slice>
    <from sec="1273035747" usec="0"/>
    <to sec="1273035802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.34.251.27"/>
    </slice>
    <from sec="1273036472" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
8998[label="133.249.59.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12739[label="133.249.59.28;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.59.28:32817, 46.221.166.1:53}[20%]&lt;BR/&gt;{133.249.59.28:25, 53.193.49.83:62313}[20%]&lt;BR/&gt;{133.249.59.28:25, 44.4.214.44:2676}[20%]&lt;BR/&gt;{133.249.59.28:25, 44.4.214.44:2677}[20%]&lt;BR/&gt;{133.249.59.28:25, 44.4.214.44:2678}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40%)&lt;BR/&gt; 62313: (10%)&lt;BR/&gt; 32817: (10%)&lt;BR/&gt; 2678: (10%)&lt;BR/&gt; 2677: (10%)&gt;];
}
8998--12739[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="44.4.214.44" dst_port="2678" src_ip="133.249.59.28" src_port="25"/>
      <filter dst_ip="44.4.214.44" dst_port="2677" src_ip="133.249.59.28" src_port="25"/>
      <filter dst_ip="44.4.214.44" dst_port="2676" src_ip="133.249.59.28" src_port="25"/>
      <filter dst_ip="53.193.49.83" dst_port="62313" src_ip="133.249.59.28" src_port="25"/>
      <filter dst_ip="46.221.166.1" dst_port="53" src_ip="133.249.59.28" src_port="32817"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
9007[label="128.212.118.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12742[label="128.212.118.28;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.118.28:62485, 41.53.0.23:1935}[50%]&lt;BR/&gt;{128.212.118.28:62491, 41.53.0.23:1935}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 62491: (25%)&lt;BR/&gt; 62485: (25%)&gt;];
}
9007--12742[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.53.0.23" dst_port="1935" src_ip="128.212.118.28" src_port="62491"/>
      <filter dst_ip="41.53.0.23" dst_port="1935" src_ip="128.212.118.28" src_port="62485"/>
    </slice>
    <from sec="1273035934" usec="0"/>
    <to sec="1273035950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.162.28"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.251.28"/>
    </slice>
    <from sec="1273036104" usec="0"/>
    <to sec="1273036132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.183.6.29"/>
    </slice>
    <from sec="1273035752" usec="0"/>
    <to sec="1273035767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.152.58.29"/>
    </slice>
    <from sec="1273035746" usec="0"/>
    <to sec="1273035845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
9023[label="133.249.62.29;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12752[label="133.249.62.29;3pkt 3fpkt", shape=invtriangle, color=brown];
14998[label="133.249.62.29;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.62.29:5041, 14.198.99.76:1029}[33.3333%]&lt;BR/&gt;{133.249.62.29:1324, 201.178.73.211:80}[33.3333%]&lt;BR/&gt;{133.249.62.29:1346, 47.52.16.244:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 5041: (16.6667%)&lt;BR/&gt; 1346: (16.6667%)&lt;BR/&gt; 1324: (16.6667%)&lt;BR/&gt; 1029: (16.6667%)&gt;];
}
9023--12752[label="1;3pkt 3fpkt"];
9023--14998[label="1;3pkt 3fpkt"];
12752--14998[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="47.52.16.244" dst_port="80" src_ip="133.249.62.29" src_port="1346"/>
      <filter dst_ip="201.178.73.211" dst_port="80" src_ip="133.249.62.29" src_port="1324"/>
      <filter dst_ip="14.198.99.76" dst_port="1029" src_ip="133.249.62.29" src_port="5041"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.228.83.29"/>
    </slice>
    <from sec="1273036399" usec="0"/>
    <to sec="1273036461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="142.32.167.29"/>
    </slice>
    <from sec="1273036021" usec="0"/>
    <to sec="1273036029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.227.168.29"/>
    </slice>
    <from sec="1273036242" usec="0"/>
    <to sec="1273036306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.200.29"/>
    </slice>
    <from sec="1273035685" usec="0"/>
    <to sec="1273035691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.213.3.30"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.8.37.30"/>
    </slice>
    <from sec="1273036315" usec="0"/>
    <to sec="1273036326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.32.53.30"/>
    </slice>
    <from sec="1273036113" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
9044[label="133.249.56.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12767[label="133.249.56.30;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.56.30:25, 164.54.104.96:3783}[33.3333%]&lt;BR/&gt;{133.249.56.30:53, 74.220.250.108:38097}[33.3333%]&lt;BR/&gt;{133.249.56.30:52742, 212.162.16.181:2703}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52742: (16.6667%)&lt;BR/&gt; 38097: (16.6667%)&lt;BR/&gt; 3783: (16.6667%)&lt;BR/&gt; 2703: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&gt;];
}
9044--12767[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.162.16.181" dst_port="2703" src_ip="133.249.56.30" src_port="52742"/>
      <filter dst_ip="74.220.250.108" dst_port="38097" src_ip="133.249.56.30" src_port="53"/>
      <filter dst_ip="164.54.104.96" dst_port="3783" src_ip="133.249.56.30" src_port="25"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.172.81.30"/>
    </slice>
    <from sec="1273036205" usec="0"/>
    <to sec="1273036234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.244.30"/>
    </slice>
    <from sec="1273035874" usec="0"/>
    <to sec="1273035917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.5.77.31"/>
    </slice>
    <from sec="1273036009" usec="0"/>
    <to sec="1273036035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.216.160.31"/>
    </slice>
    <from sec="1273036401" usec="0"/>
    <to sec="1273036415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.32.180.31"/>
    </slice>
    <from sec="1273036413" usec="0"/>
    <to sec="1273036420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.220.16.32"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.156.64.32"/>
    </slice>
    <from sec="1273035705" usec="0"/>
    <to sec="1273035805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.31.82.32"/>
    </slice>
    <from sec="1273036173" usec="0"/>
    <to sec="1273036277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.118.32"/>
    </slice>
    <from sec="1273036141" usec="0"/>
    <to sec="1273036179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.207.33"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
9110[label="133.249.20.34;35pkt 35fpkt", shape=pentagon, color=darkviolet];
12803[label="133.249.20.34;35pkt 35fpkt", shape=invtriangle, color=brown];
15028[label="133.249.20.34;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.20.34:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9110--12803[label="1;35pkt 35fpkt"];
9110--15028[label="1;35pkt 35fpkt"];
12803--15028[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.20.34"/>
    </slice>
    <from sec="1273035623" usec="0"/>
    <to sec="1273036437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.127.43.34"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273036012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
9135[label="6.161.100.35;294pkt 294fpkt", shape=pentagon, color=darkviolet];
12818[label="6.161.100.35;294pkt 294fpkt", shape=invtriangle, color=brown];
15037[label="6.161.100.35;294pkt 294fpkt", shape=invhouse, color=bisque];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.161.100.35:1271, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1271: (50%)&gt;];
}
9135--12818[label="1;294pkt 294fpkt"];
9135--15037[label="1;294pkt 294fpkt"];
12818--15037[label="1;294pkt 294fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="6.161.100.35" src_port="1271"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.138.36"/>
    </slice>
    <from sec="1273035985" usec="0"/>
    <to sec="1273036016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.167.194.36"/>
    </slice>
    <from sec="1273035838" usec="0"/>
    <to sec="1273036447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.156.213.36"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.150.228.36"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.234.241.37"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
9179[label="128.197.32.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12846[label="128.197.32.38;1pkt 1fpkt", shape=invtriangle, color=brown];
15056[label="128.197.32.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.197.32.38:80, 8.145.25.191:34979}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34979: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9179--12846[label="1;1pkt 1fpkt"];
9179--15056[label="1;1pkt 1fpkt"];
12846--15056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.145.25.191" dst_port="34979" src_ip="128.197.32.38" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.221.86.38"/>
    </slice>
    <from sec="1273036180" usec="0"/>
    <to sec="1273036217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.250.173.38"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.169.205.38"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.103.194.39"/>
    </slice>
    <from sec="1273035855" usec="0"/>
    <to sec="1273035864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.45.44.40"/>
    </slice>
    <from sec="1273036288" usec="0"/>
    <to sec="1273036314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.144.40"/>
    </slice>
    <from sec="1273036368" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.27.41"/>
    </slice>
    <from sec="1273036030" usec="0"/>
    <to sec="1273036066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.160.153.41"/>
    </slice>
    <from sec="1273035746" usec="0"/>
    <to sec="1273035752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1127{
style=filled;
color=gray75;
9260[label="217.41.198.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12892[label="217.41.198.42;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1127[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.41.198.42:1292, 128.33.107.224:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1292: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9260--12892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.33.107.224" dst_port="25" src_ip="217.41.198.42" src_port="1292"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.185.232.42"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.10.82.43"/>
    </slice>
    <from sec="1273036147" usec="0"/>
    <to sec="1273036172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.105.43"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
9281[label="60.14.225.43;43pkt 43fpkt", shape=pentagon, color=darkviolet];
12903[label="60.14.225.43;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.14.225.43:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 37217: (1.16279%)&lt;BR/&gt; 36099: (1.16279%)&lt;BR/&gt; 35562: (1.16279%)&lt;BR/&gt; 35400: (1.16279%)&gt;];
}
9281--12903[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="60.14.225.43"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.48.132.44"/>
    </slice>
    <from sec="1273036156" usec="0"/>
    <to sec="1273036192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
9292[label="176.108.139.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12913[label="176.108.139.44;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.44:3316, 56.68.32.106:2015}[50%]&lt;BR/&gt;{176.108.139.44:3317, 36.76.7.236:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3317: (25%)&lt;BR/&gt; 3316: (25%)&lt;BR/&gt; 2015: (25%)&lt;BR/&gt; 443: (25%)&gt;];
}
9292--12913[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.76.7.236" dst_port="443" src_ip="176.108.139.44" src_port="3317"/>
      <filter dst_ip="56.68.32.106" dst_port="2015" src_ip="176.108.139.44" src_port="3316"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.104.219.44"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.201.163.45"/>
    </slice>
    <from sec="1273035676" usec="0"/>
    <to sec="1273035679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.40.4.46"/>
    </slice>
    <from sec="1273035850" usec="0"/>
    <to sec="1273035853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.39.46"/>
    </slice>
    <from sec="1273035612" usec="0"/>
    <to sec="1273035651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.105.116.46"/>
    </slice>
    <from sec="1273036127" usec="0"/>
    <to sec="1273036153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.90.217.46"/>
    </slice>
    <from sec="1273035709" usec="0"/>
    <to sec="1273035752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
9348[label="133.249.192.47;40pkt 40fpkt", shape=pentagon, color=darkviolet];
12940[label="133.249.192.47;40pkt 40fpkt", shape=invtriangle, color=brown];
15116[label="133.249.192.47;40pkt 40fpkt", shape=invhouse, color=bisque];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.192.47:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9348--12940[label="1;40pkt 40fpkt"];
9348--15116[label="1;40pkt 40fpkt"];
12940--15116[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.192.47"/>
    </slice>
    <from sec="1273035626" usec="0"/>
    <to sec="1273036465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
9352[label="150.198.78.48;203pkt 203fpkt", shape=pentagon, color=darkviolet];
12942[label="150.198.78.48;203pkt 203fpkt", shape=invtriangle, color=brown];
15117[label="150.198.78.48;202pkt 202fpkt", shape=invhouse, color=bisque];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.78.48:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9352--12942[label="1;203pkt 203fpkt"];
9352--15117[label="1;202pkt 202fpkt"];
12942--15117[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.78.48"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
9362[label="133.249.11.49;61pkt 61fpkt", shape=pentagon, color=darkviolet];
12947[label="133.249.11.49;61pkt 61fpkt", shape=invtriangle, color=brown];
15121[label="133.249.11.49;61pkt 61fpkt", shape=invhouse, color=bisque];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.11.49:35324, *:*}[72.1311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35324: (36.0656%)&lt;BR/&gt; 7024: (9.83607%)&lt;BR/&gt; 56447: (4.91803%)&lt;BR/&gt; 53881: (4.91803%)&lt;BR/&gt; 80: (1.63934%)&gt;];
}
9362--12947[label="1;61pkt 61fpkt"];
9362--15121[label="1;61pkt 61fpkt"];
12947--15121[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.11.49" src_port="35324"/>
    </slice>
    <from sec="1273036163" usec="0"/>
    <to sec="1273036491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
9370[label="150.198.182.49;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12951[label="150.198.182.49;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.182.49:443, 8.142.242.107:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.2222%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 59514: (2.77778%)&lt;BR/&gt; 51669: (2.77778%)&lt;BR/&gt; 51661: (2.77778%)&gt;];
}
9370--12951[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="8.142.242.107" src_ip="150.198.182.49" src_port="443"/>
    </slice>
    <from sec="1273035650" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
9402[label="1.46.98.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12968[label="1.46.98.51;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.46.98.51:80, 133.249.128.134:2345}[50%]&lt;BR/&gt;{1.46.98.51:80, 133.249.128.134:2346}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2346: (25%)&lt;BR/&gt; 2345: (25%)&gt;];
}
9402--12968[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.128.134" dst_port="2346" src_ip="1.46.98.51" src_port="80"/>
      <filter dst_ip="133.249.128.134" dst_port="2345" src_ip="1.46.98.51" src_port="80"/>
    </slice>
    <from sec="1273035623" usec="0"/>
    <to sec="1273035625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.102.55.52"/>
    </slice>
    <from sec="1273036349" usec="0"/>
    <to sec="1273036414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.200.101.52"/>
    </slice>
    <from sec="1273036138" usec="0"/>
    <to sec="1273036154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
9442[label="133.249.220.53;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12989[label="133.249.220.53;24pkt 24fpkt", shape=invtriangle, color=brown];
15147[label="133.249.220.53;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.220.53:443, 9.68.68.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52754: (2.08333%)&lt;BR/&gt; 52753: (2.08333%)&lt;BR/&gt; 52752: (2.08333%)&lt;BR/&gt; 52751: (2.08333%)&gt;];
}
9442--12989[label="1;24pkt 24fpkt"];
9442--15147[label="1;24pkt 24fpkt"];
12989--15147[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="9.68.68.178" src_ip="133.249.220.53" src_port="443"/>
    </slice>
    <from sec="1273035848" usec="0"/>
    <to sec="1273035851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.72.33.54"/>
    </slice>
    <from sec="1273035878" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
9453[label="176.108.139.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12998[label="176.108.139.54;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.54:55715, 185.12.176.192:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55715: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9453--12998[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.12.176.192" dst_port="80" src_ip="176.108.139.54" src_port="55715"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.237.13.55"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
9464[label="133.249.104.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13004[label="133.249.104.55;4pkt 4fpkt", shape=invtriangle, color=brown];
15156[label="133.249.104.55;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.104.55:62176, 105.198.51.40:123}[25%]&lt;BR/&gt;{133.249.104.55:62176, 105.198.51.41:123}[25%]&lt;BR/&gt;{133.249.104.55:62176, 105.198.51.42:123}[25%]&lt;BR/&gt;{133.249.104.55:62176, 105.198.51.43:123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62176: (50%)&lt;BR/&gt; 123: (50%)&gt;];
}
9464--13004[label="1;4pkt 4fpkt"];
9464--15156[label="1;4pkt 4fpkt"];
13004--15156[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="105.198.51.43" dst_port="123" src_ip="133.249.104.55" src_port="62176"/>
      <filter dst_ip="105.198.51.42" dst_port="123" src_ip="133.249.104.55" src_port="62176"/>
      <filter dst_ip="105.198.51.41" dst_port="123" src_ip="133.249.104.55" src_port="62176"/>
      <filter dst_ip="105.198.51.40" dst_port="123" src_ip="133.249.104.55" src_port="62176"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.32.154.55"/>
    </slice>
    <from sec="1273035721" usec="0"/>
    <to sec="1273035730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.25.57.56"/>
    </slice>
    <from sec="1273036111" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.105.56"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.99.129.56"/>
    </slice>
    <from sec="1273036333" usec="0"/>
    <to sec="1273036350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
9492[label="57.216.53.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13025[label="57.216.53.57;1pkt 1fpkt", shape=invtriangle, color=brown];
15171[label="57.216.53.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.216.53.57:3801, 204.134.252.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3801: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9492--13025[label="1;1pkt 1fpkt"];
9492--15171[label="1;1pkt 1fpkt"];
13025--15171[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.252.5" dst_port="80" src_ip="57.216.53.57" src_port="3801"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.248.215.57"/>
    </slice>
    <from sec="1273036175" usec="0"/>
    <to sec="1273036220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
9522[label="0.93.161.58;129pkt 129fpkt", shape=pentagon, color=darkviolet];
13043[label="0.93.161.58;129pkt 129fpkt", shape=invtriangle, color=brown];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.93.161.58:*, *:3128}[50.3876%]&lt;BR/&gt;{0.93.161.58:*, *:8080}[49.6124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.1938%)&lt;BR/&gt; 8080: (24.8062%)&lt;BR/&gt; 3647: (0.775194%)&lt;BR/&gt; 2625: (0.775194%)&lt;BR/&gt; 4990: (0.387597%)&gt;];
}
9522--13043[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="0.93.161.58"/>
      <filter dst_port="8080" src_ip="0.93.161.58"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.207.76.59"/>
    </slice>
    <from sec="1273036120" usec="0"/>
    <to sec="1273036138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.30.93.59"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
9555[label="6.229.236.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13059[label="6.229.236.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.229.236.60:62153, 204.134.252.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62153: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9555--13059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.252.5" dst_port="80" src_ip="6.229.236.60" src_port="62153"/>
    </slice>
    <from sec="1273035832" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.42.242.60"/>
    </slice>
    <from sec="1273036070" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="191.20.76.61"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
9574[label="9.11.194.61;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13071[label="9.11.194.61;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.11.194.61:36319, 204.134.251.248:80}[20%]&lt;BR/&gt;{9.11.194.61:36340, 204.134.251.248:80}[20%]&lt;BR/&gt;{9.11.194.61:36341, 204.134.251.248:80}[20%]&lt;BR/&gt;{9.11.194.61:36344, 204.134.251.248:80}[20%]&lt;BR/&gt;{9.11.194.61:36345, 204.134.251.248:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36345: (10%)&lt;BR/&gt; 36344: (10%)&lt;BR/&gt; 36341: (10%)&lt;BR/&gt; 36340: (10%)&gt;];
}
9574--13071[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="9.11.194.61" src_port="36345"/>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="9.11.194.61" src_port="36344"/>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="9.11.194.61" src_port="36341"/>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="9.11.194.61" src_port="36340"/>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="9.11.194.61" src_port="36319"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.22.232.61"/>
    </slice>
    <from sec="1273036462" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
9579[label="217.153.25.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13074[label="217.153.25.62;2pkt 2fpkt", shape=invtriangle, color=brown];
15201[label="217.153.25.62;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.153.25.62:3192, 204.134.251.241:3127}[50%]&lt;BR/&gt;{217.153.25.62:4615, 204.134.251.241:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4615: (25%)&lt;BR/&gt; 3192: (25%)&lt;BR/&gt; 3128: (25%)&lt;BR/&gt; 3127: (25%)&gt;];
}
9579--13074[label="1;2pkt 2fpkt"];
9579--15201[label="1;2pkt 2fpkt"];
13074--15201[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.251.241" dst_port="3128" src_ip="217.153.25.62" src_port="4615"/>
      <filter dst_ip="204.134.251.241" dst_port="3127" src_ip="217.153.25.62" src_port="3192"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.80.62"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.178.112.62"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.29.205.62"/>
    </slice>
    <from sec="1273035959" usec="0"/>
    <to sec="1273035988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.26.63"/>
    </slice>
    <from sec="1273036018" usec="0"/>
    <to sec="1273036076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.43.134.64"/>
    </slice>
    <from sec="1273036398" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.5.161.64"/>
    </slice>
    <from sec="1273035639" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
3349[label="128.212.108.112;d;20pkt 20fpkt", shape=diamond, color=yellow];
4427[label="5.163.84.120;s;10pkt 10fpkt", shape=diamond, color=yellow];
6733[label="128.212.108.112;d;19pkt 19fpkt", shape=hexagon, color=black];
9633[label="8.200.147.65;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10505[label="5.163.84.120;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13104[label="8.200.147.65;4pkt 4fpkt", shape=invtriangle, color=brown];
13637[label="5.163.84.120;10pkt 10fpkt", shape=invtriangle, color=brown];
15222[label="8.200.147.65;4pkt 4fpkt", shape=invhouse, color=bisque];
15526[label="5.163.84.120;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.84.120:*, 128.212.108.112:993}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (29.6703%)&lt;BR/&gt; 143: (7.69231%)&lt;BR/&gt; 465: (6.59341%)&lt;BR/&gt; 18708: (3.2967%)&lt;BR/&gt; 18707: (3.2967%)&gt;];
}
3349--4427[label="0.7;7pkt 7fpkt"];
3349--6733[label="1;19pkt 19fpkt"];
3349--9633[label="0.5;2pkt 2fpkt"];
3349--10505[label="0.7;7pkt 7fpkt"];
3349--13104[label="0.5;2pkt 2fpkt"];
3349--13637[label="0.7;7pkt 7fpkt"];
3349--15222[label="0.5;2pkt 2fpkt"];
3349--15526[label="0.7;7pkt 7fpkt"];
4427--6733[label="0.7;7pkt 7fpkt"];
4427--10505[label="1;10pkt 10fpkt"];
4427--13637[label="1;10pkt 10fpkt"];
4427--15526[label="1;10pkt 10fpkt"];
6733--9633[label="0.5;2pkt 2fpkt"];
6733--10505[label="0.7;7pkt 7fpkt"];
6733--13104[label="0.5;2pkt 2fpkt"];
6733--13637[label="0.7;7pkt 7fpkt"];
6733--15222[label="0.5;2pkt 2fpkt"];
6733--15526[label="0.7;7pkt 7fpkt"];
9633--13104[label="1;4pkt 4fpkt"];
9633--15222[label="1;4pkt 4fpkt"];
10505--13637[label="1;10pkt 10fpkt"];
10505--15526[label="1;10pkt 10fpkt"];
13104--15222[label="1;4pkt 4fpkt"];
13637--15526[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.108.112" dst_port="993" src_ip="5.163.84.120"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.177.65"/>
    </slice>
    <from sec="1273036426" usec="0"/>
    <to sec="1273036470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
9643[label="221.73.0.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13108[label="221.73.0.66;3pkt 3fpkt", shape=invtriangle, color=brown];
15225[label="221.73.0.66;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.73.0.66:80, 133.249.219.234:50663}[33.3333%]&lt;BR/&gt;{221.73.0.66:80, 133.249.219.234:50664}[33.3333%]&lt;BR/&gt;{221.73.0.66:80, 133.249.219.234:50665}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50665: (16.6667%)&lt;BR/&gt; 50664: (16.6667%)&lt;BR/&gt; 50663: (16.6667%)&gt;];
}
9643--13108[label="1;3pkt 3fpkt"];
9643--15225[label="1;3pkt 3fpkt"];
13108--15225[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.219.234" dst_port="50665" src_ip="221.73.0.66" src_port="80"/>
      <filter dst_ip="133.249.219.234" dst_port="50664" src_ip="221.73.0.66" src_port="80"/>
      <filter dst_ip="133.249.219.234" dst_port="50663" src_ip="221.73.0.66" src_port="80"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1176{
style=filled;
color=gray75;
9644[label="128.23.8.66;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13109[label="128.23.8.66;19pkt 19fpkt", shape=invtriangle, color=brown];
15226[label="128.23.8.66;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1176[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.23.8.66:*, 213.203.24.124:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64630: (2.63158%)&lt;BR/&gt; 64476: (2.63158%)&lt;BR/&gt; 64384: (2.63158%)&lt;BR/&gt; 62472: (2.63158%)&gt;];
}
9644--13109[label="1;19pkt 19fpkt"];
9644--15226[label="1;19pkt 19fpkt"];
13109--15226[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="213.203.24.124" dst_port="80" src_ip="128.23.8.66"/>
    </slice>
    <from sec="1273035684" usec="0"/>
    <to sec="1273036475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.150.36.66"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
9653[label="176.108.139.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13113[label="176.108.139.66;2pkt 2fpkt", shape=invtriangle, color=brown];
15227[label="176.108.139.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.139.66:23055, 193.105.140.21:1000}[50%]&lt;BR/&gt;{176.108.139.66:37929, 44.243.220.144:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37929: (25%)&lt;BR/&gt; 23055: (25%)&lt;BR/&gt; 1000: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
9653--13113[label="1;2pkt 2fpkt"];
9653--15227[label="1;2pkt 2fpkt"];
13113--15227[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="44.243.220.144" dst_port="80" src_ip="176.108.139.66" src_port="37929"/>
      <filter dst_ip="193.105.140.21" dst_port="1000" src_ip="176.108.139.66" src_port="23055"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.217.160.66"/>
    </slice>
    <from sec="1273036055" usec="0"/>
    <to sec="1273036092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.253.66"/>
    </slice>
    <from sec="1273035884" usec="0"/>
    <to sec="1273035922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.36.90.67"/>
    </slice>
    <from sec="1273036082" usec="0"/>
    <to sec="1273036104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
9684[label="57.188.38.68;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13135[label="57.188.38.68;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.188.38.68:3225, 205.121.109.52:139}[33.3333%]&lt;BR/&gt;{57.188.38.68:0, 205.121.97.204:0}[33.3333%]&lt;BR/&gt;{57.188.38.68:3097, 205.121.122.230:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 3225: (16.6667%)&lt;BR/&gt; 3097: (16.6667%)&lt;BR/&gt; 445: (16.6667%)&lt;BR/&gt; 139: (16.6667%)&gt;];
}
9684--13135[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.121.122.230" dst_port="445" src_ip="57.188.38.68" src_port="3097"/>
      <filter dst_ip="205.121.97.204" src_ip="57.188.38.68"/>
      <filter dst_ip="205.121.109.52" dst_port="139" src_ip="57.188.38.68" src_port="3225"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.15.69"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872321,2.76775,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
260[label="5.42.77.220;s;1183pkt 1183fpkt", shape=diamond, color=yellow];
4201[label="133.249.129.30;d;42pkt 42fpkt", shape=diamond, color=yellow];
10268[label="204.2.116.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11965[label="5.42.77.220;1184pkt 1184fpkt", shape=pentagon, color=darkviolet];
13492[label="204.2.116.105;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.42.77.220:10008, *:*}[96.6531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10008: (49.0676%)&lt;BR/&gt; 80: (0.76668%)&lt;BR/&gt; 64547: (0.145048%)&lt;BR/&gt; 63750: (0.0828844%)&lt;BR/&gt; 63287: (0.0828844%)&gt;];
}
260--4201[label="0.0238095;1pkt 1fpkt"];
260--11965[label="1;1183pkt 1183fpkt"];
4201--9215[label="0.0238095;1pkt 1fpkt"];
4201--9711[label="0.125;1pkt 1fpkt"];
4201--10268[label="1;2pkt 2fpkt"];
4201--11661[label="0.0238095;1pkt 1fpkt"];
4201--11965[label="0.0238095;1pkt 1fpkt"];
4201--12868[label="0.0238095;1pkt 1fpkt"];
4201--13151[label="0.125;1pkt 1fpkt"];
4201--13492[label="1;2pkt 2fpkt"];
4201--14282[label="0.0238095;1pkt 1fpkt"];
4201--14348[label="0.0238095;1pkt 1fpkt"];
4201--15871[label="0.0238095;1pkt 1fpkt"];
4201--15914[label="0.0238095;1pkt 1fpkt"];
10268--13492[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="5.42.77.220" src_port="10008"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
9725[label="85.201.235.69;177pkt 177fpkt", shape=pentagon, color=darkviolet];
13156[label="85.201.235.69;177pkt 177fpkt", shape=invtriangle, color=brown];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.201.235.69:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 2894: (0.282486%)&lt;BR/&gt; 2893: (0.282486%)&lt;BR/&gt; 2892: (0.282486%)&lt;BR/&gt; 2891: (0.282486%)&gt;];
}
9725--13156[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="85.201.235.69"/>
    </slice>
    <from sec="1273036326" usec="0"/>
    <to sec="1273036337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.45.194.70"/>
    </slice>
    <from sec="1273035911" usec="0"/>
    <to sec="1273035914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.88.235.70"/>
    </slice>
    <from sec="1273036035" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.57.71"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
9761[label="128.212.109.71;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13181[label="128.212.109.71;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.109.71:443, 4.226.185.226:*}[69.2308%]&lt;BR/&gt;{128.212.109.71:443, 9.145.180.19:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52108: (3.84615%)&lt;BR/&gt; 52107: (3.84615%)&lt;BR/&gt; 52106: (3.84615%)&lt;BR/&gt; 52105: (3.84615%)&gt;];
}
9761--13181[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="4.226.185.226" src_ip="128.212.109.71" src_port="443"/>
      <filter dst_ip="9.145.180.19" src_ip="128.212.109.71" src_port="443"/>
    </slice>
    <from sec="1273035685" usec="0"/>
    <to sec="1273035982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1191{
style=filled;
color=gray75;
879[label="204.134.250.69;d;381pkt 381fpkt", shape=diamond, color=yellow];
2523[label="205.118.165.132;s;9pkt 9fpkt", shape=diamond, color=yellow];
2631[label="44.107.130.42;s;3pkt 3fpkt", shape=diamond, color=yellow];
5112[label="1.45.122.51;s;8pkt 8fpkt", shape=diamond, color=yellow];
9764[label="219.104.156.71;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9885[label="42.181.178.78;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10144[label="0.115.182.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10677[label="205.118.165.132;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10760[label="77.16.174.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10790[label="0.90.28.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10925[label="190.75.139.149;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11112[label="217.199.182.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12151[label="220.172.29.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13184[label="219.104.156.71;4pkt 4fpkt", shape=invtriangle, color=brown];
13422[label="0.115.182.96;4pkt 4fpkt", shape=invtriangle, color=brown];
13750[label="205.118.165.132;17pkt 17fpkt", shape=invtriangle, color=brown];
14006[label="217.199.182.161;2pkt 2fpkt", shape=invtriangle, color=brown];
14645[label="220.172.29.234;2pkt 2fpkt", shape=invtriangle, color=brown];
15266[label="219.104.156.71;4pkt 4fpkt", shape=invhouse, color=bisque];
15589[label="205.118.165.132;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1191[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.134.250.69:40447}[39.899%]&lt;BR/&gt;{*:443, 204.134.250.69:*}[20.202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40447: (17.0385%)&lt;BR/&gt; 443: (9.12779%)&lt;BR/&gt; 60132: (8.92495%)&lt;BR/&gt; 110: (6.49087%)&lt;BR/&gt; 80: (2.23124%)&gt;];
}
879--1876[label="0.117647;2pkt 2fpkt"];
879--1887[label="0.0243902;3pkt 3fpkt"];
879--1972[label="0.0652174;3pkt 3fpkt"];
879--2334[label="0.0416667;1pkt 1fpkt"];
879--2362[label="0.0465116;4pkt 4fpkt"];
879--2409[label="0.0714286;1pkt 1fpkt"];
879--2523[label="0.111111;1pkt 1fpkt"];
879--2631[label="1;3pkt 3fpkt"];
879--3020[label="0.00796813;2pkt 2fpkt"];
879--3257[label="0.0357143;2pkt 2fpkt"];
879--3634[label="0.00262467;1pkt 1fpkt"];
879--5112[label="1;8pkt 8fpkt"];
879--8322[label="0.0131234;5pkt 5fpkt"];
879--8349[label="0.0131234;5pkt 5fpkt"];
879--8350[label="0.00262467;1pkt 1fpkt"];
879--8357[label="0.0131234;5pkt 5fpkt"];
879--8373[label="0.0209974;8pkt 8fpkt"];
879--8393[label="0.0131234;5pkt 5fpkt"];
879--8405[label="0.0131234;5pkt 5fpkt"];
879--8406[label="0.00262467;1pkt 1fpkt"];
879--8414[label="0.0131234;5pkt 5fpkt"];
879--8428[label="0.0131234;5pkt 5fpkt"];
879--8439[label="0.0131234;5pkt 5fpkt"];
879--8440[label="0.00262467;1pkt 1fpkt"];
879--8454[label="0.0209974;8pkt 8fpkt"];
879--8489[label="0.2;2pkt 2fpkt"];
879--9764[label="1;4pkt 4fpkt"];
879--9870[label="0.00722022;2pkt 2fpkt"];
879--9885[label="1;3pkt 3fpkt"];
879--10144[label="1;4pkt 4fpkt"];
879--10677[label="0.117647;2pkt 2fpkt"];
879--10760[label="1;2pkt 2fpkt"];
879--10790[label="1;2pkt 2fpkt"];
879--10925[label="1;6pkt 6fpkt"];
879--10928[label="0.025974;2pkt 2fpkt"];
879--11040[label="0.272727;3pkt 3fpkt"];
879--11112[label="1;2pkt 2fpkt"];
879--11645[label="0.333333;2pkt 2fpkt"];
879--11733[label="0.08;2pkt 2fpkt"];
879--11983[label="0.0666667;2pkt 2fpkt"];
879--12151[label="1;2pkt 2fpkt"];
879--12382[label="0.0689655;2pkt 2fpkt"];
879--12430[label="0.181818;2pkt 2fpkt"];
879--13184[label="1;4pkt 4fpkt"];
879--13249[label="0.00722022;2pkt 2fpkt"];
879--13422[label="1;4pkt 4fpkt"];
879--13750[label="0.117647;2pkt 2fpkt"];
879--13965[label="0.272727;3pkt 3fpkt"];
879--14006[label="1;2pkt 2fpkt"];
879--14645[label="1;2pkt 2fpkt"];
879--15266[label="1;4pkt 4fpkt"];
879--15313[label="0.00722022;2pkt 2fpkt"];
879--15589[label="0.117647;2pkt 2fpkt"];
879--15704[label="0.272727;3pkt 3fpkt"];
2523--10677[label="1;9pkt 9fpkt"];
2523--13750[label="1;9pkt 9fpkt"];
2523--15589[label="1;9pkt 9fpkt"];
9764--13184[label="1;4pkt 4fpkt"];
9764--15266[label="1;4pkt 4fpkt"];
10144--13422[label="1;4pkt 4fpkt"];
10677--13750[label="1;17pkt 17fpkt"];
10677--15589[label="1;17pkt 17fpkt"];
11112--14006[label="1;2pkt 2fpkt"];
12151--14645[label="1;2pkt 2fpkt"];
13184--15266[label="1;4pkt 4fpkt"];
13750--15589[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.69" src_port="443"/>
      <filter dst_ip="204.134.250.69" dst_port="40447"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1192{
style=filled;
color=gray75;
9766[label="166.133.168.71;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13185[label="166.133.168.71;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1192[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.133.168.71:*, 204.134.251.248:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63925: (2.08333%)&lt;BR/&gt; 63924: (2.08333%)&lt;BR/&gt; 63923: (2.08333%)&lt;BR/&gt; 63922: (2.08333%)&gt;];
}
9766--13185[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.251.248" dst_port="80" src_ip="166.133.168.71"/>
    </slice>
    <from sec="1273036433" usec="0"/>
    <to sec="1273036437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1193{
style=filled;
color=gray75;
9782[label="150.150.42.72;67pkt 67fpkt", shape=pentagon, color=darkviolet];
13196[label="150.150.42.72;67pkt 67fpkt", shape=invtriangle, color=brown];
15275[label="150.150.42.72;67pkt 67fpkt", shape=invhouse, color=bisque];
stat1193[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.150.42.72:*, 214.77.8.109:80}[55.2239%]&lt;BR/&gt;{150.150.42.72:*, 214.77.8.74:80}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0448%)&lt;BR/&gt; 4041: (6.71642%)&lt;BR/&gt; 49942: (2.23881%)&lt;BR/&gt; 60273: (0.746269%)&lt;BR/&gt; 54921: (0.746269%)&gt;];
}
9782--13196[label="1;67pkt 67fpkt"];
9782--15275[label="1;67pkt 67fpkt"];
13196--15275[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="214.77.8.109" dst_port="80" src_ip="150.150.42.72"/>
      <filter dst_ip="214.77.8.74" dst_port="80" src_ip="150.150.42.72"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.101.67.72"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1195{
style=filled;
color=gray75;
4803[label="133.249.89.72;s;84pkt 84fpkt", shape=diamond, color=yellow];
9786[label="133.249.89.72;103pkt 103fpkt", shape=pentagon, color=darkviolet];
13200[label="133.249.89.72;103pkt 103fpkt", shape=invtriangle, color=brown];
15278[label="133.249.89.72;103pkt 103fpkt", shape=invhouse, color=bisque];
stat1195[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.89.72:*, 72.62.10.193:80}[87.3786%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4555%)&lt;BR/&gt; 443: (1.01781%)&lt;BR/&gt; 123: (1.01781%)&lt;BR/&gt; 51024: (0.508906%)&lt;BR/&gt; 51018: (0.508906%)&gt;];
}
4803--7463[label="0.0119048;1pkt 1fpkt"];
4803--7497[label="0.0238095;2pkt 2fpkt"];
4803--8324[label="0.047619;4pkt 4fpkt"];
4803--8342[label="0.0714286;6pkt 6fpkt"];
4803--9786[label="1;84pkt 84fpkt"];
4803--13200[label="1;84pkt 84fpkt"];
4803--15278[label="1;84pkt 84fpkt"];
9786--13200[label="1;103pkt 103fpkt"];
9786--15278[label="1;103pkt 103fpkt"];
13200--15278[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="72.62.10.193" dst_port="80" src_ip="133.249.89.72"/>
    </slice>
    <from sec="1273035618" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
9788[label="133.249.112.72;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13201[label="133.249.112.72;17pkt 17fpkt", shape=invtriangle, color=brown];
15279[label="133.249.112.72;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.112.72:80, 45.171.76.107:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 25: (5.88235%)&lt;BR/&gt; 60543: (2.94118%)&lt;BR/&gt; 60494: (2.94118%)&lt;BR/&gt; 60424: (2.94118%)&gt;];
}
9788--13201[label="1;17pkt 17fpkt"];
9788--15279[label="1;17pkt 17fpkt"];
13201--15279[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="45.171.76.107" src_ip="133.249.112.72" src_port="80"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273036391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.108.211.72"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1198{
style=filled;
color=gray75;
9809[label="133.249.144.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13214[label="133.249.144.73;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1198[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.144.73:50917, 47.52.213.54:995}[50%]&lt;BR/&gt;{133.249.144.73:17005, 8.149.2.186:38638}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50917: (25%)&lt;BR/&gt; 38638: (25%)&lt;BR/&gt; 17005: (25%)&lt;BR/&gt; 995: (25%)&gt;];
}
9809--13214[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="8.149.2.186" dst_port="38638" src_ip="133.249.144.73" src_port="17005"/>
      <filter dst_ip="47.52.213.54" dst_port="995" src_ip="133.249.144.73" src_port="50917"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.32.28.74"/>
    </slice>
    <from sec="1273036091" usec="0"/>
    <to sec="1273036250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.213.244.74"/>
    </slice>
    <from sec="1273035795" usec="0"/>
    <to sec="1273035806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.40.31.76"/>
    </slice>
    <from sec="1273036099" usec="0"/>
    <to sec="1273036149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.83.82.76"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
9848[label="133.249.107.76;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13234[label="133.249.107.76;3pkt 3fpkt", shape=invtriangle, color=brown];
15304[label="133.249.107.76;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.107.76:25, 63.42.56.13:2810}[33.3333%]&lt;BR/&gt;{133.249.107.76:44629, 47.52.130.108:25}[33.3333%]&lt;BR/&gt;{133.249.107.76:44628, 47.53.140.115:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44629: (16.6667%)&lt;BR/&gt; 44628: (16.6667%)&lt;BR/&gt; 2810: (16.6667%)&gt;];
}
9848--13234[label="1;3pkt 3fpkt"];
9848--15304[label="1;3pkt 3fpkt"];
13234--15304[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="47.53.140.115" dst_port="25" src_ip="133.249.107.76" src_port="44628"/>
      <filter dst_ip="47.52.130.108" dst_port="25" src_ip="133.249.107.76" src_port="44629"/>
      <filter dst_ip="63.42.56.13" dst_port="2810" src_ip="133.249.107.76" src_port="25"/>
    </slice>
    <from sec="1273035919" usec="0"/>
    <to sec="1273036127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
9857[label="63.1.23.77;242pkt 242fpkt", shape=pentagon, color=darkviolet];
13240[label="63.1.23.77;242pkt 242fpkt", shape=invtriangle, color=brown];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.1.23.77:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 3085: (0.206612%)&lt;BR/&gt; 3084: (0.206612%)&lt;BR/&gt; 3083: (0.206612%)&lt;BR/&gt; 3082: (0.206612%)&gt;];
}
9857--13240[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="63.1.23.77"/>
    </slice>
    <from sec="1273035819" usec="0"/>
    <to sec="1273035830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1205{
style=filled;
color=gray75;
9868[label="176.108.211.77;26pkt 26fpkt", shape=pentagon, color=darkviolet];
13247[label="176.108.211.77;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1205[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.211.77:*, 47.52.129.49:80}[34.6154%]&lt;BR/&gt;{176.108.211.77:*, 201.103.160.137:80}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53104: (1.92308%)&lt;BR/&gt; 53102: (1.92308%)&lt;BR/&gt; 53101: (1.92308%)&lt;BR/&gt; 53100: (1.92308%)&gt;];
}
9868--13247[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="47.52.129.49" dst_port="80" src_ip="176.108.211.77"/>
      <filter dst_ip="201.103.160.137" dst_port="80" src_ip="176.108.211.77"/>
    </slice>
    <from sec="1273036272" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.240.79"/>
    </slice>
    <from sec="1273035868" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
9906[label="206.179.33.80;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13270[label="206.179.33.80;254pkt 254fpkt", shape=invtriangle, color=brown];
15328[label="206.179.33.80;254pkt 254fpkt", shape=invhouse, color=bisque];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.179.33.80:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4999: (0.19685%)&lt;BR/&gt; 4998: (0.19685%)&lt;BR/&gt; 4997: (0.19685%)&lt;BR/&gt; 4996: (0.19685%)&gt;];
}
9906--13270[label="1;254pkt 254fpkt"];
9906--15328[label="1;254pkt 254fpkt"];
13270--15328[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="206.179.33.80"/>
    </slice>
    <from sec="1273035626" usec="0"/>
    <to sec="1273035637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.236.58.80"/>
    </slice>
    <from sec="1273036133" usec="0"/>
    <to sec="1273036146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1210{
style=filled;
color=gray75;
9911[label="214.83.99.80;103pkt 103fpkt", shape=pentagon, color=darkviolet];
13273[label="214.83.99.80;103pkt 103fpkt", shape=invtriangle, color=brown];
stat1210[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.83.99.80:0, *:0}[98.0583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0583%)&lt;BR/&gt; 8080: (0.485437%)&lt;BR/&gt; 6000: (0.485437%)&lt;BR/&gt; 3175: (0.485437%)&lt;BR/&gt; 445: (0.485437%)&gt;];
}
9911--13273[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="214.83.99.80"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
9912[label="0.34.129.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13274[label="0.34.129.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.34.129.80:1237, 176.108.54.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1237: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9912--13274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="80" src_ip="0.34.129.80" src_port="1237"/>
    </slice>
    <from sec="1273036486" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.99.152.80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.21.82"/>
    </slice>
    <from sec="1273035873" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.49.82"/>
    </slice>
    <from sec="1273035864" usec="0"/>
    <to sec="1273035913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.129.71.82"/>
    </slice>
    <from sec="1273035897" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
9941[label="176.108.141.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13294[label="176.108.141.82;1pkt 1fpkt", shape=invtriangle, color=brown];
15340[label="176.108.141.82;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.141.82:51442, 45.227.169.88:82}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51442: (50%)&lt;BR/&gt; 82: (50%)&gt;];
}
9941--13294[label="1;1pkt 1fpkt"];
9941--15340[label="1;1pkt 1fpkt"];
13294--15340[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="45.227.169.88" dst_port="82" src_ip="176.108.141.82" src_port="51442"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.88.83"/>
    </slice>
    <from sec="1273036449" usec="0"/>
    <to sec="1273036461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.182.138.83"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1219{
style=filled;
color=gray75;
9967[label="128.197.65.84;108pkt 108fpkt", shape=pentagon, color=darkviolet];
13312[label="128.197.65.84;108pkt 108fpkt", shape=invtriangle, color=brown];
15351[label="128.197.65.84;108pkt 108fpkt", shape=invhouse, color=bisque];
stat1219[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.197.65.84:26810, *:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26810: (45.8333%)&lt;BR/&gt; 443: (3.7037%)&lt;BR/&gt; 65030: (0.462963%)&lt;BR/&gt; 64037: (0.462963%)&lt;BR/&gt; 62881: (0.462963%)&gt;];
}
9967--13312[label="1;108pkt 108fpkt"];
9967--15351[label="1;108pkt 108fpkt"];
13312--15351[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="128.197.65.84" src_port="26810"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.136.159.84"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1222{
style=filled;
color=gray75;
9992[label="133.249.254.85;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13325[label="133.249.254.85;10pkt 10fpkt", shape=invtriangle, color=brown];
15356[label="133.249.254.85;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1222[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.254.85:*, 40.185.181.25:80}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2532: (5%)&lt;BR/&gt; 2531: (5%)&lt;BR/&gt; 2530: (5%)&lt;BR/&gt; 2528: (5%)&gt;];
}
9992--13325[label="1;10pkt 10fpkt"];
9992--15356[label="1;10pkt 10fpkt"];
13325--15356[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="40.185.181.25" dst_port="80" src_ip="133.249.254.85"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
2402[label="176.108.82.173;d;212pkt 212fpkt", shape=diamond, color=yellow];
7017[label="176.108.82.173;d;106pkt 106fpkt", shape=hexagon, color=black];
9843[label="36.222.28.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9898[label="205.203.150.79;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9998[label="62.212.112.86;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13230[label="36.222.28.76;1pkt 1fpkt", shape=invtriangle, color=brown];
13330[label="62.212.112.86;20pkt 20fpkt", shape=invtriangle, color=brown];
15302[label="36.222.28.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.82.173:25}[96.8037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0541%)&lt;BR/&gt; 443: (0.945946%)&lt;BR/&gt; 55360: (0.675676%)&lt;BR/&gt; 1664: (0.675676%)&lt;BR/&gt; 1813: (0.405405%)&gt;];
}
2402--7017[label="1;106pkt 106fpkt"];
2402--9843[label="1;1pkt 1fpkt"];
2402--9898[label="0.222222;2pkt 2fpkt"];
2402--9998[label="1;20pkt 20fpkt"];
2402--11775[label="0.25;1pkt 1fpkt"];
2402--13230[label="1;1pkt 1fpkt"];
2402--13330[label="1;20pkt 20fpkt"];
2402--15302[label="1;1pkt 1fpkt"];
7017--9843[label="1;1pkt 1fpkt"];
7017--13230[label="1;1pkt 1fpkt"];
7017--15302[label="1;1pkt 1fpkt"];
9843--13230[label="1;1pkt 1fpkt"];
9843--15302[label="1;1pkt 1fpkt"];
9998--13330[label="1;20pkt 20fpkt"];
13230--15302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.82.173" dst_port="25"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.122.86"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.253.86"/>
    </slice>
    <from sec="1273036085" usec="0"/>
    <to sec="1273036106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.28.27.87"/>
    </slice>
    <from sec="1273035940" usec="0"/>
    <to sec="1273035945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.254.172.87"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.72.175.87"/>
    </slice>
    <from sec="1273035673" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.1.85.88"/>
    </slice>
    <from sec="1273036002" usec="0"/>
    <to sec="1273036048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.12.89"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.93.67.89"/>
    </slice>
    <from sec="1273036355" usec="0"/>
    <to sec="1273036374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1233{
style=filled;
color=gray75;
10049[label="9.132.75.89;239pkt 239fpkt", shape=pentagon, color=darkviolet];
13367[label="9.132.75.89;239pkt 239fpkt", shape=invtriangle, color=brown];
15379[label="9.132.75.89;239pkt 239fpkt", shape=invhouse, color=bisque];
stat1233[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.132.75.89:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 60150: (0.209205%)&lt;BR/&gt; 60142: (0.209205%)&lt;BR/&gt; 60019: (0.209205%)&lt;BR/&gt; 60013: (0.209205%)&gt;];
}
10049--13367[label="1;239pkt 239fpkt"];
10049--15379[label="1;239pkt 239fpkt"];
13367--15379[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="9.132.75.89"/>
    </slice>
    <from sec="1273036283" usec="0"/>
    <to sec="1273036294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.105.125.89"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.21.203.89"/>
    </slice>
    <from sec="1273036003" usec="0"/>
    <to sec="1273036021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1236{
style=filled;
color=gray75;
10057[label="0.174.208.89;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13372[label="0.174.208.89;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1236[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.174.208.89:*, 176.108.54.203:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10221: (8.33333%)&lt;BR/&gt; 10216: (8.33333%)&lt;BR/&gt; 10213: (8.33333%)&lt;BR/&gt; 10212: (8.33333%)&gt;];
}
10057--13372[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.203" dst_port="80" src_ip="0.174.208.89"/>
    </slice>
    <from sec="1273036492" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.12.95.90"/>
    </slice>
    <from sec="1273036421" usec="0"/>
    <to sec="1273036440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.100.240.90"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1239{
style=filled;
color=gray75;
10079[label="204.134.248.91;110pkt 110fpkt", shape=pentagon, color=darkviolet];
13384[label="204.134.248.91;110pkt 110fpkt", shape=invtriangle, color=brown];
stat1239[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.248.91:*, 213.88.28.105:80}[68.1818%]&lt;BR/&gt;{204.134.248.91:6881, *:*}[26.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0909%)&lt;BR/&gt; 6881: (13.1818%)&lt;BR/&gt; 0: (4.54545%)&lt;BR/&gt; 110: (0.909091%)&lt;BR/&gt; 61194: (0.454545%)&gt;];
}
10079--13384[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.248.91" src_port="6881"/>
      <filter dst_ip="213.88.28.105" dst_port="80" src_ip="204.134.248.91"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1240{
style=filled;
color=gray75;
10090[label="193.91.154.92;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13389[label="193.91.154.92;15pkt 15fpkt", shape=invtriangle, color=brown];
15393[label="193.91.154.92;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1240[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.91.154.92:0, *:0}[53.3333%]&lt;BR/&gt;{193.91.154.92:445, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (53.3333%)&lt;BR/&gt; 445: (20%)&lt;BR/&gt; 50974: (3.33333%)&lt;BR/&gt; 4784: (3.33333%)&lt;BR/&gt; 4171: (3.33333%)&gt;];
}
10090--13389[label="1;15pkt 15fpkt"];
10090--15393[label="1;15pkt 15fpkt"];
13389--15393[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="193.91.154.92" src_port="445"/>
      <filter src_ip="193.91.154.92"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.132.132.93"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1242{
style=filled;
color=gray75;
10112[label="217.169.131.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13405[label="217.169.131.94;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1242[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.169.131.94:54885, 204.134.250.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54885: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10112--13405[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.99" dst_port="80" src_ip="217.169.131.94" src_port="54885"/>
    </slice>
    <from sec="1273036483" usec="0"/>
    <to sec="1273036493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.110.192.94"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.226.182.95"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.208.95"/>
    </slice>
    <from sec="1273035889" usec="0"/>
    <to sec="1273035927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
10156[label="128.212.143.97;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13427[label="128.212.143.97;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.143.97:40976, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40976: (47.0588%)&lt;BR/&gt; 57942: (2.94118%)&lt;BR/&gt; 55531: (2.94118%)&lt;BR/&gt; 54976: (2.94118%)&lt;BR/&gt; 46951: (2.94118%)&gt;];
}
10156--13427[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="128.212.143.97" src_port="40976"/>
    </slice>
    <from sec="1273035610" usec="0"/>
    <to sec="1273036486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.93.98"/>
    </slice>
    <from sec="1273036176" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.10.129.98"/>
    </slice>
    <from sec="1273036169" usec="0"/>
    <to sec="1273036269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.103.20.99"/>
    </slice>
    <from sec="1273036114" usec="0"/>
    <to sec="1273036135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.229.47.99"/>
    </slice>
    <from sec="1273035707" usec="0"/>
    <to sec="1273036053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.14.91.100"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.102.100"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.225.100"/>
    </slice>
    <from sec="1273036246" usec="0"/>
    <to sec="1273036283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
10204[label="223.195.242.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13455[label="223.195.242.100;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.195.242.100:80, 205.121.151.107:58942}[50%]&lt;BR/&gt;{223.195.242.100:80, 205.121.151.107:58943}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58943: (25%)&lt;BR/&gt; 58942: (25%)&gt;];
}
10204--13455[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.121.151.107" dst_port="58943" src_ip="223.195.242.100" src_port="80"/>
      <filter dst_ip="205.121.151.107" dst_port="58942" src_ip="223.195.242.100" src_port="80"/>
    </slice>
    <from sec="1273036473" usec="0"/>
    <to sec="1273036475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.80.67.101"/>
    </slice>
    <from sec="1273035835" usec="0"/>
    <to sec="1273035877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1256{
style=filled;
color=gray75;
10230[label="176.108.212.102;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13468[label="176.108.212.102;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1256[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.212.102:4834, 61.130.79.18:80}[33.3333%]&lt;BR/&gt;{176.108.212.102:4836, 61.130.79.18:80}[33.3333%]&lt;BR/&gt;{176.108.212.102:4837, 61.130.79.18:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4837: (16.6667%)&lt;BR/&gt; 4836: (16.6667%)&lt;BR/&gt; 4834: (16.6667%)&gt;];
}
10230--13468[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.130.79.18" dst_port="80" src_ip="176.108.212.102" src_port="4837"/>
      <filter dst_ip="61.130.79.18" dst_port="80" src_ip="176.108.212.102" src_port="4836"/>
      <filter dst_ip="61.130.79.18" dst_port="80" src_ip="176.108.212.102" src_port="4834"/>
    </slice>
    <from sec="1273036360" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.0.6.103"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.81.96.103"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.112.103"/>
    </slice>
    <from sec="1273035715" usec="0"/>
    <to sec="1273035730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
10246[label="128.197.3.104;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13480[label="128.197.3.104;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.197.3.104:2728, 217.196.244.208:2924}[33.3333%]&lt;BR/&gt;{128.197.3.104:2728, 217.196.244.208:2933}[33.3333%]&lt;BR/&gt;{128.197.3.104:2728, 217.196.244.208:2935}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2728: (50%)&lt;BR/&gt; 2935: (16.6667%)&lt;BR/&gt; 2933: (16.6667%)&lt;BR/&gt; 2924: (16.6667%)&gt;];
}
10246--13480[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.196.244.208" dst_port="2935" src_ip="128.197.3.104" src_port="2728"/>
      <filter dst_ip="217.196.244.208" dst_port="2933" src_ip="128.197.3.104" src_port="2728"/>
      <filter dst_ip="217.196.244.208" dst_port="2924" src_ip="128.197.3.104" src_port="2728"/>
    </slice>
    <from sec="1273036253" usec="0"/>
    <to sec="1273036494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.216.100.104"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.136.104"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
10264[label="221.87.44.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13490[label="221.87.44.105;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.87.44.105:3864, 204.134.251.241:3127}[50%]&lt;BR/&gt;{221.87.44.105:3720, 204.134.251.249:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3864: (25%)&lt;BR/&gt; 3720: (25%)&lt;BR/&gt; 3128: (25%)&lt;BR/&gt; 3127: (25%)&gt;];
}
10264--13490[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.251.249" dst_port="3128" src_ip="221.87.44.105" src_port="3720"/>
      <filter dst_ip="204.134.251.241" dst_port="3127" src_ip="221.87.44.105" src_port="3864"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1264{
style=filled;
color=gray75;
10283[label="219.80.142.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13503[label="219.80.142.106;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1264[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.80.142.106:80, 133.249.108.221:62679}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62679: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10283--13503[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.108.221" dst_port="62679" src_ip="219.80.142.106" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.168.152.106"/>
    </slice>
    <from sec="1273035914" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1267{
style=filled;
color=gray75;
10325[label="128.197.134.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13531[label="128.197.134.109;1pkt 1fpkt", shape=invtriangle, color=brown];
15470[label="128.197.134.109;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1267[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.197.134.109:32768, 205.150.24.98:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
10325--13531[label="1;1pkt 1fpkt"];
10325--15470[label="1;1pkt 1fpkt"];
13531--15470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.150.24.98" dst_port="53" src_ip="128.197.134.109" src_port="32768"/>
    </slice>
    <from sec="1273035791" usec="0"/>
    <to sec="1273036157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.25.150.110"/>
    </slice>
    <from sec="1273036330" usec="0"/>
    <to sec="1273036362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.237.196.110"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.73.224.110"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.91.145.111"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273035910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1272{
style=filled;
color=gray75;
10381[label="1.46.96.113;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13570[label="1.46.96.113;4pkt 4fpkt", shape=invtriangle, color=brown];
15493[label="1.46.96.113;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1272[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.46.96.113:80, 176.108.198.141:58051}[25%]&lt;BR/&gt;{1.46.96.113:80, 176.108.198.141:58066}[25%]&lt;BR/&gt;{1.46.96.113:80, 176.108.198.141:58067}[25%]&lt;BR/&gt;{1.46.96.113:80, 176.108.198.141:58068}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58068: (12.5%)&lt;BR/&gt; 58067: (12.5%)&lt;BR/&gt; 58066: (12.5%)&lt;BR/&gt; 58051: (12.5%)&gt;];
}
10381--13570[label="1;4pkt 4fpkt"];
10381--15493[label="1;4pkt 4fpkt"];
13570--15493[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.198.141" dst_port="58068" src_ip="1.46.96.113" src_port="80"/>
      <filter dst_ip="176.108.198.141" dst_port="58067" src_ip="1.46.96.113" src_port="80"/>
      <filter dst_ip="176.108.198.141" dst_port="58066" src_ip="1.46.96.113" src_port="80"/>
      <filter dst_ip="176.108.198.141" dst_port="58051" src_ip="1.46.96.113" src_port="80"/>
    </slice>
    <from sec="1273035607" usec="0"/>
    <to sec="1273035636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.107.113"/>
    </slice>
    <from sec="1273035699" usec="0"/>
    <to sec="1273035723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.134.113"/>
    </slice>
    <from sec="1273035811" usec="0"/>
    <to sec="1273035830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.2.8.114"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.218.20.114"/>
    </slice>
    <from sec="1273036222" usec="0"/>
    <to sec="1273036249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
10396[label="133.249.21.114;93pkt 93fpkt", shape=pentagon, color=darkviolet];
13580[label="133.249.21.114;93pkt 93fpkt", shape=invtriangle, color=brown];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.21.114:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10396--13580[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.21.114"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1278{
style=filled;
color=gray75;
10398[label="59.66.32.114;134pkt 134fpkt", shape=pentagon, color=darkviolet];
13581[label="59.66.32.114;134pkt 134fpkt", shape=invtriangle, color=brown];
stat1278[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.66.32.114:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65162: (0.373134%)&lt;BR/&gt; 64999: (0.373134%)&lt;BR/&gt; 63135: (0.373134%)&lt;BR/&gt; 62771: (0.373134%)&gt;];
}
10398--13581[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="59.66.32.114"/>
    </slice>
    <from sec="1273035609" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.65.114"/>
    </slice>
    <from sec="1273036340" usec="0"/>
    <to sec="1273036428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.26.88.114"/>
    </slice>
    <from sec="1273036031" usec="0"/>
    <to sec="1273036050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.169.146.114"/>
    </slice>
    <from sec="1273035926" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1282{
style=filled;
color=gray75;
10421[label="212.133.4.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13592[label="212.133.4.115;1pkt 1fpkt", shape=invtriangle, color=brown];
15506[label="212.133.4.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1282[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.133.4.115:80, 176.108.138.57:50661}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50661: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10421--13592[label="1;1pkt 1fpkt"];
10421--15506[label="1;1pkt 1fpkt"];
13592--15506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.138.57" dst_port="50661" src_ip="212.133.4.115" src_port="80"/>
    </slice>
    <from sec="1273036479" usec="0"/>
    <to sec="1273036487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1283{
style=filled;
color=gray75;
10433[label="128.212.198.115;82pkt 82fpkt", shape=pentagon, color=darkviolet];
13598[label="128.212.198.115;82pkt 82fpkt", shape=invtriangle, color=brown];
15510[label="128.212.198.115;82pkt 82fpkt", shape=invhouse, color=bisque];
stat1283[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.198.115:48681, 6.208.80.124:*}[21.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48681: (48.1707%)&lt;BR/&gt; 19360: (1.21951%)&lt;BR/&gt; 443: (1.21951%)&lt;BR/&gt; 80: (1.21951%)&lt;BR/&gt; 65402: (0.609756%)&gt;];
}
10433--13598[label="1;82pkt 82fpkt"];
10433--15510[label="1;82pkt 82fpkt"];
13598--15510[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="6.208.80.124" src_ip="128.212.198.115" src_port="48681"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.51.33.116"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.14.42.116"/>
    </slice>
    <from sec="1273035728" usec="0"/>
    <to sec="1273035761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.216.59.116"/>
    </slice>
    <from sec="1273035905" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1287{
style=filled;
color=gray75;
10476[label="133.249.174.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13621[label="133.249.174.117;2pkt 2fpkt", shape=invtriangle, color=brown];
15519[label="133.249.174.117;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1287[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.174.117:80, 0.118.181.213:1694}[50%]&lt;BR/&gt;{133.249.174.117:80, 0.118.181.213:1696}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1696: (25%)&lt;BR/&gt; 1694: (25%)&gt;];
}
10476--13621[label="1;2pkt 2fpkt"];
10476--15519[label="1;2pkt 2fpkt"];
13621--15519[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="0.118.181.213" dst_port="1696" src_ip="133.249.174.117" src_port="80"/>
      <filter dst_ip="0.118.181.213" dst_port="1694" src_ip="133.249.174.117" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1288{
style=filled;
color=gray75;
10477[label="60.197.202.117;470pkt 470fpkt", shape=pentagon, color=darkviolet];
13622[label="60.197.202.117;470pkt 470fpkt", shape=invtriangle, color=brown];
stat1288[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.197.202.117:418, *:80}[33.617%]&lt;BR/&gt;{60.197.202.117:418, *:3128}[33.4043%]&lt;BR/&gt;{60.197.202.117:418, *:8080}[32.9787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 418: (50%)&lt;BR/&gt; 80: (16.8085%)&lt;BR/&gt; 3128: (16.7021%)&lt;BR/&gt; 8080: (16.4894%)&gt;];
}
10477--13622[label="1;470pkt 470fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="60.197.202.117" src_port="418"/>
      <filter dst_port="3128" src_ip="60.197.202.117" src_port="418"/>
      <filter dst_port="8080" src_ip="60.197.202.117" src_port="418"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.196.46.118"/>
    </slice>
    <from sec="1273035998" usec="0"/>
    <to sec="1273036071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1290{
style=filled;
color=gray75;
10484[label="40.144.135.118;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13628[label="40.144.135.118;8pkt 8fpkt", shape=invtriangle, color=brown];
15524[label="40.144.135.118;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1290[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.144.135.118:1026, *:29975}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29975: (50%)&lt;BR/&gt; 1026: (50%)&gt;];
}
10484--13628[label="1;8pkt 8fpkt"];
10484--15524[label="1;8pkt 8fpkt"];
13628--15524[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="29975" src_ip="40.144.135.118" src_port="1026"/>
    </slice>
    <from sec="1273035621" usec="0"/>
    <to sec="1273036413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1291{
style=filled;
color=gray75;
10490[label="4.217.229.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13631[label="4.217.229.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1291[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.217.229.118:1799, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1799: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10490--13631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="4.217.229.118" src_port="1799"/>
    </slice>
    <from sec="1273036480" usec="0"/>
    <to sec="1273036493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
10506[label="167.36.96.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13638[label="167.36.96.120;1pkt 1fpkt", shape=invtriangle, color=brown];
15527[label="167.36.96.120;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.36.96.120:4557, 204.134.252.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4557: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10506--13638[label="1;1pkt 1fpkt"];
10506--15527[label="1;1pkt 1fpkt"];
13638--15527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.252.5" dst_port="80" src_ip="167.36.96.120" src_port="4557"/>
    </slice>
    <from sec="1273036458" usec="0"/>
    <to sec="1273036487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.130.120"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.216.178.120"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.92.2.121"/>
    </slice>
    <from sec="1273035912" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1296{
style=filled;
color=gray75;
10518[label="213.150.37.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13647[label="213.150.37.121;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1296[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.150.37.121:54548, 204.134.245.43:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54548: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
10518--13647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.245.43" dst_port="995" src_ip="213.150.37.121" src_port="54548"/>
    </slice>
    <from sec="1273036442" usec="0"/>
    <to sec="1273036446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.161.88.121"/>
    </slice>
    <from sec="1273035697" usec="0"/>
    <to sec="1273035744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.215.198.122"/>
    </slice>
    <from sec="1273035733" usec="0"/>
    <to sec="1273035753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1299{
style=filled;
color=gray75;
10537[label="76.245.10.123;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13659[label="76.245.10.123;6pkt 6fpkt", shape=invtriangle, color=brown];
15540[label="76.245.10.123;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1299[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.245.10.123:*, 176.108.54.203:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33413: (8.33333%)&lt;BR/&gt; 33412: (8.33333%)&lt;BR/&gt; 33379: (8.33333%)&lt;BR/&gt; 33372: (8.33333%)&gt;];
}
10537--13659[label="1;6pkt 6fpkt"];
10537--15540[label="1;6pkt 6fpkt"];
13659--15540[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.203" dst_port="80" src_ip="76.245.10.123"/>
    </slice>
    <from sec="1273036431" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.70.123"/>
    </slice>
    <from sec="1273036198" usec="0"/>
    <to sec="1273036215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1301{
style=filled;
color=gray75;
10542[label="198.161.102.123;173pkt 173fpkt", shape=pentagon, color=darkviolet];
13662[label="198.161.102.123;173pkt 173fpkt", shape=invtriangle, color=brown];
15541[label="198.161.102.123;173pkt 173fpkt", shape=invhouse, color=bisque];
stat1301[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.161.102.123:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4531: (0.289017%)&lt;BR/&gt; 4529: (0.289017%)&lt;BR/&gt; 4528: (0.289017%)&lt;BR/&gt; 4527: (0.289017%)&gt;];
}
10542--13662[label="1;173pkt 173fpkt"];
10542--15541[label="1;173pkt 173fpkt"];
13662--15541[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="198.161.102.123"/>
    </slice>
    <from sec="1273036336" usec="0"/>
    <to sec="1273036347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.46.124"/>
    </slice>
    <from sec="1273035704" usec="0"/>
    <to sec="1273035735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.208.124"/>
    </slice>
    <from sec="1273035920" usec="0"/>
    <to sec="1273036003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.249.124"/>
    </slice>
    <from sec="1273035999" usec="0"/>
    <to sec="1273036033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.240.224.127"/>
    </slice>
    <from sec="1273036197" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1306{
style=filled;
color=gray75;
10593[label="133.249.43.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13692[label="133.249.43.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1306[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.43.128:33551, 57.90.176.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33551: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10593--13692[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="57.90.176.199" dst_port="80" src_ip="133.249.43.128" src_port="33551"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.159.89.128"/>
    </slice>
    <from sec="1273036455" usec="0"/>
    <to sec="1273036479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.236.128"/>
    </slice>
    <from sec="1273035673" usec="0"/>
    <to sec="1273035704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.215.13.129"/>
    </slice>
    <from sec="1273036207" usec="0"/>
    <to sec="1273036216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.158.23.129"/>
    </slice>
    <from sec="1273035905" usec="0"/>
    <to sec="1273035916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.88.82.129"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1312{
style=filled;
color=gray75;
10622[label="185.12.176.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13712[label="185.12.176.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1312[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.12.176.129:80, 128.212.29.166:64162}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64162: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10622--13712[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.29.166" dst_port="64162" src_ip="185.12.176.129" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.144.8.130"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
10624[label="52.189.8.130;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13714[label="52.189.8.130;11pkt 11fpkt", shape=invtriangle, color=brown];
15569[label="52.189.8.130;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.189.8.130:*, 204.134.251.241:3128}[54.5455%]&lt;BR/&gt;{52.189.8.130:*, 176.108.54.155:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (36.3636%)&lt;BR/&gt; 3127: (9.09091%)&lt;BR/&gt; 3358: (4.54545%)&lt;BR/&gt; 3327: (4.54545%)&lt;BR/&gt; 3304: (4.54545%)&gt;];
}
10624--13714[label="1;11pkt 11fpkt"];
10624--15569[label="1;11pkt 11fpkt"];
13714--15569[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.155" src_ip="52.189.8.130"/>
      <filter dst_ip="204.134.251.241" dst_port="3128" src_ip="52.189.8.130"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.183.137.130"/>
    </slice>
    <from sec="1273036045" usec="0"/>
    <to sec="1273036057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.165.169.130"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.71.20.131"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.225.64.131"/>
    </slice>
    <from sec="1273036115" usec="0"/>
    <to sec="1273036159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.10.149.131"/>
    </slice>
    <from sec="1273035952" usec="0"/>
    <to sec="1273035955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1320{
style=filled;
color=gray75;
1644[label="133.249.148.163;d;531pkt 531fpkt", shape=diamond, color=yellow];
2616[label="72.48.162.69;s;202pkt 202fpkt", shape=diamond, color=yellow];
3050[label="176.108.195.58;d;578pkt 578fpkt", shape=diamond, color=yellow];
3083[label="72.48.161.162;s;52pkt 52fpkt", shape=diamond, color=yellow];
3725[label="205.32.21.192;s;6pkt 6fpkt", shape=diamond, color=yellow];
6952[label="133.249.148.163;d;520pkt 520fpkt", shape=hexagon, color=black];
8850[label="72.48.161.20;24pkt 24fpkt", shape=pentagon, color=darkviolet];
9241[label="72.48.129.41;32pkt 32fpkt", shape=pentagon, color=darkviolet];
9294[label="72.48.161.44;22pkt 22fpkt", shape=pentagon, color=darkviolet];
9355[label="72.48.129.48;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9719[label="72.48.162.69;231pkt 231fpkt", shape=pentagon, color=darkviolet];
10023[label="72.48.162.87;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10473[label="72.48.165.117;28pkt 28fpkt", shape=pentagon, color=darkviolet];
10657[label="72.48.161.131;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10703[label="72.48.128.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10910[label="72.48.145.148;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10977[label="72.48.165.152;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11554[label="205.32.21.192;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11750[label="72.48.145.204;31pkt 31fpkt", shape=pentagon, color=darkviolet];
11993[label="72.48.164.222;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12649[label="72.48.161.20;24pkt 24fpkt", shape=invtriangle, color=brown];
12884[label="72.48.129.41;32pkt 32fpkt", shape=invtriangle, color=brown];
13348[label="72.48.162.87;20pkt 20fpkt", shape=invtriangle, color=brown];
13736[label="72.48.161.131;34pkt 34fpkt", shape=invtriangle, color=brown];
14401[label="72.48.145.204;31pkt 31fpkt", shape=invtriangle, color=brown];
14554[label="72.48.164.222;12pkt 12fpkt", shape=invtriangle, color=brown];
14946[label="72.48.161.20;23pkt 23fpkt", shape=invhouse, color=bisque];
15364[label="72.48.162.87;20pkt 20fpkt", shape=invhouse, color=bisque];
15581[label="72.48.161.131;34pkt 34fpkt", shape=invhouse, color=bisque];
15944[label="72.48.145.204;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1320[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 176.108.195.58:*}[52.119%]&lt;BR/&gt;{*:80, 133.249.148.163:*}[47.3399%]&lt;BR/&gt;{72.48.162.69:80, *:*}[20.8296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7726%)&lt;BR/&gt; 3478: (0.113723%)&lt;BR/&gt; 57731: (0.0947688%)&lt;BR/&gt; 57715: (0.0947688%)&lt;BR/&gt; 57713: (0.0947688%)&gt;];
}
1644--2130[label="0.008;1pkt 1fpkt"];
1644--2616[label="0.544554;110pkt 110fpkt"];
1644--3083[label="1;52pkt 52fpkt"];
1644--3725[label="1;6pkt 6fpkt"];
1644--6952[label="1;520pkt 520fpkt"];
1644--8322[label="0.0753296;40pkt 40fpkt"];
1644--8349[label="0.0150659;8pkt 8fpkt"];
1644--8357[label="0.0094162;5pkt 5fpkt"];
1644--8373[label="0.00753296;4pkt 4fpkt"];
1644--8393[label="0.0753296;40pkt 40fpkt"];
1644--8405[label="0.0150659;8pkt 8fpkt"];
1644--8414[label="0.0094162;5pkt 5fpkt"];
1644--8428[label="0.0753296;40pkt 40fpkt"];
1644--8439[label="0.0150659;8pkt 8fpkt"];
1644--8454[label="0.0263653;14pkt 14fpkt"];
1644--8850[label="0.0833333;2pkt 2fpkt"];
1644--9241[label="1;32pkt 32fpkt"];
1644--9396[label="0.131148;8pkt 8fpkt"];
1644--9719[label="0.47619;110pkt 110fpkt"];
1644--10473[label="1;28pkt 28fpkt"];
1644--10657[label="0.470588;16pkt 16fpkt"];
1644--10862[label="1;26pkt 26fpkt"];
1644--11020[label="0.00746269;1pkt 1fpkt"];
1644--11554[label="1;6pkt 6fpkt"];
1644--11750[label="0.354839;11pkt 11fpkt"];
1644--12649[label="0.0833333;2pkt 2fpkt"];
1644--12884[label="1;32pkt 32fpkt"];
1644--13736[label="0.470588;16pkt 16fpkt"];
1644--13857[label="1;26pkt 26fpkt"];
1644--13953[label="0.00757576;1pkt 1fpkt"];
1644--14401[label="0.354839;11pkt 11fpkt"];
1644--14946[label="0.0869565;2pkt 2fpkt"];
1644--15581[label="0.470588;16pkt 16fpkt"];
1644--15944[label="0.354839;11pkt 11fpkt"];
2616--3050[label="0.455446;92pkt 92fpkt"];
2616--6952[label="0.544554;110pkt 110fpkt"];
2616--8349[label="0.108911;22pkt 22fpkt"];
2616--8405[label="0.108911;22pkt 22fpkt"];
2616--8439[label="0.108911;22pkt 22fpkt"];
2616--9719[label="1;202pkt 202fpkt"];
3050--8349[label="0.0484429;28pkt 28fpkt"];
3050--8357[label="0.0017301;1pkt 1fpkt"];
3050--8373[label="0.0743945;43pkt 43fpkt"];
3050--8405[label="0.0484429;28pkt 28fpkt"];
3050--8414[label="0.0017301;1pkt 1fpkt"];
3050--8439[label="0.0484429;28pkt 28fpkt"];
3050--8454[label="0.0207612;12pkt 12fpkt"];
3050--8850[label="0.916667;22pkt 22fpkt"];
3050--9294[label="1;22pkt 22fpkt"];
3050--9355[label="1;29pkt 29fpkt"];
3050--9719[label="0.52381;121pkt 121fpkt"];
3050--10023[label="1;20pkt 20fpkt"];
3050--10657[label="0.529412;18pkt 18fpkt"];
3050--10703[label="1;2pkt 2fpkt"];
3050--10910[label="1;13pkt 13fpkt"];
3050--10977[label="1;4pkt 4fpkt"];
3050--11750[label="0.645161;20pkt 20fpkt"];
3050--11993[label="1;12pkt 12fpkt"];
3050--12649[label="0.916667;22pkt 22fpkt"];
3050--13348[label="1;20pkt 20fpkt"];
3050--13736[label="0.529412;18pkt 18fpkt"];
3050--14401[label="0.645161;20pkt 20fpkt"];
3050--14554[label="1;12pkt 12fpkt"];
3050--14946[label="0.913043;21pkt 21fpkt"];
3050--15364[label="1;20pkt 20fpkt"];
3050--15581[label="0.529412;18pkt 18fpkt"];
3050--15944[label="0.645161;20pkt 20fpkt"];
3083--6952[label="1;52pkt 52fpkt"];
3725--6952[label="1;6pkt 6fpkt"];
3725--11554[label="1;6pkt 6fpkt"];
6952--8322[label="0.0769231;40pkt 40fpkt"];
6952--8349[label="0.0153846;8pkt 8fpkt"];
6952--8357[label="0.00961538;5pkt 5fpkt"];
6952--8373[label="0.00769231;4pkt 4fpkt"];
6952--8393[label="0.0769231;40pkt 40fpkt"];
6952--8405[label="0.0153846;8pkt 8fpkt"];
6952--8414[label="0.00961538;5pkt 5fpkt"];
6952--8428[label="0.0769231;40pkt 40fpkt"];
6952--8439[label="0.0153846;8pkt 8fpkt"];
6952--8454[label="0.00769231;4pkt 4fpkt"];
6952--8850[label="0.0833333;2pkt 2fpkt"];
6952--9241[label="1;32pkt 32fpkt"];
6952--9396[label="0.0819672;5pkt 5fpkt"];
6952--9719[label="0.47619;110pkt 110fpkt"];
6952--10473[label="1;28pkt 28fpkt"];
6952--10657[label="0.470588;16pkt 16fpkt"];
6952--10862[label="1;26pkt 26fpkt"];
6952--11020[label="0.00746269;1pkt 1fpkt"];
6952--11554[label="1;6pkt 6fpkt"];
6952--11750[label="0.354839;11pkt 11fpkt"];
6952--12649[label="0.0833333;2pkt 2fpkt"];
6952--12884[label="1;32pkt 32fpkt"];
6952--13736[label="0.470588;16pkt 16fpkt"];
6952--13857[label="1;26pkt 26fpkt"];
6952--13953[label="0.00757576;1pkt 1fpkt"];
6952--14401[label="0.354839;11pkt 11fpkt"];
6952--14946[label="0.0869565;2pkt 2fpkt"];
6952--15581[label="0.470588;16pkt 16fpkt"];
6952--15944[label="0.354839;11pkt 11fpkt"];
8850--12649[label="1;24pkt 24fpkt"];
8850--14946[label="1;23pkt 23fpkt"];
9241--12884[label="1;32pkt 32fpkt"];
10023--13348[label="1;20pkt 20fpkt"];
10023--15364[label="1;20pkt 20fpkt"];
10657--13736[label="1;34pkt 34fpkt"];
10657--15581[label="1;34pkt 34fpkt"];
11750--14401[label="1;31pkt 31fpkt"];
11750--15944[label="1;31pkt 31fpkt"];
11993--14554[label="1;12pkt 12fpkt"];
12649--14946[label="1;23pkt 23fpkt"];
13348--15364[label="1;20pkt 20fpkt"];
13736--15581[label="1;34pkt 34fpkt"];
14401--15944[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="72.48.162.69" src_port="80"/>
      <filter dst_ip="176.108.195.58" src_port="80"/>
      <filter dst_ip="133.249.148.163" src_port="80"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
10670[label="176.108.60.132;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13744[label="176.108.60.132;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.60.132:0, 37.41.67.113:0}[25%]&lt;BR/&gt;{176.108.60.132:0, 7.161.6.129:0}[25%]&lt;BR/&gt;{176.108.60.132:0, 41.22.34.217:0}[25%]&lt;BR/&gt;{176.108.60.132:0, 9.189.33.237:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10670--13744[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="9.189.33.237" src_ip="176.108.60.132"/>
      <filter dst_ip="41.22.34.217" src_ip="176.108.60.132"/>
      <filter dst_ip="7.161.6.129" src_ip="176.108.60.132"/>
      <filter dst_ip="37.41.67.113" src_ip="176.108.60.132"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.153.132"/>
    </slice>
    <from sec="1273035951" usec="0"/>
    <to sec="1273035977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1323{
style=filled;
color=gray75;
10682[label="9.76.218.132;43pkt 43fpkt", shape=pentagon, color=darkviolet];
13754[label="9.76.218.132;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1323[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.76.218.132:*, *:3127}[69.7674%]&lt;BR/&gt;{9.76.218.132:*, *:3124}[30.2326%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (34.8837%)&lt;BR/&gt; 3124: (15.1163%)&lt;BR/&gt; 4962: (1.16279%)&lt;BR/&gt; 4923: (1.16279%)&lt;BR/&gt; 4821: (1.16279%)&gt;];
}
10682--13754[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="9.76.218.132"/>
      <filter dst_port="3124" src_ip="9.76.218.132"/>
    </slice>
    <from sec="1273035642" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.158.218.132"/>
    </slice>
    <from sec="1273036093" usec="0"/>
    <to sec="1273036115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
10704[label="205.10.129.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13766[label="205.10.129.134;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.10.129.134:47404, 176.108.54.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47404: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10704--13766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="80" src_ip="205.10.129.134" src_port="47404"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.210.36.136"/>
    </slice>
    <from sec="1273035935" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.47.164.136"/>
    </slice>
    <from sec="1273035702" usec="0"/>
    <to sec="1273035724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
10731[label="176.108.165.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13781[label="176.108.165.136;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.165.136:52212, 60.231.74.122:12000}[50%]&lt;BR/&gt;{176.108.165.136:52212, 60.231.74.122:16245}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52212: (50%)&lt;BR/&gt; 16245: (25%)&lt;BR/&gt; 12000: (25%)&gt;];
}
10731--13781[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="60.231.74.122" dst_port="16245" src_ip="176.108.165.136" src_port="52212"/>
      <filter dst_ip="60.231.74.122" dst_port="12000" src_ip="176.108.165.136" src_port="52212"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.6.152.137"/>
    </slice>
    <from sec="1273035995" usec="0"/>
    <to sec="1273036029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.23.169.137"/>
    </slice>
    <from sec="1273036189" usec="0"/>
    <to sec="1273036226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1332{
style=filled;
color=gray75;
10755[label="5.42.77.138;86pkt 86fpkt", shape=pentagon, color=darkviolet];
13792[label="5.42.77.138;86pkt 86fpkt", shape=invtriangle, color=brown];
15609[label="5.42.77.138;86pkt 86fpkt", shape=invhouse, color=bisque];
stat1332[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.42.77.138:10008, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10008: (50%)&lt;BR/&gt; 64090: (0.581395%)&lt;BR/&gt; 63287: (0.581395%)&lt;BR/&gt; 62251: (0.581395%)&lt;BR/&gt; 62070: (0.581395%)&gt;];
}
10755--13792[label="1;86pkt 86fpkt"];
10755--15609[label="1;86pkt 86fpkt"];
13792--15609[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="5.42.77.138" src_port="10008"/>
    </slice>
    <from sec="1273035700" usec="0"/>
    <to sec="1273035724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.177.129.138"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1334{
style=filled;
color=gray75;
2619[label="213.150.36.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
6574[label="213.150.36.73;d;2pkt 2fpkt", shape=hexagon, color=black];
10759[label="133.249.173.138;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13794[label="133.249.173.138;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1334[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.173.138:110, 4.225.154.203:*}[21.4286%]&lt;BR/&gt;{133.249.173.138:995, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (40%)&lt;BR/&gt; 995: (10%)&lt;BR/&gt; 49541: (6.66667%)&lt;BR/&gt; 63763: (3.33333%)&lt;BR/&gt; 59931: (3.33333%)&gt;];
}
2619--6574[label="1;2pkt 2fpkt"];
2619--10759[label="0.5;1pkt 1fpkt"];
2619--13794[label="0.5;1pkt 1fpkt"];
6574--10759[label="0.5;1pkt 1fpkt"];
6574--13794[label="0.5;1pkt 1fpkt"];
10759--13794[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.173.138" src_port="995"/>
      <filter dst_ip="4.225.154.203" src_ip="133.249.173.138" src_port="110"/>
    </slice>
    <from sec="1273035616" usec="0"/>
    <to sec="1273036443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.214.138"/>
    </slice>
    <from sec="1273036155" usec="0"/>
    <to sec="1273036188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.236.138"/>
    </slice>
    <from sec="1273036371" usec="0"/>
    <to sec="1273036407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.6.67.139"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.16.197.140"/>
    </slice>
    <from sec="1273036101" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.135.40.141"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.197.181.141"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.233.139.142"/>
    </slice>
    <from sec="1273035879" usec="0"/>
    <to sec="1273035907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.177.7.143"/>
    </slice>
    <from sec="1273036011" usec="0"/>
    <to sec="1273036014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1343{
style=filled;
color=gray75;
10831[label="41.221.73.143;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13842[label="41.221.73.143;3pkt 3fpkt", shape=invtriangle, color=brown];
15635[label="41.221.73.143;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1343[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.221.73.143:57777, 133.249.204.39:80}[33.3333%]&lt;BR/&gt;{41.221.73.143:57779, 133.249.204.39:80}[33.3333%]&lt;BR/&gt;{41.221.73.143:57781, 133.249.204.39:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57781: (16.6667%)&lt;BR/&gt; 57779: (16.6667%)&lt;BR/&gt; 57777: (16.6667%)&gt;];
}
10831--13842[label="1;3pkt 3fpkt"];
10831--15635[label="1;3pkt 3fpkt"];
13842--15635[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.204.39" dst_port="80" src_ip="41.221.73.143" src_port="57781"/>
      <filter dst_ip="133.249.204.39" dst_port="80" src_ip="41.221.73.143" src_port="57779"/>
      <filter dst_ip="133.249.204.39" dst_port="80" src_ip="41.221.73.143" src_port="57777"/>
    </slice>
    <from sec="1273035627" usec="0"/>
    <to sec="1273035676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.245.128.143"/>
    </slice>
    <from sec="1273036419" usec="0"/>
    <to sec="1273036433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.203.52.144"/>
    </slice>
    <from sec="1273036002" usec="0"/>
    <to sec="1273036015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.109.176.144"/>
    </slice>
    <from sec="1273035845" usec="0"/>
    <to sec="1273035851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.90.189.145"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.161.211.145"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
10876[label="218.77.127.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13864[label="218.77.127.146;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.77.127.146:80, 128.212.247.23:61727}[50%]&lt;BR/&gt;{218.77.127.146:80, 128.212.167.26:42295}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61727: (25%)&lt;BR/&gt; 42295: (25%)&gt;];
}
10876--13864[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.167.26" dst_port="42295" src_ip="218.77.127.146" src_port="80"/>
      <filter dst_ip="128.212.247.23" dst_port="61727" src_ip="218.77.127.146" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.106.158.146"/>
    </slice>
    <from sec="1273035695" usec="0"/>
    <to sec="1273036425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1351{
style=filled;
color=gray75;
10882[label="36.137.177.146;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13868[label="36.137.177.146;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1351[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.137.177.146:1136, 176.108.54.147:3128}[33.3333%]&lt;BR/&gt;{36.137.177.146:4263, 176.108.54.147:3128}[33.3333%]&lt;BR/&gt;{36.137.177.146:4966, 176.108.54.147:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 4966: (16.6667%)&lt;BR/&gt; 4263: (16.6667%)&lt;BR/&gt; 1136: (16.6667%)&gt;];
}
10882--13868[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.147" dst_port="3128" src_ip="36.137.177.146" src_port="4966"/>
      <filter dst_ip="176.108.54.147" dst_port="3128" src_ip="36.137.177.146" src_port="4263"/>
      <filter dst_ip="176.108.54.147" dst_port="3128" src_ip="36.137.177.146" src_port="1136"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.221.181.146"/>
    </slice>
    <from sec="1273036228" usec="0"/>
    <to sec="1273036255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1353{
style=filled;
color=gray75;
10898[label="128.212.196.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13877[label="128.212.196.147;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1353[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.196.147:50591, 134.179.10.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50591: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10898--13877[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.179.10.32" dst_port="80" src_ip="128.212.196.147" src_port="50591"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
10916[label="195.45.201.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13887[label="195.45.201.148;1pkt 1fpkt", shape=invtriangle, color=brown];
15660[label="195.45.201.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.45.201.148:0, 204.134.242.49:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10916--13887[label="1;1pkt 1fpkt"];
10916--15660[label="1;1pkt 1fpkt"];
13887--15660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.242.49" src_ip="195.45.201.148"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.157.204.149"/>
    </slice>
    <from sec="1273036130" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.192.32.150"/>
    </slice>
    <from sec="1273035670" usec="0"/>
    <to sec="1273035718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1357{
style=filled;
color=gray75;
10936[label="133.249.43.150;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13900[label="133.249.43.150;14pkt 14fpkt", shape=invtriangle, color=brown];
15668[label="133.249.43.150;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1357[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.43.150:*, 50.82.72.11:25}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.8571%)&lt;BR/&gt; 113: (7.14286%)&lt;BR/&gt; 59531: (3.57143%)&lt;BR/&gt; 59233: (3.57143%)&lt;BR/&gt; 54375: (3.57143%)&gt;];
}
10936--13900[label="1;14pkt 14fpkt"];
10936--15668[label="1;14pkt 14fpkt"];
13900--15668[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="50.82.72.11" dst_port="25" src_ip="133.249.43.150"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1358{
style=filled;
color=gray75;
10944[label="21.197.137.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13904[label="21.197.137.150;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1358[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.197.137.150:49222, 133.249.172.31:443}[25%]&lt;BR/&gt;{21.197.137.150:49223, 133.249.172.31:443}[25%]&lt;BR/&gt;{21.197.137.150:49233, 133.249.172.135:443}[25%]&lt;BR/&gt;{21.197.137.150:49234, 133.249.172.135:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49234: (12.5%)&lt;BR/&gt; 49233: (12.5%)&lt;BR/&gt; 49223: (12.5%)&lt;BR/&gt; 49222: (12.5%)&gt;];
}
10944--13904[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.172.135" dst_port="443" src_ip="21.197.137.150" src_port="49234"/>
      <filter dst_ip="133.249.172.135" dst_port="443" src_ip="21.197.137.150" src_port="49233"/>
      <filter dst_ip="133.249.172.31" dst_port="443" src_ip="21.197.137.150" src_port="49223"/>
      <filter dst_ip="133.249.172.31" dst_port="443" src_ip="21.197.137.150" src_port="49222"/>
    </slice>
    <from sec="1273035914" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="191.89.180.150"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.182.183.150"/>
    </slice>
    <from sec="1273035730" usec="0"/>
    <to sec="1273035746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1361{
style=filled;
color=gray75;
1262[label="176.108.139.169;d;111pkt 111fpkt", shape=diamond, color=yellow];
2467[label="176.108.98.136;d;31pkt 31fpkt", shape=diamond, color=yellow];
2670[label="201.178.74.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3515[label="190.247.159.20;s;15pkt 15fpkt", shape=diamond, color=yellow];
6142[label="176.108.139.169;d;105pkt 105fpkt", shape=hexagon, color=black];
7841[label="176.108.98.136;d;31pkt 31fpkt", shape=hexagon, color=black];
8849[label="190.247.159.20;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11486[label="132.71.217.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12648[label="190.247.159.20;15pkt 15fpkt", shape=invtriangle, color=brown];
14235[label="132.71.217.186;1pkt 1fpkt", shape=invtriangle, color=brown];
15852[label="132.71.217.186;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1361[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.108.139.169:50461}[48.951%]&lt;BR/&gt;{*:80, *:*}[21.6783%]&lt;BR/&gt;{*:*, 176.108.98.136:*}[21.6783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50461: (21.4067%)&lt;BR/&gt; 443: (14.3731%)&lt;BR/&gt; 80: (9.17431%)&lt;BR/&gt; 12350: (2.59939%)&lt;BR/&gt; 30191: (1.22324%)&gt;];
}
1262--6142[label="1;105pkt 105fpkt"];
1262--8322[label="0.045045;5pkt 5fpkt"];
1262--8373[label="0.018018;2pkt 2fpkt"];
1262--8393[label="0.045045;5pkt 5fpkt"];
1262--8428[label="0.045045;5pkt 5fpkt"];
1262--8454[label="0.027027;3pkt 3fpkt"];
1262--9980[label="0.129032;4pkt 4fpkt"];
1262--10955[label="0.0416667;1pkt 1fpkt"];
1262--11486[label="1;1pkt 1fpkt"];
1262--13321[label="0.129032;4pkt 4fpkt"];
1262--13910[label="0.0416667;1pkt 1fpkt"];
1262--14235[label="1;1pkt 1fpkt"];
1262--15671[label="0.0416667;1pkt 1fpkt"];
1262--15852[label="1;1pkt 1fpkt"];
2467--2670[label="1;1pkt 1fpkt"];
2467--3515[label="0.933333;14pkt 14fpkt"];
2467--3548[label="0.142857;1pkt 1fpkt"];
2467--7841[label="1;31pkt 31fpkt"];
2467--8322[label="0.0322581;1pkt 1fpkt"];
2467--8373[label="0.0322581;1pkt 1fpkt"];
2467--8393[label="0.0322581;1pkt 1fpkt"];
2467--8428[label="0.0322581;1pkt 1fpkt"];
2467--8454[label="0.0322581;1pkt 1fpkt"];
2467--8849[label="0.933333;14pkt 14fpkt"];
2467--9780[label="0.125;1pkt 1fpkt"];
2467--10955[label="0.0416667;1pkt 1fpkt"];
2467--12648[label="0.933333;14pkt 14fpkt"];
2467--13910[label="0.0416667;1pkt 1fpkt"];
2467--15273[label="0.125;1pkt 1fpkt"];
2467--15671[label="0.0416667;1pkt 1fpkt"];
2670--7841[label="1;1pkt 1fpkt"];
3515--7841[label="0.933333;14pkt 14fpkt"];
3515--8849[label="1;15pkt 15fpkt"];
3515--12648[label="1;15pkt 15fpkt"];
6142--8322[label="0.047619;5pkt 5fpkt"];
6142--8393[label="0.047619;5pkt 5fpkt"];
6142--8428[label="0.047619;5pkt 5fpkt"];
6142--9980[label="0.129032;4pkt 4fpkt"];
6142--10955[label="0.0416667;1pkt 1fpkt"];
6142--11486[label="1;1pkt 1fpkt"];
6142--13321[label="0.129032;4pkt 4fpkt"];
6142--13910[label="0.0416667;1pkt 1fpkt"];
6142--14235[label="1;1pkt 1fpkt"];
6142--15671[label="0.0416667;1pkt 1fpkt"];
6142--15852[label="1;1pkt 1fpkt"];
7841--8322[label="0.0322581;1pkt 1fpkt"];
7841--8373[label="0.0322581;1pkt 1fpkt"];
7841--8393[label="0.0322581;1pkt 1fpkt"];
7841--8428[label="0.0322581;1pkt 1fpkt"];
7841--8454[label="0.0322581;1pkt 1fpkt"];
7841--8849[label="0.933333;14pkt 14fpkt"];
7841--9780[label="0.125;1pkt 1fpkt"];
7841--10955[label="0.0416667;1pkt 1fpkt"];
7841--12648[label="0.933333;14pkt 14fpkt"];
7841--13910[label="0.0416667;1pkt 1fpkt"];
7841--15273[label="0.125;1pkt 1fpkt"];
7841--15671[label="0.0416667;1pkt 1fpkt"];
8849--12648[label="1;15pkt 15fpkt"];
11486--14235[label="1;1pkt 1fpkt"];
11486--15852[label="1;1pkt 1fpkt"];
14235--15852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.98.136"/>
      <filter src_port="80"/>
      <filter dst_ip="176.108.139.169" dst_port="50461"/>
    </slice>
    <from sec="1273035610" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1362{
style=filled;
color=gray75;
10963[label="4.104.132.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13915[label="4.104.132.151;1pkt 1fpkt", shape=invtriangle, color=brown];
15674[label="4.104.132.151;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1362[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.104.132.151:2967, 176.108.54.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10963--13915[label="1;1pkt 1fpkt"];
10963--15674[label="1;1pkt 1fpkt"];
13915--15674[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="80" src_ip="4.104.132.151" src_port="2967"/>
    </slice>
    <from sec="1273035852" usec="0"/>
    <to sec="1273036439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
10968[label="221.217.40.152;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13920[label="221.217.40.152;13pkt 13fpkt", shape=invtriangle, color=brown];
15677[label="221.217.40.152;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.217.40.152:*, 205.121.151.64:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60578: (3.84615%)&lt;BR/&gt; 60577: (3.84615%)&lt;BR/&gt; 60576: (3.84615%)&lt;BR/&gt; 60575: (3.84615%)&gt;];
}
10968--13920[label="1;13pkt 13fpkt"];
10968--15677[label="1;13pkt 13fpkt"];
13920--15677[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="205.121.151.64" dst_port="443" src_ip="221.217.40.152"/>
    </slice>
    <from sec="1273035930" usec="0"/>
    <to sec="1273035931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.228.149.152"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.162.229.152"/>
    </slice>
    <from sec="1273036173" usec="0"/>
    <to sec="1273036401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.27.230.153"/>
    </slice>
    <from sec="1273035636" usec="0"/>
    <to sec="1273035642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.109.176.154"/>
    </slice>
    <from sec="1273035656" usec="0"/>
    <to sec="1273035663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1368{
style=filled;
color=gray75;
11017[label="176.108.166.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13951[label="176.108.166.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1368[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.166.155:80, 8.145.25.223:59938}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59938: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11017--13951[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.145.25.223" dst_port="59938" src_ip="176.108.166.155" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.62.36.156"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.150.135.157"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.238.158.157"/>
    </slice>
    <from sec="1273035758" usec="0"/>
    <to sec="1273035772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="191.88.180.157"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273036370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1373{
style=filled;
color=gray75;
11052[label="4.221.49.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13973[label="4.221.49.158;1pkt 1fpkt", shape=invtriangle, color=brown];
15709[label="4.221.49.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1373[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.221.49.158:2696, 204.134.250.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2696: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11052--13973[label="1;1pkt 1fpkt"];
11052--15709[label="1;1pkt 1fpkt"];
13973--15709[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.99" dst_port="80" src_ip="4.221.49.158" src_port="2696"/>
    </slice>
    <from sec="1273035881" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.243.68.158"/>
    </slice>
    <from sec="1273035942" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.170.158"/>
    </slice>
    <from sec="1273035907" usec="0"/>
    <to sec="1273035952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1376{
style=filled;
color=gray75;
11087[label="9.159.54.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13990[label="9.159.54.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1376[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.159.54.160:2972, 204.134.250.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2972: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11087--13990[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.97" dst_port="80" src_ip="9.159.54.160" src_port="2972"/>
    </slice>
    <from sec="1273036453" usec="0"/>
    <to sec="1273036458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.169.83.160"/>
    </slice>
    <from sec="1273036178" usec="0"/>
    <to sec="1273036218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.34.117.160"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.129.198.160"/>
    </slice>
    <from sec="1273036226" usec="0"/>
    <to sec="1273036251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
11101[label="150.150.36.161;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14000[label="150.150.36.161;6pkt 6fpkt", shape=invtriangle, color=brown];
15720[label="150.150.36.161;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.150.36.161:8234, 76.176.146.169:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8234: (50%)&lt;BR/&gt; 59038: (8.33333%)&lt;BR/&gt; 46167: (8.33333%)&lt;BR/&gt; 9125: (8.33333%)&lt;BR/&gt; 8921: (8.33333%)&gt;];
}
11101--14000[label="1;6pkt 6fpkt"];
11101--15720[label="1;6pkt 6fpkt"];
14000--15720[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="76.176.146.169" src_ip="150.150.36.161" src_port="8234"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.93.73.161"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.42.119.161"/>
    </slice>
    <from sec="1273036027" usec="0"/>
    <to sec="1273036306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
11113[label="176.108.212.161;26pkt 26fpkt", shape=pentagon, color=darkviolet];
14007[label="176.108.212.161;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.212.161:60151, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60151: (50%)&lt;BR/&gt; 57320: (1.92308%)&lt;BR/&gt; 49762: (1.92308%)&lt;BR/&gt; 49320: (1.92308%)&lt;BR/&gt; 47992: (1.92308%)&gt;];
}
11113--14007[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.212.161" src_port="60151"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1384{
style=filled;
color=gray75;
11123[label="133.249.164.162;56pkt 56fpkt", shape=pentagon, color=darkviolet];
14015[label="133.249.164.162;56pkt 56fpkt", shape=invtriangle, color=brown];
15729[label="133.249.164.162;56pkt 56fpkt", shape=invhouse, color=bisque];
stat1384[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.164.162:15615, *:*}[89.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15615: (44.6429%)&lt;BR/&gt; 443: (3.57143%)&lt;BR/&gt; 80: (2.67857%)&lt;BR/&gt; 123: (1.78571%)&lt;BR/&gt; 64771: (0.892857%)&gt;];
}
11123--14015[label="1;56pkt 56fpkt"];
11123--15729[label="1;56pkt 56fpkt"];
14015--15729[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="133.249.164.162" src_port="15615"/>
    </slice>
    <from sec="1273036446" usec="0"/>
    <to sec="1273036467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1385{
style=filled;
color=gray75;
11135[label="4.249.87.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14024[label="4.249.87.163;5pkt 5fpkt", shape=invtriangle, color=brown];
15735[label="4.249.87.163;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1385[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.249.87.163:51535, 133.249.197.14:80}[20%]&lt;BR/&gt;{4.249.87.163:51536, 133.249.197.14:80}[20%]&lt;BR/&gt;{4.249.87.163:51537, 133.249.197.14:80}[20%]&lt;BR/&gt;{4.249.87.163:51538, 133.249.197.14:80}[20%]&lt;BR/&gt;{4.249.87.163:51539, 133.249.197.14:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51539: (10%)&lt;BR/&gt; 51538: (10%)&lt;BR/&gt; 51537: (10%)&lt;BR/&gt; 51536: (10%)&gt;];
}
11135--14024[label="1;5pkt 5fpkt"];
11135--15735[label="1;5pkt 5fpkt"];
14024--15735[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.197.14" dst_port="80" src_ip="4.249.87.163" src_port="51539"/>
      <filter dst_ip="133.249.197.14" dst_port="80" src_ip="4.249.87.163" src_port="51538"/>
      <filter dst_ip="133.249.197.14" dst_port="80" src_ip="4.249.87.163" src_port="51537"/>
      <filter dst_ip="133.249.197.14" dst_port="80" src_ip="4.249.87.163" src_port="51536"/>
      <filter dst_ip="133.249.197.14" dst_port="80" src_ip="4.249.87.163" src_port="51535"/>
    </slice>
    <from sec="1273036302" usec="0"/>
    <to sec="1273036305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.118.163"/>
    </slice>
    <from sec="1273035962" usec="0"/>
    <to sec="1273036016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
11146[label="204.134.233.163;17pkt 17fpkt", shape=pentagon, color=darkviolet];
14030[label="204.134.233.163;17pkt 17fpkt", shape=invtriangle, color=brown];
15739[label="204.134.233.163;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.233.163:12747, *:*}[47.0588%]&lt;BR/&gt;{204.134.233.163:*, 44.161.72.77:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.4706%)&lt;BR/&gt; 12747: (23.5294%)&lt;BR/&gt; 55021: (2.94118%)&lt;BR/&gt; 54793: (2.94118%)&lt;BR/&gt; 53432: (2.94118%)&gt;];
}
11146--14030[label="1;17pkt 17fpkt"];
11146--15739[label="1;17pkt 17fpkt"];
14030--15739[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="204.134.233.163" src_port="12747"/>
      <filter dst_ip="44.161.72.77" dst_port="80" src_ip="204.134.233.163"/>
    </slice>
    <from sec="1273035702" usec="0"/>
    <to sec="1273036484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.163.65.164"/>
    </slice>
    <from sec="1273036293" usec="0"/>
    <to sec="1273036304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.9.132.164"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
11157[label="48.75.165.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14040[label="48.75.165.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.75.165.164:23955, 204.134.244.141:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23955: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
11157--14040[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.244.141" dst_port="3128" src_ip="48.75.165.164" src_port="23955"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.240.133.165"/>
    </slice>
    <from sec="1273036116" usec="0"/>
    <to sec="1273036131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.5.1.166"/>
    </slice>
    <from sec="1273036285" usec="0"/>
    <to sec="1273036340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1393{
style=filled;
color=gray75;
11186[label="128.212.109.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14056[label="128.212.109.166;1pkt 1fpkt", shape=invtriangle, color=brown];
15752[label="128.212.109.166;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1393[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.109.166:35268, 47.52.234.225:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35268: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11186--14056[label="1;1pkt 1fpkt"];
11186--15752[label="1;1pkt 1fpkt"];
14056--15752[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="47.52.234.225" dst_port="80" src_ip="128.212.109.166" src_port="35268"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.156.166"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1395{
style=filled;
color=gray75;
11196[label="133.249.43.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14066[label="133.249.43.167;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1395[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.43.167:58216, 47.52.234.58:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58216: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11196--14066[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="47.52.234.58" dst_port="80" src_ip="133.249.43.167" src_port="58216"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1396{
style=filled;
color=gray75;
11197[label="77.46.56.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14067[label="77.46.56.167;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1396[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.46.56.167:3605, 204.134.252.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3605: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11197--14067[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.252.5" dst_port="80" src_ip="77.46.56.167" src_port="3605"/>
    </slice>
    <from sec="1273036461" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.118.167"/>
    </slice>
    <from sec="1273036286" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1398{
style=filled;
color=gray75;
11222[label="133.249.139.168;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14087[label="133.249.139.168;7pkt 7fpkt", shape=invtriangle, color=brown];
15770[label="133.249.139.168;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1398[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.139.168:*, 105.197.127.80:143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 1635: (7.14286%)&lt;BR/&gt; 1630: (7.14286%)&lt;BR/&gt; 1627: (7.14286%)&lt;BR/&gt; 1622: (7.14286%)&gt;];
}
11222--14087[label="1;7pkt 7fpkt"];
11222--15770[label="1;7pkt 7fpkt"];
14087--15770[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="105.197.127.80" dst_port="143" src_ip="133.249.139.168"/>
    </slice>
    <from sec="1273035641" usec="0"/>
    <to sec="1273036482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1399{
style=filled;
color=gray75;
11235[label="133.249.118.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14094[label="133.249.118.169;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1399[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.118.169:37712, 213.150.37.106:25}[33.3333%]&lt;BR/&gt;{133.249.118.169:53, 36.222.35.30:51896}[33.3333%]&lt;BR/&gt;{133.249.118.169:53, 36.222.35.30:61902}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 61902: (16.6667%)&lt;BR/&gt; 51896: (16.6667%)&lt;BR/&gt; 37712: (16.6667%)&lt;BR/&gt; 25: (16.6667%)&gt;];
}
11235--14094[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="36.222.35.30" dst_port="61902" src_ip="133.249.118.169" src_port="53"/>
      <filter dst_ip="36.222.35.30" dst_port="51896" src_ip="133.249.118.169" src_port="53"/>
      <filter dst_ip="213.150.37.106" dst_port="25" src_ip="133.249.118.169" src_port="37712"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.140.109.171"/>
    </slice>
    <from sec="1273035946" usec="0"/>
    <to sec="1273035970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1401{
style=filled;
color=gray75;
11277[label="40.74.147.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14118[label="40.74.147.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1401[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.74.147.172:80, 150.198.9.43:27498}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27498: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11277--14118[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.198.9.43" dst_port="27498" src_ip="40.74.147.172" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
11288[label="150.198.194.173;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14125[label="150.198.194.173;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.198.194.173:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11288--14125[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="150.198.194.173"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1403{
style=filled;
color=gray75;
11299[label="221.106.164.174;117pkt 117fpkt", shape=pentagon, color=darkviolet];
14128[label="221.106.164.174;117pkt 117fpkt", shape=invtriangle, color=brown];
stat1403[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.106.164.174:127, 133.249.218.203:*}[98.2906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 127: (49.1453%)&lt;BR/&gt; 62943: (0.42735%)&lt;BR/&gt; 62941: (0.42735%)&lt;BR/&gt; 62940: (0.42735%)&lt;BR/&gt; 62939: (0.42735%)&gt;];
}
11299--14128[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.218.203" src_ip="221.106.164.174" src_port="127"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30995,2.74096,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1404{
style=filled;
color=gray75;
1074[label="176.108.234.20;d;249pkt 249fpkt", shape=diamond, color=yellow];
7253[label="176.108.234.20;d;230pkt 230fpkt", shape=hexagon, color=black];
9392[label="12.150.136.50;74pkt 74fpkt", shape=pentagon, color=darkviolet];
10448[label="22.8.102.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12295[label="220.33.242.242;98pkt 98fpkt", shape=pentagon, color=darkviolet];
12960[label="12.150.136.50;74pkt 74fpkt", shape=invtriangle, color=brown];
14740[label="220.33.242.242;98pkt 98fpkt", shape=invtriangle, color=brown];
stat1404[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.150.136.50:*, 176.108.234.20:*}[26.7148%]&lt;BR/&gt;{220.33.242.242:80, 176.108.234.20:*}[25.2708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.0631%)&lt;BR/&gt; 8888: (8.73786%)&lt;BR/&gt; 10002: (8.49515%)&lt;BR/&gt; 53: (2.85194%)&lt;BR/&gt; 64114: (1.51699%)&gt;];
}
1074--1744[label="0.0136364;3pkt 3fpkt"];
1074--2911[label="0.0120482;3pkt 3fpkt"];
1074--3460[label="0.0722892;18pkt 18fpkt"];
1074--7253[label="1;230pkt 230fpkt"];
1074--8322[label="0.0160643;4pkt 4fpkt"];
1074--8348[label="0.0281124;7pkt 7fpkt"];
1074--8349[label="0.00401606;1pkt 1fpkt"];
1074--8372[label="0.0481928;12pkt 12fpkt"];
1074--8373[label="0.00401606;1pkt 1fpkt"];
1074--8393[label="0.0160643;4pkt 4fpkt"];
1074--8404[label="0.0281124;7pkt 7fpkt"];
1074--8405[label="0.00401606;1pkt 1fpkt"];
1074--8428[label="0.0160643;4pkt 4fpkt"];
1074--8438[label="0.0281124;7pkt 7fpkt"];
1074--8439[label="0.00401606;1pkt 1fpkt"];
1074--8454[label="0.00401606;1pkt 1fpkt"];
1074--9392[label="1;74pkt 74fpkt"];
1074--9970[label="0.0217391;1pkt 1fpkt"];
1074--10402[label="0.0120482;3pkt 3fpkt"];
1074--10448[label="1;1pkt 1fpkt"];
1074--11317[label="0.102564;4pkt 4fpkt"];
1074--12295[label="0.714286;70pkt 70fpkt"];
1074--12960[label="1;74pkt 74fpkt"];
1074--13314[label="0.0217391;1pkt 1fpkt"];
1074--13583[label="0.0120482;3pkt 3fpkt"];
1074--14137[label="0.102564;4pkt 4fpkt"];
1074--14740[label="0.714286;70pkt 70fpkt"];
1074--15352[label="0.0217391;1pkt 1fpkt"];
1074--15796[label="0.102564;4pkt 4fpkt"];
7253--8322[label="0.0173913;4pkt 4fpkt"];
7253--8348[label="0.0304348;7pkt 7fpkt"];
7253--8349[label="0.00434783;1pkt 1fpkt"];
7253--8373[label="0.00434783;1pkt 1fpkt"];
7253--8393[label="0.0173913;4pkt 4fpkt"];
7253--8404[label="0.0304348;7pkt 7fpkt"];
7253--8405[label="0.00434783;1pkt 1fpkt"];
7253--8428[label="0.0173913;4pkt 4fpkt"];
7253--8438[label="0.0304348;7pkt 7fpkt"];
7253--8439[label="0.00434783;1pkt 1fpkt"];
7253--8454[label="0.00434783;1pkt 1fpkt"];
7253--9392[label="1;74pkt 74fpkt"];
7253--9970[label="0.0217391;1pkt 1fpkt"];
7253--10402[label="0.00869565;2pkt 2fpkt"];
7253--10448[label="1;1pkt 1fpkt"];
7253--11317[label="0.102564;4pkt 4fpkt"];
7253--12295[label="0.714286;70pkt 70fpkt"];
7253--12960[label="1;74pkt 74fpkt"];
7253--13314[label="0.0217391;1pkt 1fpkt"];
7253--13583[label="0.00869565;2pkt 2fpkt"];
7253--14137[label="0.102564;4pkt 4fpkt"];
7253--14740[label="0.714286;70pkt 70fpkt"];
7253--15352[label="0.0217391;1pkt 1fpkt"];
7253--15796[label="0.102564;4pkt 4fpkt"];
9392--12960[label="1;74pkt 74fpkt"];
12295--14740[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.234.20" src_ip="12.150.136.50"/>
      <filter dst_ip="176.108.234.20" src_ip="220.33.242.242" src_port="80"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1405{
style=filled;
color=gray75;
11320[label="176.108.160.175;79pkt 79fpkt", shape=pentagon, color=darkviolet];
14139[label="176.108.160.175;79pkt 79fpkt", shape=invtriangle, color=brown];
15798[label="176.108.160.175;79pkt 79fpkt", shape=invhouse, color=bisque];
stat1405[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.160.175:12608, *:*}[79.7468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12608: (39.8734%)&lt;BR/&gt; 80: (3.79747%)&lt;BR/&gt; 443: (2.53165%)&lt;BR/&gt; 19371: (1.26582%)&lt;BR/&gt; 8614: (1.26582%)&gt;];
}
11320--14139[label="1;79pkt 79fpkt"];
11320--15798[label="1;79pkt 79fpkt"];
14139--15798[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.160.175" src_port="12608"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.44.128.176"/>
    </slice>
    <from sec="1273036158" usec="0"/>
    <to sec="1273036227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1407{
style=filled;
color=gray75;
11340[label="32.229.219.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14150[label="32.229.219.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1407[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.229.219.176:3768, 204.134.250.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3768: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11340--14150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.97" dst_port="80" src_ip="32.229.219.176" src_port="3768"/>
    </slice>
    <from sec="1273036475" usec="0"/>
    <to sec="1273036489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.114.180.177"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1409{
style=filled;
color=gray75;
11356[label="92.13.75.178;145pkt 145fpkt", shape=pentagon, color=darkviolet];
14156[label="92.13.75.178;145pkt 145fpkt", shape=invtriangle, color=brown];
15809[label="92.13.75.178;145pkt 145fpkt", shape=invhouse, color=bisque];
stat1409[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.13.75.178:14734, *:123}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14734: (50%)&lt;BR/&gt; 123: (50%)&gt;];
}
11356--14156[label="1;145pkt 145fpkt"];
11356--15809[label="1;145pkt 145fpkt"];
14156--15809[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="92.13.75.178" src_port="14734"/>
    </slice>
    <from sec="1273035614" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.187.88.178"/>
    </slice>
    <from sec="1273035981" usec="0"/>
    <to sec="1273035985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.56.162.178"/>
    </slice>
    <from sec="1273036231" usec="0"/>
    <to sec="1273036240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.222.28.179"/>
    </slice>
    <from sec="1273035933" usec="0"/>
    <to sec="1273035938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.103.6.180"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1414{
style=filled;
color=gray75;
11390[label="7.59.68.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14178[label="7.59.68.180;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1414[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.59.68.180:1224, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1224: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11390--14178[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="7.59.68.180" src_port="1224"/>
    </slice>
    <from sec="1273036467" usec="0"/>
    <to sec="1273036480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.201.109.181"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.18.80.182"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1417{
style=filled;
color=gray75;
11418[label="176.108.96.182;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14196[label="176.108.96.182;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1417[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.96.182:51720, 197.16.248.183:443}[33.3333%]&lt;BR/&gt;{176.108.96.182:51721, 197.16.248.183:443}[33.3333%]&lt;BR/&gt;{176.108.96.182:51722, 197.16.248.183:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 51722: (16.6667%)&lt;BR/&gt; 51721: (16.6667%)&lt;BR/&gt; 51720: (16.6667%)&gt;];
}
11418--14196[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.16.248.183" dst_port="443" src_ip="176.108.96.182" src_port="51722"/>
      <filter dst_ip="197.16.248.183" dst_port="443" src_ip="176.108.96.182" src_port="51721"/>
      <filter dst_ip="197.16.248.183" dst_port="443" src_ip="176.108.96.182" src_port="51720"/>
    </slice>
    <from sec="1273036147" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.48.24.183"/>
    </slice>
    <from sec="1273036093" usec="0"/>
    <to sec="1273036115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
11430[label="76.206.69.183;218pkt 218fpkt", shape=pentagon, color=darkviolet];
14202[label="76.206.69.183;218pkt 218fpkt", shape=invtriangle, color=brown];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.206.69.183:400, 133.249.58.2:*}[40.367%]&lt;BR/&gt;{76.206.69.183:400, 128.212.112.163:*}[20.6422%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 400: (30.5046%)&lt;BR/&gt; 600: (9.86239%)&lt;BR/&gt; 8000: (9.63303%)&lt;BR/&gt; 3989: (0.229358%)&lt;BR/&gt; 3988: (0.229358%)&gt;];
}
11430--14202[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.58.2" src_ip="76.206.69.183" src_port="400"/>
      <filter dst_ip="128.212.112.163" src_ip="76.206.69.183" src_port="400"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
11453[label="176.108.136.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14217[label="176.108.136.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.136.184:52176, 47.53.50.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52176: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11453--14217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="47.53.50.100" dst_port="80" src_ip="176.108.136.184" src_port="52176"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.137.67.187"/>
    </slice>
    <from sec="1273036247" usec="0"/>
    <to sec="1273036291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
11497[label="77.141.152.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14242[label="77.141.152.187;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.141.152.187:10939, 204.134.244.146:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10939: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11497--14242[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.244.146" dst_port="80" src_ip="77.141.152.187" src_port="10939"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1423{
style=filled;
color=gray75;
440[label="204.134.230.168;d;237pkt 237fpkt", shape=diamond, color=yellow];
5934[label="204.134.230.168;d;98pkt 98fpkt", shape=hexagon, color=black];
9024[label="13.228.83.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9331[label="6.65.155.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9690[label="217.27.116.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9837[label="1.7.82.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10034[label="0.91.52.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10939[label="12.22.72.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11505[label="76.91.133.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12237[label="4.249.234.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13141[label="217.27.116.68;1pkt 1fpkt", shape=invtriangle, color=brown];
13355[label="0.91.52.88;1pkt 1fpkt", shape=invtriangle, color=brown];
13902[label="12.22.72.150;1pkt 1fpkt", shape=invtriangle, color=brown];
14247[label="76.91.133.188;1pkt 1fpkt", shape=invtriangle, color=brown];
14702[label="4.249.234.238;1pkt 1fpkt", shape=invtriangle, color=brown];
14999[label="13.228.83.29;1pkt 1fpkt", shape=invhouse, color=bisque];
15242[label="217.27.116.68;1pkt 1fpkt", shape=invhouse, color=bisque];
15370[label="0.91.52.88;1pkt 1fpkt", shape=invhouse, color=bisque];
15855[label="76.91.133.188;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1423[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.134.230.168:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (5.39773%)&lt;BR/&gt; 4444: (1.13636%)&lt;BR/&gt; 31529: (0.994318%)&lt;BR/&gt; 32568: (0.852273%)&lt;BR/&gt; 50065: (0.710227%)&gt;];
}
440--3634[label="0.00421941;1pkt 1fpkt"];
440--5934[label="1;98pkt 98fpkt"];
440--8350[label="0.00421941;1pkt 1fpkt"];
440--8406[label="0.00421941;1pkt 1fpkt"];
440--8440[label="0.00421941;1pkt 1fpkt"];
440--9024[label="1;1pkt 1fpkt"];
440--9331[label="1;1pkt 1fpkt"];
440--9690[label="1;1pkt 1fpkt"];
440--9837[label="1;1pkt 1fpkt"];
440--10034[label="1;1pkt 1fpkt"];
440--10939[label="1;1pkt 1fpkt"];
440--11505[label="1;1pkt 1fpkt"];
440--12237[label="1;1pkt 1fpkt"];
440--13141[label="1;1pkt 1fpkt"];
440--13355[label="1;1pkt 1fpkt"];
440--13902[label="1;1pkt 1fpkt"];
440--14247[label="1;1pkt 1fpkt"];
440--14702[label="1;1pkt 1fpkt"];
440--14999[label="1;1pkt 1fpkt"];
440--15242[label="1;1pkt 1fpkt"];
440--15370[label="1;1pkt 1fpkt"];
440--15855[label="1;1pkt 1fpkt"];
5934--9331[label="1;1pkt 1fpkt"];
5934--10939[label="1;1pkt 1fpkt"];
5934--11505[label="1;1pkt 1fpkt"];
5934--13902[label="1;1pkt 1fpkt"];
5934--14247[label="1;1pkt 1fpkt"];
5934--15855[label="1;1pkt 1fpkt"];
9024--14999[label="1;1pkt 1fpkt"];
9690--13141[label="1;1pkt 1fpkt"];
9690--15242[label="1;1pkt 1fpkt"];
10034--13355[label="1;1pkt 1fpkt"];
10034--15370[label="1;1pkt 1fpkt"];
10939--13902[label="1;1pkt 1fpkt"];
11505--14247[label="1;1pkt 1fpkt"];
11505--15855[label="1;1pkt 1fpkt"];
12237--14702[label="1;1pkt 1fpkt"];
13141--15242[label="1;1pkt 1fpkt"];
13355--15370[label="1;1pkt 1fpkt"];
14247--15855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.230.168"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.7.136.188"/>
    </slice>
    <from sec="1273035919" usec="0"/>
    <to sec="1273036066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1425{
style=filled;
color=gray75;
11508[label="36.222.157.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14250[label="36.222.157.188;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1425[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.222.157.188:80, 176.108.139.52:2804}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2804: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11508--14250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.52" dst_port="2804" src_ip="36.222.157.188" src_port="80"/>
    </slice>
    <from sec="1273035951" usec="0"/>
    <to sec="1273035954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.66.228.188"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.17.189"/>
    </slice>
    <from sec="1273035987" usec="0"/>
    <to sec="1273036019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1428{
style=filled;
color=gray75;
11522[label="21.6.192.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14258[label="21.6.192.189;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1428[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.6.192.189:50614, 204.134.252.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50614: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11522--14258[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.252.5" dst_port="80" src_ip="21.6.192.189" src_port="50614"/>
    </slice>
    <from sec="1273035841" usec="0"/>
    <to sec="1273036498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.38.224.189"/>
    </slice>
    <from sec="1273035729" usec="0"/>
    <to sec="1273036024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.34.54.191"/>
    </slice>
    <from sec="1273035645" usec="0"/>
    <to sec="1273035687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.11.147.191"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.212.172.191"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.8.52.192"/>
    </slice>
    <from sec="1273035946" usec="0"/>
    <to sec="1273035957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.6.193"/>
    </slice>
    <from sec="1273035918" usec="0"/>
    <to sec="1273035930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.40.18.193"/>
    </slice>
    <from sec="1273036108" usec="0"/>
    <to sec="1273036138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.131.5.194"/>
    </slice>
    <from sec="1273035971" usec="0"/>
    <to sec="1273035975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
11607[label="92.162.141.194;19pkt 19fpkt", shape=pentagon, color=darkviolet];
14309[label="92.162.141.194;19pkt 19fpkt", shape=invtriangle, color=brown];
15892[label="92.162.141.194;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.162.141.194:80, 133.249.231.23:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49299: (2.63158%)&lt;BR/&gt; 49298: (2.63158%)&lt;BR/&gt; 49277: (2.63158%)&lt;BR/&gt; 49263: (2.63158%)&gt;];
}
11607--14309[label="1;19pkt 19fpkt"];
11607--15892[label="1;19pkt 19fpkt"];
14309--15892[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.231.23" src_ip="92.162.141.194" src_port="80"/>
    </slice>
    <from sec="1273036457" usec="0"/>
    <to sec="1273036465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.80.136.195"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1439{
style=filled;
color=gray75;
11619[label="217.174.210.195;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14316[label="217.174.210.195;11pkt 11fpkt", shape=invtriangle, color=brown];
15897[label="217.174.210.195;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1439[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.174.210.195:80, 176.108.139.117:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59000: (4.54545%)&lt;BR/&gt; 1704: (4.54545%)&lt;BR/&gt; 1703: (4.54545%)&lt;BR/&gt; 1702: (4.54545%)&gt;];
}
11619--14316[label="1;11pkt 11fpkt"];
11619--15897[label="1;11pkt 11fpkt"];
14316--15897[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.117" src_ip="217.174.210.195" src_port="80"/>
    </slice>
    <from sec="1273036204" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.229.231.195"/>
    </slice>
    <from sec="1273036339" usec="0"/>
    <to sec="1273036380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.61.73.196"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.209.176.196"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.154.116.197"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1444{
style=filled;
color=gray75;
11647[label="92.162.141.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14335[label="92.162.141.197;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1444[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.162.141.197:80, 133.249.231.23:49719}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49719: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11647--14335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.231.23" dst_port="49719" src_ip="92.162.141.197" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
11654[label="176.108.54.198;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14341[label="176.108.54.198;3pkt 3fpkt", shape=invtriangle, color=brown];
15911[label="176.108.54.198;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.54.198:64324, 134.30.241.35:80}[33.3333%]&lt;BR/&gt;{176.108.54.198:80, 12.109.85.237:42546}[33.3333%]&lt;BR/&gt;{176.108.54.198:22, 209.205.199.253:35865}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 64324: (16.6667%)&lt;BR/&gt; 42546: (16.6667%)&lt;BR/&gt; 35865: (16.6667%)&lt;BR/&gt; 22: (16.6667%)&gt;];
}
11654--14341[label="1;3pkt 3fpkt"];
11654--15911[label="1;3pkt 3fpkt"];
14341--15911[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.205.199.253" dst_port="35865" src_ip="176.108.54.198" src_port="22"/>
      <filter dst_ip="12.109.85.237" dst_port="42546" src_ip="176.108.54.198" src_port="80"/>
      <filter dst_ip="134.30.241.35" dst_port="80" src_ip="176.108.54.198" src_port="64324"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1446{
style=filled;
color=gray75;
11655[label="176.108.56.198;79pkt 79fpkt", shape=pentagon, color=darkviolet];
14342[label="176.108.56.198;79pkt 79fpkt", shape=invtriangle, color=brown];
15912[label="176.108.56.198;79pkt 79fpkt", shape=invhouse, color=bisque];
stat1446[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.56.198:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11655--14342[label="1;79pkt 79fpkt"];
11655--15912[label="1;79pkt 79fpkt"];
14342--15912[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.56.198"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.137.155.198"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273035962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.100.12.199"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.122.199"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273035662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1450{
style=filled;
color=gray75;
11671[label="223.194.130.199;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14355[label="223.194.130.199;11pkt 11fpkt", shape=invtriangle, color=brown];
15917[label="223.194.130.199;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1450[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.194.130.199:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11671--14355[label="1;11pkt 11fpkt"];
11671--15917[label="1;11pkt 11fpkt"];
14355--15917[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="223.194.130.199"/>
    </slice>
    <from sec="1273035617" usec="0"/>
    <to sec="1273036412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.212.136.199"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.196.219.199"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.183.71.200"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.172.200"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.5.55.201"/>
    </slice>
    <from sec="1273035822" usec="0"/>
    <to sec="1273035937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
11706[label="197.54.212.201;21pkt 21fpkt", shape=pentagon, color=darkviolet];
14372[label="197.54.212.201;21pkt 21fpkt", shape=invtriangle, color=brown];
15928[label="197.54.212.201;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.54.212.201:*, 204.134.245.67:9001}[71.4286%]&lt;BR/&gt;{197.54.212.201:443, 204.134.245.67:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9001: (35.7143%)&lt;BR/&gt; 443: (14.2857%)&lt;BR/&gt; 59473: (2.38095%)&lt;BR/&gt; 59447: (2.38095%)&lt;BR/&gt; 59435: (2.38095%)&gt;];
}
11706--14372[label="1;21pkt 21fpkt"];
11706--15928[label="1;21pkt 21fpkt"];
14372--15928[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.245.67" src_ip="197.54.212.201" src_port="443"/>
      <filter dst_ip="204.134.245.67" dst_port="9001" src_ip="197.54.212.201"/>
    </slice>
    <from sec="1273035607" usec="0"/>
    <to sec="1273036450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.165.147.202"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1459{
style=filled;
color=gray75;
11731[label="62.193.42.203;111pkt 111fpkt", shape=pentagon, color=darkviolet];
14391[label="62.193.42.203;111pkt 111fpkt", shape=invtriangle, color=brown];
15941[label="62.193.42.203;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1459[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.193.42.203:36354, *:80}[46.8468%]&lt;BR/&gt;{62.193.42.203:36354, *:3128}[34.2342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36354: (50%)&lt;BR/&gt; 80: (23.4234%)&lt;BR/&gt; 3128: (17.1171%)&lt;BR/&gt; 8080: (9.45946%)&gt;];
}
11731--14391[label="1;111pkt 111fpkt"];
11731--15941[label="1;111pkt 111fpkt"];
14391--15941[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="62.193.42.203" src_port="36354"/>
      <filter dst_port="3128" src_ip="62.193.42.203" src_port="36354"/>
    </slice>
    <from sec="1273035624" usec="0"/>
    <to sec="1273036488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1460{
style=filled;
color=gray75;
11732[label="176.108.54.203;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14392[label="176.108.54.203;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1460[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.54.203:80, 205.104.56.76:49207}[20%]&lt;BR/&gt;{176.108.54.203:80, 0.173.146.138:4443}[20%]&lt;BR/&gt;{176.108.54.203:22, 209.205.199.253:58747}[20%]&lt;BR/&gt;{176.108.54.203:80, 142.194.181.12:54701}[20%]&lt;BR/&gt;{176.108.54.203:80, 142.194.181.12:63108}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 63108: (10%)&lt;BR/&gt; 58747: (10%)&lt;BR/&gt; 54701: (10%)&lt;BR/&gt; 49207: (10%)&gt;];
}
11732--14392[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="142.194.181.12" dst_port="63108" src_ip="176.108.54.203" src_port="80"/>
      <filter dst_ip="142.194.181.12" dst_port="54701" src_ip="176.108.54.203" src_port="80"/>
      <filter dst_ip="209.205.199.253" dst_port="58747" src_ip="176.108.54.203" src_port="22"/>
      <filter dst_ip="0.173.146.138" dst_port="4443" src_ip="176.108.54.203" src_port="80"/>
      <filter dst_ip="205.104.56.76" dst_port="49207" src_ip="176.108.54.203" src_port="80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.168.136.203"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.168.203"/>
    </slice>
    <from sec="1273035960" usec="0"/>
    <to sec="1273035987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1463{
style=filled;
color=gray75;
11743[label="133.249.218.203;127pkt 127fpkt", shape=pentagon, color=darkviolet];
14397[label="133.249.218.203;127pkt 127fpkt", shape=invtriangle, color=brown];
stat1463[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.218.203:*, 221.106.164.174:127}[90.5512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 127: (45.2756%)&lt;BR/&gt; 88: (4.33071%)&lt;BR/&gt; 62943: (0.393701%)&lt;BR/&gt; 62942: (0.393701%)&lt;BR/&gt; 62941: (0.393701%)&gt;];
}
11743--14397[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="221.106.164.174" dst_port="127" src_ip="133.249.218.203"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.168.136.204"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.172.172.205"/>
    </slice>
    <from sec="1273036041" usec="0"/>
    <to sec="1273036062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.14.40.207"/>
    </slice>
    <from sec="1273035700" usec="0"/>
    <to sec="1273035719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.48.196.207"/>
    </slice>
    <from sec="1273035885" usec="0"/>
    <to sec="1273035944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.53.228.207"/>
    </slice>
    <from sec="1273035795" usec="0"/>
    <to sec="1273035808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1470{
style=filled;
color=gray75;
11796[label="193.85.129.208;12pkt 12fpkt", shape=pentagon, color=darkviolet];
14433[label="193.85.129.208;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1470[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.85.129.208:80, 133.249.82.158:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3536: (4.16667%)&lt;BR/&gt; 3535: (4.16667%)&lt;BR/&gt; 3534: (4.16667%)&lt;BR/&gt; 3533: (4.16667%)&gt;];
}
11796--14433[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.82.158" src_ip="193.85.129.208" src_port="80"/>
    </slice>
    <from sec="1273036489" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.86.178.208"/>
    </slice>
    <from sec="1273035893" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1472{
style=filled;
color=gray75;
11810[label="72.48.180.208;21pkt 21fpkt", shape=pentagon, color=darkviolet];
14444[label="72.48.180.208;21pkt 21fpkt", shape=invtriangle, color=brown];
15964[label="72.48.180.208;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1472[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.48.180.208:80, 133.249.165.35:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49303: (2.38095%)&lt;BR/&gt; 49302: (2.38095%)&lt;BR/&gt; 49301: (2.38095%)&lt;BR/&gt; 49300: (2.38095%)&gt;];
}
11810--14444[label="1;21pkt 21fpkt"];
11810--15964[label="1;21pkt 21fpkt"];
14444--15964[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.165.35" src_ip="72.48.180.208" src_port="80"/>
    </slice>
    <from sec="1273036260" usec="0"/>
    <to sec="1273036278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.185.182.208"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.95.209"/>
    </slice>
    <from sec="1273036157" usec="0"/>
    <to sec="1273036200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1475{
style=filled;
color=gray75;
11822[label="55.154.114.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14450[label="55.154.114.209;1pkt 1fpkt", shape=invtriangle, color=brown];
15968[label="55.154.114.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1475[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.154.114.209:14209, 176.108.54.199:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14209: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11822--14450[label="1;1pkt 1fpkt"];
11822--15968[label="1;1pkt 1fpkt"];
14450--15968[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="80" src_ip="55.154.114.209" src_port="14209"/>
    </slice>
    <from sec="1273036493" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1476{
style=filled;
color=gray75;
5056[label="179.114.3.29;d;17pkt 17fpkt", shape=diamond, color=yellow];
11215[label="72.41.52.168;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11823[label="219.66.127.209;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14083[label="72.41.52.168;4pkt 4fpkt", shape=invtriangle, color=brown];
14451[label="219.66.127.209;2pkt 2fpkt", shape=invtriangle, color=brown];
15766[label="72.41.52.168;4pkt 4fpkt", shape=invhouse, color=bisque];
15969[label="219.66.127.209;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1476[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.41.52.168:*, 179.114.3.29:24227}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24227: (51.4286%)&lt;BR/&gt; 62479: (5.71429%)&lt;BR/&gt; 60273: (5.71429%)&lt;BR/&gt; 55818: (5.71429%)&lt;BR/&gt; 55355: (5.71429%)&gt;];
}
5056--11215[label="1;4pkt 4fpkt"];
5056--11823[label="1;2pkt 2fpkt"];
5056--14083[label="1;4pkt 4fpkt"];
5056--14451[label="1;2pkt 2fpkt"];
5056--15766[label="1;4pkt 4fpkt"];
5056--15969[label="1;2pkt 2fpkt"];
11215--14083[label="1;4pkt 4fpkt"];
11215--15766[label="1;4pkt 4fpkt"];
11823--14451[label="1;2pkt 2fpkt"];
11823--15969[label="1;2pkt 2fpkt"];
14083--15766[label="1;4pkt 4fpkt"];
14451--15969[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="179.114.3.29" dst_port="24227" src_ip="72.41.52.168"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.250.161.209"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1478{
style=filled;
color=gray75;
11829[label="128.212.197.209;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14455[label="128.212.197.209;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1478[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.212.197.209:3389, 47.6.208.159:1744}[50%]&lt;BR/&gt;{128.212.197.209:3389, 47.6.208.159:2212}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (50%)&lt;BR/&gt; 2212: (25%)&lt;BR/&gt; 1744: (25%)&gt;];
}
11829--14455[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="47.6.208.159" dst_port="2212" src_ip="128.212.197.209" src_port="3389"/>
      <filter dst_ip="47.6.208.159" dst_port="1744" src_ip="128.212.197.209" src_port="3389"/>
    </slice>
    <from sec="1273035721" usec="0"/>
    <to sec="1273036201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.228.155.210"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.73.199.210"/>
    </slice>
    <from sec="1273035794" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.177.243.211"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.146.152.212"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273035984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1483{
style=filled;
color=gray75;
11867[label="22.41.185.212;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14478[label="22.41.185.212;22pkt 22fpkt", shape=invtriangle, color=brown];
15983[label="22.41.185.212;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1483[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.41.185.212:*, 204.134.244.208:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4979: (2.27273%)&lt;BR/&gt; 4892: (2.27273%)&lt;BR/&gt; 4478: (2.27273%)&lt;BR/&gt; 4364: (2.27273%)&gt;];
}
11867--14478[label="1;22pkt 22fpkt"];
11867--15983[label="1;22pkt 22fpkt"];
14478--15983[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.244.208" dst_port="80" src_ip="22.41.185.212"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.44.49.214"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.166.74.215"/>
    </slice>
    <from sec="1273036200" usec="0"/>
    <to sec="1273036213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.201.122.215"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1488{
style=filled;
color=gray75;
11909[label="142.48.194.215;17pkt 17fpkt", shape=pentagon, color=darkviolet];
14500[label="142.48.194.215;17pkt 17fpkt", shape=invtriangle, color=brown];
15993[label="142.48.194.215;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1488[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.48.194.215:80, 176.108.147.78:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49410: (2.94118%)&lt;BR/&gt; 49409: (2.94118%)&lt;BR/&gt; 49408: (2.94118%)&lt;BR/&gt; 49407: (2.94118%)&gt;];
}
11909--14500[label="1;17pkt 17fpkt"];
11909--15993[label="1;17pkt 17fpkt"];
14500--15993[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.147.78" src_ip="142.48.194.215" src_port="80"/>
    </slice>
    <from sec="1273035901" usec="0"/>
    <to sec="1273035904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.36.216.215"/>
    </slice>
    <from sec="1273035978" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1490{
style=filled;
color=gray75;
11916[label="0.39.135.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14506[label="0.39.135.216;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1490[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.39.135.216:2741, 204.134.250.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2741: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11916--14506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.97" dst_port="80" src_ip="0.39.135.216" src_port="2741"/>
    </slice>
    <from sec="1273036455" usec="0"/>
    <to sec="1273036469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.96.226.216"/>
    </slice>
    <from sec="1273036033" usec="0"/>
    <to sec="1273036049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1492{
style=filled;
color=gray75;
11929[label="36.222.36.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14514[label="36.222.36.217;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1492[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.222.36.217:443, 176.108.54.154:55816}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55816: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
11929--14514[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.154" dst_port="55816" src_ip="36.222.36.217" src_port="443"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
11935[label="176.108.176.217;26pkt 26fpkt", shape=pentagon, color=darkviolet];
14519[label="176.108.176.217;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.176.217:*, 213.222.154.104:80}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49407: (1.92308%)&lt;BR/&gt; 49406: (1.92308%)&lt;BR/&gt; 49403: (1.92308%)&lt;BR/&gt; 49402: (1.92308%)&gt;];
}
11935--14519[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="213.222.154.104" dst_port="80" src_ip="176.108.176.217"/>
    </slice>
    <from sec="1273036322" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.218.136.218"/>
    </slice>
    <from sec="1273036211" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.76.182.218"/>
    </slice>
    <from sec="1273036094" usec="0"/>
    <to sec="1273036113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1496{
style=filled;
color=gray75;
11944[label="150.150.8.219;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14525[label="150.150.8.219;2pkt 2fpkt", shape=invtriangle, color=brown];
16006[label="150.150.8.219;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1496[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.150.8.219:5041, 4.27.209.50:3081}[50%]&lt;BR/&gt;{150.150.8.219:5041, 4.28.180.122:59343}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (50%)&lt;BR/&gt; 59343: (25%)&lt;BR/&gt; 3081: (25%)&gt;];
}
11944--14525[label="1;2pkt 2fpkt"];
11944--16006[label="1;2pkt 2fpkt"];
14525--16006[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="4.28.180.122" dst_port="59343" src_ip="150.150.8.219" src_port="5041"/>
      <filter dst_ip="4.27.209.50" dst_port="3081" src_ip="150.150.8.219" src_port="5041"/>
    </slice>
    <from sec="1273035615" usec="0"/>
    <to sec="1273036463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.236.11.221"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.222.157.221"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.201.123.223"/>
    </slice>
    <from sec="1273036083" usec="0"/>
    <to sec="1273036129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.36.174.223"/>
    </slice>
    <from sec="1273036102" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1501{
style=filled;
color=gray75;
12009[label="176.108.56.224;99pkt 99fpkt", shape=pentagon, color=darkviolet];
14561[label="176.108.56.224;99pkt 99fpkt", shape=invtriangle, color=brown];
stat1501[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.56.224:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12009--14561[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.56.224"/>
    </slice>
    <from sec="1273035607" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.137.93.224"/>
    </slice>
    <from sec="1273035628" usec="0"/>
    <to sec="1273035778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1503{
style=filled;
color=gray75;
12021[label="133.249.11.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14567[label="133.249.11.225;2pkt 2fpkt", shape=invtriangle, color=brown];
16031[label="133.249.11.225;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1503[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.249.11.225:3389, 12.156.167.224:3045}[50%]&lt;BR/&gt;{133.249.11.225:3389, 12.156.167.224:3525}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (50%)&lt;BR/&gt; 3525: (25%)&lt;BR/&gt; 3045: (25%)&gt;];
}
12021--14567[label="1;2pkt 2fpkt"];
12021--16031[label="1;2pkt 2fpkt"];
14567--16031[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="12.156.167.224" dst_port="3525" src_ip="133.249.11.225" src_port="3389"/>
      <filter dst_ip="12.156.167.224" dst_port="3045" src_ip="133.249.11.225" src_port="3389"/>
    </slice>
    <from sec="1273035701" usec="0"/>
    <to sec="1273036329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
12030[label="21.7.181.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14571[label="21.7.181.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.7.181.225:24587, 204.134.250.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24587: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12030--14571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.99" dst_port="80" src_ip="21.7.181.225" src_port="24587"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.4.250.225"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03936,2.75234,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
2483[label="204.134.243.18;d;318pkt 318fpkt", shape=diamond, color=yellow];
3552[label="0.175.98.29;s;112pkt 112fpkt", shape=diamond, color=yellow];
9025[label="0.175.98.29;112pkt 112fpkt", shape=pentagon, color=darkviolet];
12041[label="219.112.58.226;60pkt 60fpkt", shape=pentagon, color=darkviolet];
14580[label="219.112.58.226;60pkt 60fpkt", shape=invtriangle, color=brown];
16035[label="219.112.58.226;60pkt 60fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.161.118.79:*, 204.134.243.18:80}[42.1384%]&lt;BR/&gt;{0.175.98.29:*, 204.134.243.18:80}[35.2201%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8615%)&lt;BR/&gt; 1322: (0.277008%)&lt;BR/&gt; 1320: (0.277008%)&lt;BR/&gt; 1318: (0.277008%)&lt;BR/&gt; 1314: (0.277008%)&gt;];
}
2483--3552[label="1;112pkt 112fpkt"];
2483--3634[label="0.00314465;1pkt 1fpkt"];
2483--8324[label="0.0251572;8pkt 8fpkt"];
2483--8342[label="0.0345912;11pkt 11fpkt"];
2483--8350[label="0.00314465;1pkt 1fpkt"];
2483--8406[label="0.00314465;1pkt 1fpkt"];
2483--8440[label="0.00314465;1pkt 1fpkt"];
2483--9025[label="1;112pkt 112fpkt"];
2483--12041[label="1;60pkt 60fpkt"];
2483--14580[label="1;60pkt 60fpkt"];
2483--16035[label="1;60pkt 60fpkt"];
3552--9025[label="1;112pkt 112fpkt"];
12041--14580[label="1;60pkt 60fpkt"];
12041--16035[label="1;60pkt 60fpkt"];
14580--16035[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.243.18" dst_port="80" src_ip="54.161.118.79"/>
      <filter dst_ip="204.134.243.18" dst_port="80" src_ip="0.175.98.29"/>
    </slice>
    <from sec="1273035613" usec="0"/>
    <to sec="1273036427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.106.93.228"/>
    </slice>
    <from sec="1273036227" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.21.197.228"/>
    </slice>
    <from sec="1273036492" usec="0"/>
    <to sec="1273036497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1509{
style=filled;
color=gray75;
12080[label="176.108.56.229;55pkt 55fpkt", shape=pentagon, color=darkviolet];
14606[label="176.108.56.229;55pkt 55fpkt", shape=invtriangle, color=brown];
stat1509[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.56.229:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12080--14606[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="176.108.56.229"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1510{
style=filled;
color=gray75;
12082[label="9.159.86.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14608[label="9.159.86.229;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1510[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.159.86.229:1504, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12082--14608[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="9.159.86.229" src_port="1504"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.203.54.231"/>
    </slice>
    <from sec="1273036195" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.37.8.232"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.169.16.232"/>
    </slice>
    <from sec="1273035747" usec="0"/>
    <to sec="1273035919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.35.58.232"/>
    </slice>
    <from sec="1273035803" usec="0"/>
    <to sec="1273035827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.57.193.232"/>
    </slice>
    <from sec="1273035690" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1516{
style=filled;
color=gray75;
12145[label="38.146.196.233;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14642[label="38.146.196.233;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1516[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.146.196.233:25, 204.134.242.72:62518}[33.3333%]&lt;BR/&gt;{38.146.196.233:25, 204.134.245.43:56069}[33.3333%]&lt;BR/&gt;{38.146.196.233:25, 204.134.245.43:56071}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62518: (16.6667%)&lt;BR/&gt; 56071: (16.6667%)&lt;BR/&gt; 56069: (16.6667%)&gt;];
}
12145--14642[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.245.43" dst_port="56071" src_ip="38.146.196.233" src_port="25"/>
      <filter dst_ip="204.134.245.43" dst_port="56069" src_ip="38.146.196.233" src_port="25"/>
      <filter dst_ip="204.134.242.72" dst_port="62518" src_ip="38.146.196.233" src_port="25"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1517{
style=filled;
color=gray75;
12153[label="176.108.54.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14646[label="176.108.54.234;1pkt 1fpkt", shape=invtriangle, color=brown];
16069[label="176.108.54.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1517[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.54.234:22, 209.205.199.253:52119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52119: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
12153--14646[label="1;1pkt 1fpkt"];
12153--16069[label="1;1pkt 1fpkt"];
14646--16069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.205.199.253" dst_port="52119" src_ip="176.108.54.234" src_port="22"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.65.55.234"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.188.234"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.119.98.235"/>
    </slice>
    <from sec="1273036299" usec="0"/>
    <to sec="1273036313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1521{
style=filled;
color=gray75;
12183[label="36.76.7.236;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14669[label="36.76.7.236;2pkt 2fpkt", shape=invtriangle, color=brown];
16080[label="36.76.7.236;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1521[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.76.7.236:443, 176.108.139.44:3317}[50%]&lt;BR/&gt;{36.76.7.236:443, 204.134.245.113:7531}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 7531: (25%)&lt;BR/&gt; 3317: (25%)&gt;];
}
12183--14669[label="1;2pkt 2fpkt"];
12183--16080[label="1;2pkt 2fpkt"];
14669--16080[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.245.113" dst_port="7531" src_ip="36.76.7.236" src_port="443"/>
      <filter dst_ip="176.108.139.44" dst_port="3317" src_ip="36.76.7.236" src_port="443"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
12187[label="202.80.31.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14672[label="202.80.31.236;1pkt 1fpkt", shape=invtriangle, color=brown];
16083[label="202.80.31.236;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.80.31.236:873, 176.108.54.199:42700}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42700: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
12187--14672[label="1;1pkt 1fpkt"];
12187--16083[label="1;1pkt 1fpkt"];
14672--16083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.54.199" dst_port="42700" src_ip="202.80.31.236" src_port="873"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1523{
style=filled;
color=gray75;
12208[label="217.169.16.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14684[label="217.169.16.237;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1523[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.169.16.237:10916, 133.249.220.165:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10916: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
12208--14684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.220.165" dst_port="443" src_ip="217.169.16.237" src_port="10916"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1524{
style=filled;
color=gray75;
12218[label="97.70.138.237;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14690[label="97.70.138.237;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1524[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.70.138.237:1098, *:29975}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29975: (50%)&lt;BR/&gt; 1098: (50%)&gt;];
}
12218--14690[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="29975" src_ip="97.70.138.237" src_port="1098"/>
    </slice>
    <from sec="1273035760" usec="0"/>
    <to sec="1273036486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.68.56.238"/>
    </slice>
    <from sec="1273036112" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.158.209.238"/>
    </slice>
    <from sec="1273035835" usec="0"/>
    <to sec="1273035911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.39.86.239"/>
    </slice>
    <from sec="1273035937" usec="0"/>
    <to sec="1273035965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.9.132.239"/>
    </slice>
    <from sec="1273035678" usec="0"/>
    <to sec="1273035735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1529{
style=filled;
color=gray75;
12259[label="176.108.112.240;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14717[label="176.108.112.240;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1529[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.108.112.240:*, 37.27.37.176:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34889: (3.57143%)&lt;BR/&gt; 34888: (3.57143%)&lt;BR/&gt; 34884: (3.57143%)&lt;BR/&gt; 34883: (3.57143%)&gt;];
}
12259--14717[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="37.27.37.176" dst_port="80" src_ip="176.108.112.240"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.249.240"/>
    </slice>
    <from sec="1273035976" usec="0"/>
    <to sec="1273036001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1531{
style=filled;
color=gray75;
12271[label="37.5.48.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14724[label="37.5.48.241;1pkt 1fpkt", shape=invtriangle, color=brown];
16111[label="37.5.48.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1531[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.5.48.241:80, 176.108.139.96:3790}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3790: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12271--14724[label="1;1pkt 1fpkt"];
12271--16111[label="1;1pkt 1fpkt"];
14724--16111[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.108.139.96" dst_port="3790" src_ip="37.5.48.241" src_port="80"/>
    </slice>
    <from sec="1273036325" usec="0"/>
    <to sec="1273036334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.152.168.241"/>
    </slice>
    <from sec="1273035896" usec="0"/>
    <to sec="1273036245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.159.249.241"/>
    </slice>
    <from sec="1273035967" usec="0"/>
    <to sec="1273035992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.252.241"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770498,2.7916,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1535{
style=filled;
color=gray75;
12298[label="22.230.33.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14742[label="22.230.33.243;1pkt 1fpkt", shape=invtriangle, color=brown];
16121[label="22.230.33.243;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1535[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.230.33.243:1262, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1262: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12298--14742[label="1;1pkt 1fpkt"];
12298--16121[label="1;1pkt 1fpkt"];
14742--16121[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="22.230.33.243" src_port="1262"/>
    </slice>
    <from sec="1273035869" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.170.181.244"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.229.201.244"/>
    </slice>
    <from sec="1273036188" usec="0"/>
    <to sec="1273036243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.180.202.244"/>
    </slice>
    <from sec="1273035955" usec="0"/>
    <to sec="1273035975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.176.214.245"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.10.29.249"/>
    </slice>
    <from sec="1273036192" usec="0"/>
    <to sec="1273036265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1541{
style=filled;
color=gray75;
12359[label="21.195.116.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14774[label="21.195.116.249;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1541[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.195.116.249:60255, 204.134.250.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60255: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12359--14774[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.99" dst_port="80" src_ip="21.195.116.249" src_port="60255"/>
    </slice>
    <from sec="1273036483" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1543{
style=filled;
color=gray75;
12373[label="193.218.208.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14783[label="193.218.208.250;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1543[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.218.208.250:53, 176.108.9.90:17137}[50%]&lt;BR/&gt;{193.218.208.250:53, 133.249.157.216:62486}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62486: (25%)&lt;BR/&gt; 17137: (25%)&gt;];
}
12373--14783[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.249.157.216" dst_port="62486" src_ip="193.218.208.250" src_port="53"/>
      <filter dst_ip="176.108.9.90" dst_port="17137" src_ip="193.218.208.250" src_port="53"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.42.132.251"/>
    </slice>
    <from sec="1273035931" usec="0"/>
    <to sec="1273035940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.523774,2.8068,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
12385[label="76.166.248.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14790[label="76.166.248.251;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.166.248.251:61395, 204.134.250.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61395: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12385--14790[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.134.250.98" dst_port="80" src_ip="76.166.248.251" src_port="61395"/>
    </slice>
    <from sec="1273035887" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528873,2.83177,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.200.171.254"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42664,2.7254,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1547{
style=filled;
color=gray75;
245[label="128.212.143.45;d;394pkt 394fpkt", shape=diamond, color=yellow];
1428[label="190.175.89.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1633[label="8.234.41.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
4436[label="41.165.147.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
5242[label="218.64.167.124;s;4pkt 4fpkt", shape=diamond, color=yellow];
5423[label="128.212.143.45;d;363pkt 363fpkt", shape=hexagon, color=black];
9934[label="174.43.32.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9988[label="5.18.211.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10554[label="218.64.167.124;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12413[label="190.175.89.255;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13323[label="5.18.211.85;2pkt 2fpkt", shape=invtriangle, color=brown];
14806[label="190.175.89.255;2pkt 2fpkt", shape=invtriangle, color=brown];
16149[label="190.175.89.255;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1547[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.212.143.45:5150}[80.7107%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5150: (39.5244%)&lt;BR/&gt; 5140: (3.98458%)&lt;BR/&gt; 5041: (3.21337%)&lt;BR/&gt; 80: (1.92802%)&lt;BR/&gt; 12519: (1.28535%)&gt;];
}
245--1428[label="1;1pkt 1fpkt"];
245--1633[label="1;1pkt 1fpkt"];
245--4436[label="1;1pkt 1fpkt"];
245--5242[label="1;4pkt 4fpkt"];
245--5423[label="1;363pkt 363fpkt"];
245--8322[label="0.00253807;1pkt 1fpkt"];
245--8349[label="0.00507614;2pkt 2fpkt"];
245--8357[label="0.00253807;1pkt 1fpkt"];
245--8373[label="0.00253807;1pkt 1fpkt"];
245--8393[label="0.00253807;1pkt 1fpkt"];
245--8405[label="0.00507614;2pkt 2fpkt"];
245--8414[label="0.00253807;1pkt 1fpkt"];
245--8428[label="0.00253807;1pkt 1fpkt"];
245--8439[label="0.00507614;2pkt 2fpkt"];
245--8454[label="0.00253807;1pkt 1fpkt"];
245--9934[label="1;1pkt 1fpkt"];
245--9988[label="1;2pkt 2fpkt"];
245--10554[label="1;3pkt 3fpkt"];
245--12413[label="1;2pkt 2fpkt"];
245--13323[label="1;2pkt 2fpkt"];
245--14806[label="1;2pkt 2fpkt"];
245--16149[label="1;2pkt 2fpkt"];
1428--5423[label="1;1pkt 1fpkt"];
1428--12413[label="1;1pkt 1fpkt"];
1428--14806[label="1;1pkt 1fpkt"];
1428--16149[label="1;1pkt 1fpkt"];
1633--5423[label="1;1pkt 1fpkt"];
4436--5423[label="1;1pkt 1fpkt"];
5242--5423[label="1;4pkt 4fpkt"];
5242--10554[label="1;3pkt 3fpkt"];
5423--8322[label="0.00275482;1pkt 1fpkt"];
5423--8349[label="0.00550964;2pkt 2fpkt"];
5423--8357[label="0.00275482;1pkt 1fpkt"];
5423--8373[label="0.00275482;1pkt 1fpkt"];
5423--8393[label="0.00275482;1pkt 1fpkt"];
5423--8405[label="0.00550964;2pkt 2fpkt"];
5423--8414[label="0.00275482;1pkt 1fpkt"];
5423--8428[label="0.00275482;1pkt 1fpkt"];
5423--8439[label="0.00550964;2pkt 2fpkt"];
5423--9988[label="1;2pkt 2fpkt"];
5423--10554[label="1;3pkt 3fpkt"];
5423--12413[label="0.5;1pkt 1fpkt"];
5423--13323[label="1;2pkt 2fpkt"];
5423--14806[label="0.5;1pkt 1fpkt"];
5423--16149[label="0.5;1pkt 1fpkt"];
9988--13323[label="1;2pkt 2fpkt"];
12413--14806[label="1;2pkt 2fpkt"];
12413--16149[label="1;2pkt 2fpkt"];
14806--16149[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.212.143.45" dst_port="5150"/>
    </slice>
    <from sec="1273035601" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.64.12.0"/>
    </slice>
    <from sec="1273036174" usec="0"/>
    <to sec="1273036179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.9.18.0"/>
    </slice>
    <from sec="1273035831" usec="0"/>
    <to sec="1273035838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.22.46.0"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.120.41.1"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273035915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.78.241.1"/>
    </slice>
    <from sec="1273036142" usec="0"/>
    <to sec="1273036157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.42.2"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.112.160.2"/>
    </slice>
    <from sec="1273035961" usec="0"/>
    <to sec="1273035974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.54.194.2"/>
    </slice>
    <from sec="1273035637" usec="0"/>
    <to sec="1273035659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.87.69.3"/>
    </slice>
    <from sec="1273035705" usec="0"/>
    <to sec="1273035717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.199.3"/>
    </slice>
    <from sec="1273036184" usec="0"/>
    <to sec="1273036234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.248.5"/>
    </slice>
    <from sec="1273035887" usec="0"/>
    <to sec="1273035901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="191.22.69.6"/>
    </slice>
    <from sec="1273035930" usec="0"/>
    <to sec="1273036150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.107.124.6"/>
    </slice>
    <from sec="1273036212" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.37.35.7"/>
    </slice>
    <from sec="1273036322" usec="0"/>
    <to sec="1273036336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.36.66.7"/>
    </slice>
    <from sec="1273036213" usec="0"/>
    <to sec="1273036218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.7.129.7"/>
    </slice>
    <from sec="1273036051" usec="0"/>
    <to sec="1273036070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.143.173.7"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.175.187.7"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.193.0.8"/>
    </slice>
    <from sec="1273035901" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.201.206.8"/>
    </slice>
    <from sec="1273036122" usec="0"/>
    <to sec="1273036141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.37.9"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.207.208.9"/>
    </slice>
    <from sec="1273036483" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.38.176.10"/>
    </slice>
    <from sec="1273036065" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.47.49.11"/>
    </slice>
    <from sec="1273036143" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.20.12"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.173.42.12"/>
    </slice>
    <from sec="1273035907" usec="0"/>
    <to sec="1273035932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.38.210.12"/>
    </slice>
    <from sec="1273035814" usec="0"/>
    <to sec="1273035888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.169.17.13"/>
    </slice>
    <from sec="1273036107" usec="0"/>
    <to sec="1273036130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.53.115.13"/>
    </slice>
    <from sec="1273036385" usec="0"/>
    <to sec="1273036457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.229.162.13"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.166.201.13"/>
    </slice>
    <from sec="1273036130" usec="0"/>
    <to sec="1273036150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.202.187.15"/>
    </slice>
    <from sec="1273036092" usec="0"/>
    <to sec="1273036107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.134.210.15"/>
    </slice>
    <from sec="1273035987" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.12.16"/>
    </slice>
    <from sec="1273035980" usec="0"/>
    <to sec="1273036048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.44.16"/>
    </slice>
    <from sec="1273036020" usec="0"/>
    <to sec="1273036050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.179.81.16"/>
    </slice>
    <from sec="1273036159" usec="0"/>
    <to sec="1273036186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.38.46.17"/>
    </slice>
    <from sec="1273036087" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.42.160.17"/>
    </slice>
    <from sec="1273036178" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.37.251.17"/>
    </slice>
    <from sec="1273035843" usec="0"/>
    <to sec="1273035856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.232.43.18"/>
    </slice>
    <from sec="1273036187" usec="0"/>
    <to sec="1273036201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.26.201.18"/>
    </slice>
    <from sec="1273036092" usec="0"/>
    <to sec="1273036212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.32.37.20"/>
    </slice>
    <from sec="1273036241" usec="0"/>
    <to sec="1273036248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.7.153.22"/>
    </slice>
    <from sec="1273035686" usec="0"/>
    <to sec="1273035715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.224.246.22"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.120.42.23"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.18.241.23"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.36.99.24"/>
    </slice>
    <from sec="1273035890" usec="0"/>
    <to sec="1273035956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.39.238.24"/>
    </slice>
    <from sec="1273036062" usec="0"/>
    <to sec="1273036210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.32.24.25"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.210.215.26"/>
    </slice>
    <from sec="1273036198" usec="0"/>
    <to sec="1273036209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.226.13.27"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273035726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.34.251.27"/>
    </slice>
    <from sec="1273036472" usec="0"/>
    <to sec="1273036483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.75.14.28"/>
    </slice>
    <from sec="1273036202" usec="0"/>
    <to sec="1273036214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.251.28"/>
    </slice>
    <from sec="1273036104" usec="0"/>
    <to sec="1273036132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.8.37.30"/>
    </slice>
    <from sec="1273036315" usec="0"/>
    <to sec="1273036326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.5.77.31"/>
    </slice>
    <from sec="1273036009" usec="0"/>
    <to sec="1273036035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.216.160.31"/>
    </slice>
    <from sec="1273036401" usec="0"/>
    <to sec="1273036415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.220.16.32"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.207.33"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.127.43.34"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273036012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.221.86.38"/>
    </slice>
    <from sec="1273036180" usec="0"/>
    <to sec="1273036217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.250.173.38"/>
    </slice>
    <from sec="1273036482" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.169.205.38"/>
    </slice>
    <from sec="1273035784" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.103.194.39"/>
    </slice>
    <from sec="1273035855" usec="0"/>
    <to sec="1273035864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.45.44.40"/>
    </slice>
    <from sec="1273036291" usec="0"/>
    <to sec="1273036314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.144.40"/>
    </slice>
    <from sec="1273036368" usec="0"/>
    <to sec="1273036410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.185.232.42"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.10.82.43"/>
    </slice>
    <from sec="1273036147" usec="0"/>
    <to sec="1273036172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.39.105.43"/>
    </slice>
    <from sec="1273035602" usec="0"/>
    <to sec="1273036056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.48.132.44"/>
    </slice>
    <from sec="1273036156" usec="0"/>
    <to sec="1273036192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.104.219.44"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.248.69.45"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.201.163.45"/>
    </slice>
    <from sec="1273035676" usec="0"/>
    <to sec="1273035679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.40.4.46"/>
    </slice>
    <from sec="1273035850" usec="0"/>
    <to sec="1273035853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.35.39.46"/>
    </slice>
    <from sec="1273035612" usec="0"/>
    <to sec="1273035651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.105.116.46"/>
    </slice>
    <from sec="1273036127" usec="0"/>
    <to sec="1273036153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.90.217.46"/>
    </slice>
    <from sec="1273035709" usec="0"/>
    <to sec="1273035752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.102.55.52"/>
    </slice>
    <from sec="1273036349" usec="0"/>
    <to sec="1273036414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.200.101.52"/>
    </slice>
    <from sec="1273036138" usec="0"/>
    <to sec="1273036154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.72.33.54"/>
    </slice>
    <from sec="1273035878" usec="0"/>
    <to sec="1273035925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.237.13.55"/>
    </slice>
    <from sec="1273036084" usec="0"/>
    <to sec="1273036091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.25.57.56"/>
    </slice>
    <from sec="1273036111" usec="0"/>
    <to sec="1273036117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.39.105.56"/>
    </slice>
    <from sec="1273036171" usec="0"/>
    <to sec="1273036189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.99.129.56"/>
    </slice>
    <from sec="1273036333" usec="0"/>
    <to sec="1273036350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.30.93.59"/>
    </slice>
    <from sec="1273036477" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.42.242.60"/>
    </slice>
    <from sec="1273036070" usec="0"/>
    <to sec="1273036125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.26.63"/>
    </slice>
    <from sec="1273036018" usec="0"/>
    <to sec="1273036076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.43.134.64"/>
    </slice>
    <from sec="1273036398" usec="0"/>
    <to sec="1273036426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.217.160.66"/>
    </slice>
    <from sec="1273036055" usec="0"/>
    <to sec="1273036092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.39.253.66"/>
    </slice>
    <from sec="1273035884" usec="0"/>
    <to sec="1273035922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.36.90.67"/>
    </slice>
    <from sec="1273036082" usec="0"/>
    <to sec="1273036104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.15.69"/>
    </slice>
    <from sec="1273036446" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.88.235.70"/>
    </slice>
    <from sec="1273036035" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.38.57.71"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.32.28.74"/>
    </slice>
    <from sec="1273036091" usec="0"/>
    <to sec="1273036250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.211.170.74"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.213.244.74"/>
    </slice>
    <from sec="1273035795" usec="0"/>
    <to sec="1273035806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.83.82.76"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.4.240.79"/>
    </slice>
    <from sec="1273035868" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.236.58.80"/>
    </slice>
    <from sec="1273036133" usec="0"/>
    <to sec="1273036146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.99.152.80"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.35.49.82"/>
    </slice>
    <from sec="1273035864" usec="0"/>
    <to sec="1273035913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.88.83"/>
    </slice>
    <from sec="1273036449" usec="0"/>
    <to sec="1273036461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.182.138.83"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.136.159.84"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.201.122.86"/>
    </slice>
    <from sec="1273035872" usec="0"/>
    <to sec="1273035941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.253.86"/>
    </slice>
    <from sec="1273036085" usec="0"/>
    <to sec="1273036106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.72.175.87"/>
    </slice>
    <from sec="1273035673" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.1.85.88"/>
    </slice>
    <from sec="1273036002" usec="0"/>
    <to sec="1273036048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.12.89"/>
    </slice>
    <from sec="1273036170" usec="0"/>
    <to sec="1273036246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.105.125.89"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.100.240.90"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.132.132.93"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.110.192.94"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.35.208.95"/>
    </slice>
    <from sec="1273035889" usec="0"/>
    <to sec="1273035927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.180.72.97"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.6.93.98"/>
    </slice>
    <from sec="1273036176" usec="0"/>
    <to sec="1273036207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.229.47.99"/>
    </slice>
    <from sec="1273035707" usec="0"/>
    <to sec="1273036053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.14.91.100"/>
    </slice>
    <from sec="1273036022" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.102.100"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.0.6.103"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.6.112.103"/>
    </slice>
    <from sec="1273035715" usec="0"/>
    <to sec="1273035730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.136.104"/>
    </slice>
    <from sec="1273036144" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.184.135.105"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.168.152.106"/>
    </slice>
    <from sec="1273035914" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.25.150.110"/>
    </slice>
    <from sec="1273036330" usec="0"/>
    <to sec="1273036362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.237.196.110"/>
    </slice>
    <from sec="1273035608" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.91.145.111"/>
    </slice>
    <from sec="1273035895" usec="0"/>
    <to sec="1273035910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.134.113"/>
    </slice>
    <from sec="1273035811" usec="0"/>
    <to sec="1273035830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.169.146.114"/>
    </slice>
    <from sec="1273035926" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.51.33.116"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.216.59.116"/>
    </slice>
    <from sec="1273035905" usec="0"/>
    <to sec="1273036136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.130.120"/>
    </slice>
    <from sec="1273036126" usec="0"/>
    <to sec="1273036165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.92.2.121"/>
    </slice>
    <from sec="1273035912" usec="0"/>
    <to sec="1273035933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.161.88.121"/>
    </slice>
    <from sec="1273035697" usec="0"/>
    <to sec="1273035744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.39.249.124"/>
    </slice>
    <from sec="1273035999" usec="0"/>
    <to sec="1273036033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.215.13.129"/>
    </slice>
    <from sec="1273036207" usec="0"/>
    <to sec="1273036216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.88.82.129"/>
    </slice>
    <from sec="1273036182" usec="0"/>
    <to sec="1273036319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.183.137.130"/>
    </slice>
    <from sec="1273036045" usec="0"/>
    <to sec="1273036057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.165.169.130"/>
    </slice>
    <from sec="1273036013" usec="0"/>
    <to sec="1273036041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.71.20.131"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.10.149.131"/>
    </slice>
    <from sec="1273035952" usec="0"/>
    <to sec="1273035955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.210.36.136"/>
    </slice>
    <from sec="1273035935" usec="0"/>
    <to sec="1273035958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.6.152.137"/>
    </slice>
    <from sec="1273035995" usec="0"/>
    <to sec="1273036029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.23.169.137"/>
    </slice>
    <from sec="1273036189" usec="0"/>
    <to sec="1273036226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.177.129.138"/>
    </slice>
    <from sec="1273036117" usec="0"/>
    <to sec="1273036174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.6.67.139"/>
    </slice>
    <from sec="1273035687" usec="0"/>
    <to sec="1273035755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.135.40.141"/>
    </slice>
    <from sec="1273036265" usec="0"/>
    <to sec="1273036444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.197.181.141"/>
    </slice>
    <from sec="1273036217" usec="0"/>
    <to sec="1273036244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.233.139.142"/>
    </slice>
    <from sec="1273035879" usec="0"/>
    <to sec="1273035907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.177.7.143"/>
    </slice>
    <from sec="1273036011" usec="0"/>
    <to sec="1273036014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.245.128.143"/>
    </slice>
    <from sec="1273036419" usec="0"/>
    <to sec="1273036433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.109.176.144"/>
    </slice>
    <from sec="1273035845" usec="0"/>
    <to sec="1273035851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.161.211.145"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.106.158.146"/>
    </slice>
    <from sec="1273035695" usec="0"/>
    <to sec="1273036425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.221.181.146"/>
    </slice>
    <from sec="1273036228" usec="0"/>
    <to sec="1273036255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.157.204.149"/>
    </slice>
    <from sec="1273036130" usec="0"/>
    <to sec="1273036156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.192.32.150"/>
    </slice>
    <from sec="1273035670" usec="0"/>
    <to sec="1273035718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.182.183.150"/>
    </slice>
    <from sec="1273035730" usec="0"/>
    <to sec="1273035746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.228.149.152"/>
    </slice>
    <from sec="1273036123" usec="0"/>
    <to sec="1273036151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.162.229.152"/>
    </slice>
    <from sec="1273036173" usec="0"/>
    <to sec="1273036401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.27.230.153"/>
    </slice>
    <from sec="1273035636" usec="0"/>
    <to sec="1273035642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.109.176.154"/>
    </slice>
    <from sec="1273035656" usec="0"/>
    <to sec="1273035663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.150.135.157"/>
    </slice>
    <from sec="1273035605" usec="0"/>
    <to sec="1273036459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.238.158.157"/>
    </slice>
    <from sec="1273035758" usec="0"/>
    <to sec="1273035772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="191.88.180.157"/>
    </slice>
    <from sec="1273035666" usec="0"/>
    <to sec="1273036370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.34.117.160"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.201.118.163"/>
    </slice>
    <from sec="1273035962" usec="0"/>
    <to sec="1273036016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="97.240.133.165"/>
    </slice>
    <from sec="1273036116" usec="0"/>
    <to sec="1273036131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.5.1.166"/>
    </slice>
    <from sec="1273036285" usec="0"/>
    <to sec="1273036340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.201.118.167"/>
    </slice>
    <from sec="1273036286" usec="0"/>
    <to sec="1273036500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.36.235.168"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.44.128.176"/>
    </slice>
    <from sec="1273036158" usec="0"/>
    <to sec="1273036227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.114.180.177"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.18.80.182"/>
    </slice>
    <from sec="1273036179" usec="0"/>
    <to sec="1273036284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.66.228.188"/>
    </slice>
    <from sec="1273036134" usec="0"/>
    <to sec="1273036152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.38.224.189"/>
    </slice>
    <from sec="1273035729" usec="0"/>
    <to sec="1273036024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.34.54.191"/>
    </slice>
    <from sec="1273035645" usec="0"/>
    <to sec="1273035687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.212.172.191"/>
    </slice>
    <from sec="1273035603" usec="0"/>
    <to sec="1273036317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.8.52.192"/>
    </slice>
    <from sec="1273035946" usec="0"/>
    <to sec="1273035957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.6.193"/>
    </slice>
    <from sec="1273035918" usec="0"/>
    <to sec="1273035930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.40.18.193"/>
    </slice>
    <from sec="1273036108" usec="0"/>
    <to sec="1273036138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.131.5.194"/>
    </slice>
    <from sec="1273035971" usec="0"/>
    <to sec="1273035975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.229.231.195"/>
    </slice>
    <from sec="1273036339" usec="0"/>
    <to sec="1273036380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.201.122.196"/>
    </slice>
    <from sec="1273035928" usec="0"/>
    <to sec="1273036014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.209.176.196"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.4.158.197"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273035657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.196.219.199"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.183.71.200"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.172.200"/>
    </slice>
    <from sec="1273035902" usec="0"/>
    <to sec="1273035949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.165.147.202"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.168.136.203"/>
    </slice>
    <from sec="1273035892" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="190.172.172.205"/>
    </slice>
    <from sec="1273036041" usec="0"/>
    <to sec="1273036062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.14.40.207"/>
    </slice>
    <from sec="1273035700" usec="0"/>
    <to sec="1273035719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.86.178.208"/>
    </slice>
    <from sec="1273035893" usec="0"/>
    <to sec="1273035936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.185.182.208"/>
    </slice>
    <from sec="1273036135" usec="0"/>
    <to sec="1273036140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.35.95.209"/>
    </slice>
    <from sec="1273036157" usec="0"/>
    <to sec="1273036200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.250.161.209"/>
    </slice>
    <from sec="1273035657" usec="0"/>
    <to sec="1273035686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.228.155.210"/>
    </slice>
    <from sec="1273035989" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.44.49.214"/>
    </slice>
    <from sec="1273036090" usec="0"/>
    <to sec="1273036221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.166.74.215"/>
    </slice>
    <from sec="1273036200" usec="0"/>
    <to sec="1273036213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.201.122.215"/>
    </slice>
    <from sec="1273036077" usec="0"/>
    <to sec="1273036110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.36.216.215"/>
    </slice>
    <from sec="1273035978" usec="0"/>
    <to sec="1273036002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.218.136.218"/>
    </slice>
    <from sec="1273036211" usec="0"/>
    <to sec="1273036499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.76.182.218"/>
    </slice>
    <from sec="1273036094" usec="0"/>
    <to sec="1273036113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.236.11.221"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.108.24.221"/>
    </slice>
    <from sec="1273035810" usec="0"/>
    <to sec="1273036495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.222.157.221"/>
    </slice>
    <from sec="1273036487" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.201.123.223"/>
    </slice>
    <from sec="1273036083" usec="0"/>
    <to sec="1273036129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.36.174.223"/>
    </slice>
    <from sec="1273036102" usec="0"/>
    <to sec="1273036170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.106.93.228"/>
    </slice>
    <from sec="1273036227" usec="0"/>
    <to sec="1273036256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.169.16.232"/>
    </slice>
    <from sec="1273035747" usec="0"/>
    <to sec="1273035919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.35.58.232"/>
    </slice>
    <from sec="1273035803" usec="0"/>
    <to sec="1273035827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.57.193.232"/>
    </slice>
    <from sec="1273035690" usec="0"/>
    <to sec="1273035935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.42.206.233"/>
    </slice>
    <from sec="1273035928" usec="0"/>
    <to sec="1273035950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.65.55.234"/>
    </slice>
    <from sec="1273035606" usec="0"/>
    <to sec="1273035996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.159.249.240"/>
    </slice>
    <from sec="1273035976" usec="0"/>
    <to sec="1273036001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.152.168.241"/>
    </slice>
    <from sec="1273035896" usec="0"/>
    <to sec="1273036245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.252.241"/>
    </slice>
    <from sec="1273036500" usec="0"/>
    <to sec="1273036501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.695215,2.83709,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.90.186.250"/>
    </slice>
    <from sec="1273035604" usec="0"/>
    <to sec="1273036121" usec="0"/>
  </anomaly>

</admd:annotation>
