<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.88.178.15"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451825" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.220.107.133"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451651" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
180[label="57.146.124.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
181[label="128.7.227.46;s;7pkt 7fpkt", shape=diamond, color=yellow];
7777[label="57.146.124.191;d;1pkt 1fpkt", shape=hexagon, color=black];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.227.46:35165, 1.100.210.225:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35165: (50%)&lt;BR/&gt; 52035: (16.6667%)&lt;BR/&gt; 56036: (5.55556%)&lt;BR/&gt; 41755: (5.55556%)&lt;BR/&gt; 41550: (5.55556%)&gt;];
}
180--181[label="1;1pkt 1fpkt"];
180--7777[label="1;1pkt 1fpkt"];
181--7777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.100.210.225" src_ip="128.7.227.46" src_port="35165"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
329[label="133.4.93.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
331[label="35.161.203.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.161.203.112:8043, 133.4.93.17:1321}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8043: (50%)&lt;BR/&gt; 1321: (50%)&gt;];
}
329--331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.93.17" dst_port="1321" src_ip="35.161.203.112" src_port="8043"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="81.171.209.20"/>
      <from sec="1289452166" usec="0"/>
      <to sec="1289452281" usec="0"/>
    </slice>
    <from sec="1289452166" usec="0"/>
    <to sec="1289452281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_8{
style=filled;
color=gray75;
383[label="128.19.123.86;s;586pkt 586fpkt", shape=diamond, color=yellow];
stat8[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.123.86:*, *:25}[68.942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.7133%)&lt;BR/&gt; 53: (11.8601%)&lt;BR/&gt; 32772: (8.27645%)&lt;BR/&gt; 0: (0.341297%)&lt;BR/&gt; 113: (0.170648%)&gt;];
}
383--1776[label="0.00170648;1pkt 1fpkt"];
383--3620[label="0.00170648;1pkt 1fpkt"];
383--5193[label="0.00170648;1pkt 1fpkt"];
383--8676[label="0.0102389;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="128.19.123.86"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="80.119.84.6"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451727" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
432[label="210.33.155.122;d;74pkt 74fpkt", shape=diamond, color=yellow];
433[label="1.154.15.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
1922[label="81.1.158.31;s;2pkt 2fpkt", shape=diamond, color=yellow];
2055[label="8.181.206.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
4114[label="0.69.114.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
8414[label="210.33.155.122;d;74pkt 74fpkt", shape=hexagon, color=black];
12400[label="0.88.49.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14039[label="1.139.159.180;1pkt 1fpkt", shape=invtriangle, color=brown];
14343[label="0.88.49.228;1pkt 1fpkt", shape=invtriangle, color=brown];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 210.33.155.122:5041}[45.9459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (67.6282%)&lt;BR/&gt; 11106: (2.88462%)&lt;BR/&gt; 28525: (1.28205%)&lt;BR/&gt; 8620: (1.28205%)&lt;BR/&gt; 8000: (1.28205%)&gt;];
}
432--433[label="1;1pkt 1fpkt"];
432--1922[label="1;2pkt 2fpkt"];
432--2055[label="1;1pkt 1fpkt"];
432--4114[label="1;1pkt 1fpkt"];
432--8414[label="1;74pkt 74fpkt"];
432--12400[label="1;1pkt 1fpkt"];
432--14039[label="1;1pkt 1fpkt"];
432--14343[label="1;1pkt 1fpkt"];
433--8414[label="1;1pkt 1fpkt"];
1922--8414[label="1;2pkt 2fpkt"];
2055--8414[label="1;1pkt 1fpkt"];
4114--8414[label="1;1pkt 1fpkt"];
8414--12400[label="1;1pkt 1fpkt"];
8414--14039[label="1;1pkt 1fpkt"];
8414--14343[label="1;1pkt 1fpkt"];
12400--14343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.155.122" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="202.52.209.51"/>
      <from sec="1289451970" usec="0"/>
      <to sec="1289452007" usec="0"/>
    </slice>
    <from sec="1289451970" usec="0"/>
    <to sec="1289452007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.4.189.25"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451665" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.163.86.123"/>
      <from sec="1289452195" usec="0"/>
      <to sec="1289452426" usec="0"/>
    </slice>
    <from sec="1289452195" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.222.31.34"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451854" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.70.1.92"/>
      <from sec="1289452194" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.46.228.60"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451888" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.98.24.19"/>
      <from sec="1289452378" usec="0"/>
      <to sec="1289452383" usec="0"/>
    </slice>
    <from sec="1289452378" usec="0"/>
    <to sec="1289452383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
783[label="133.4.81.39;d;3108pkt 3108fpkt", shape=diamond, color=yellow];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.81.39:10044}[96.5251%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10044: (48.2625%)&lt;BR/&gt; 443: (1.38353%)&lt;BR/&gt; 0: (0.418275%)&lt;BR/&gt; 80: (0.144788%)&lt;BR/&gt; 49818: (0.0482625%)&gt;];
}
783--8664[label="0.000643501;2pkt 2fpkt"];
783--8666[label="0.00636689;16pkt 16fpkt"];
783--8688[label="0.000643501;2pkt 2fpkt"];
783--8689[label="0.00900901;28pkt 28fpkt"];
783--8743[label="0.000643501;2pkt 2fpkt"];
783--8745[label="0.00636689;16pkt 16fpkt"];
783--8765[label="0.000643501;2pkt 2fpkt"];
783--8766[label="0.00900901;28pkt 28fpkt"];
783--8790[label="0.000643501;2pkt 2fpkt"];
783--8792[label="0.00636689;16pkt 16fpkt"];
783--8811[label="0.000643501;2pkt 2fpkt"];
783--8812[label="0.00900901;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.81.39" dst_port="10044"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.86.88.96"/>
      <from sec="1289452198" usec="0"/>
      <to sec="1289452330" usec="0"/>
    </slice>
    <from sec="1289452198" usec="0"/>
    <to sec="1289452330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.26.224.155"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
892[label="81.97.107.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
893[label="146.0.211.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.211.89:5041, 81.97.107.210:2367}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (50%)&lt;BR/&gt; 2367: (50%)&gt;];
}
892--893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.97.107.210" dst_port="2367" src_ip="146.0.211.89" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.4.138.202"/>
      <from sec="1289452191" usec="0"/>
      <to sec="1289452321" usec="0"/>
    </slice>
    <from sec="1289452191" usec="0"/>
    <to sec="1289452321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
946[label="210.33.155.238;d;816pkt 816fpkt", shape=diamond, color=yellow];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.33.155.238:13604}[96.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13604: (48.2843%)&lt;BR/&gt; 53160: (0.612745%)&lt;BR/&gt; 8000: (0.490196%)&lt;BR/&gt; 17788: (0.306373%)&lt;BR/&gt; 80: (0.306373%)&gt;];
}
946--1855[label="0.00122549;1pkt 1fpkt"];
946--8684[label="0.00122549;1pkt 1fpkt"];
946--8761[label="0.00122549;1pkt 1fpkt"];
946--8807[label="0.00122549;1pkt 1fpkt"];
946--8843[label="0.0117647;1pkt 1fpkt"];
946--12700[label="0.0117647;1pkt 1fpkt"];
946--14461[label="0.0117647;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.155.238" dst_port="13604"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.177.87.171"/>
      <from sec="1289452168" usec="0"/>
      <to sec="1289452247" usec="0"/>
    </slice>
    <from sec="1289452168" usec="0"/>
    <to sec="1289452247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.213.7.156"/>
      <from sec="1289452196" usec="0"/>
      <to sec="1289452393" usec="0"/>
    </slice>
    <from sec="1289452196" usec="0"/>
    <to sec="1289452393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.177.15.83"/>
      <from sec="1289452195" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452195" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
11584[label="128.19.108.170;54pkt 54fpkt", shape=pentagon, color=darkviolet];
12667[label="5.107.67.252;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.107.67.252:*, 166.26.179.81:80}[48.5714%]&lt;BR/&gt;{128.19.108.170:36735, *:*}[48.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.7619%)&lt;BR/&gt; 36735: (24.2857%)&lt;BR/&gt; 0: (0.952381%)&lt;BR/&gt; 63548: (0.47619%)&lt;BR/&gt; 63486: (0.47619%)&gt;];
}
</description>
    <slice>
      <filter src_ip="128.19.108.170" src_port="36735"/>
      <filter dst_ip="166.26.179.81" dst_port="80" src_ip="5.107.67.252"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="7.98.14.199"/>
      <from sec="1289452306" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452306" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="7.80.62.202"/>
      <from sec="1289452194" usec="0"/>
      <to sec="1289452227" usec="0"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.36.51.62"/>
      <from sec="1289452195" usec="0"/>
      <to sec="1289452399" usec="0"/>
    </slice>
    <from sec="1289452195" usec="0"/>
    <to sec="1289452399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.86.13.108"/>
      <from sec="1289452195" usec="0"/>
      <to sec="1289452336" usec="0"/>
    </slice>
    <from sec="1289452195" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.83.15.199"/>
      <from sec="1289451606" usec="0"/>
      <to sec="1289451707" usec="0"/>
    </slice>
    <from sec="1289451606" usec="0"/>
    <to sec="1289451707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
1366[label="42.146.67.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
1367[label="158.196.16.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.16.27:80, 42.146.67.34:45151}[50%]&lt;BR/&gt;{158.196.16.27:80, 42.146.67.34:48905}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48905: (33.3333%)&lt;BR/&gt; 45151: (16.6667%)&gt;];
}
1366--1367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.34" dst_port="48905" src_ip="158.196.16.27" src_port="80"/>
      <filter dst_ip="42.146.67.34" dst_port="45151" src_ip="158.196.16.27" src_port="80"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289451770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.168.14.197"/>
      <from sec="1289451821" usec="0"/>
      <to sec="1289452173" usec="0"/>
    </slice>
    <from sec="1289451821" usec="0"/>
    <to sec="1289452173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.146.67.77"/>
      <from sec="1289451615" usec="0"/>
      <to sec="1289451626" usec="0"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289451626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.9.132.228"/>
      <from sec="1289452393" usec="0"/>
      <to sec="1289452399" usec="0"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
1397[label="203.47.62.145;d;3pkt 3fpkt", shape=diamond, color=yellow];
1398[label="158.196.121.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
12456[label="158.196.121.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.237.72:80, 203.47.62.145:47307}[33.3333%]&lt;BR/&gt;{128.7.169.129:80, 203.47.62.145:59773}[33.3333%]&lt;BR/&gt;{158.196.121.232:80, 203.47.62.145:62451}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62451: (30%)&lt;BR/&gt; 59773: (10%)&lt;BR/&gt; 47307: (10%)&gt;];
}
1397--1398[label="1;1pkt 1fpkt"];
1397--12456[label="1;1pkt 1fpkt"];
1398--12456[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.145" dst_port="62451" src_ip="158.196.121.232" src_port="80"/>
      <filter dst_ip="203.47.62.145" dst_port="59773" src_ip="128.7.169.129" src_port="80"/>
      <filter dst_ip="203.47.62.145" dst_port="47307" src_ip="166.26.237.72" src_port="80"/>
    </slice>
    <from sec="1289451618" usec="0"/>
    <to sec="1289451673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
1435[label="42.146.64.213;d;3pkt 3fpkt", shape=diamond, color=yellow];
1436[label="128.7.73.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.73.49:80, 42.146.64.213:45825}[33.3333%]&lt;BR/&gt;{128.7.125.88:80, 42.146.64.213:38292}[33.3333%]&lt;BR/&gt;{128.7.125.88:80, 42.146.64.213:61790}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45825: (25%)&lt;BR/&gt; 61790: (12.5%)&lt;BR/&gt; 38292: (12.5%)&gt;];
}
1435--1436[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.64.213" dst_port="61790" src_ip="128.7.125.88" src_port="80"/>
      <filter dst_ip="42.146.64.213" dst_port="38292" src_ip="128.7.125.88" src_port="80"/>
      <filter dst_ip="42.146.64.213" dst_port="45825" src_ip="128.7.73.49" src_port="80"/>
    </slice>
    <from sec="1289451625" usec="0"/>
    <to sec="1289451746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.33.105.99"/>
      <from sec="1289451628" usec="0"/>
      <to sec="1289451662" usec="0"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289451662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
1438[label="158.196.130.92;s;10pkt 10fpkt", shape=diamond, color=yellow];
1483[label="203.47.62.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.130.92:53, 8.45.184.12:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 51614: (8.33333%)&lt;BR/&gt; 52945: (4.16667%)&lt;BR/&gt; 48896: (4.16667%)&gt;];
}
1438--1483[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.45.184.12" src_ip="158.196.130.92" src_port="53"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.47.62.180"/>
      <from sec="1289451643" usec="0"/>
      <to sec="1289451656" usec="0"/>
    </slice>
    <from sec="1289451643" usec="0"/>
    <to sec="1289451656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
1201[label="166.26.43.167;s;39pkt 39fpkt", shape=diamond, color=yellow];
1491[label="98.13.182.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
2611[label="96.164.198.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
7888[label="98.13.182.162;d;1pkt 1fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.43.167:1602, *:17788}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1602: (47.619%)&lt;BR/&gt; 17788: (35.7143%)&lt;BR/&gt; 34984: (3.57143%)&lt;BR/&gt; 12196: (2.38095%)&lt;BR/&gt; 9023: (1.19048%)&gt;];
}
1201--1491[label="1;1pkt 1fpkt"];
1201--2611[label="1;1pkt 1fpkt"];
1201--7888[label="1;1pkt 1fpkt"];
1201--8664[label="0.025641;1pkt 1fpkt"];
1201--8688[label="0.025641;1pkt 1fpkt"];
1201--8743[label="0.025641;1pkt 1fpkt"];
1201--8765[label="0.025641;1pkt 1fpkt"];
1201--8790[label="0.025641;1pkt 1fpkt"];
1201--8811[label="0.025641;1pkt 1fpkt"];
1491--7888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="166.26.43.167" src_port="1602"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.47.62.176"/>
      <from sec="1289451645" usec="0"/>
      <to sec="1289451666" usec="0"/>
    </slice>
    <from sec="1289451645" usec="0"/>
    <to sec="1289451666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1478[label="42.146.68.226;d;2pkt 2fpkt", shape=diamond, color=yellow];
1494[label="158.196.18.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
7759[label="42.146.68.226;d;2pkt 2fpkt", shape=hexagon, color=black];
9698[label="158.196.18.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.18.48:80, 42.146.68.226:44846}[50%]&lt;BR/&gt;{128.7.96.65:53, 42.146.68.226:60393}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44846: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 60393: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&gt;];
}
1478--1494[label="1;1pkt 1fpkt"];
1478--7759[label="1;2pkt 2fpkt"];
1478--9698[label="1;1pkt 1fpkt"];
1494--7759[label="1;1pkt 1fpkt"];
1494--9698[label="1;1pkt 1fpkt"];
7759--9698[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.226" dst_port="60393" src_ip="128.7.96.65" src_port="53"/>
      <filter dst_ip="42.146.68.226" dst_port="44846" src_ip="158.196.18.48" src_port="80"/>
    </slice>
    <from sec="1289451642" usec="0"/>
    <to sec="1289451655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.47.62.99"/>
      <from sec="1289451653" usec="0"/>
      <to sec="1289451692" usec="0"/>
    </slice>
    <from sec="1289451653" usec="0"/>
    <to sec="1289451692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="182.7.44.74"/>
      <from sec="1289451654" usec="0"/>
      <to sec="1289451662" usec="0"/>
    </slice>
    <from sec="1289451654" usec="0"/>
    <to sec="1289451662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.146.64.54"/>
      <from sec="1289451675" usec="0"/>
      <to sec="1289451683" usec="0"/>
    </slice>
    <from sec="1289451675" usec="0"/>
    <to sec="1289451683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
1559[label="203.47.62.66;d;4pkt 4fpkt", shape=diamond, color=yellow];
1560[label="128.7.6.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
11638[label="128.7.6.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.185.154:80, 203.47.62.66:35773}[25%]&lt;BR/&gt;{128.7.6.174:80, 203.47.62.66:50967}[25%]&lt;BR/&gt;{128.7.170.250:80, 203.47.62.66:40579}[25%]&lt;BR/&gt;{128.7.170.250:80, 203.47.62.66:52975}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50967: (25%)&lt;BR/&gt; 52975: (8.33333%)&lt;BR/&gt; 40579: (8.33333%)&lt;BR/&gt; 35773: (8.33333%)&gt;];
}
1559--1560[label="1;1pkt 1fpkt"];
1559--11638[label="1;1pkt 1fpkt"];
1560--11638[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.66" dst_port="52975" src_ip="128.7.170.250" src_port="80"/>
      <filter dst_ip="203.47.62.66" dst_port="40579" src_ip="128.7.170.250" src_port="80"/>
      <filter dst_ip="203.47.62.66" dst_port="50967" src_ip="128.7.6.174" src_port="80"/>
      <filter dst_ip="203.47.62.66" dst_port="35773" src_ip="158.196.185.154" src_port="80"/>
    </slice>
    <from sec="1289451693" usec="0"/>
    <to sec="1289451846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.47.62.106"/>
      <from sec="1289451920" usec="0"/>
      <to sec="1289451962" usec="0"/>
    </slice>
    <from sec="1289451920" usec="0"/>
    <to sec="1289451962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
44[label="166.26.114.10;d;11pkt 11fpkt", shape=diamond, color=yellow];
1567[label="171.137.205.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.114.10:52795}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52795: (41.6667%)&lt;BR/&gt; 52310: (8.33333%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 60451: (4.16667%)&lt;BR/&gt; 60329: (4.16667%)&gt;];
}
44--1567[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.114.10" dst_port="52795"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
1626[label="128.19.149.72;d;908pkt 908fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.19.149.72:63489}[93.1718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63489: (46.5859%)&lt;BR/&gt; 443: (2.69824%)&lt;BR/&gt; 80: (0.660793%)&lt;BR/&gt; 57794: (0.110132%)&lt;BR/&gt; 50443: (0.110132%)&gt;];
}
1626--2161[label="0.00617284;1pkt 1fpkt"];
1626--2870[label="0.00649351;1pkt 1fpkt"];
1626--2993[label="0.00460829;1pkt 1fpkt"];
1626--3304[label="0.00425532;1pkt 1fpkt"];
1626--4313[label="0.00297177;2pkt 2fpkt"];
1626--4495[label="0.00735294;1pkt 1fpkt"];
1626--4508[label="0.00301205;1pkt 1fpkt"];
1626--8666[label="0.00110132;1pkt 1fpkt"];
1626--8688[label="0.00110132;1pkt 1fpkt"];
1626--8689[label="0.00440529;4pkt 4fpkt"];
1626--8745[label="0.00110132;1pkt 1fpkt"];
1626--8765[label="0.00110132;1pkt 1fpkt"];
1626--8766[label="0.00440529;4pkt 4fpkt"];
1626--8792[label="0.00110132;1pkt 1fpkt"];
1626--8811[label="0.00110132;1pkt 1fpkt"];
1626--8812[label="0.00440529;4pkt 4fpkt"];
1626--9854[label="0.0041841;1pkt 1fpkt"];
1626--12594[label="0.00275482;2pkt 2fpkt"];
1626--13188[label="0.0041841;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.149.72" dst_port="63489"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
226[label="210.33.109.97;d;14pkt 14fpkt", shape=diamond, color=yellow];
1635[label="201.18.102.55;s;14pkt 14fpkt", shape=diamond, color=yellow];
7779[label="210.33.109.97;d;14pkt 14fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.18.102.55:6732, 210.33.109.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6732: (50%)&lt;BR/&gt; 49935: (3.57143%)&lt;BR/&gt; 49928: (3.57143%)&lt;BR/&gt; 49913: (3.57143%)&lt;BR/&gt; 49900: (3.57143%)&gt;];
}
226--1635[label="1;14pkt 14fpkt"];
226--7779[label="1;14pkt 14fpkt"];
1635--7779[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.109.97" src_ip="201.18.102.55" src_port="6732"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
1654[label="128.19.145.121;s;4030pkt 4030fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.145.121:23655, *:*}[97.0223%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23655: (48.5112%)&lt;BR/&gt; 443: (1.30273%)&lt;BR/&gt; 49565: (0.136476%)&lt;BR/&gt; 7024: (0.136476%)&lt;BR/&gt; 54045: (0.0868486%)&gt;];
}
1654--8027[label="0.00340136;3pkt 3fpkt"];
1654--8666[label="0.000397931;1pkt 1fpkt"];
1654--8685[label="0.00376648;6pkt 6fpkt"];
1654--8689[label="0.000317965;1pkt 1fpkt"];
1654--8745[label="0.000397931;1pkt 1fpkt"];
1654--8762[label="0.00376648;6pkt 6fpkt"];
1654--8766[label="0.000317965;1pkt 1fpkt"];
1654--8792[label="0.000397931;1pkt 1fpkt"];
1654--8808[label="0.00376648;6pkt 6fpkt"];
1654--8812[label="0.000317965;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.145.121" src_port="23655"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
330[label="35.161.203.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1682[label="133.4.93.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.93.17:1321, 35.161.203.112:8043}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8043: (50%)&lt;BR/&gt; 1321: (50%)&gt;];
}
330--1682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="35.161.203.112" dst_port="8043" src_ip="133.4.93.17" src_port="1321"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
356[label="194.8.25.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
1690[label="166.26.18.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
9773[label="194.8.25.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.8.25.52:8000, 166.26.18.185:65237}[50%]&lt;BR/&gt;{39.186.244.96:0, 166.26.18.185:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65237: (37.5%)&lt;BR/&gt; 8000: (37.5%)&lt;BR/&gt; 0: (25%)&gt;];
}
356--1690[label="1;1pkt 1fpkt"];
356--9773[label="1;1pkt 1fpkt"];
1690--9773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.18.185" src_ip="39.186.244.96"/>
      <filter dst_ip="166.26.18.185" dst_port="65237" src_ip="194.8.25.52" src_port="8000"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
1837[label="9.120.159.190;d;4pkt 4fpkt", shape=diamond, color=yellow];
1838[label="128.19.194.151;s;94pkt 94fpkt", shape=diamond, color=yellow];
5717[label="211.203.9.100;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.194.151:19399, *:*}[65.9574%]&lt;BR/&gt;{128.19.194.151:33333, *:*}[31.9149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19399: (29.8077%)&lt;BR/&gt; 33333: (19.2308%)&lt;BR/&gt; 443: (1.44231%)&lt;BR/&gt; 64944: (0.961538%)&lt;BR/&gt; 51021: (0.961538%)&gt;];
}
1837--1838[label="1;4pkt 4fpkt"];
1838--3024[label="0.0212766;2pkt 2fpkt"];
1838--5717[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.194.151" src_port="19399"/>
      <filter src_ip="128.19.194.151" src_port="33333"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="27.44.195.10"/>
      <from sec="1289452037" usec="0"/>
      <to sec="1289452108" usec="0"/>
    </slice>
    <from sec="1289452037" usec="0"/>
    <to sec="1289452108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
1499[label="36.151.113.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
1901[label="166.26.114.44;d;42pkt 42fpkt", shape=diamond, color=yellow];
2247[label="46.76.89.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
2286[label="5.34.4.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
3633[label="27.15.1.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
4570[label="24.64.226.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
4831[label="202.56.157.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
4879[label="171.15.68.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
4955[label="27.79.89.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
12148[label="187.70.76.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.114.44:10990}[88.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10990: (45.098%)&lt;BR/&gt; 17788: (4.90196%)&lt;BR/&gt; 8800: (3.92157%)&lt;BR/&gt; 80: (2.94118%)&lt;BR/&gt; 60052: (1.96078%)&gt;];
}
1499--1901[label="1;1pkt 1fpkt"];
1901--2247[label="1;1pkt 1fpkt"];
1901--2286[label="1;1pkt 1fpkt"];
1901--3633[label="1;1pkt 1fpkt"];
1901--4570[label="1;1pkt 1fpkt"];
1901--4831[label="1;1pkt 1fpkt"];
1901--4879[label="1;1pkt 1fpkt"];
1901--4955[label="1;1pkt 1fpkt"];
1901--12148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.114.44" dst_port="10990"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
11165[label="133.4.145.142;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.145.142:*, 82.95.202.75:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1681: (2.38095%)&lt;BR/&gt; 1560: (2.38095%)&lt;BR/&gt; 1559: (2.38095%)&lt;BR/&gt; 1558: (2.38095%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="82.95.202.75" dst_port="80" src_ip="133.4.145.142"/>
    </slice>
    <from sec="1289451830" usec="0"/>
    <to sec="1289452345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.202.98.63"/>
      <from sec="1289452292" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452292" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
1975[label="128.1.188.96;d;1656pkt 1656fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.1.188.96:32179}[96.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32179: (48.3696%)&lt;BR/&gt; 443: (0.996377%)&lt;BR/&gt; 0: (0.966184%)&lt;BR/&gt; 80: (0.181159%)&lt;BR/&gt; 38545: (0.0905797%)&gt;];
}
1975--8664[label="0.00120773;2pkt 2fpkt"];
1975--8666[label="0.00181159;3pkt 3fpkt"];
1975--8688[label="0.000603865;1pkt 1fpkt"];
1975--8689[label="0.00301932;5pkt 5fpkt"];
1975--8743[label="0.00120773;2pkt 2fpkt"];
1975--8745[label="0.00181159;3pkt 3fpkt"];
1975--8765[label="0.000603865;1pkt 1fpkt"];
1975--8766[label="0.00301932;5pkt 5fpkt"];
1975--8790[label="0.00120773;2pkt 2fpkt"];
1975--8792[label="0.00181159;3pkt 3fpkt"];
1975--8811[label="0.000603865;1pkt 1fpkt"];
1975--8812[label="0.00301932;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.188.96" dst_port="32179"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
997[label="128.7.67.115;s;4pkt 4fpkt", shape=diamond, color=yellow];
2018[label="81.169.187.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.67.115:54306, 210.97.64.97:44583}[25%]&lt;BR/&gt;{128.7.67.115:54306, 192.20.249.123:10095}[25%]&lt;BR/&gt;{128.7.67.115:54306, 81.169.187.137:63741}[25%]&lt;BR/&gt;{128.7.67.115:54306, 81.169.180.191:12551}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54306: (50%)&lt;BR/&gt; 63741: (20%)&lt;BR/&gt; 44583: (10%)&lt;BR/&gt; 12551: (10%)&lt;BR/&gt; 10095: (10%)&gt;];
}
997--2018[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.169.180.191" dst_port="12551" src_ip="128.7.67.115" src_port="54306"/>
      <filter dst_ip="81.169.187.137" dst_port="63741" src_ip="128.7.67.115" src_port="54306"/>
      <filter dst_ip="192.20.249.123" dst_port="10095" src_ip="128.7.67.115" src_port="54306"/>
      <filter dst_ip="210.97.64.97" dst_port="44583" src_ip="128.7.67.115" src_port="54306"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.163.80.17"/>
      <from sec="1289452066" usec="0"/>
      <to sec="1289452247" usec="0"/>
    </slice>
    <from sec="1289452066" usec="0"/>
    <to sec="1289452247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
1489[label="198.185.118.215;s;34pkt 34fpkt", shape=diamond, color=yellow];
2245[label="166.26.114.33;d;171pkt 171fpkt", shape=diamond, color=yellow];
12225[label="198.185.118.215;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.185.118.215:80, 166.26.114.33:*}[25.1462%]&lt;BR/&gt;{2.34.244.45:80, 166.26.114.33:*}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3198%)&lt;BR/&gt; 10788: (6.2753%)&lt;BR/&gt; 1422: (0.607287%)&lt;BR/&gt; 1421: (0.607287%)&lt;BR/&gt; 1420: (0.607287%)&gt;];
}
1489--2245[label="1;34pkt 34fpkt"];
1489--12225[label="1;34pkt 34fpkt"];
2245--4256[label="0.0175439;3pkt 3fpkt"];
2245--12225[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.114.33" src_ip="198.185.118.215" src_port="80"/>
      <filter dst_ip="166.26.114.33" src_ip="2.34.244.45" src_port="80"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1981[label="210.33.155.238;s;687pkt 687fpkt", shape=diamond, color=yellow];
2327[label="81.174.96.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.155.238:13604, *:*}[89.5197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13604: (44.6948%)&lt;BR/&gt; 53160: (2.25291%)&lt;BR/&gt; 17788: (2.25291%)&lt;BR/&gt; 57351: (1.96221%)&lt;BR/&gt; 8000: (0.872093%)&gt;];
}
1981--2327[label="1;1pkt 1fpkt"];
1981--8688[label="0.0014556;1pkt 1fpkt"];
1981--8765[label="0.0014556;1pkt 1fpkt"];
1981--8811[label="0.0014556;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.33.155.238" src_port="13604"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
2371[label="3.135.201.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2372[label="158.196.17.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.17.96:55805, 3.135.201.8:61196}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61196: (50%)&lt;BR/&gt; 55805: (50%)&gt;];
}
2371--2372[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="3.135.201.8" dst_port="61196" src_ip="158.196.17.96" src_port="55805"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1408[label="81.171.154.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
2414[label="128.7.84.0;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.84.0:5845, 3.132.217.26:20002}[50%]&lt;BR/&gt;{128.7.84.0:50802, 81.171.154.63:39472}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50802: (33.3333%)&lt;BR/&gt; 39472: (33.3333%)&lt;BR/&gt; 20002: (16.6667%)&lt;BR/&gt; 5845: (16.6667%)&gt;];
}
1408--2414[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.171.154.63" dst_port="39472" src_ip="128.7.84.0" src_port="50802"/>
      <filter dst_ip="3.132.217.26" dst_port="20002" src_ip="128.7.84.0" src_port="5845"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
1548[label="214.90.71.215;s;60pkt 60fpkt", shape=diamond, color=yellow];
2430[label="133.4.209.115;d;60pkt 60fpkt", shape=diamond, color=yellow];
12221[label="214.90.71.215;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.90.71.215:80, 133.4.209.115:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56760: (0.837989%)&lt;BR/&gt; 56759: (0.837989%)&lt;BR/&gt; 56758: (0.837989%)&lt;BR/&gt; 56757: (0.837989%)&gt;];
}
1548--2430[label="1;60pkt 60fpkt"];
1548--12221[label="1;59pkt 59fpkt"];
2430--12221[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.209.115" src_ip="214.90.71.215" src_port="80"/>
    </slice>
    <from sec="1289451625" usec="0"/>
    <to sec="1289452415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
1411[label="133.4.140.233;d;14pkt 14fpkt", shape=diamond, color=yellow];
2473[label="213.17.31.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.65.104.138:80, 133.4.140.233:*}[42.8571%]&lt;BR/&gt;{214.217.87.99:80, 133.4.140.233:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42199: (6.66667%)&lt;BR/&gt; 47991: (3.33333%)&lt;BR/&gt; 47928: (3.33333%)&lt;BR/&gt; 46778: (3.33333%)&gt;];
}
1411--2473[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.140.233" src_ip="67.65.104.138" src_port="80"/>
      <filter dst_ip="133.4.140.233" src_ip="214.217.87.99" src_port="80"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289451691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1520[label="8.37.43.93;d;16pkt 16fpkt", shape=diamond, color=yellow];
2491[label="133.4.50.225;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.50.225:80, 8.37.43.93:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57802: (3.0303%)&lt;BR/&gt; 57294: (3.0303%)&lt;BR/&gt; 54935: (3.0303%)&lt;BR/&gt; 53480: (3.0303%)&gt;];
}
1520--2491[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="8.37.43.93" src_ip="133.4.50.225" src_port="80"/>
    </slice>
    <from sec="1289451658" usec="0"/>
    <to sec="1289451773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
2531[label="171.132.157.11;d;70pkt 70fpkt", shape=diamond, color=yellow];
2532[label="128.19.230.121;s;75pkt 75fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.230.121:*, 171.132.157.11:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49908: (0.689655%)&lt;BR/&gt; 49907: (0.689655%)&lt;BR/&gt; 49905: (0.689655%)&lt;BR/&gt; 49904: (0.689655%)&gt;];
}
2531--2532[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="171.132.157.11" dst_port="80" src_ip="128.19.230.121"/>
    </slice>
    <from sec="1289451686" usec="0"/>
    <to sec="1289451882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1564[label="32.34.71.216;d;2pkt 2fpkt", shape=diamond, color=yellow];
2560[label="128.7.140.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
9264[label="128.7.140.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12897[label="128.7.140.22;1pkt 1fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.140.22:80, 32.34.71.216:61190}[50%]&lt;BR/&gt;{158.196.40.116:80, 32.34.71.216:38456}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61190: (40%)&lt;BR/&gt; 38456: (10%)&gt;];
}
1564--2560[label="1;1pkt 1fpkt"];
1564--9264[label="1;1pkt 1fpkt"];
1564--12897[label="1;1pkt 1fpkt"];
2560--9264[label="1;1pkt 1fpkt"];
2560--12897[label="1;1pkt 1fpkt"];
9264--12897[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.216" dst_port="38456" src_ip="158.196.40.116" src_port="80"/>
      <filter dst_ip="32.34.71.216" dst_port="61190" src_ip="128.7.140.22" src_port="80"/>
    </slice>
    <from sec="1289451704" usec="0"/>
    <to sec="1289451834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.232.54.156"/>
      <from sec="1289451716" usec="0"/>
      <to sec="1289452047" usec="0"/>
    </slice>
    <from sec="1289451716" usec="0"/>
    <to sec="1289452047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2373[label="211.185.157.216;s;72pkt 72fpkt", shape=diamond, color=yellow];
2583[label="202.52.209.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
4991[label="202.52.209.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
5533[label="202.52.209.58;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.157.216:44793, *:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44793: (36.8421%)&lt;BR/&gt; 80: (11.1842%)&lt;BR/&gt; 54003: (1.31579%)&lt;BR/&gt; 53987: (1.31579%)&lt;BR/&gt; 53985: (1.31579%)&gt;];
}
2373--2583[label="1;1pkt 1fpkt"];
2373--4991[label="1;1pkt 1fpkt"];
2373--5533[label="1;2pkt 2fpkt"];
2373--7123[label="0.0357143;1pkt 1fpkt"];
2373--8666[label="0.0138889;1pkt 1fpkt"];
2373--8688[label="0.0138889;1pkt 1fpkt"];
2373--8689[label="0.0138889;1pkt 1fpkt"];
2373--8745[label="0.0138889;1pkt 1fpkt"];
2373--8765[label="0.0138889;1pkt 1fpkt"];
2373--8766[label="0.0138889;1pkt 1fpkt"];
2373--8792[label="0.0138889;1pkt 1fpkt"];
2373--8811[label="0.0138889;1pkt 1fpkt"];
2373--8812[label="0.0138889;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.157.216" src_port="44793"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
2591[label="42.146.68.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2592[label="158.196.151.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.151.13:80, 42.146.68.142:52073}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52073: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2591--2592[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.142" dst_port="52073" src_ip="158.196.151.13" src_port="80"/>
    </slice>
    <from sec="1289451727" usec="0"/>
    <to sec="1289451744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.52.81.104"/>
      <from sec="1289451739" usec="0"/>
      <to sec="1289451849" usec="0"/>
    </slice>
    <from sec="1289451739" usec="0"/>
    <to sec="1289451849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
2098[label="133.4.237.94;s;54pkt 54fpkt", shape=diamond, color=yellow];
2633[label="195.3.17.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.237.94:39652, *:*}[70.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39652: (34.5455%)&lt;BR/&gt; 80: (9.09091%)&lt;BR/&gt; 993: (6.36364%)&lt;BR/&gt; 55517: (1.81818%)&lt;BR/&gt; 64353: (0.909091%)&gt;];
}
2098--2633[label="1;1pkt 1fpkt"];
2098--2976[label="0.0185185;1pkt 1fpkt"];
2098--3863[label="0.0185185;1pkt 1fpkt"];
2098--8664[label="0.0740741;4pkt 4fpkt"];
2098--8688[label="0.0185185;1pkt 1fpkt"];
2098--8743[label="0.0740741;4pkt 4fpkt"];
2098--8765[label="0.0185185;1pkt 1fpkt"];
2098--8790[label="0.0740741;4pkt 4fpkt"];
2098--8811[label="0.0185185;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.237.94" src_port="39652"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
2654[label="42.146.64.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2655[label="128.7.182.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.182.150:80, 42.146.64.205:45243}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45243: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2654--2655[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.64.205" dst_port="45243" src_ip="128.7.182.150" src_port="80"/>
    </slice>
    <from sec="1289451770" usec="0"/>
    <to sec="1289451774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.37.160.248"/>
      <from sec="1289452132" usec="0"/>
      <to sec="1289452218" usec="0"/>
    </slice>
    <from sec="1289452132" usec="0"/>
    <to sec="1289452218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
115[label="203.147.254.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
2685[label="211.185.151.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
7681[label="203.147.254.16;d;1pkt 1fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.151.240:65522, 203.147.254.16:873}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65522: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
115--2685[label="1;1pkt 1fpkt"];
115--7681[label="1;1pkt 1fpkt"];
2685--7681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.147.254.16" dst_port="873" src_ip="211.185.151.240" src_port="65522"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
2719[label="128.19.145.121;d;970pkt 970fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.19.145.121:23655}[94.0206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23655: (47.0103%)&lt;BR/&gt; 443: (2.16495%)&lt;BR/&gt; 49565: (0.515464%)&lt;BR/&gt; 7024: (0.515464%)&lt;BR/&gt; 80: (0.257732%)&gt;];
}
2719--8666[label="0.00412371;4pkt 4fpkt"];
2719--8685[label="0.00103093;1pkt 1fpkt"];
2719--8689[label="0.00103093;1pkt 1fpkt"];
2719--8745[label="0.00412371;4pkt 4fpkt"];
2719--8762[label="0.00103093;1pkt 1fpkt"];
2719--8766[label="0.00103093;1pkt 1fpkt"];
2719--8792[label="0.00412371;4pkt 4fpkt"];
2719--8808[label="0.00103093;1pkt 1fpkt"];
2719--8812[label="0.00103093;1pkt 1fpkt"];
2719--12370[label="0.00961538;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.145.121" dst_port="23655"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
8986[label="128.19.152.8;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.152.8:*, 134.93.112.43:80}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 51173: (4.54545%)&lt;BR/&gt; 51171: (4.54545%)&lt;BR/&gt; 51169: (4.54545%)&lt;BR/&gt; 51165: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="134.93.112.43" dst_port="80" src_ip="128.19.152.8"/>
    </slice>
    <from sec="1289452382" usec="0"/>
    <to sec="1289452474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
2793[label="133.4.85.31;d;423pkt 423fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.85.31:7763}[96.4539%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7763: (48.227%)&lt;BR/&gt; 443: (0.945626%)&lt;BR/&gt; 80: (0.827423%)&lt;BR/&gt; 41113: (0.236407%)&lt;BR/&gt; 11577: (0.236407%)&gt;];
}
2793--8688[label="0.00236407;1pkt 1fpkt"];
2793--8765[label="0.00236407;1pkt 1fpkt"];
2793--8811[label="0.00236407;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.85.31" dst_port="7763"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.236.168"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.226.190"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452158" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
2906[label="128.19.212.41;s;393pkt 393fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.212.41:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2906--7112[label="0.0037037;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.212.41"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
2244[label="211.152.160.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
2927[label="210.42.200.79;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.52.244.56:0, 210.42.200.79:0}[33.3333%]&lt;BR/&gt;{211.244.56.198:0, 210.42.200.79:0}[33.3333%]&lt;BR/&gt;{211.152.160.238:0, 210.42.200.79:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2244--2927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.200.79" src_ip="211.152.160.238"/>
      <filter dst_ip="210.42.200.79" src_ip="211.244.56.198"/>
      <filter dst_ip="210.42.200.79" src_ip="211.52.244.56"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="146.82.98.26"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452326" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
1029[label="164.251.131.134;d;2pkt 2fpkt", shape=diamond, color=yellow];
2939[label="41.21.197.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
7733[label="164.251.131.134;d;2pkt 2fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.21.197.110:8008, 164.251.131.134:2051}[50%]&lt;BR/&gt;{197.65.16.249:58980, 164.251.131.134:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8008: (30%)&lt;BR/&gt; 2051: (30%)&lt;BR/&gt; 58980: (20%)&lt;BR/&gt; 445: (20%)&gt;];
}
1029--2939[label="1;1pkt 1fpkt"];
1029--7733[label="1;2pkt 2fpkt"];
2939--7733[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.131.134" dst_port="445" src_ip="197.65.16.249" src_port="58980"/>
      <filter dst_ip="164.251.131.134" dst_port="2051" src_ip="41.21.197.110" src_port="8008"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.251.96.105"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
2978[label="210.42.201.179;s;1021pkt 1021fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.42.201.179:*, *:53}[98.5309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.3144%)&lt;BR/&gt; 0: (1.27326%)&lt;BR/&gt; 62988: (0.146915%)&lt;BR/&gt; 64236: (0.0979432%)&lt;BR/&gt; 63352: (0.0979432%)&gt;];
}
2978--3620[label="0.00881489;9pkt 9fpkt"];
2978--3781[label="0.00587659;6pkt 6fpkt"];
2978--4280[label="0.00489716;5pkt 5fpkt"];
2978--5814[label="0.00131406;1pkt 1fpkt"];
2978--5887[label="0.00165837;1pkt 1fpkt"];
2978--5963[label="0.00173913;1pkt 1fpkt"];
2978--6007[label="0.00166667;1pkt 1fpkt"];
2978--6017[label="0.00509338;3pkt 3fpkt"];
2978--6135[label="0.00303951;2pkt 2fpkt"];
2978--7986[label="0.00705645;7pkt 7fpkt"];
2978--7998[label="0.00587659;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="210.42.201.179"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
2088[label="194.59.213.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
2986[label="133.4.140.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.140.132:1157, 194.59.213.57:8100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8100: (50%)&lt;BR/&gt; 1157: (50%)&gt;];
}
2088--2986[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.59.213.57" dst_port="8100" src_ip="133.4.140.132" src_port="1157"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.164.46.206"/>
      <from sec="1289451601" usec="0"/>
      <to sec="1289451929" usec="0"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289451929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3050[label="128.165.214.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
3051[label="194.168.46.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
8468[label="194.168.46.123;d;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.214.232:1140, 194.168.46.123:8236}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8236: (50%)&lt;BR/&gt; 1140: (50%)&gt;];
}
3050--3051[label="1;1pkt 1fpkt"];
3050--8468[label="1;1pkt 1fpkt"];
3051--8468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.168.46.123" dst_port="8236" src_ip="128.165.214.232" src_port="1140"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27714,3.53606,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
710[label="133.4.140.153;d;642pkt 642fpkt", shape=diamond, color=yellow];
3160[label="0.183.210.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
7073[label="7.53.223.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
8426[label="133.4.140.153;d;642pkt 642fpkt", shape=hexagon, color=black];
13879[label="25.27.221.158;1pkt 1fpkt", shape=invtriangle, color=brown];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.140.153:10887}[58.567%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10887: (29.2152%)&lt;BR/&gt; 8284: (9.94561%)&lt;BR/&gt; 11206: (2.83605%)&lt;BR/&gt; 0: (2.7972%)&lt;BR/&gt; 80: (1.3209%)&gt;];
}
710--3160[label="1;1pkt 1fpkt"];
710--7073[label="1;1pkt 1fpkt"];
710--8426[label="1;642pkt 642fpkt"];
710--8684[label="0.00311526;2pkt 2fpkt"];
710--8761[label="0.00311526;2pkt 2fpkt"];
710--8807[label="0.00311526;2pkt 2fpkt"];
710--13879[label="1;1pkt 1fpkt"];
3160--8426[label="1;1pkt 1fpkt"];
7073--8426[label="1;1pkt 1fpkt"];
8426--8684[label="0.00311526;2pkt 2fpkt"];
8426--8761[label="0.00311526;2pkt 2fpkt"];
8426--8807[label="0.00311526;2pkt 2fpkt"];
8426--13879[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.140.153" dst_port="10887"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
3260[label="25.176.160.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
3261[label="210.33.155.45;s;12pkt 12fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.155.45:*, *:80}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 16000: (14.2857%)&lt;BR/&gt; 49500: (7.14286%)&lt;BR/&gt; 49485: (7.14286%)&lt;BR/&gt; 5223: (7.14286%)&gt;];
}
3260--3261[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="210.33.155.45"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.179.110.185"/>
      <from sec="1289451979" usec="0"/>
      <to sec="1289452380" usec="0"/>
    </slice>
    <from sec="1289451979" usec="0"/>
    <to sec="1289452380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
12611[label="133.4.210.245;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.210.245:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60904: (1.25%)&lt;BR/&gt; 60902: (1.25%)&lt;BR/&gt; 60899: (1.25%)&lt;BR/&gt; 60897: (1.25%)&gt;];
}
</description>
    <slice>
      <filter dst_port="25" src_ip="133.4.210.245"/>
    </slice>
    <from sec="1289451883" usec="0"/>
    <to sec="1289452253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
3414[label="42.146.69.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
3415[label="128.7.102.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.102.32:443, 42.146.69.244:40918}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40918: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
3414--3415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.69.244" dst_port="40918" src_ip="128.7.102.32" src_port="443"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289451801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="203.47.62.177"/>
      <from sec="1289451800" usec="0"/>
      <to sec="1289451988" usec="0"/>
    </slice>
    <from sec="1289451800" usec="0"/>
    <to sec="1289451988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
3339[label="166.26.214.43;s;4pkt 4fpkt", shape=diamond, color=yellow];
3443[label="210.43.57.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.214.43:80, 213.179.52.81:49108}[25%]&lt;BR/&gt;{166.26.214.43:80, 210.43.57.153:56212}[25%]&lt;BR/&gt;{166.26.214.43:80, 43.65.232.155:49053}[25%]&lt;BR/&gt;{166.26.214.43:80, 42.146.68.165:37313}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56212: (20%)&lt;BR/&gt; 49108: (10%)&lt;BR/&gt; 49053: (10%)&lt;BR/&gt; 37313: (10%)&gt;];
}
3339--3443[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.165" dst_port="37313" src_ip="166.26.214.43" src_port="80"/>
      <filter dst_ip="43.65.232.155" dst_port="49053" src_ip="166.26.214.43" src_port="80"/>
      <filter dst_ip="210.43.57.153" dst_port="56212" src_ip="166.26.214.43" src_port="80"/>
      <filter dst_ip="213.179.52.81" dst_port="49108" src_ip="166.26.214.43" src_port="80"/>
    </slice>
    <from sec="1289451695" usec="0"/>
    <to sec="1289452039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
3234[label="133.4.207.219;s;125pkt 125fpkt", shape=diamond, color=yellow];
3513[label="35.204.132.255;d;54pkt 54fpkt", shape=diamond, color=yellow];
12293[label="133.4.207.219;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.207.219:*, 35.204.132.255:80}[42.1875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9967%)&lt;BR/&gt; 110: (4.72313%)&lt;BR/&gt; 25: (0.977199%)&lt;BR/&gt; 52115: (0.488599%)&lt;BR/&gt; 52114: (0.488599%)&gt;];
}
3234--3513[label="1;54pkt 54fpkt"];
3234--8664[label="0.056;7pkt 7fpkt"];
3234--8688[label="0.016;2pkt 2fpkt"];
3234--8689[label="0.008;1pkt 1fpkt"];
3234--8743[label="0.056;7pkt 7fpkt"];
3234--8765[label="0.016;2pkt 2fpkt"];
3234--8766[label="0.008;1pkt 1fpkt"];
3234--8790[label="0.056;7pkt 7fpkt"];
3234--8811[label="0.016;2pkt 2fpkt"];
3234--8812[label="0.008;1pkt 1fpkt"];
3234--12293[label="1;125pkt 125fpkt"];
3513--12293[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="35.204.132.255" dst_port="80" src_ip="133.4.207.219"/>
    </slice>
    <from sec="1289451616" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.230.200.51"/>
      <from sec="1289451856" usec="0"/>
      <to sec="1289451953" usec="0"/>
    </slice>
    <from sec="1289451856" usec="0"/>
    <to sec="1289451953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
3291[label="166.26.234.9;s;4pkt 4fpkt", shape=diamond, color=yellow];
3524[label="203.47.62.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
8014[label="203.47.62.187;d;1pkt 1fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.234.9:80, 42.146.68.87:57450}[25%]&lt;BR/&gt;{166.26.234.9:80, 40.16.33.129:58997}[25%]&lt;BR/&gt;{166.26.234.9:80, 43.65.134.140:56506}[25%]&lt;BR/&gt;{166.26.234.9:80, 203.47.62.187:40828}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40828: (25%)&lt;BR/&gt; 58997: (8.33333%)&lt;BR/&gt; 57450: (8.33333%)&lt;BR/&gt; 56506: (8.33333%)&gt;];
}
3291--3524[label="1;1pkt 1fpkt"];
3291--8014[label="1;1pkt 1fpkt"];
3524--8014[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.187" dst_port="40828" src_ip="166.26.234.9" src_port="80"/>
      <filter dst_ip="43.65.134.140" dst_port="56506" src_ip="166.26.234.9" src_port="80"/>
      <filter dst_ip="40.16.33.129" dst_port="58997" src_ip="166.26.234.9" src_port="80"/>
      <filter dst_ip="42.146.68.87" dst_port="57450" src_ip="166.26.234.9" src_port="80"/>
    </slice>
    <from sec="1289451638" usec="0"/>
    <to sec="1289451918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.7.75.81"/>
      <from sec="1289451876" usec="0"/>
      <to sec="1289451899" usec="0"/>
    </slice>
    <from sec="1289451876" usec="0"/>
    <to sec="1289451899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.247.224.156"/>
      <from sec="1289451877" usec="0"/>
      <to sec="1289451899" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
352[label="164.251.103.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
1128[label="164.251.103.173;d;2pkt 2fpkt", shape=diamond, color=yellow];
3577[label="202.72.36.48;s;3pkt 3fpkt", shape=diamond, color=yellow];
9700[label="202.72.36.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.128.137.160:0, 164.251.103.168:0}[25%]&lt;BR/&gt;{202.72.36.48:1935, 164.251.103.168:1160}[25%]&lt;BR/&gt;{202.72.36.48:1935, 164.251.103.173:1192}[25%]&lt;BR/&gt;{202.72.36.48:1935, 164.251.103.173:1207}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (44.4444%)&lt;BR/&gt; 1207: (16.6667%)&lt;BR/&gt; 1160: (16.6667%)&lt;BR/&gt; 1192: (11.1111%)&lt;BR/&gt; 0: (11.1111%)&gt;];
}
352--3577[label="0.5;1pkt 1fpkt"];
352--9700[label="0.5;1pkt 1fpkt"];
1128--3577[label="1;2pkt 2fpkt"];
1128--9700[label="0.5;1pkt 1fpkt"];
3577--9700[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.103.173" dst_port="1207" src_ip="202.72.36.48" src_port="1935"/>
      <filter dst_ip="164.251.103.173" dst_port="1192" src_ip="202.72.36.48" src_port="1935"/>
      <filter dst_ip="164.251.103.168" dst_port="1160" src_ip="202.72.36.48" src_port="1935"/>
      <filter dst_ip="164.251.103.168" src_ip="193.128.137.160"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1691[label="194.8.25.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3578[label="166.26.18.185;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.18.185:65237, 194.8.25.52:8000}[50%]&lt;BR/&gt;{166.26.18.185:0, 39.186.244.96:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65237: (33.3333%)&lt;BR/&gt; 8000: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
1691--3578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.186.244.96" src_ip="166.26.18.185"/>
      <filter dst_ip="194.8.25.52" dst_port="8000" src_ip="166.26.18.185" src_port="65237"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1043[label="8.181.206.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
3456[label="0.69.114.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
3587[label="210.33.155.122;s;52pkt 52fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.155.122:5041, *:5041}[32.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (55.5556%)&lt;BR/&gt; 80: (5.55556%)&lt;BR/&gt; 11106: (3.7037%)&lt;BR/&gt; 20680: (1.85185%)&lt;BR/&gt; 8620: (1.85185%)&gt;];
}
1043--3587[label="1;1pkt 1fpkt"];
3456--3587[label="1;1pkt 1fpkt"];
3587--8664[label="0.0192308;1pkt 1fpkt"];
3587--8743[label="0.0192308;1pkt 1fpkt"];
3587--8790[label="0.0192308;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5041" src_ip="210.33.155.122" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1768[label="133.4.50.203;d;16pkt 16fpkt", shape=diamond, color=yellow];
3596[label="177.54.91.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
8418[label="133.4.50.203;d;16pkt 16fpkt", shape=hexagon, color=black];
10947[label="197.87.26.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12111[label="197.87.24.208;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13683[label="197.87.26.131;1pkt 1fpkt", shape=invtriangle, color=brown];
14198[label="197.87.24.208;3pkt 3fpkt", shape=invtriangle, color=brown];
15146[label="197.87.24.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.87.26.209:25, 133.4.50.203:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.6744%)&lt;BR/&gt; 2748: (5.81395%)&lt;BR/&gt; 2882: (4.65116%)&lt;BR/&gt; 2744: (4.65116%)&lt;BR/&gt; 51179: (3.48837%)&gt;];
}
1768--3596[label="1;1pkt 1fpkt"];
1768--8418[label="1;16pkt 16fpkt"];
1768--8688[label="0.0625;1pkt 1fpkt"];
1768--8765[label="0.0625;1pkt 1fpkt"];
1768--8811[label="0.0625;1pkt 1fpkt"];
1768--10947[label="1;1pkt 1fpkt"];
1768--12111[label="0.666667;2pkt 2fpkt"];
1768--13683[label="1;1pkt 1fpkt"];
1768--14198[label="0.666667;2pkt 2fpkt"];
1768--15146[label="0.5;1pkt 1fpkt"];
3596--8418[label="1;1pkt 1fpkt"];
8418--8688[label="0.0625;1pkt 1fpkt"];
8418--8765[label="0.0625;1pkt 1fpkt"];
8418--8811[label="0.0625;1pkt 1fpkt"];
8418--10947[label="1;1pkt 1fpkt"];
8418--12111[label="0.666667;2pkt 2fpkt"];
8418--13683[label="1;1pkt 1fpkt"];
8418--14198[label="0.666667;2pkt 2fpkt"];
8418--15146[label="0.5;1pkt 1fpkt"];
10947--13683[label="1;1pkt 1fpkt"];
12111--14198[label="1;3pkt 3fpkt"];
12111--15146[label="1;2pkt 2fpkt"];
14198--15146[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.50.203" src_ip="197.87.26.209" src_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.42.225.38"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.7.34.222"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
12684[label="166.26.136.253;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.136.253:14861, *:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14861: (46.6667%)&lt;BR/&gt; 65442: (1.11111%)&lt;BR/&gt; 63186: (1.11111%)&lt;BR/&gt; 62441: (1.11111%)&lt;BR/&gt; 61315: (1.11111%)&gt;];
}
</description>
    <slice>
      <filter src_ip="166.26.136.253" src_port="14861"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="186.242.146.76"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451827" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
963[label="132.110.183.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
3689[label="81.171.119.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.110.183.159:46779, 81.171.119.188:65176}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65176: (50%)&lt;BR/&gt; 46779: (50%)&gt;];
}
963--3689[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.171.119.188" dst_port="65176" src_ip="132.110.183.159" src_port="46779"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
464[label="210.33.155.23;d;883pkt 883fpkt", shape=diamond, color=yellow];
3697[label="24.35.223.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
5274[label="2.44.55.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
7984[label="210.33.155.23;d;776pkt 776fpkt", shape=hexagon, color=black];
9330[label="184.57.43.27;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9745[label="200.224.88.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.33.155.23:8090}[44.6206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (28.7897%)&lt;BR/&gt; 8183: (5.99161%)&lt;BR/&gt; 28000: (4.6435%)&lt;BR/&gt; 80: (3.62493%)&lt;BR/&gt; 17573: (3.38526%)&gt;];
}
464--3697[label="1;1pkt 1fpkt"];
464--5274[label="1;1pkt 1fpkt"];
464--7984[label="1;776pkt 776fpkt"];
464--8684[label="0.0011325;1pkt 1fpkt"];
464--8761[label="0.0011325;1pkt 1fpkt"];
464--8807[label="0.0011325;1pkt 1fpkt"];
464--9330[label="1;7pkt 7fpkt"];
464--9745[label="1;1pkt 1fpkt"];
3697--7984[label="1;1pkt 1fpkt"];
5274--7984[label="1;1pkt 1fpkt"];
7984--8684[label="0.00128866;1pkt 1fpkt"];
7984--8761[label="0.00128866;1pkt 1fpkt"];
7984--8807[label="0.00128866;1pkt 1fpkt"];
7984--9330[label="0.714286;5pkt 5fpkt"];
7984--9745[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.155.23" dst_port="8090"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
2099[label="81.171.146.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
2177[label="81.170.19.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
3746[label="158.196.166.235;s;5pkt 5fpkt", shape=diamond, color=yellow];
8075[label="81.171.146.228;d;1pkt 1fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.166.235:5041, 198.90.48.61:5041}[20%]&lt;BR/&gt;{158.196.166.235:10345, 81.171.13.66:3474}[20%]&lt;BR/&gt;{158.196.166.235:10345, 81.171.146.228:54306}[20%]&lt;BR/&gt;{158.196.166.235:10345, 81.170.43.237:55516}[20%]&lt;BR/&gt;{158.196.166.235:10345, 81.170.19.246:10996}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10345: (43.75%)&lt;BR/&gt; 54306: (18.75%)&lt;BR/&gt; 10996: (12.5%)&lt;BR/&gt; 5041: (12.5%)&lt;BR/&gt; 55516: (6.25%)&gt;];
}
2099--3746[label="1;1pkt 1fpkt"];
2099--8075[label="1;1pkt 1fpkt"];
2177--3746[label="1;1pkt 1fpkt"];
3746--8075[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.170.19.246" dst_port="10996" src_ip="158.196.166.235" src_port="10345"/>
      <filter dst_ip="81.170.43.237" dst_port="55516" src_ip="158.196.166.235" src_port="10345"/>
      <filter dst_ip="81.171.146.228" dst_port="54306" src_ip="158.196.166.235" src_port="10345"/>
      <filter dst_ip="81.171.13.66" dst_port="3474" src_ip="158.196.166.235" src_port="10345"/>
      <filter dst_ip="198.90.48.61" dst_port="5041" src_ip="158.196.166.235" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
3754[label="211.185.243.47;d;264pkt 264fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.185.243.47:50041}[99.6212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50041: (49.8106%)&lt;BR/&gt; 35691: (0.378788%)&lt;BR/&gt; 1746: (0.378788%)&lt;BR/&gt; 65534: (0.189394%)&lt;BR/&gt; 65465: (0.189394%)&gt;];
}
3754--6484[label="0.00378788;1pkt 1fpkt"];
3754--8562[label="0.00378788;1pkt 1fpkt"];
3754--8650[label="0.00378788;1pkt 1fpkt"];
3754--8703[label="0.00378788;1pkt 1fpkt"];
3754--8780[label="0.00378788;1pkt 1fpkt"];
3754--8826[label="0.00378788;1pkt 1fpkt"];
3754--12405[label="0.00378788;1pkt 1fpkt"];
3754--14348[label="0.00378788;1pkt 1fpkt"];
3754--15217[label="0.00378788;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.243.47" dst_port="50041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.226.191"/>
      <from sec="1289451601" usec="0"/>
      <to sec="1289452422" usec="0"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.158.50.163"/>
      <from sec="1289451601" usec="0"/>
      <to sec="1289452379" usec="0"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
3075[label="210.33.154.58;s;2pkt 2fpkt", shape=diamond, color=yellow];
3833[label="8.32.65.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.154.58:49178, 8.32.65.163:58488}[50%]&lt;BR/&gt;{210.33.154.58:49229, 80.82.76.193:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58488: (33.3333%)&lt;BR/&gt; 49178: (33.3333%)&lt;BR/&gt; 49229: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
3075--3833[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.82.76.193" dst_port="80" src_ip="210.33.154.58" src_port="49229"/>
      <filter dst_ip="8.32.65.163" dst_port="58488" src_ip="210.33.154.58" src_port="49178"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
3933[label="84.167.46.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
3934[label="210.33.107.78;s;2pkt 2fpkt", shape=diamond, color=yellow];
8093[label="84.167.46.50;d;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.107.78:443, 84.167.46.50:50112}[50%]&lt;BR/&gt;{210.33.107.78:443, 212.238.234.144:59508}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 50112: (37.5%)&lt;BR/&gt; 59508: (12.5%)&gt;];
}
3933--3934[label="1;1pkt 1fpkt"];
3933--8093[label="1;1pkt 1fpkt"];
3934--8093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.238.234.144" dst_port="59508" src_ip="210.33.107.78" src_port="443"/>
      <filter dst_ip="84.167.46.50" dst_port="50112" src_ip="210.33.107.78" src_port="443"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="25.176.160.34"/>
      <from sec="1289451626" usec="0"/>
      <to sec="1289451967" usec="0"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.1.53.7"/>
      <from sec="1289451631" usec="0"/>
      <to sec="1289452299" usec="0"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289452299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.166.44.201"/>
      <from sec="1289452303" usec="0"/>
      <to sec="1289452381" usec="0"/>
    </slice>
    <from sec="1289452303" usec="0"/>
    <to sec="1289452381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
4057[label="42.146.69.213;d;12pkt 12fpkt", shape=diamond, color=yellow];
4058[label="128.7.200.111;s;14pkt 14fpkt", shape=diamond, color=yellow];
10683[label="128.7.200.111;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.200.111:80, 42.146.69.213:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62305: (3.65854%)&lt;BR/&gt; 55973: (3.65854%)&lt;BR/&gt; 53662: (3.65854%)&lt;BR/&gt; 53446: (3.65854%)&gt;];
}
4057--4058[label="1;12pkt 12fpkt"];
4057--10683[label="1;12pkt 12fpkt"];
4058--10683[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.69.213" src_ip="128.7.200.111" src_port="80"/>
    </slice>
    <from sec="1289451720" usec="0"/>
    <to sec="1289452477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
3455[label="42.146.70.0;d;8pkt 8fpkt", shape=diamond, color=yellow];
4061[label="128.7.112.74;s;11pkt 11fpkt", shape=diamond, color=yellow];
4252[label="32.34.71.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.112.74:80, 42.146.70.0:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62327: (5%)&lt;BR/&gt; 52885: (5%)&lt;BR/&gt; 52171: (5%)&lt;BR/&gt; 49965: (5%)&gt;];
}
3455--4061[label="1;8pkt 8fpkt"];
4061--4252[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.70.0" src_ip="128.7.112.74" src_port="80"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289452019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.111.182.197"/>
      <from sec="1289452140" usec="0"/>
      <to sec="1289452192" usec="0"/>
    </slice>
    <from sec="1289452140" usec="0"/>
    <to sec="1289452192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
3541[label="32.34.71.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
4156[label="128.7.1.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.1.68:80, 32.34.71.116:49022}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49022: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3541--4156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.116" dst_port="49022" src_ip="128.7.1.68" src_port="80"/>
    </slice>
    <from sec="1289451871" usec="0"/>
    <to sec="1289451895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
4169[label="96.14.126.137;d;193pkt 193fpkt", shape=diamond, color=yellow];
4170[label="132.110.141.174;s;193pkt 193fpkt", shape=diamond, color=yellow];
11647[label="132.110.141.174;192pkt 192fpkt", shape=pentagon, color=darkviolet];
13999[label="132.110.141.174;192pkt 192fpkt", shape=invtriangle, color=brown];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.110.141.174:*, 96.14.126.137:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51095: (0.25974%)&lt;BR/&gt; 51090: (0.25974%)&lt;BR/&gt; 51089: (0.25974%)&lt;BR/&gt; 51084: (0.25974%)&gt;];
}
4169--4170[label="1;193pkt 193fpkt"];
4169--11647[label="1;192pkt 192fpkt"];
4169--13999[label="1;192pkt 192fpkt"];
4170--11647[label="1;192pkt 192fpkt"];
4170--13999[label="1;192pkt 192fpkt"];
11647--13999[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_ip="96.14.126.137" dst_port="80" src_ip="132.110.141.174"/>
    </slice>
    <from sec="1289451883" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="117.136.97.57"/>
      <from sec="1289452100" usec="0"/>
      <to sec="1289452119" usec="0"/>
    </slice>
    <from sec="1289452100" usec="0"/>
    <to sec="1289452119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
2643[label="203.47.62.19;d;3pkt 3fpkt", shape=diamond, color=yellow];
4183[label="128.7.117.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.162.145:0, 203.47.62.19:0}[33.3333%]&lt;BR/&gt;{158.196.102.189:80, 203.47.62.19:57501}[33.3333%]&lt;BR/&gt;{128.7.117.195:80, 203.47.62.19:61839}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 61839: (25%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 57501: (12.5%)&gt;];
}
2643--4183[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.19" dst_port="61839" src_ip="128.7.117.195" src_port="80"/>
      <filter dst_ip="203.47.62.19" dst_port="57501" src_ip="158.196.102.189" src_port="80"/>
      <filter dst_ip="203.47.62.19" src_ip="128.7.162.145"/>
    </slice>
    <from sec="1289451894" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="80.120.51.128"/>
      <from sec="1289451895" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451895" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
3895[label="128.19.153.10;s;39pkt 39fpkt", shape=diamond, color=yellow];
4192[label="164.122.226.21;d;21pkt 21fpkt", shape=diamond, color=yellow];
9021[label="128.19.153.10;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.153.10:*, 164.122.226.21:80}[53.8462%]&lt;BR/&gt;{128.19.153.10:*, 164.122.226.39:80}[35.8974%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51145: (1.51515%)&lt;BR/&gt; 51144: (1.51515%)&lt;BR/&gt; 51142: (1.51515%)&lt;BR/&gt; 51140: (1.51515%)&gt;];
}
3895--4192[label="1;21pkt 21fpkt"];
3895--8664[label="0.025641;1pkt 1fpkt"];
3895--8688[label="0.025641;1pkt 1fpkt"];
3895--8743[label="0.025641;1pkt 1fpkt"];
3895--8765[label="0.025641;1pkt 1fpkt"];
3895--8790[label="0.025641;1pkt 1fpkt"];
3895--8811[label="0.025641;1pkt 1fpkt"];
3895--9021[label="1;39pkt 39fpkt"];
4192--9021[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="164.122.226.21" dst_port="80" src_ip="128.19.153.10"/>
      <filter dst_ip="164.122.226.39" dst_port="80" src_ip="128.19.153.10"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.150.77.242"/>
      <from sec="1289451908" usec="0"/>
      <to sec="1289451966" usec="0"/>
    </slice>
    <from sec="1289451908" usec="0"/>
    <to sec="1289451966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="19.36.194.14"/>
      <from sec="1289451927" usec="0"/>
      <to sec="1289451993" usec="0"/>
    </slice>
    <from sec="1289451927" usec="0"/>
    <to sec="1289451993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.34.71.158"/>
      <from sec="1289451936" usec="0"/>
      <to sec="1289452009" usec="0"/>
    </slice>
    <from sec="1289451936" usec="0"/>
    <to sec="1289452009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
103[label="166.26.115.40;d;47pkt 47fpkt", shape=diamond, color=yellow];
4258[label="32.176.21.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 166.26.115.40:13511}[51.0638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13511: (40.625%)&lt;BR/&gt; 17788: (25%)&lt;BR/&gt; 80: (6.25%)&lt;BR/&gt; 8400: (5.20833%)&lt;BR/&gt; 9431: (2.08333%)&gt;];
}
103--4258[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.115.40" dst_port="13511" src_port="17788"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.64.196.44"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452068" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.26.208.119"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452152" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2796[label="210.33.140.207;d;4pkt 4fpkt", shape=diamond, color=yellow];
4316[label="8.45.38.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
8162[label="210.33.140.207;d;4pkt 4fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.45.38.6:25446, 210.33.140.207:4171}[25%]&lt;BR/&gt;{9.40.39.21:48472, 210.33.140.207:4171}[25%]&lt;BR/&gt;{187.76.54.28:31032, 210.33.140.207:4171}[25%]&lt;BR/&gt;{9.97.32.105:21684, 210.33.140.207:4171}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4171: (50%)&lt;BR/&gt; 25446: (16.6667%)&lt;BR/&gt; 48472: (11.1111%)&lt;BR/&gt; 31032: (11.1111%)&lt;BR/&gt; 21684: (11.1111%)&gt;];
}
2796--4316[label="1;1pkt 1fpkt"];
2796--8162[label="1;4pkt 4fpkt"];
4316--8162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.140.207" dst_port="4171" src_ip="9.97.32.105" src_port="21684"/>
      <filter dst_ip="210.33.140.207" dst_port="4171" src_ip="187.76.54.28" src_port="31032"/>
      <filter dst_ip="210.33.140.207" dst_port="4171" src_ip="9.40.39.21" src_port="48472"/>
      <filter dst_ip="210.33.140.207" dst_port="4171" src_ip="8.45.38.6" src_port="25446"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.33.130.64"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
3761[label="198.238.240.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
4501[label="210.33.104.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.238.240.72:80, 210.33.104.97:1870}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1870: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3761--4501[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.104.97" dst_port="1870" src_ip="198.238.240.72" src_port="80"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
3832[label="210.33.154.58;d;2pkt 2fpkt", shape=diamond, color=yellow];
4557[label="8.32.65.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
11470[label="8.32.65.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.32.65.163:58488, 210.33.154.58:49178}[50%]&lt;BR/&gt;{80.82.76.193:80, 210.33.154.58:49229}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58488: (37.5%)&lt;BR/&gt; 49178: (37.5%)&lt;BR/&gt; 49229: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
3832--4557[label="1;1pkt 1fpkt"];
3832--11470[label="1;1pkt 1fpkt"];
4557--11470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.154.58" dst_port="49229" src_ip="80.82.76.193" src_port="80"/>
      <filter dst_ip="210.33.154.58" dst_port="49178" src_ip="8.32.65.163" src_port="58488"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
2462[label="210.225.10.112;s;18pkt 18fpkt", shape=diamond, color=yellow];
4762[label="128.19.1.170;d;38pkt 38fpkt", shape=diamond, color=yellow];
8304[label="128.19.1.170;d;37pkt 37fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.225.10.112:80, 128.19.1.170:*}[57.8947%]&lt;BR/&gt;{*:*, 128.19.1.170:1024}[34.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.4839%)&lt;BR/&gt; 1024: (13.4409%)&lt;BR/&gt; 62034: (1.6129%)&lt;BR/&gt; 62033: (1.6129%)&lt;BR/&gt; 62032: (1.6129%)&gt;];
}
2462--4762[label="1;18pkt 18fpkt"];
2462--8304[label="1;18pkt 18fpkt"];
4762--8304[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.1.170" dst_port="1024"/>
      <filter dst_ip="128.19.1.170" src_ip="210.225.10.112" src_port="80"/>
    </slice>
    <from sec="1289451624" usec="0"/>
    <to sec="1289452410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.14.138"/>
      <from sec="1289451664" usec="0"/>
      <to sec="1289452260" usec="0"/>
    </slice>
    <from sec="1289451664" usec="0"/>
    <to sec="1289452260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.52.0.212"/>
      <from sec="1289451811" usec="0"/>
      <to sec="1289452294" usec="0"/>
    </slice>
    <from sec="1289451811" usec="0"/>
    <to sec="1289452294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
4648[label="166.26.6.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
4925[label="55.199.15.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.152.181.55:8102, 166.26.6.139:60678}[50%]&lt;BR/&gt;{55.199.15.209:1483, 166.26.6.139:60678}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60678: (50%)&lt;BR/&gt; 1483: (33.3333%)&lt;BR/&gt; 8102: (16.6667%)&gt;];
}
4648--4925[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.6.139" dst_port="60678" src_ip="55.199.15.209" src_port="1483"/>
      <filter dst_ip="166.26.6.139" dst_port="60678" src_ip="117.152.181.55" src_port="8102"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
4753[label="85.20.28.181;d;25pkt 25fpkt", shape=diamond, color=yellow];
4942[label="146.0.10.242;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.198.153:52842, 85.20.28.181:*}[73.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52842: (33.9286%)&lt;BR/&gt; 64213: (8.92857%)&lt;BR/&gt; 21678: (8.92857%)&lt;BR/&gt; 35600: (3.57143%)&lt;BR/&gt; 23012: (3.57143%)&gt;];
}
4753--4942[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.20.28.181" src_ip="146.0.198.153" src_port="52842"/>
    </slice>
    <from sec="1289451621" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="177.75.156.4"/>
      <from sec="1289451901" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451901" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="49.99.76.122"/>
      <from sec="1289451902" usec="0"/>
      <to sec="1289452157" usec="0"/>
    </slice>
    <from sec="1289451902" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.232.242.15"/>
      <from sec="1289451907" usec="0"/>
      <to sec="1289451914" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="49.4.247.27"/>
      <from sec="1289451925" usec="0"/>
      <to sec="1289452140" usec="0"/>
    </slice>
    <from sec="1289451925" usec="0"/>
    <to sec="1289452140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.149.43.112"/>
      <from sec="1289451934" usec="0"/>
      <to sec="1289452089" usec="0"/>
    </slice>
    <from sec="1289451934" usec="0"/>
    <to sec="1289452089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.7.117.167"/>
      <from sec="1289451936" usec="0"/>
      <to sec="1289452057" usec="0"/>
    </slice>
    <from sec="1289451936" usec="0"/>
    <to sec="1289452057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1541[label="158.196.21.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
4989[label="32.34.71.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.21.80:80, 32.34.71.221:54060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54060: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1541--4989[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.221" dst_port="54060" src_ip="158.196.21.80" src_port="80"/>
    </slice>
    <from sec="1289451944" usec="0"/>
    <to sec="1289451952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
4051[label="133.4.166.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
4992[label="134.153.24.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
9027[label="134.153.24.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.24.11:80, 133.4.166.231:53457}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53457: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4051--4992[label="1;1pkt 1fpkt"];
4051--9027[label="1;1pkt 1fpkt"];
4992--9027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.166.231" dst_port="53457" src_ip="134.153.24.11" src_port="80"/>
    </slice>
    <from sec="1289451703" usec="0"/>
    <to sec="1289451959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.34.88.111"/>
      <from sec="1289451948" usec="0"/>
      <to sec="1289452334" usec="0"/>
    </slice>
    <from sec="1289451948" usec="0"/>
    <to sec="1289452334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="36.168.31.204"/>
      <from sec="1289451984" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451984" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
4830[label="133.4.9.196;s;47pkt 47fpkt", shape=diamond, color=yellow];
5065[label="218.237.174.141;d;41pkt 41fpkt", shape=diamond, color=yellow];
11948[label="133.4.9.196;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.9.196:80, 218.237.174.141:*}[83.6735%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41256: (1.10294%)&lt;BR/&gt; 41255: (1.10294%)&lt;BR/&gt; 41254: (1.10294%)&lt;BR/&gt; 41252: (1.10294%)&gt;];
}
4830--5065[label="1;41pkt 41fpkt"];
4830--11948[label="0.978723;46pkt 46fpkt"];
5065--11948[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="218.237.174.141" src_ip="133.4.9.196" src_port="80"/>
    </slice>
    <from sec="1289451676" usec="0"/>
    <to sec="1289452396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
5078[label="39.208.64.173;s;255pkt 255fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.208.64.173:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2161: (0.196078%)&lt;BR/&gt; 2159: (0.196078%)&lt;BR/&gt; 2158: (0.196078%)&lt;BR/&gt; 2157: (0.196078%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="39.208.64.173"/>
    </slice>
    <from sec="1289452016" usec="0"/>
    <to sec="1289452040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
5028[label="166.26.206.242;s;5pkt 5fpkt", shape=diamond, color=yellow];
5079[label="17.70.26.54;d;3pkt 3fpkt", shape=diamond, color=yellow];
12573[label="166.26.206.242;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.206.242:51099, 108.216.229.128:5223}[20%]&lt;BR/&gt;{166.26.206.242:51102, 17.70.26.54:143}[20%]&lt;BR/&gt;{166.26.206.242:51106, 17.70.26.54:143}[20%]&lt;BR/&gt;{166.26.206.242:51120, 17.70.26.54:143}[20%]&lt;BR/&gt;{166.26.206.242:51121, 17.70.26.54:143}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (42.3077%)&lt;BR/&gt; 51121: (11.5385%)&lt;BR/&gt; 51120: (11.5385%)&lt;BR/&gt; 51106: (11.5385%)&lt;BR/&gt; 51102: (7.69231%)&gt;];
}
5028--5079[label="1;3pkt 3fpkt"];
5028--12573[label="1;5pkt 5fpkt"];
5079--12573[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="17.70.26.54" dst_port="143" src_ip="166.26.206.242" src_port="51121"/>
      <filter dst_ip="17.70.26.54" dst_port="143" src_ip="166.26.206.242" src_port="51120"/>
      <filter dst_ip="17.70.26.54" dst_port="143" src_ip="166.26.206.242" src_port="51106"/>
      <filter dst_ip="17.70.26.54" dst_port="143" src_ip="166.26.206.242" src_port="51102"/>
      <filter dst_ip="108.216.229.128" dst_port="5223" src_ip="166.26.206.242" src_port="51099"/>
    </slice>
    <from sec="1289451678" usec="0"/>
    <to sec="1289452213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
5027[label="166.26.206.242;d;9pkt 9fpkt", shape=diamond, color=yellow];
5080[label="17.70.26.54;s;3pkt 3fpkt", shape=diamond, color=yellow];
9808[label="17.70.26.54;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.66.72.51:143, 166.26.206.242:*}[44.4444%]&lt;BR/&gt;{17.70.26.54:143, 166.26.206.242:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (46.875%)&lt;BR/&gt; 51121: (9.375%)&lt;BR/&gt; 51120: (9.375%)&lt;BR/&gt; 51106: (9.375%)&lt;BR/&gt; 51102: (6.25%)&gt;];
}
5027--5080[label="1;3pkt 3fpkt"];
5027--9808[label="1;4pkt 4fpkt"];
5080--9808[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.206.242" src_ip="17.70.26.54" src_port="143"/>
      <filter dst_ip="166.26.206.242" src_ip="170.66.72.51" src_port="143"/>
    </slice>
    <from sec="1289451683" usec="0"/>
    <to sec="1289452213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
5111[label="202.52.209.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
5112[label="133.4.184.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.52.209.5:80, 133.4.184.182:59067}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59067: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5111--5112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.184.182" dst_port="59067" src_ip="202.52.209.5" src_port="80"/>
    </slice>
    <from sec="1289452050" usec="0"/>
    <to sec="1289452060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.19.0.193"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452244" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
5210[label="202.104.252.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
5211[label="133.4.187.39;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.187.39:1217, 202.104.253.126:8294}[33.3333%]&lt;BR/&gt;{133.4.187.39:123, 213.179.62.146:123}[33.3333%]&lt;BR/&gt;{133.4.187.39:8277, 202.104.252.236:8292}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (25%)&lt;BR/&gt; 8277: (25%)&lt;BR/&gt; 123: (25%)&lt;BR/&gt; 8294: (12.5%)&lt;BR/&gt; 1217: (12.5%)&gt;];
}
5210--5211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.104.252.236" dst_port="8292" src_ip="133.4.187.39" src_port="8277"/>
      <filter dst_ip="213.179.62.146" dst_port="123" src_ip="133.4.187.39" src_port="123"/>
      <filter dst_ip="202.104.253.126" dst_port="8294" src_ip="133.4.187.39" src_port="1217"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
2169[label="194.168.46.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
5273[label="128.165.214.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.168.46.123:8236, 128.165.214.232:1140}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8236: (50%)&lt;BR/&gt; 1140: (50%)&gt;];
}
2169--5273[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.214.232" dst_port="1140" src_ip="194.168.46.123" src_port="8236"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="166.26.234.131"/>
      <from sec="1289451610" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.39795,3.60343,999,0 0 0 1 0 0 1 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
618[label="210.33.130.51;s;10737pkt 10737fpkt", shape=diamond, color=yellow];
8677[label="sp27745;1246pkt 1246fpkt", shape=egg, color=aquamarine];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.130.51:27745, *:*}[99.7686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27745: (49.8915%)&lt;BR/&gt; 16001: (1.27264%)&lt;BR/&gt; 6881: (0.755237%)&lt;BR/&gt; 51413: (0.333806%)&lt;BR/&gt; 35691: (0.304598%)&gt;];
}
618--791[label="0.0120482;1pkt 1fpkt"];
618--3890[label="0.00275482;1pkt 1fpkt"];
618--5479[label="0.333333;1pkt 1fpkt"];
618--7719[label="0.0204082;1pkt 1fpkt"];
618--8482[label="0.00275482;1pkt 1fpkt"];
618--8664[label="9.31359e-05;1pkt 1fpkt"];
618--8677[label="0.253612;316pkt 316fpkt"];
618--8688[label="0.000186272;2pkt 2fpkt"];
618--8743[label="9.31359e-05;1pkt 1fpkt"];
618--8765[label="0.000186272;2pkt 2fpkt"];
618--8790[label="9.31359e-05;1pkt 1fpkt"];
618--8811[label="0.000186272;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="210.33.130.51" src_port="27745"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
3721[label="133.4.19.12;d;19pkt 19fpkt", shape=diamond, color=yellow];
5483[label="0.229.92.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
7993[label="133.4.19.12;d;16pkt 16fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 133.4.19.12:1435}[52.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1435: (44.4444%)&lt;BR/&gt; 17788: (23.6111%)&lt;BR/&gt; 8800: (8.33333%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 12635: (4.16667%)&gt;];
}
3721--5483[label="1;1pkt 1fpkt"];
3721--7993[label="1;16pkt 16fpkt"];
5483--7993[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.19.12" dst_port="1435" src_port="17788"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.26.233.45"/>
      <from sec="1289451691" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451691" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.27.152.205"/>
      <from sec="1289452165" usec="0"/>
      <to sec="1289452388" usec="0"/>
    </slice>
    <from sec="1289452165" usec="0"/>
    <to sec="1289452388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
5062[label="166.26.144.68;d;12pkt 12fpkt", shape=diamond, color=yellow];
5591[label="37.227.131.35;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.144.68:25840}[46.1538%]&lt;BR/&gt;{*:*, 166.26.144.68:58135}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2857%)&lt;BR/&gt; 25840: (21.4286%)&lt;BR/&gt; 58135: (10.7143%)&lt;BR/&gt; 2620: (7.14286%)&lt;BR/&gt; 11113: (3.57143%)&gt;];
}
5062--5591[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.144.68" dst_port="58135"/>
      <filter dst_ip="166.26.144.68" dst_port="25840" src_port="80"/>
    </slice>
    <from sec="1289452003" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.26.196.78"/>
      <from sec="1289452004" usec="0"/>
      <to sec="1289452154" usec="0"/>
    </slice>
    <from sec="1289452004" usec="0"/>
    <to sec="1289452154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="52.112.131.145"/>
      <from sec="1289452037" usec="0"/>
      <to sec="1289452394" usec="0"/>
    </slice>
    <from sec="1289452037" usec="0"/>
    <to sec="1289452394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.180.69.13"/>
      <from sec="1289452069" usec="0"/>
      <to sec="1289452176" usec="0"/>
    </slice>
    <from sec="1289452069" usec="0"/>
    <to sec="1289452176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
5545[label="166.26.7.66;d;12pkt 12fpkt", shape=diamond, color=yellow];
5664[label="221.180.69.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
10022[label="221.180.69.68;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.180.69.68:80, 166.26.7.66:*}[41.6667%]&lt;BR/&gt;{221.180.69.13:80, 166.26.7.66:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4861: (5.26316%)&lt;BR/&gt; 4860: (5.26316%)&lt;BR/&gt; 4859: (5.26316%)&lt;BR/&gt; 4856: (5.26316%)&gt;];
}
5545--5664[label="1;3pkt 3fpkt"];
5545--10022[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.7.66" src_ip="221.180.69.68" src_port="80"/>
      <filter dst_ip="166.26.7.66" src_ip="221.180.69.13" src_port="80"/>
    </slice>
    <from sec="1289451923" usec="0"/>
    <to sec="1289452226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.1.10.102"/>
      <from sec="1289452085" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452085" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.10.125.14"/>
      <from sec="1289452086" usec="0"/>
      <to sec="1289452151" usec="0"/>
    </slice>
    <from sec="1289452086" usec="0"/>
    <to sec="1289452151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2514[label="203.47.62.114;d;2pkt 2fpkt", shape=diamond, color=yellow];
5741[label="158.196.123.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.123.18:80, 203.47.62.114:43526}[50%]&lt;BR/&gt;{128.7.169.72:80, 203.47.62.114:34017}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43526: (33.3333%)&lt;BR/&gt; 34017: (16.6667%)&gt;];
}
2514--5741[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.114" dst_port="34017" src_ip="128.7.169.72" src_port="80"/>
      <filter dst_ip="203.47.62.114" dst_port="43526" src_ip="158.196.123.18" src_port="80"/>
    </slice>
    <from sec="1289452123" usec="0"/>
    <to sec="1289452183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
5744[label="32.34.71.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
5745[label="128.7.251.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
10075[label="128.7.251.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13289[label="128.7.251.71;2pkt 2fpkt", shape=invtriangle, color=brown];
14733[label="128.7.251.71;2pkt 2fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.251.71:80, 42.146.64.36:34599}[50%]&lt;BR/&gt;{128.7.251.71:80, 32.34.71.146:38675}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38675: (31.25%)&lt;BR/&gt; 34599: (18.75%)&gt;];
}
5744--5745[label="1;1pkt 1fpkt"];
5744--10075[label="1;1pkt 1fpkt"];
5744--13289[label="1;1pkt 1fpkt"];
5744--14733[label="1;1pkt 1fpkt"];
5745--10075[label="1;1pkt 1fpkt"];
5745--13289[label="1;1pkt 1fpkt"];
5745--14733[label="1;1pkt 1fpkt"];
10075--13289[label="1;2pkt 2fpkt"];
10075--14733[label="1;2pkt 2fpkt"];
13289--14733[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.146" dst_port="38675" src_ip="128.7.251.71" src_port="80"/>
      <filter dst_ip="42.146.64.36" dst_port="34599" src_ip="128.7.251.71" src_port="80"/>
    </slice>
    <from sec="1289451756" usec="0"/>
    <to sec="1289452144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
5761[label="128.19.109.81;s;2046pkt 2046fpkt", shape=diamond, color=yellow];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.109.81:18693, *:*}[97.0674%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18693: (48.5337%)&lt;BR/&gt; 443: (1.46628%)&lt;BR/&gt; 33033: (0.0977517%)&lt;BR/&gt; 31672: (0.0733138%)&lt;BR/&gt; 64916: (0.0488759%)&gt;];
}
5761--8203[label="0.00139276;1pkt 1fpkt"];
5761--8666[label="0.000977517;2pkt 2fpkt"];
5761--8685[label="0.000627746;1pkt 1fpkt"];
5761--8745[label="0.000977517;2pkt 2fpkt"];
5761--8762[label="0.000627746;1pkt 1fpkt"];
5761--8792[label="0.000977517;2pkt 2fpkt"];
5761--8808[label="0.000627746;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.109.81" src_port="18693"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
2501[label="52.241.105.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
4260[label="133.4.84.181;s;190pkt 190fpkt", shape=diamond, color=yellow];
5123[label="186.218.254.74;d;53pkt 53fpkt", shape=diamond, color=yellow];
5790[label="210.42.229.81;s;217pkt 217fpkt", shape=diamond, color=yellow];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.42.229.81:25, *:*}[47.9115%]&lt;BR/&gt;{133.4.84.181:25, *:*}[37.5921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.4026%)&lt;BR/&gt; 0: (4.329%)&lt;BR/&gt; 443: (0.324675%)&lt;BR/&gt; 59295: (0.21645%)&lt;BR/&gt; 52374: (0.21645%)&gt;];
}
2501--5790[label="1;2pkt 2fpkt"];
4260--5123[label="0.981132;52pkt 52fpkt"];
5123--5790[label="0.0188679;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.42.229.81" src_port="25"/>
      <filter src_ip="133.4.84.181" src_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="211.185.157.5"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452416" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
5815[label="128.19.17.217;s;1447pkt 1447fpkt", shape=diamond, color=yellow];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.17.217:*, *:53}[95.9917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.8597%)&lt;BR/&gt; 25: (0.898411%)&lt;BR/&gt; 64175: (0.0691085%)&lt;BR/&gt; 60700: (0.0691085%)&lt;BR/&gt; 60607: (0.0691085%)&gt;];
}
5815--5905[label="0.00101626;1pkt 1fpkt"];
5815--7998[label="0.00276434;4pkt 4fpkt"];
5815--8676[label="0.000691085;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.19.17.217"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="180.118.79.248"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.182.139"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452248" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.251.128.88"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452088" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
457[label="133.4.96.36;d;41pkt 41fpkt", shape=diamond, color=yellow];
5883[label="8.32.235.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.96.36:24227}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24227: (48.8095%)&lt;BR/&gt; 24476: (2.38095%)&lt;BR/&gt; 22892: (2.38095%)&lt;BR/&gt; 62432: (1.19048%)&lt;BR/&gt; 57782: (1.19048%)&gt;];
}
457--5883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.96.36" dst_port="24227"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
5344[label="146.0.210.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
5996[label="25.181.168.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.210.83:49363, 25.181.168.19:34142}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49363: (50%)&lt;BR/&gt; 34142: (50%)&gt;];
}
5344--5996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.181.168.19" dst_port="34142" src_ip="146.0.210.83" src_port="49363"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.210.244"/>
      <from sec="1289451603" usec="0"/>
      <to sec="1289452413" usec="0"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.158.210.196"/>
      <from sec="1289451609" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.158.82.14"/>
      <from sec="1289451618" usec="0"/>
      <to sec="1289452392" usec="0"/>
    </slice>
    <from sec="1289451618" usec="0"/>
    <to sec="1289452392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.42.210.216"/>
      <from sec="1289451816" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289451816" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.102.142.9"/>
      <from sec="1289451908" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289451908" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.141.43.152"/>
      <from sec="1289451937" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289451937" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.113.21.225"/>
      <from sec="1289451991" usec="0"/>
      <to sec="1289452101" usec="0"/>
    </slice>
    <from sec="1289451991" usec="0"/>
    <to sec="1289452101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="80.119.40.161"/>
      <from sec="1289452010" usec="0"/>
      <to sec="1289452243" usec="0"/>
    </slice>
    <from sec="1289452010" usec="0"/>
    <to sec="1289452243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.152.34.131"/>
      <from sec="1289452024" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
4582[label="133.4.19.162;s;144pkt 144fpkt", shape=diamond, color=yellow];
5531[label="67.66.185.134;d;12pkt 12fpkt", shape=diamond, color=yellow];
5595[label="80.70.32.191;d;40pkt 40fpkt", shape=diamond, color=yellow];
6313[label="133.4.182.240;s;11pkt 11fpkt", shape=diamond, color=yellow];
12551[label="133.4.182.240;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.19.162:*, 80.70.32.191:80}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.7097%)&lt;BR/&gt; 443: (2.30415%)&lt;BR/&gt; 1863: (1.38249%)&lt;BR/&gt; 55861: (0.691244%)&lt;BR/&gt; 55696: (0.691244%)&gt;];
}
4582--5330[label="0.00980392;1pkt 1fpkt"];
4582--5531[label="0.0833333;1pkt 1fpkt"];
4582--5595[label="1;40pkt 40fpkt"];
4582--6204[label="0.125;2pkt 2fpkt"];
4582--7853[label="0.0135135;1pkt 1fpkt"];
4582--8664[label="0.0347222;5pkt 5fpkt"];
4582--8688[label="0.125;18pkt 18fpkt"];
4582--8689[label="0.00694444;1pkt 1fpkt"];
4582--8743[label="0.0347222;5pkt 5fpkt"];
4582--8765[label="0.125;18pkt 18fpkt"];
4582--8766[label="0.00694444;1pkt 1fpkt"];
4582--8790[label="0.0347222;5pkt 5fpkt"];
4582--8811[label="0.125;18pkt 18fpkt"];
4582--8812[label="0.00694444;1pkt 1fpkt"];
5531--6313[label="1;11pkt 11fpkt"];
5531--12551[label="1;10pkt 10fpkt"];
6313--12551[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="80.70.32.191" dst_port="80" src_ip="133.4.19.162"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.155.155.5"/>
      <from sec="1289452075" usec="0"/>
      <to sec="1289452317" usec="0"/>
    </slice>
    <from sec="1289452075" usec="0"/>
    <to sec="1289452317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
4832[label="128.165.210.109;s;9pkt 9fpkt", shape=diamond, color=yellow];
6330[label="117.136.97.15;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.210.109:*, 117.143.93.135:80}[70%]&lt;BR/&gt;{*:*, 117.136.97.15:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4449: (9.09091%)&lt;BR/&gt; 52526: (4.54545%)&lt;BR/&gt; 4462: (4.54545%)&lt;BR/&gt; 4460: (4.54545%)&gt;];
}
4832--6330[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="117.136.97.15" dst_port="80"/>
      <filter dst_ip="117.143.93.135" dst_port="80" src_ip="128.165.210.109"/>
    </slice>
    <from sec="1289452286" usec="0"/>
    <to sec="1289452398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1993[label="166.26.234.110;s;174pkt 174fpkt", shape=diamond, color=yellow];
6338[label="161.6.138.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.234.110:25, *:*}[99.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7143%)&lt;BR/&gt; 54355: (0.571429%)&lt;BR/&gt; 0: (0.571429%)&lt;BR/&gt; 65376: (0.285714%)&lt;BR/&gt; 64196: (0.285714%)&gt;];
}
1993--6338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="166.26.234.110" src_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.179.194.188"/>
      <from sec="1289452135" usec="0"/>
      <to sec="1289452183" usec="0"/>
    </slice>
    <from sec="1289452135" usec="0"/>
    <to sec="1289452183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.118.113.78"/>
      <from sec="1289452142" usec="0"/>
      <to sec="1289452148" usec="0"/>
    </slice>
    <from sec="1289452142" usec="0"/>
    <to sec="1289452148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.78.34.36"/>
      <from sec="1289452152" usec="0"/>
      <to sec="1289452227" usec="0"/>
    </slice>
    <from sec="1289452152" usec="0"/>
    <to sec="1289452227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
6405[label="42.146.68.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
6406[label="158.196.23.113;s;2pkt 2fpkt", shape=diamond, color=yellow];
8381[label="42.146.68.55;d;2pkt 2fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.23.113:80, 42.146.68.55:51006}[50%]&lt;BR/&gt;{158.196.23.113:80, 42.146.68.55:55761}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55761: (25%)&lt;BR/&gt; 51006: (25%)&gt;];
}
6405--6406[label="1;2pkt 2fpkt"];
6405--8381[label="1;2pkt 2fpkt"];
6406--8381[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.55" dst_port="55761" src_ip="158.196.23.113" src_port="80"/>
      <filter dst_ip="42.146.68.55" dst_port="51006" src_ip="158.196.23.113" src_port="80"/>
    </slice>
    <from sec="1289452155" usec="0"/>
    <to sec="1289452170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="42.97.78.136"/>
      <from sec="1289452158" usec="0"/>
      <to sec="1289452261" usec="0"/>
    </slice>
    <from sec="1289452158" usec="0"/>
    <to sec="1289452261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
6410[label="42.146.67.148;d;3pkt 3fpkt", shape=diamond, color=yellow];
6411[label="128.7.255.16;s;3pkt 3fpkt", shape=diamond, color=yellow];
8555[label="42.146.67.148;d;3pkt 3fpkt", shape=hexagon, color=black];
9146[label="128.7.255.16;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12846[label="128.7.255.16;3pkt 3fpkt", shape=invtriangle, color=brown];
14544[label="128.7.255.16;4pkt 4fpkt", shape=invhouse, color=bisque];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.255.16:80, 42.146.67.178:42063}[25%]&lt;BR/&gt;{128.7.255.16:80, 42.146.67.148:43423}[25%]&lt;BR/&gt;{128.7.255.16:80, 42.146.67.148:54619}[25%]&lt;BR/&gt;{128.7.255.16:80, 42.146.67.148:59970}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59970: (15%)&lt;BR/&gt; 54619: (15%)&lt;BR/&gt; 43423: (15%)&lt;BR/&gt; 42063: (5%)&gt;];
}
6410--6411[label="1;3pkt 3fpkt"];
6410--8555[label="1;3pkt 3fpkt"];
6410--9146[label="1;3pkt 3fpkt"];
6410--12846[label="1;3pkt 3fpkt"];
6410--14544[label="1;3pkt 3fpkt"];
6411--8555[label="1;3pkt 3fpkt"];
6411--9146[label="1;3pkt 3fpkt"];
6411--12846[label="1;3pkt 3fpkt"];
6411--14544[label="1;3pkt 3fpkt"];
8555--9146[label="1;3pkt 3fpkt"];
8555--12846[label="1;3pkt 3fpkt"];
8555--14544[label="1;3pkt 3fpkt"];
9146--12846[label="1;3pkt 3fpkt"];
9146--14544[label="1;4pkt 4fpkt"];
12846--14544[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.148" dst_port="59970" src_ip="128.7.255.16" src_port="80"/>
      <filter dst_ip="42.146.67.148" dst_port="54619" src_ip="128.7.255.16" src_port="80"/>
      <filter dst_ip="42.146.67.148" dst_port="43423" src_ip="128.7.255.16" src_port="80"/>
      <filter dst_ip="42.146.67.178" dst_port="42063" src_ip="128.7.255.16" src_port="80"/>
    </slice>
    <from sec="1289452158" usec="0"/>
    <to sec="1289452182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
6397[label="211.185.146.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
6433[label="32.34.71.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
8383[label="32.34.71.193;d;1pkt 1fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.146.231:80, 32.34.71.193:33877}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33877: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6397--6433[label="1;1pkt 1fpkt"];
6397--8383[label="1;1pkt 1fpkt"];
6433--8383[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.193" dst_port="33877" src_ip="211.185.146.231" src_port="80"/>
    </slice>
    <from sec="1289452146" usec="0"/>
    <to sec="1289452234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.158.15.51"/>
      <from sec="1289452409" usec="0"/>
      <to sec="1289452419" usec="0"/>
    </slice>
    <from sec="1289452409" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="7.218.59.149"/>
      <from sec="1289452180" usec="0"/>
      <to sec="1289452390" usec="0"/>
    </slice>
    <from sec="1289452180" usec="0"/>
    <to sec="1289452390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="15.100.235.77"/>
      <from sec="1289452191" usec="0"/>
      <to sec="1289452400" usec="0"/>
    </slice>
    <from sec="1289452191" usec="0"/>
    <to sec="1289452400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.106.71.184"/>
      <from sec="1289452217" usec="0"/>
      <to sec="1289452230" usec="0"/>
    </slice>
    <from sec="1289452217" usec="0"/>
    <to sec="1289452230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.4.58.200"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.7.34.217"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452397" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
6607[label="133.4.112.19;s;163pkt 163fpkt", shape=diamond, color=yellow];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.112.19:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36062: (2.45399%)&lt;BR/&gt; 22933: (2.45399%)&lt;BR/&gt; 1202: (2.45399%)&lt;BR/&gt; 54826: (2.14724%)&lt;BR/&gt; 12036: (2.14724%)&gt;];
}
6607--8027[label="0.00613497;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.112.19"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.7.17.140"/>
      <from sec="1289451606" usec="0"/>
      <to sec="1289452398" usec="0"/>
    </slice>
    <from sec="1289451606" usec="0"/>
    <to sec="1289452398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
6752[label="164.251.25.141;d;432pkt 432fpkt", shape=diamond, color=yellow];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 164.251.25.141:20129}[68.5185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (81.25%)&lt;BR/&gt; 0: (1.62037%)&lt;BR/&gt; 80: (1.50463%)&lt;BR/&gt; 5051: (0.694444%)&lt;BR/&gt; 59335: (0.231481%)&gt;];
}
6752--8684[label="0.00231481;1pkt 1fpkt"];
6752--8761[label="0.00231481;1pkt 1fpkt"];
6752--8807[label="0.00231481;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.25.141" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1289451622" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.76.225.57"/>
      <from sec="1289452083" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289452083" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.251.43.110"/>
      <from sec="1289452095" usec="0"/>
      <to sec="1289452426" usec="0"/>
    </slice>
    <from sec="1289452095" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.243.31.62"/>
      <from sec="1289452101" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289452101" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.88.105.19"/>
      <from sec="1289452112" usec="0"/>
      <to sec="1289452409" usec="0"/>
    </slice>
    <from sec="1289452112" usec="0"/>
    <to sec="1289452409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="57.27.163.146"/>
      <from sec="1289452117" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452117" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.146.68.129"/>
      <from sec="1289452138" usec="0"/>
      <to sec="1289452336" usec="0"/>
    </slice>
    <from sec="1289452138" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.172.40.252"/>
      <from sec="1289452184" usec="0"/>
      <to sec="1289452426" usec="0"/>
    </slice>
    <from sec="1289452184" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.39.160.255"/>
      <from sec="1289452194" usec="0"/>
      <to sec="1289452412" usec="0"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.37.83.87"/>
      <from sec="1289452204" usec="0"/>
      <to sec="1289452333" usec="0"/>
    </slice>
    <from sec="1289452204" usec="0"/>
    <to sec="1289452333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="62.207.22.179"/>
      <from sec="1289452209" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452209" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.218.124.14"/>
      <from sec="1289452256" usec="0"/>
      <to sec="1289452336" usec="0"/>
    </slice>
    <from sec="1289452256" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.68.180.104"/>
      <from sec="1289452278" usec="0"/>
      <to sec="1289452311" usec="0"/>
    </slice>
    <from sec="1289452278" usec="0"/>
    <to sec="1289452311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.210.133.57"/>
      <from sec="1289452292" usec="0"/>
      <to sec="1289452327" usec="0"/>
    </slice>
    <from sec="1289452292" usec="0"/>
    <to sec="1289452327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
7014[label="42.146.68.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
7015[label="158.196.178.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.178.121:80, 42.146.68.130:64915}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64915: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7014--7015[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.130" dst_port="64915" src_ip="158.196.178.121" src_port="80"/>
    </slice>
    <from sec="1289452299" usec="0"/>
    <to sec="1289452319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.28.121.206"/>
      <from sec="1289452305" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289452305" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
7029[label="42.146.68.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
7030[label="128.7.18.27;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.18.27:80, 42.146.68.49:57715}[50%]&lt;BR/&gt;{128.7.18.27:80, 42.146.67.160:35388}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57715: (33.3333%)&lt;BR/&gt; 35388: (16.6667%)&gt;];
}
7029--7030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.160" dst_port="35388" src_ip="128.7.18.27" src_port="80"/>
      <filter dst_ip="42.146.68.49" dst_port="57715" src_ip="128.7.18.27" src_port="80"/>
    </slice>
    <from sec="1289452315" usec="0"/>
    <to sec="1289452331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
2740[label="214.167.168.228;d;195pkt 195fpkt", shape=diamond, color=yellow];
3058[label="133.4.134.228;s;309pkt 309fpkt", shape=diamond, color=yellow];
7047[label="133.4.134.230;s;84pkt 84fpkt", shape=diamond, color=yellow];
8572[label="214.167.168.228;d;195pkt 195fpkt", shape=hexagon, color=black];
12437[label="133.4.134.230;92pkt 92fpkt", shape=pentagon, color=darkviolet];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.134.228:*, 214.167.168.228:80}[27.6808%]&lt;BR/&gt;{133.4.134.228:*, 213.111.96.149:80}[23.192%]&lt;BR/&gt;{133.4.134.230:*, 214.167.168.228:80}[22.6933%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56242: (0.228571%)&lt;BR/&gt; 56237: (0.228571%)&lt;BR/&gt; 56236: (0.228571%)&lt;BR/&gt; 56235: (0.228571%)&gt;];
}
2740--3058[label="0.569231;111pkt 111fpkt"];
2740--7047[label="1;84pkt 84fpkt"];
2740--8572[label="1;195pkt 195fpkt"];
2740--8664[label="0.0615385;12pkt 12fpkt"];
2740--8688[label="0.0461538;9pkt 9fpkt"];
2740--8743[label="0.0615385;12pkt 12fpkt"];
2740--8765[label="0.0461538;9pkt 9fpkt"];
2740--8790[label="0.0615385;12pkt 12fpkt"];
2740--8811[label="0.0461538;9pkt 9fpkt"];
2740--12437[label="0.913043;84pkt 84fpkt"];
3058--8572[label="0.569231;111pkt 111fpkt"];
3058--8664[label="0.0453074;14pkt 14fpkt"];
3058--8688[label="0.0550162;17pkt 17fpkt"];
3058--8743[label="0.0453074;14pkt 14fpkt"];
3058--8765[label="0.0550162;17pkt 17fpkt"];
3058--8790[label="0.0453074;14pkt 14fpkt"];
3058--8811[label="0.0550162;17pkt 17fpkt"];
7047--8572[label="1;84pkt 84fpkt"];
7047--8664[label="0.0714286;6pkt 6fpkt"];
7047--8688[label="0.0595238;5pkt 5fpkt"];
7047--8743[label="0.0714286;6pkt 6fpkt"];
7047--8765[label="0.0595238;5pkt 5fpkt"];
7047--8790[label="0.0714286;6pkt 6fpkt"];
7047--8811[label="0.0595238;5pkt 5fpkt"];
7047--12437[label="1;84pkt 84fpkt"];
8572--8664[label="0.0615385;12pkt 12fpkt"];
8572--8688[label="0.0461538;9pkt 9fpkt"];
8572--8743[label="0.0615385;12pkt 12fpkt"];
8572--8765[label="0.0461538;9pkt 9fpkt"];
8572--8790[label="0.0615385;12pkt 12fpkt"];
8572--8811[label="0.0461538;9pkt 9fpkt"];
8572--12437[label="0.913043;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="214.167.168.228" dst_port="80" src_ip="133.4.134.228"/>
      <filter dst_ip="213.111.96.149" dst_port="80" src_ip="133.4.134.228"/>
      <filter dst_ip="214.167.168.228" dst_port="80" src_ip="133.4.134.230"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.177.32.40"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452390" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="146.82.98.26"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
6558[label="133.4.195.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
7104[label="35.40.49.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.40.49.197:1935, 133.4.195.7:49869}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49869: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
6558--7104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.195.7" dst_port="49869" src_ip="35.40.49.197" src_port="1935"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.102.28"/>
      <from sec="1289451601" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.141.26.12"/>
      <from sec="1289451602" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.4.210.247"/>
      <from sec="1289451603" usec="0"/>
      <to sec="1289452423" usec="0"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
6908[label="81.171.186.114;d;2pkt 2fpkt", shape=diamond, color=yellow];
7180[label="128.7.141.73;s;86pkt 86fpkt", shape=diamond, color=yellow];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.141.73:47548, *:*}[25.5814%]&lt;BR/&gt;{128.7.141.73:0, *:0}[24.4186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 47548: (12.5%)&lt;BR/&gt; 55560: (2.27273%)&lt;BR/&gt; 39123: (2.27273%)&lt;BR/&gt; 4041: (2.27273%)&gt;];
}
6908--7180[label="1;2pkt 2fpkt"];
7180--8664[label="0.0116279;1pkt 1fpkt"];
7180--8743[label="0.0116279;1pkt 1fpkt"];
7180--8790[label="0.0116279;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.7.141.73" src_port="47548"/>
      <filter src_ip="128.7.141.73"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
7198[label="133.4.99.117;s;110pkt 110fpkt", shape=diamond, color=yellow];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.99.117:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7198--7998[label="0.00909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.99.117"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
7008[label="200.61.26.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
7235[label="133.4.90.167;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.90.167:14520, *:*}[66.6667%]&lt;BR/&gt;{133.4.90.167:*, *:8000}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14520: (35%)&lt;BR/&gt; 8000: (15%)&lt;BR/&gt; 50058: (10%)&lt;BR/&gt; 49479: (5%)&lt;BR/&gt; 25607: (5%)&gt;];
}
7008--7235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.90.167" src_port="14520"/>
      <filter dst_port="8000" src_ip="133.4.90.167"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
7361[label="211.185.177.160;d;339pkt 339fpkt", shape=diamond, color=yellow];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8090, 211.185.177.160:43803}[28.3186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43803: (49.5575%)&lt;BR/&gt; 8090: (14.1593%)&lt;BR/&gt; 10100: (1.62242%)&lt;BR/&gt; 10102: (1.17994%)&lt;BR/&gt; 10101: (0.884956%)&gt;];
}
7361--8562[label="0.00294985;1pkt 1fpkt"];
7361--8650[label="0.00294985;1pkt 1fpkt"];
7361--8703[label="0.00294985;1pkt 1fpkt"];
7361--8780[label="0.00294985;1pkt 1fpkt"];
7361--8826[label="0.00294985;1pkt 1fpkt"];
7361--12405[label="0.00294985;1pkt 1fpkt"];
7361--14348[label="0.00294985;1pkt 1fpkt"];
7361--15217[label="0.00294985;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.177.160" dst_port="43803" src_port="8090"/>
    </slice>
    <from sec="1289451770" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
7369[label="210.42.210.212;s;179pkt 179fpkt", shape=diamond, color=yellow];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.42.210.212:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="210.42.210.212"/>
    </slice>
    <from sec="1289451816" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716444,3.58199,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
7007[label="128.200.56.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
7381[label="210.33.107.73;s;26pkt 26fpkt", shape=diamond, color=yellow];
13300[label="210.33.107.73;31pkt 31fpkt", shape=invtriangle, color=brown];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.107.73:25, 184.118.88.126:*}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35579: (2.58621%)&lt;BR/&gt; 62959: (1.72414%)&lt;BR/&gt; 44330: (1.72414%)&lt;BR/&gt; 40259: (1.72414%)&gt;];
}
7007--7381[label="1;1pkt 1fpkt"];
7007--13300[label="1;1pkt 1fpkt"];
7381--13300[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="184.118.88.126" src_ip="210.33.107.73" src_port="25"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.57.89.58"/>
      <from sec="1289451982" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451982" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.57.89.58"/>
      <from sec="1289451982" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289451982" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.54.50.96"/>
      <from sec="1289452004" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452004" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
5755[label="32.34.71.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
7418[label="128.165.240.5;s;15pkt 15fpkt", shape=diamond, color=yellow];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.240.5:80, 43.65.150.140:*}[73.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52710: (6.25%)&lt;BR/&gt; 54138: (3.125%)&lt;BR/&gt; 53580: (3.125%)&lt;BR/&gt; 47042: (3.125%)&gt;];
}
5755--7418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.65.150.140" src_ip="128.165.240.5" src_port="80"/>
    </slice>
    <from sec="1289452077" usec="0"/>
    <to sec="1289452408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.26.134.233"/>
      <from sec="1289452115" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="80.50.147.20"/>
      <from sec="1289452115" usec="0"/>
      <to sec="1289452278" usec="0"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="57.27.163.146"/>
      <from sec="1289452117" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452117" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.144.114.241"/>
      <from sec="1289452140" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452140" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.233.97.192"/>
      <from sec="1289452186" usec="0"/>
      <to sec="1289452367" usec="0"/>
    </slice>
    <from sec="1289452186" usec="0"/>
    <to sec="1289452367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="117.145.138.96"/>
      <from sec="1289452195" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.43.218.207"/>
      <from sec="1289452257" usec="0"/>
      <to sec="1289452418" usec="0"/>
    </slice>
    <from sec="1289452257" usec="0"/>
    <to sec="1289452418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="63.51.81.137"/>
      <from sec="1289452266" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452266" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="3.179.106.133"/>
      <from sec="1289452278" usec="0"/>
      <to sec="1289452389" usec="0"/>
    </slice>
    <from sec="1289452278" usec="0"/>
    <to sec="1289452389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.153.172.80"/>
      <from sec="1289452283" usec="0"/>
      <to sec="1289452408" usec="0"/>
    </slice>
    <from sec="1289452283" usec="0"/>
    <to sec="1289452408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
6821[label="210.33.107.73;d;19pkt 19fpkt", shape=diamond, color=yellow];
7537[label="128.200.56.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.33.107.73:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35579: (5%)&lt;BR/&gt; 62959: (2.5%)&lt;BR/&gt; 52262: (2.5%)&lt;BR/&gt; 44330: (2.5%)&gt;];
}
6821--7537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.107.73" dst_port="25"/>
    </slice>
    <from sec="1289451922" usec="0"/>
    <to sec="1289452346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.72.20.199"/>
      <from sec="1289452294" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452294" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
7011[label="201.58.1.162;d;95pkt 95fpkt", shape=diamond, color=yellow];
7540[label="133.4.153.37;s;184pkt 184fpkt", shape=diamond, color=yellow];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.153.37:*, 201.58.1.162:80}[99.4565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8208%)&lt;BR/&gt; 60787: (0.358423%)&lt;BR/&gt; 60681: (0.358423%)&lt;BR/&gt; 60434: (0.358423%)&lt;BR/&gt; 60410: (0.358423%)&gt;];
}
7011--7540[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="201.58.1.162" dst_port="80" src_ip="133.4.153.37"/>
    </slice>
    <from sec="1289452296" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
6859[label="42.146.64.53;d;3pkt 3fpkt", shape=diamond, color=yellow];
7541[label="158.196.22.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.22.26:80, 42.146.64.53:51413}[33.3333%]&lt;BR/&gt;{128.7.96.65:53, 42.146.64.53:42156}[33.3333%]&lt;BR/&gt;{128.7.96.65:53, 42.146.64.53:64275}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51413: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 64275: (12.5%)&lt;BR/&gt; 42156: (12.5%)&gt;];
}
6859--7541[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.64.53" dst_port="64275" src_ip="128.7.96.65" src_port="53"/>
      <filter dst_ip="42.146.64.53" dst_port="42156" src_ip="128.7.96.65" src_port="53"/>
      <filter dst_ip="42.146.64.53" dst_port="51413" src_ip="158.196.22.26" src_port="80"/>
    </slice>
    <from sec="1289452089" usec="0"/>
    <to sec="1289452313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
7574[label="44.0.93.63;s;1047pkt 1047fpkt", shape=diamond, color=yellow];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.0.93.63:22, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 51760: (0.095511%)&lt;BR/&gt; 27633: (0.095511%)&lt;BR/&gt; 24315: (0.095511%)&lt;BR/&gt; 16414: (0.095511%)&gt;];
}
</description>
    <slice>
      <filter src_ip="44.0.93.63" src_port="22"/>
    </slice>
    <from sec="1289452328" usec="0"/>
    <to sec="1289452345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.177.128.158"/>
      <from sec="1289452334" usec="0"/>
      <to sec="1289452377" usec="0"/>
    </slice>
    <from sec="1289452334" usec="0"/>
    <to sec="1289452377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.34.71.218"/>
      <from sec="1289452349" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452349" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.33.155.25"/>
      <from sec="1289452353" usec="0"/>
      <to sec="1289452427" usec="0"/>
    </slice>
    <from sec="1289452353" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.146.69.54"/>
      <from sec="1289452358" usec="0"/>
      <to sec="1289452361" usec="0"/>
    </slice>
    <from sec="1289452358" usec="0"/>
    <to sec="1289452361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
7552[label="133.4.182.4;d;15pkt 15fpkt", shape=diamond, color=yellow];
7605[label="15.74.202.40;s;8pkt 8fpkt", shape=diamond, color=yellow];
9569[label="15.74.202.40;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.74.202.40:80, 133.4.182.4:*}[53.3333%]&lt;BR/&gt;{15.74.204.74:80, 133.4.182.4:*}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57154: (5%)&lt;BR/&gt; 57148: (5%)&lt;BR/&gt; 57147: (5%)&lt;BR/&gt; 57146: (5%)&gt;];
}
7552--7605[label="1;8pkt 8fpkt"];
7552--9569[label="1;7pkt 7fpkt"];
7605--9569[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.182.4" src_ip="15.74.202.40" src_port="80"/>
      <filter dst_ip="133.4.182.4" src_ip="15.74.204.74" src_port="80"/>
    </slice>
    <from sec="1289452306" usec="0"/>
    <to sec="1289452480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.120.82.75"/>
      <from sec="1289452371" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452371" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="187.102.153.93"/>
      <from sec="1289452373" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452373" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="2.3.113.75"/>
      <from sec="1289452376" usec="0"/>
      <to sec="1289452425" usec="0"/>
    </slice>
    <from sec="1289452376" usec="0"/>
    <to sec="1289452425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
2537[label="203.47.62.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
7626[label="158.196.100.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.100.162:80, 203.47.62.82:48578}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48578: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2537--7626[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.82" dst_port="48578" src_ip="158.196.100.162" src_port="80"/>
    </slice>
    <from sec="1289452379" usec="0"/>
    <to sec="1289452390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.15.196.98"/>
      <from sec="1289452387" usec="0"/>
      <to sec="1289452404" usec="0"/>
    </slice>
    <from sec="1289452387" usec="0"/>
    <to sec="1289452404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.21.196.54"/>
      <from sec="1289452392" usec="0"/>
      <to sec="1289452415" usec="0"/>
    </slice>
    <from sec="1289452392" usec="0"/>
    <to sec="1289452415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.33.154.86"/>
      <from sec="1289452393" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
4818[label="211.185.157.162;s;58pkt 58fpkt", shape=diamond, color=yellow];
7640[label="14.8.48.224;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.157.162:2000, *:*}[51.7241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (25.8065%)&lt;BR/&gt; 6594: (4.03226%)&lt;BR/&gt; 23078: (3.22581%)&lt;BR/&gt; 22284: (2.41935%)&lt;BR/&gt; 29242: (1.6129%)&gt;];
}
4818--7640[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.157.162" src_port="2000"/>
    </slice>
    <from sec="1289451659" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.8.161.14"/>
      <from sec="1289452396" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452396" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="98.185.156.52"/>
      <from sec="1289452398" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452398" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
7652[label="42.146.70.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
7653[label="128.7.240.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
9391[label="128.7.240.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.240.30:80, 42.146.70.72:37505}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37505: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7652--7653[label="1;1pkt 1fpkt"];
7652--9391[label="1;1pkt 1fpkt"];
7653--9391[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.70.72" dst_port="37505" src_ip="128.7.240.30" src_port="80"/>
    </slice>
    <from sec="1289451914" usec="0"/>
    <to sec="1289452456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
7654[label="202.52.209.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
7655[label="133.4.176.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.52.209.0:80, 133.4.176.24:60489}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60489: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7654--7655[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.176.24" dst_port="60489" src_ip="202.52.209.0" src_port="80"/>
    </slice>
    <from sec="1289452400" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.55.232.229"/>
      <from sec="1289452404" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452404" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="27.77.71.175"/>
      <from sec="1289452407" usec="0"/>
      <to sec="1289452419" usec="0"/>
    </slice>
    <from sec="1289452407" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="27.77.71.175"/>
      <from sec="1289452407" usec="0"/>
      <to sec="1289452419" usec="0"/>
    </slice>
    <from sec="1289452407" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="24.55.169.145"/>
      <from sec="1289452408" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452408" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.234.81.106"/>
      <from sec="1289452410" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452410" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.145.151.77"/>
      <from sec="1289452412" usec="0"/>
      <to sec="1289452420" usec="0"/>
    </slice>
    <from sec="1289452412" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="81.31.10.55"/>
      <from sec="1289452416" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452416" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.33.105.133"/>
      <from sec="1289452418" usec="0"/>
      <to sec="1289452428" usec="0"/>
    </slice>
    <from sec="1289452418" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1289451600" usec="0"/>
      <to sec="1289451708" usec="0"/>
    </slice>
    <from sec="47869096" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
664[label="164.251.90.175;d;84pkt 84fpkt", shape=diamond, color=yellow];
3474[label="201.192.52.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
4191[label="5.131.181.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
5014[label="84.188.4.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
5632[label="0.234.186.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
7536[label="4.133.72.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
7715[label="164.251.90.175;d;28pkt 28fpkt", shape=hexagon, color=black];
8853[label="80.95.72.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9419[label="0.231.151.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9581[label="80.67.71.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10458[label="84.148.150.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 164.251.90.175:5041}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (53.3058%)&lt;BR/&gt; 80: (7.85124%)&lt;BR/&gt; 8000: (3.71901%)&lt;BR/&gt; 4000: (1.23967%)&lt;BR/&gt; 64867: (0.826446%)&gt;];
}
664--3474[label="1;1pkt 1fpkt"];
664--4191[label="1;1pkt 1fpkt"];
664--5014[label="1;1pkt 1fpkt"];
664--5632[label="1;1pkt 1fpkt"];
664--7536[label="1;1pkt 1fpkt"];
664--7715[label="1;28pkt 28fpkt"];
664--8684[label="0.0238095;2pkt 2fpkt"];
664--8761[label="0.0238095;2pkt 2fpkt"];
664--8807[label="0.0238095;2pkt 2fpkt"];
664--8853[label="1;1pkt 1fpkt"];
664--9419[label="1;1pkt 1fpkt"];
664--9581[label="1;1pkt 1fpkt"];
664--10458[label="1;1pkt 1fpkt"];
7715--8684[label="0.0357143;1pkt 1fpkt"];
7715--8761[label="0.0357143;1pkt 1fpkt"];
7715--8807[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.90.175" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
249[label="58.196.103.134;d;3pkt 3fpkt", shape=diamond, color=yellow];
2709[label="146.0.138.204;s;19pkt 19fpkt", shape=diamond, color=yellow];
7780[label="58.196.103.134;d;2pkt 2fpkt", shape=hexagon, color=black];
12059[label="146.0.138.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14175[label="146.0.138.204;2pkt 2fpkt", shape=invtriangle, color=brown];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.138.204:16001, *:*}[52.381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16001: (22.2222%)&lt;BR/&gt; 9900: (16.6667%)&lt;BR/&gt; 58255: (9.25926%)&lt;BR/&gt; 58343: (5.55556%)&lt;BR/&gt; 5041: (5.55556%)&gt;];
}
249--2709[label="0.666667;2pkt 2fpkt"];
249--7780[label="1;2pkt 2fpkt"];
249--12059[label="1;1pkt 1fpkt"];
249--14175[label="0.5;1pkt 1fpkt"];
2709--7780[label="1;2pkt 2fpkt"];
2709--8688[label="0.0526316;1pkt 1fpkt"];
2709--8765[label="0.0526316;1pkt 1fpkt"];
2709--8811[label="0.0526316;1pkt 1fpkt"];
2709--12059[label="1;1pkt 1fpkt"];
2709--14175[label="0.5;1pkt 1fpkt"];
7780--12059[label="1;1pkt 1fpkt"];
7780--14175[label="0.5;1pkt 1fpkt"];
12059--14175[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="146.0.138.204" src_port="16001"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
348[label="166.26.115.42;s;113pkt 113fpkt", shape=diamond, color=yellow];
349[label="3.4.152.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="171.78.215.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1185[label="18.57.56.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1225[label="17.118.190.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
1226[label="17.52.72.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
1329[label="17.46.142.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
2181[label="36.124.147.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
2196[label="17.90.188.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
2197[label="16.174.50.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
2234[label="34.164.170.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
2273[label="34.185.57.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
2877[label="16.18.75.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
3054[label="16.20.173.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
3147[label="34.77.108.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
3163[label="43.22.150.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
3189[label="17.38.28.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
3859[label="171.73.32.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
4550[label="17.165.107.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
4632[label="34.94.104.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
4686[label="36.26.167.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
4816[label="16.119.219.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
4842[label="44.104.23.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
4854[label="98.52.213.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
5932[label="36.165.146.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
5953[label="35.4.149.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
5983[label="36.14.209.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
6734[label="171.81.162.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
7785[label="3.4.152.195;d;1pkt 1fpkt", shape=hexagon, color=black];
7855[label="17.90.188.193;d;1pkt 1fpkt", shape=hexagon, color=black];
7950[label="36.124.147.24;d;1pkt 1fpkt", shape=hexagon, color=black];
8254[label="36.14.209.3;d;1pkt 1fpkt", shape=hexagon, color=black];
8279[label="36.26.167.203;d;1pkt 1fpkt", shape=hexagon, color=black];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.115.42:1088, *:17788}[22.1239%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1088: (48.2759%)&lt;BR/&gt; 17788: (8.62069%)&lt;BR/&gt; 8800: (2.06897%)&lt;BR/&gt; 80: (1.72414%)&lt;BR/&gt; 54714: (1.03448%)&gt;];
}
348--349[label="1;1pkt 1fpkt"];
348--1092[label="1;1pkt 1fpkt"];
348--1185[label="1;1pkt 1fpkt"];
348--1225[label="1;1pkt 1fpkt"];
348--1226[label="1;1pkt 1fpkt"];
348--1329[label="1;1pkt 1fpkt"];
348--2181[label="1;1pkt 1fpkt"];
348--2196[label="1;1pkt 1fpkt"];
348--2197[label="1;1pkt 1fpkt"];
348--2234[label="1;1pkt 1fpkt"];
348--2273[label="1;1pkt 1fpkt"];
348--2877[label="1;1pkt 1fpkt"];
348--3054[label="1;1pkt 1fpkt"];
348--3147[label="1;1pkt 1fpkt"];
348--3163[label="1;1pkt 1fpkt"];
348--3189[label="1;1pkt 1fpkt"];
348--3859[label="1;1pkt 1fpkt"];
348--4550[label="1;1pkt 1fpkt"];
348--4632[label="1;1pkt 1fpkt"];
348--4686[label="1;1pkt 1fpkt"];
348--4816[label="1;1pkt 1fpkt"];
348--4842[label="1;1pkt 1fpkt"];
348--4854[label="1;1pkt 1fpkt"];
348--5932[label="1;1pkt 1fpkt"];
348--5953[label="1;1pkt 1fpkt"];
348--5983[label="1;1pkt 1fpkt"];
348--6734[label="1;1pkt 1fpkt"];
348--7785[label="1;1pkt 1fpkt"];
348--7855[label="1;1pkt 1fpkt"];
348--7950[label="1;1pkt 1fpkt"];
348--8254[label="1;1pkt 1fpkt"];
348--8279[label="1;1pkt 1fpkt"];
349--7785[label="1;1pkt 1fpkt"];
2181--7950[label="1;1pkt 1fpkt"];
2196--7855[label="1;1pkt 1fpkt"];
4686--8279[label="1;1pkt 1fpkt"];
5983--8254[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="166.26.115.42" src_port="1088"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
357[label="50.10.164.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
7786[label="50.10.164.161;d;1pkt 1fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.145.110:80, 50.10.164.161:42806}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42806: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
357--7786[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="50.10.164.161" dst_port="42806" src_ip="211.185.145.110" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
715[label="211.185.154.191;d;574pkt 574fpkt", shape=diamond, color=yellow];
4396[label="128.19.212.41;d;147pkt 147fpkt", shape=diamond, color=yellow];
7813[label="211.185.154.191;d;557pkt 557fpkt", shape=hexagon, color=black];
11977[label="80.9.12.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14141[label="80.9.12.198;1pkt 1fpkt", shape=invtriangle, color=brown];
15117[label="80.9.12.198;2pkt 2fpkt", shape=invhouse, color=bisque];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 211.185.154.191:0}[79.3343%]&lt;BR/&gt;{*:0, 128.19.212.41:0}[20.3883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.688%)&lt;BR/&gt; 60616: (0.0780031%)&lt;BR/&gt; 49212: (0.0780031%)&lt;BR/&gt; 6000: (0.0780031%)&lt;BR/&gt; 4899: (0.0780031%)&gt;];
}
715--6484[label="0.00174216;1pkt 1fpkt"];
715--7813[label="1;557pkt 557fpkt"];
715--8562[label="0.00174216;1pkt 1fpkt"];
715--8650[label="0.00174216;1pkt 1fpkt"];
715--8703[label="0.00174216;1pkt 1fpkt"];
715--8780[label="0.00174216;1pkt 1fpkt"];
715--8826[label="0.00174216;1pkt 1fpkt"];
715--9547[label="0.002457;1pkt 1fpkt"];
715--11977[label="1;1pkt 1fpkt"];
715--12405[label="0.00174216;1pkt 1fpkt"];
715--12522[label="0.0243902;1pkt 1fpkt"];
715--14141[label="1;1pkt 1fpkt"];
715--14348[label="0.00174216;1pkt 1fpkt"];
715--15117[label="0.5;1pkt 1fpkt"];
715--15217[label="0.00174216;1pkt 1fpkt"];
4396--15117[label="0.5;1pkt 1fpkt"];
7813--8562[label="0.00179533;1pkt 1fpkt"];
7813--8650[label="0.00179533;1pkt 1fpkt"];
7813--8703[label="0.00179533;1pkt 1fpkt"];
7813--8780[label="0.00179533;1pkt 1fpkt"];
7813--8826[label="0.00179533;1pkt 1fpkt"];
7813--9547[label="0.002457;1pkt 1fpkt"];
7813--11977[label="1;1pkt 1fpkt"];
7813--12405[label="0.00179533;1pkt 1fpkt"];
7813--12522[label="0.0243902;1pkt 1fpkt"];
7813--14141[label="1;1pkt 1fpkt"];
7813--14348[label="0.00179533;1pkt 1fpkt"];
7813--15117[label="0.5;1pkt 1fpkt"];
7813--15217[label="0.00179533;1pkt 1fpkt"];
11977--14141[label="1;1pkt 1fpkt"];
11977--15117[label="1;1pkt 1fpkt"];
14141--15117[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.154.191"/>
      <filter dst_ip="128.19.212.41"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
802[label="62.43.22.210;d;8pkt 8fpkt", shape=diamond, color=yellow];
2228[label="133.4.155.80;s;70pkt 70fpkt", shape=diamond, color=yellow];
3265[label="213.179.183.8;d;2pkt 2fpkt", shape=diamond, color=yellow];
3649[label="133.4.224.161;s;40pkt 40fpkt", shape=diamond, color=yellow];
4833[label="201.82.132.132;d;42pkt 42fpkt", shape=diamond, color=yellow];
4953[label="44.24.87.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
6782[label="133.4.155.84;s;45pkt 45fpkt", shape=diamond, color=yellow];
7820[label="62.43.22.210;d;8pkt 8fpkt", shape=hexagon, color=black];
11506[label="133.4.224.165;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.155.80:80, *:*}[40.2299%]&lt;BR/&gt;{133.4.155.84:80, *:*}[25.2874%]&lt;BR/&gt;{*:80, 201.82.132.132:*}[24.1379%]&lt;BR/&gt;{133.4.224.161:80, *:*}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33888: (0.663717%)&lt;BR/&gt; 33887: (0.663717%)&lt;BR/&gt; 33885: (0.663717%)&lt;BR/&gt; 33884: (0.663717%)&gt;];
}
802--1903[label="0.125;1pkt 1fpkt"];
802--2228[label="0.375;3pkt 3fpkt"];
802--3649[label="0.25;2pkt 2fpkt"];
802--5168[label="0.125;1pkt 1fpkt"];
802--7820[label="1;8pkt 8fpkt"];
802--11506[label="0.125;1pkt 1fpkt"];
2228--3158[label="0.0142857;1pkt 1fpkt"];
2228--4953[label="1;1pkt 1fpkt"];
2228--6403[label="0.0882353;6pkt 6fpkt"];
2228--6856[label="0.133333;6pkt 6fpkt"];
2228--7820[label="0.375;3pkt 3fpkt"];
2228--8684[label="0.1;7pkt 7fpkt"];
2228--8761[label="0.1;7pkt 7fpkt"];
2228--8807[label="0.1;7pkt 7fpkt"];
3265--3649[label="0.5;1pkt 1fpkt"];
3649--4833[label="0.45;18pkt 18fpkt"];
3649--7820[label="0.25;2pkt 2fpkt"];
3649--8684[label="0.025;1pkt 1fpkt"];
3649--8761[label="0.025;1pkt 1fpkt"];
3649--8807[label="0.025;1pkt 1fpkt"];
4833--6782[label="0.428571;18pkt 18fpkt"];
7820--11506[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.155.80" src_port="80"/>
      <filter src_ip="133.4.155.84" src_port="80"/>
      <filter src_ip="133.4.224.161" src_port="80"/>
      <filter dst_ip="201.82.132.132" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
1065[label="80.120.51.139;d;13pkt 13fpkt", shape=diamond, color=yellow];
7842[label="80.120.51.139;d;5pkt 5fpkt", shape=hexagon, color=black];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.145.110:80, 80.120.51.139:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4994: (5.55556%)&lt;BR/&gt; 4993: (5.55556%)&lt;BR/&gt; 4952: (5.55556%)&lt;BR/&gt; 4887: (5.55556%)&gt;];
}
1065--7842[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="80.120.51.139" src_ip="211.185.145.110" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
981[label="211.227.37.14;d;3pkt 3fpkt", shape=diamond, color=yellow];
1392[label="25.244.72.176;d;4pkt 4fpkt", shape=diamond, color=yellow];
1395[label="6.11.9.138;d;5pkt 5fpkt", shape=diamond, color=yellow];
1409[label="195.240.248.167;d;7pkt 7fpkt", shape=diamond, color=yellow];
1618[label="211.185.157.227;s;6937pkt 6937fpkt", shape=diamond, color=yellow];
1927[label="62.237.159.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
2348[label="4.87.29.196;d;5pkt 5fpkt", shape=diamond, color=yellow];
2399[label="177.131.63.0;d;6pkt 6fpkt", shape=diamond, color=yellow];
2874[label="46.40.144.13;d;3pkt 3fpkt", shape=diamond, color=yellow];
3388[label="98.227.231.197;d;3pkt 3fpkt", shape=diamond, color=yellow];
3468[label="177.169.36.136;d;3pkt 3fpkt", shape=diamond, color=yellow];
3660[label="8.212.97.227;d;2pkt 2fpkt", shape=diamond, color=yellow];
4123[label="171.106.245.107;d;4pkt 4fpkt", shape=diamond, color=yellow];
4583[label="60.138.155.54;d;125pkt 125fpkt", shape=diamond, color=yellow];
5512[label="32.232.37.198;d;6pkt 6fpkt", shape=diamond, color=yellow];
5542[label="46.230.10.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
5819[label="36.2.175.188;d;98pkt 98fpkt", shape=diamond, color=yellow];
7264[label="43.24.32.176;d;50pkt 50fpkt", shape=diamond, color=yellow];
7351[label="171.14.0.120;d;5pkt 5fpkt", shape=diamond, color=yellow];
7487[label="35.187.172.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
7873[label="25.244.72.176;d;1pkt 1fpkt", shape=hexagon, color=black];
8103[label="177.169.36.136;d;1pkt 1fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.157.227:*, *:*}[99.9568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (14.604%)&lt;BR/&gt; 6881: (2.39961%)&lt;BR/&gt; 22302: (1.34763%)&lt;BR/&gt; 51413: (0.831958%)&lt;BR/&gt; 16019: (0.680693%)&gt;];
}
981--1618[label="1;3pkt 3fpkt"];
1392--1618[label="1;4pkt 4fpkt"];
1392--7873[label="1;1pkt 1fpkt"];
1395--1618[label="1;5pkt 5fpkt"];
1409--1618[label="1;7pkt 7fpkt"];
1618--1927[label="1;1pkt 1fpkt"];
1618--2348[label="0.6;3pkt 3fpkt"];
1618--2399[label="1;6pkt 6fpkt"];
1618--2874[label="1;3pkt 3fpkt"];
1618--3388[label="1;3pkt 3fpkt"];
1618--3468[label="1;3pkt 3fpkt"];
1618--3660[label="1;2pkt 2fpkt"];
1618--4123[label="1;4pkt 4fpkt"];
1618--4583[label="1;125pkt 125fpkt"];
1618--5512[label="1;6pkt 6fpkt"];
1618--5542[label="1;2pkt 2fpkt"];
1618--5819[label="1;98pkt 98fpkt"];
1618--6483[label="0.00105708;1pkt 1fpkt"];
1618--7264[label="0.98;49pkt 49fpkt"];
1618--7351[label="1;5pkt 5fpkt"];
1618--7487[label="1;1pkt 1fpkt"];
1618--7873[label="1;1pkt 1fpkt"];
1618--8103[label="1;1pkt 1fpkt"];
1618--8664[label="0.000432464;3pkt 3fpkt"];
1618--8688[label="0.000432464;3pkt 3fpkt"];
1618--8743[label="0.000432464;3pkt 3fpkt"];
1618--8765[label="0.000432464;3pkt 3fpkt"];
1618--8790[label="0.000432464;3pkt 3fpkt"];
1618--8811[label="0.000432464;3pkt 3fpkt"];
3468--8103[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.157.227"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.85.72.201"/>
      <from sec="1289451623" usec="0"/>
      <to sec="1289451798" usec="0"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289451798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.36604,3.53869,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2428[label="203.47.62.184;d;3pkt 3fpkt", shape=diamond, color=yellow];
7878[label="203.47.62.184;d;3pkt 3fpkt", shape=hexagon, color=black];
14491[label="158.196.59.6;1pkt 1fpkt", shape=invhouse, color=bisque];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.59.6:80, 203.47.62.184:62578}[33.3333%]&lt;BR/&gt;{128.7.169.13:12345, 203.47.62.184:53451}[33.3333%]&lt;BR/&gt;{158.196.148.50:80, 203.47.62.184:60468}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 62578: (21.4286%)&lt;BR/&gt; 60468: (14.2857%)&lt;BR/&gt; 53451: (14.2857%)&lt;BR/&gt; 12345: (14.2857%)&gt;];
}
2428--7878[label="1;3pkt 3fpkt"];
2428--14491[label="1;1pkt 1fpkt"];
7878--14491[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.184" dst_port="60468" src_ip="158.196.148.50" src_port="80"/>
      <filter dst_ip="203.47.62.184" dst_port="53451" src_ip="128.7.169.13" src_port="12345"/>
      <filter dst_ip="203.47.62.184" dst_port="62578" src_ip="158.196.59.6" src_port="80"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289451681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1513[label="211.185.157.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
7891[label="211.185.157.114;d;1pkt 1fpkt", shape=hexagon, color=black];
10932[label="14.10.135.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.10.135.130:56010, 211.185.157.114:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56010: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1513--7891[label="1;1pkt 1fpkt"];
1513--10932[label="1;1pkt 1fpkt"];
7891--10932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.114" dst_port="80" src_ip="14.10.135.130" src_port="56010"/>
    </slice>
    <from sec="1289451655" usec="0"/>
    <to sec="1289451663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1522[label="42.146.68.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
7892[label="42.146.68.5;d;1pkt 1fpkt", shape=hexagon, color=black];
9025[label="166.26.234.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.234.10:80, 42.146.68.5:47222}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47222: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1522--7892[label="1;1pkt 1fpkt"];
1522--9025[label="1;1pkt 1fpkt"];
7892--9025[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.5" dst_port="47222" src_ip="166.26.234.10" src_port="80"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289451672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1205[label="166.26.21.24;s;755pkt 755fpkt", shape=diamond, color=yellow];
1552[label="200.26.251.55;d;18pkt 18fpkt", shape=diamond, color=yellow];
1553[label="200.26.251.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
3205[label="211.222.74.74;d;192pkt 192fpkt", shape=diamond, color=yellow];
3235[label="200.26.251.52;d;152pkt 152fpkt", shape=diamond, color=yellow];
4145[label="200.143.117.40;d;28pkt 28fpkt", shape=diamond, color=yellow];
4902[label="8.114.78.133;d;80pkt 80fpkt", shape=diamond, color=yellow];
4906[label="193.216.172.27;d;40pkt 40fpkt", shape=diamond, color=yellow];
7896[label="200.26.251.62;d;2pkt 2fpkt", shape=hexagon, color=black];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.21.24:*, *:80}[76.5714%]&lt;BR/&gt;{*:*, 211.222.74.74:80}[21.9429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6509%)&lt;BR/&gt; 8080: (2.32467%)&lt;BR/&gt; 8081: (0.945626%)&lt;BR/&gt; 4193: (0.118203%)&lt;BR/&gt; 4192: (0.118203%)&gt;];
}
1205--1399[label="1;5pkt 5fpkt"];
1205--1552[label="1;18pkt 18fpkt"];
1205--1553[label="1;2pkt 2fpkt"];
1205--2152[label="0.0102669;5pkt 5fpkt"];
1205--2405[label="1;1pkt 1fpkt"];
1205--3205[label="0.375;72pkt 72fpkt"];
1205--3235[label="1;152pkt 152fpkt"];
1205--4145[label="1;28pkt 28fpkt"];
1205--4902[label="1;80pkt 80fpkt"];
1205--4906[label="1;40pkt 40fpkt"];
1205--5954[label="0.027027;1pkt 1fpkt"];
1205--7896[label="1;2pkt 2fpkt"];
1205--8124[label="0.00952381;4pkt 4fpkt"];
1205--8235[label="0.0108401;4pkt 4fpkt"];
1205--8409[label="0.0170648;5pkt 5fpkt"];
1205--8664[label="0.12053;91pkt 91fpkt"];
1205--8688[label="0.00794702;6pkt 6fpkt"];
1205--8743[label="0.12053;91pkt 91fpkt"];
1205--8765[label="0.00794702;6pkt 6fpkt"];
1205--8790[label="0.12053;91pkt 91fpkt"];
1205--8811[label="0.00794702;6pkt 6fpkt"];
1553--7896[label="1;2pkt 2fpkt"];
3205--3262[label="0.0673077;7pkt 7fpkt"];
3205--3773[label="0.0520833;10pkt 10fpkt"];
3205--4035[label="0.0625;12pkt 12fpkt"];
3205--7261[label="0.0989583;19pkt 19fpkt"];
3205--8664[label="0.0833333;16pkt 16fpkt"];
3205--8688[label="0.0520833;10pkt 10fpkt"];
3205--8743[label="0.0833333;16pkt 16fpkt"];
3205--8765[label="0.0520833;10pkt 10fpkt"];
3205--8790[label="0.0833333;16pkt 16fpkt"];
3205--8811[label="0.0520833;10pkt 10fpkt"];
3205--8858[label="0.0364583;7pkt 7fpkt"];
3205--9422[label="0.11811;15pkt 15fpkt"];
3205--9431[label="0.0989583;19pkt 19fpkt"];
3205--9530[label="0.0625;12pkt 12fpkt"];
3205--11714[label="0.0989583;19pkt 19fpkt"];
3235--8664[label="0.335526;51pkt 51fpkt"];
3235--8743[label="0.335526;51pkt 51fpkt"];
3235--8790[label="0.335526;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="166.26.21.24"/>
      <filter dst_ip="211.222.74.74" dst_port="80"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
317[label="166.26.115.229;s;53pkt 53fpkt", shape=diamond, color=yellow];
2530[label="5.182.130.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
2725[label="211.32.32.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
3348[label="5.109.94.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
3396[label="193.149.196.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
5626[label="5.182.28.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
6682[label="14.111.37.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
7897[label="5.182.130.211;d;1pkt 1fpkt", shape=hexagon, color=black];
7969[label="193.149.196.17;d;1pkt 1fpkt", shape=hexagon, color=black];
12416[label="166.26.115.229;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14354[label="166.26.115.229;2pkt 2fpkt", shape=invtriangle, color=brown];
15220[label="166.26.115.229;3pkt 3fpkt", shape=invhouse, color=bisque];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.115.229:5041, *:5041}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (57.3529%)&lt;BR/&gt; 80: (4.41176%)&lt;BR/&gt; 4000: (3.67647%)&lt;BR/&gt; 57981: (2.20588%)&lt;BR/&gt; 43252: (2.20588%)&gt;];
}
317--2530[label="1;1pkt 1fpkt"];
317--2725[label="1;1pkt 1fpkt"];
317--3348[label="1;1pkt 1fpkt"];
317--3396[label="1;1pkt 1fpkt"];
317--5626[label="1;1pkt 1fpkt"];
317--6682[label="1;1pkt 1fpkt"];
317--7897[label="1;1pkt 1fpkt"];
317--7969[label="1;1pkt 1fpkt"];
317--15220[label="0.333333;1pkt 1fpkt"];
2530--7897[label="1;1pkt 1fpkt"];
3396--7969[label="1;1pkt 1fpkt"];
12416--14354[label="1;2pkt 2fpkt"];
12416--15220[label="1;2pkt 2fpkt"];
14354--15220[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="5041" src_ip="166.26.115.229" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
203[label="15.22.33.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
586[label="45.82.179.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
643[label="6.149.168.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1623[label="133.4.52.245;s;454pkt 454fpkt", shape=diamond, color=yellow];
2416[label="9.202.223.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
2718[label="197.73.146.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
2786[label="5.44.58.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2902[label="80.76.133.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
4082[label="8.36.25.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
4584[label="5.45.44.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
4872[label="15.137.8.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
6620[label="208.92.3.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
7482[label="8.148.2.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
7555[label="1.137.6.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
7714[label="6.149.168.38;d;1pkt 1fpkt", shape=hexagon, color=black];
7922[label="45.82.179.1;d;1pkt 1fpkt", shape=hexagon, color=black];
7923[label="5.44.58.48;d;1pkt 1fpkt", shape=hexagon, color=black];
8086[label="5.45.44.208;d;1pkt 1fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.52.245:7562, *:*}[86.8132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7562: (42.7966%)&lt;BR/&gt; 4672: (4.23729%)&lt;BR/&gt; 7552: (2.9661%)&lt;BR/&gt; 80: (2.11864%)&lt;BR/&gt; 443: (0.741525%)&gt;];
}
203--1623[label="1;1pkt 1fpkt"];
586--1623[label="1;1pkt 1fpkt"];
586--7922[label="1;1pkt 1fpkt"];
643--1623[label="1;1pkt 1fpkt"];
643--7714[label="1;1pkt 1fpkt"];
1623--2191[label="0.00411523;1pkt 1fpkt"];
1623--2416[label="1;1pkt 1fpkt"];
1623--2718[label="1;1pkt 1fpkt"];
1623--2786[label="1;1pkt 1fpkt"];
1623--2902[label="1;1pkt 1fpkt"];
1623--4082[label="1;1pkt 1fpkt"];
1623--4279[label="0.038961;6pkt 6fpkt"];
1623--4584[label="1;1pkt 1fpkt"];
1623--4872[label="0.5;1pkt 1fpkt"];
1623--6620[label="1;1pkt 1fpkt"];
1623--7482[label="1;1pkt 1fpkt"];
1623--7555[label="1;1pkt 1fpkt"];
1623--7704[label="0.021978;2pkt 2fpkt"];
1623--7714[label="1;1pkt 1fpkt"];
1623--7922[label="1;1pkt 1fpkt"];
1623--7923[label="1;1pkt 1fpkt"];
1623--8027[label="0.00220264;1pkt 1fpkt"];
1623--8086[label="1;1pkt 1fpkt"];
1623--8133[label="0.0428571;6pkt 6fpkt"];
1623--8664[label="0.0154185;7pkt 7fpkt"];
1623--8666[label="0.00220264;1pkt 1fpkt"];
1623--8688[label="0.00881057;4pkt 4fpkt"];
1623--8689[label="0.00220264;1pkt 1fpkt"];
1623--8743[label="0.0154185;7pkt 7fpkt"];
1623--8745[label="0.00220264;1pkt 1fpkt"];
1623--8765[label="0.00881057;4pkt 4fpkt"];
1623--8766[label="0.00220264;1pkt 1fpkt"];
1623--8790[label="0.0154185;7pkt 7fpkt"];
1623--8792[label="0.00220264;1pkt 1fpkt"];
1623--8811[label="0.00881057;4pkt 4fpkt"];
1623--8812[label="0.00220264;1pkt 1fpkt"];
2786--7923[label="1;1pkt 1fpkt"];
4584--8086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.52.245" src_port="7562"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
366[label="166.26.234.78;s;33pkt 33fpkt", shape=diamond, color=yellow];
367[label="84.133.57.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
623[label="166.26.165.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
633[label="81.102.118.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
1791[label="8.75.1.93;d;5pkt 5fpkt", shape=diamond, color=yellow];
3270[label="5.84.109.161;d;13pkt 13fpkt", shape=diamond, color=yellow];
7925[label="8.75.1.93;d;3pkt 3fpkt", shape=hexagon, color=black];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.234.78:995, 5.84.109.161:*}[37.1429%]&lt;BR/&gt;{166.26.234.78:993, *:*}[25.7143%]&lt;BR/&gt;{166.26.234.78:443, *:*}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (25%)&lt;BR/&gt; 443: (12.069%)&lt;BR/&gt; 993: (8.62069%)&lt;BR/&gt; 4500: (6.03448%)&lt;BR/&gt; 60643: (2.58621%)&gt;];
}
366--367[label="1;1pkt 1fpkt"];
366--1791[label="0.8;4pkt 4fpkt"];
366--3270[label="1;13pkt 13fpkt"];
366--7925[label="0.666667;2pkt 2fpkt"];
623--633[label="1;1pkt 1fpkt"];
623--1791[label="0.5;1pkt 1fpkt"];
623--7925[label="0.5;1pkt 1fpkt"];
1791--7925[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="166.26.234.78" src_port="993"/>
      <filter src_ip="166.26.234.78" src_port="443"/>
      <filter dst_ip="5.84.109.161" src_ip="166.26.234.78" src_port="995"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
67[label="176.8.207.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
273[label="98.35.64.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
377[label="168.228.229.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
562[label="45.72.84.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
785[label="53.67.110.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
991[label="34.185.48.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
1611[label="62.27.155.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1755[label="19.19.165.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
1785[label="17.167.73.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1796[label="194.91.209.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
1830[label="85.26.159.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
1848[label="45.20.171.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
1865[label="34.41.12.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
1883[label="62.24.68.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
1898[label="37.65.106.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
1907[label="60.36.247.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
2052[label="17.28.171.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
2061[label="96.169.174.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
2087[label="50.161.55.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
2510[label="168.200.23.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
2546[label="81.147.128.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
2758[label="47.166.72.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
2776[label="36.145.57.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
2863[label="98.210.162.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2920[label="215.4.30.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2921[label="60.139.244.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
2953[label="42.48.59.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
3548[label="133.4.39.122;s;404pkt 404fpkt", shape=diamond, color=yellow];
3635[label="44.29.235.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
3673[label="213.40.220.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
4643[label="210.101.115.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
4855[label="27.55.169.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
5826[label="0.33.103.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
5868[label="17.129.150.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
6305[label="47.94.176.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
6796[label="43.138.13.70;d;2pkt 2fpkt", shape=diamond, color=yellow];
7938[label="34.185.48.226;d;1pkt 1fpkt", shape=hexagon, color=black];
8073[label="96.169.174.21;d;1pkt 1fpkt", shape=hexagon, color=black];
8146[label="47.166.72.168;d;1pkt 1fpkt", shape=hexagon, color=black];
8178[label="44.29.235.77;d;1pkt 1fpkt", shape=hexagon, color=black];
8216[label="50.161.55.192;d;1pkt 1fpkt", shape=hexagon, color=black];
8444[label="215.4.30.48;d;1pkt 1fpkt", shape=hexagon, color=black];
8575[label="53.67.110.172;d;1pkt 1fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.39.122:*, *:80}[76.4851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.7098%)&lt;BR/&gt; 6703: (8.92857%)&lt;BR/&gt; 44837: (4.46429%)&lt;BR/&gt; 8000: (0.78125%)&lt;BR/&gt; 59183: (0.446429%)&gt;];
}
67--3548[label="1;1pkt 1fpkt"];
273--3548[label="1;1pkt 1fpkt"];
377--3548[label="1;1pkt 1fpkt"];
562--3548[label="1;1pkt 1fpkt"];
785--3548[label="1;1pkt 1fpkt"];
785--8575[label="1;1pkt 1fpkt"];
991--3548[label="1;1pkt 1fpkt"];
991--7938[label="1;1pkt 1fpkt"];
1611--3548[label="1;1pkt 1fpkt"];
1755--3548[label="1;1pkt 1fpkt"];
1785--3548[label="1;1pkt 1fpkt"];
1796--3548[label="1;1pkt 1fpkt"];
1830--3548[label="1;1pkt 1fpkt"];
1848--3548[label="1;1pkt 1fpkt"];
1865--3548[label="1;1pkt 1fpkt"];
1883--3548[label="1;1pkt 1fpkt"];
1898--3548[label="1;1pkt 1fpkt"];
1907--3548[label="1;1pkt 1fpkt"];
2052--3548[label="1;1pkt 1fpkt"];
2061--3548[label="1;1pkt 1fpkt"];
2061--8073[label="1;1pkt 1fpkt"];
2087--3548[label="1;1pkt 1fpkt"];
2087--8216[label="1;1pkt 1fpkt"];
2510--3548[label="1;1pkt 1fpkt"];
2546--3548[label="1;2pkt 2fpkt"];
2758--3548[label="1;1pkt 1fpkt"];
2758--8146[label="1;1pkt 1fpkt"];
2776--3548[label="1;1pkt 1fpkt"];
2863--3548[label="1;1pkt 1fpkt"];
2920--3548[label="1;1pkt 1fpkt"];
2920--8444[label="1;1pkt 1fpkt"];
2921--3548[label="1;1pkt 1fpkt"];
2953--3548[label="1;1pkt 1fpkt"];
3548--3635[label="1;1pkt 1fpkt"];
3548--3673[label="1;1pkt 1fpkt"];
3548--3951[label="0.0075188;1pkt 1fpkt"];
3548--4559[label="0.0097561;2pkt 2fpkt"];
3548--4573[label="0.00722022;2pkt 2fpkt"];
3548--4643[label="1;1pkt 1fpkt"];
3548--4740[label="0.0294118;3pkt 3fpkt"];
3548--4855[label="1;1pkt 1fpkt"];
3548--5472[label="0.0441176;6pkt 6fpkt"];
3548--5826[label="1;1pkt 1fpkt"];
3548--5868[label="1;1pkt 1fpkt"];
3548--5907[label="0.0289855;2pkt 2fpkt"];
3548--6305[label="1;1pkt 1fpkt"];
3548--6632[label="0.0169492;1pkt 1fpkt"];
3548--6796[label="1;2pkt 2fpkt"];
3548--7815[label="0.00742574;3pkt 3fpkt"];
3548--7858[label="0.00729927;1pkt 1fpkt"];
3548--7938[label="1;1pkt 1fpkt"];
3548--7987[label="0.0173267;7pkt 7fpkt"];
3548--8073[label="1;1pkt 1fpkt"];
3548--8146[label="1;1pkt 1fpkt"];
3548--8178[label="1;1pkt 1fpkt"];
3548--8216[label="1;1pkt 1fpkt"];
3548--8444[label="1;1pkt 1fpkt"];
3548--8575[label="1;1pkt 1fpkt"];
3548--8664[label="0.190594;77pkt 77fpkt"];
3548--8666[label="0.00247525;1pkt 1fpkt"];
3548--8688[label="0.0123762;5pkt 5fpkt"];
3548--8743[label="0.190594;77pkt 77fpkt"];
3548--8745[label="0.00247525;1pkt 1fpkt"];
3548--8765[label="0.0123762;5pkt 5fpkt"];
3548--8790[label="0.190594;77pkt 77fpkt"];
3548--8792[label="0.00247525;1pkt 1fpkt"];
3548--8811[label="0.0123762;5pkt 5fpkt"];
3635--8178[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.39.122"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
197[label="221.123.164.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
200[label="166.26.231.223;s;291pkt 291fpkt", shape=diamond, color=yellow];
2587[label="34.115.121.142;d;185pkt 185fpkt", shape=diamond, color=yellow];
2855[label="41.21.131.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
7966[label="34.115.121.142;d;185pkt 185fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.231.223:*, 34.115.121.142:80}[63.9175%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9442%)&lt;BR/&gt; 443: (0.377074%)&lt;BR/&gt; 60087: (0.226244%)&lt;BR/&gt; 56034: (0.226244%)&lt;BR/&gt; 56033: (0.226244%)&gt;];
}
197--200[label="1;1pkt 1fpkt"];
200--335[label="0.0103093;3pkt 3fpkt"];
200--359[label="0.0171821;5pkt 5fpkt"];
200--405[label="0.0105263;2pkt 2fpkt"];
200--587[label="0.0343643;10pkt 10fpkt"];
200--966[label="0.00687285;2pkt 2fpkt"];
200--2171[label="0.0166667;3pkt 3fpkt"];
200--2587[label="1;185pkt 185fpkt"];
200--2855[label="1;1pkt 1fpkt"];
200--4334[label="0.020202;2pkt 2fpkt"];
200--4596[label="0.0163934;2pkt 2fpkt"];
200--5794[label="0.00687285;2pkt 2fpkt"];
200--5937[label="0.00854701;1pkt 1fpkt"];
200--7769[label="0.0412371;12pkt 12fpkt"];
200--7966[label="1;185pkt 185fpkt"];
200--8026[label="0.0263158;2pkt 2fpkt"];
200--8124[label="0.00687285;2pkt 2fpkt"];
200--8409[label="0.0103093;3pkt 3fpkt"];
200--8664[label="0.14433;42pkt 42fpkt"];
200--8688[label="0.0137457;4pkt 4fpkt"];
200--8689[label="0.00343643;1pkt 1fpkt"];
200--8743[label="0.14433;42pkt 42fpkt"];
200--8765[label="0.0137457;4pkt 4fpkt"];
200--8766[label="0.00343643;1pkt 1fpkt"];
200--8790[label="0.14433;42pkt 42fpkt"];
200--8811[label="0.0137457;4pkt 4fpkt"];
200--8812[label="0.00343643;1pkt 1fpkt"];
2587--7966[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_ip="34.115.121.142" dst_port="80" src_ip="166.26.231.223"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
3482[label="32.34.71.152;d;2pkt 2fpkt", shape=diamond, color=yellow];
3483[label="132.110.128.138;s;3pkt 3fpkt", shape=diamond, color=yellow];
7975[label="32.34.71.152;d;2pkt 2fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.94.115:80, 32.34.71.152:36580}[25%]&lt;BR/&gt;{132.110.128.138:80, 42.146.64.76:38244}[25%]&lt;BR/&gt;{132.110.128.138:80, 42.146.64.76:51493}[25%]&lt;BR/&gt;{132.110.128.138:80, 32.34.71.152:51254}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51254: (21.4286%)&lt;BR/&gt; 36580: (14.2857%)&lt;BR/&gt; 51493: (7.14286%)&lt;BR/&gt; 38244: (7.14286%)&gt;];
}
3482--3483[label="0.5;1pkt 1fpkt"];
3482--7975[label="1;2pkt 2fpkt"];
3483--7975[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.71.152" dst_port="51254" src_ip="132.110.128.138" src_port="80"/>
      <filter dst_ip="42.146.64.76" dst_port="51493" src_ip="132.110.128.138" src_port="80"/>
      <filter dst_ip="42.146.64.76" dst_port="38244" src_ip="132.110.128.138" src_port="80"/>
      <filter dst_ip="32.34.71.152" dst_port="36580" src_ip="166.26.94.115" src_port="80"/>
    </slice>
    <from sec="1289451825" usec="0"/>
    <to sec="1289451993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
485[label="59.193.191.114;d;3pkt 3fpkt", shape=diamond, color=yellow];
8024[label="59.193.191.114;d;3pkt 3fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.144.31:80, 59.193.191.114:52996}[33.3333%]&lt;BR/&gt;{211.185.144.31:80, 59.193.191.114:60316}[33.3333%]&lt;BR/&gt;{211.185.144.31:80, 59.193.191.114:62748}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62748: (16.6667%)&lt;BR/&gt; 60316: (16.6667%)&lt;BR/&gt; 52996: (16.6667%)&gt;];
}
485--8024[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="59.193.191.114" dst_port="62748" src_ip="211.185.144.31" src_port="80"/>
      <filter dst_ip="59.193.191.114" dst_port="60316" src_ip="211.185.144.31" src_port="80"/>
      <filter dst_ip="59.193.191.114" dst_port="52996" src_ip="211.185.144.31" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
5034[label="133.4.166.237;s;39pkt 39fpkt", shape=diamond, color=yellow];
5582[label="202.189.188.48;d;8pkt 8fpkt", shape=diamond, color=yellow];
5586[label="202.189.188.60;d;31pkt 31fpkt", shape=diamond, color=yellow];
12517[label="133.4.166.237;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.166.237:*, 202.189.188.60:80}[72.093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53466: (1.25%)&lt;BR/&gt; 53464: (1.25%)&lt;BR/&gt; 53463: (1.25%)&lt;BR/&gt; 53462: (1.25%)&gt;];
}
5034--5582[label="1;8pkt 8fpkt"];
5034--5586[label="1;31pkt 31fpkt"];
5034--12517[label="0.974359;38pkt 38fpkt"];
5582--12517[label="1;8pkt 8fpkt"];
5586--12517[label="0.967742;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="202.189.188.60" dst_port="80" src_ip="133.4.166.237"/>
    </slice>
    <from sec="1289451739" usec="0"/>
    <to sec="1289452220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
2911[label="211.185.146.192;d;1217pkt 1217fpkt", shape=diamond, color=yellow];
8032[label="211.185.146.192;d;575pkt 575fpkt", shape=hexagon, color=black];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.185.146.192:51137}[97.4528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51137: (49.1071%)&lt;BR/&gt; 0: (1.72991%)&lt;BR/&gt; 16001: (0.697545%)&lt;BR/&gt; 51413: (0.418527%)&lt;BR/&gt; 6881: (0.390625%)&gt;];
}
2911--6484[label="0.000821693;1pkt 1fpkt"];
2911--8032[label="1;575pkt 575fpkt"];
2911--8562[label="0.000821693;1pkt 1fpkt"];
2911--8650[label="0.000821693;1pkt 1fpkt"];
2911--8703[label="0.000821693;1pkt 1fpkt"];
2911--8780[label="0.000821693;1pkt 1fpkt"];
2911--8826[label="0.000821693;1pkt 1fpkt"];
2911--12405[label="0.000821693;1pkt 1fpkt"];
2911--14348[label="0.000821693;1pkt 1fpkt"];
2911--15217[label="0.000821693;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.146.192" dst_port="51137"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.192.82.241"/>
      <from sec="1289451905" usec="0"/>
      <to sec="1289452068" usec="0"/>
    </slice>
    <from sec="1289451905" usec="0"/>
    <to sec="1289452068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
276[label="133.4.164.9;s;569pkt 569fpkt", shape=diamond, color=yellow];
1936[label="8.149.125.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
2557[label="1.32.164.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
4917[label="2.12.228.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
5132[label="6.166.157.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
7570[label="5.169.237.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
8058[label="6.166.157.119;d;1pkt 1fpkt", shape=hexagon, color=black];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.164.9:*, *:80}[27.0175%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.3218%)&lt;BR/&gt; 12312: (6.14187%)&lt;BR/&gt; 443: (4.9308%)&lt;BR/&gt; 0: (4.49827%)&lt;BR/&gt; 57520: (3.71972%)&gt;];
}
276--405[label="0.0210526;4pkt 4fpkt"];
276--605[label="0.00351494;2pkt 2fpkt"];
276--606[label="0.00208333;1pkt 1fpkt"];
276--734[label="0.0175747;10pkt 10fpkt"];
276--751[label="0.00702988;4pkt 4fpkt"];
276--1076[label="0.0105448;6pkt 6fpkt"];
276--1180[label="0.0148883;6pkt 6fpkt"];
276--1330[label="0.00675676;2pkt 2fpkt"];
276--1608[label="0.00342466;1pkt 1fpkt"];
276--1641[label="0.00558659;3pkt 3fpkt"];
276--1754[label="0.00527241;3pkt 3fpkt"];
276--1803[label="0.00697674;3pkt 3fpkt"];
276--1886[label="0.00303951;1pkt 1fpkt"];
276--1905[label="0.00282486;1pkt 1fpkt"];
276--1936[label="1;2pkt 2fpkt"];
276--1942[label="0.00390625;1pkt 1fpkt"];
276--2108[label="0.0106383;4pkt 4fpkt"];
276--2130[label="0.0450928;17pkt 17fpkt"];
276--2191[label="0.00823045;2pkt 2fpkt"];
276--2557[label="1;1pkt 1fpkt"];
276--2912[label="0.00383142;1pkt 1fpkt"];
276--3296[label="0.0512821;2pkt 2fpkt"];
276--3843[label="0.02;1pkt 1fpkt"];
276--3913[label="0.0188679;4pkt 4fpkt"];
276--4272[label="0.00666667;1pkt 1fpkt"];
276--4323[label="0.0322581;3pkt 3fpkt"];
276--4416[label="0.0331126;5pkt 5fpkt"];
276--4715[label="0.0178571;1pkt 1fpkt"];
276--4917[label="1;2pkt 2fpkt"];
276--5132[label="0.5;1pkt 1fpkt"];
276--5808[label="0.0117647;1pkt 1fpkt"];
276--5899[label="0.0163934;1pkt 1fpkt"];
276--6054[label="0.0222222;3pkt 3fpkt"];
276--7355[label="0.0217391;1pkt 1fpkt"];
276--7570[label="1;1pkt 1fpkt"];
276--7815[label="0.00702988;4pkt 4fpkt"];
276--7848[label="0.04;6pkt 6fpkt"];
276--7853[label="0.0135135;1pkt 1fpkt"];
276--7987[label="0.0175747;10pkt 10fpkt"];
276--8058[label="1;1pkt 1fpkt"];
276--8131[label="0.0075;3pkt 3fpkt"];
276--8218[label="0.00527241;3pkt 3fpkt"];
276--8243[label="0.0171429;6pkt 6fpkt"];
276--8420[label="0.0344828;3pkt 3fpkt"];
276--8432[label="0.00303951;1pkt 1fpkt"];
276--8664[label="0.0281195;16pkt 16fpkt"];
276--8666[label="0.0123023;7pkt 7fpkt"];
276--8688[label="0.0509666;29pkt 29fpkt"];
276--8689[label="0.00702988;4pkt 4fpkt"];
276--8743[label="0.0281195;16pkt 16fpkt"];
276--8745[label="0.0123023;7pkt 7fpkt"];
276--8765[label="0.0509666;29pkt 29fpkt"];
276--8766[label="0.00702988;4pkt 4fpkt"];
276--8790[label="0.0281195;16pkt 16fpkt"];
276--8792[label="0.0123023;7pkt 7fpkt"];
276--8811[label="0.0509666;29pkt 29fpkt"];
276--8812[label="0.00702988;4pkt 4fpkt"];
5132--8058[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.164.9"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
137[label="17.83.49.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
138[label="166.26.114.159;s;102pkt 102fpkt", shape=diamond, color=yellow];
1381[label="8.75.87.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="98.28.131.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
3177[label="168.241.138.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
4603[label="98.80.72.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
4688[label="1.136.206.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
5074[label="18.36.144.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
5550[label="176.204.2.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
6452[label="46.47.61.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
6930[label="198.249.1.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
8087[label="98.80.72.57;d;1pkt 1fpkt", shape=hexagon, color=black];
8179[label="98.28.131.38;d;1pkt 1fpkt", shape=hexagon, color=black];
8280[label="1.136.206.79;d;1pkt 1fpkt", shape=hexagon, color=black];
8532[label="176.204.2.68;d;1pkt 1fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.114.159:3209, *:17788}[24.5098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3209: (41.8103%)&lt;BR/&gt; 17788: (10.7759%)&lt;BR/&gt; 1048: (8.62069%)&lt;BR/&gt; 8800: (3.44828%)&lt;BR/&gt; 55067: (1.2931%)&gt;];
}
137--138[label="1;1pkt 1fpkt"];
138--1381[label="1;1pkt 1fpkt"];
138--1874[label="1;1pkt 1fpkt"];
138--3177[label="1;1pkt 1fpkt"];
138--4603[label="1;1pkt 1fpkt"];
138--4688[label="1;1pkt 1fpkt"];
138--5074[label="1;1pkt 1fpkt"];
138--5550[label="1;1pkt 1fpkt"];
138--6452[label="1;1pkt 1fpkt"];
138--6930[label="1;1pkt 1fpkt"];
138--8087[label="1;1pkt 1fpkt"];
138--8179[label="1;1pkt 1fpkt"];
138--8280[label="1;1pkt 1fpkt"];
138--8532[label="1;1pkt 1fpkt"];
1874--8179[label="1;1pkt 1fpkt"];
4603--8087[label="1;1pkt 1fpkt"];
4688--8280[label="1;1pkt 1fpkt"];
5550--8532[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="166.26.114.159" src_port="3209"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
3413[label="166.26.58.52;s;390pkt 390fpkt", shape=diamond, color=yellow];
3511[label="54.182.131.141;d;90pkt 90fpkt", shape=diamond, color=yellow];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.58.52:*, 54.182.131.141:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8958%)&lt;BR/&gt; 50998: (0.208333%)&lt;BR/&gt; 50997: (0.208333%)&lt;BR/&gt; 50996: (0.208333%)&lt;BR/&gt; 50995: (0.208333%)&gt;];
}
3413--3511[label="1;90pkt 90fpkt"];
3413--3828[label="0.010101;1pkt 1fpkt"];
3413--5954[label="0.027027;1pkt 1fpkt"];
3413--7769[label="0.0025641;1pkt 1fpkt"];
3413--7815[label="0.0179487;7pkt 7fpkt"];
3413--7987[label="0.0102564;4pkt 4fpkt"];
3413--8124[label="0.0589744;23pkt 23fpkt"];
3413--8409[label="0.0273038;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="54.182.131.141" dst_port="80" src_ip="166.26.58.52"/>
    </slice>
    <from sec="1289451783" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
441[label="5.2.9.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
605[label="40.19.202.153;d;1186pkt 1186fpkt", shape=diamond, color=yellow];
660[label="98.171.0.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
804[label="57.228.148.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1015[label="5.166.89.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1328[label="192.138.191.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
1726[label="133.4.112.28;s;875pkt 875fpkt", shape=diamond, color=yellow];
1763[label="168.19.30.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
1802[label="43.113.154.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
1811[label="0.44.18.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2014[label="198.138.39.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
2353[label="133.4.62.30;s;304pkt 304fpkt", shape=diamond, color=yellow];
2607[label="84.163.200.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
2805[label="128.19.228.225;s;423pkt 423fpkt", shape=diamond, color=yellow];
2983[label="84.66.92.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
3305[label="14.96.225.248;d;2pkt 2fpkt", shape=diamond, color=yellow];
3324[label="5.174.72.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
3337[label="5.37.17.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
3613[label="133.4.62.142;s;258pkt 258fpkt", shape=diamond, color=yellow];
3662[label="24.128.139.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
4486[label="8.253.88.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
4547[label="134.93.112.138;d;92pkt 92fpkt", shape=diamond, color=yellow];
4612[label="3.157.90.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
4744[label="196.138.73.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
6252[label="197.0.113.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
6583[label="196.17.5.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
6812[label="84.160.165.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
6817[label="192.232.25.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
6825[label="2.14.146.156;d;3pkt 3fpkt", shape=diamond, color=yellow];
6872[label="8.51.87.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
7499[label="0.238.59.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
7501[label="2.4.192.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
8182[label="57.228.148.1;d;1pkt 1fpkt", shape=hexagon, color=black];
8326[label="5.37.17.9;d;1pkt 1fpkt", shape=hexagon, color=black];
8347[label="197.0.113.1;d;2pkt 2fpkt", shape=hexagon, color=black];
8460[label="196.17.5.9;d;1pkt 1fpkt", shape=hexagon, color=black];
8538[label="80.119.40.161;d;1pkt 1fpkt", shape=hexagon, color=black];
9323[label="128.19.201.26;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10130[label="128.19.150.74;31pkt 31fpkt", shape=pentagon, color=darkviolet];
13305[label="128.19.150.74;30pkt 30fpkt", shape=invtriangle, color=brown];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 40.19.202.153:80}[51.1639%]&lt;BR/&gt;{133.4.112.28:*, *:*}[39.9361%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.4923%)&lt;BR/&gt; 443: (1.58462%)&lt;BR/&gt; 20480: (0.815385%)&lt;BR/&gt; 5041: (0.661538%)&lt;BR/&gt; 1682: (0.338462%)&gt;];
}
441--1726[label="1;1pkt 1fpkt"];
605--1579[label="0.0118265;9pkt 9fpkt"];
605--1726[label="0.08;70pkt 70fpkt"];
605--1884[label="0.00569801;2pkt 2fpkt"];
605--2094[label="0.00325733;1pkt 1fpkt"];
605--2154[label="0.0083682;2pkt 2fpkt"];
605--2353[label="0.967105;294pkt 294fpkt"];
605--2692[label="0.00252951;3pkt 3fpkt"];
605--2703[label="0.000984252;1pkt 1fpkt"];
605--2742[label="0.00674536;8pkt 8fpkt"];
605--2805[label="0.825059;349pkt 349fpkt"];
605--3081[label="0.078534;15pkt 15fpkt"];
605--3613[label="0.988372;255pkt 255fpkt"];
605--3780[label="0.396552;23pkt 23fpkt"];
605--5471[label="0.00980392;1pkt 1fpkt"];
605--5488[label="0.0117647;1pkt 1fpkt"];
605--6196[label="0.00606061;1pkt 1fpkt"];
605--6584[label="0.00854701;1pkt 1fpkt"];
605--7257[label="0.0125;1pkt 1fpkt"];
605--8664[label="0.0303541;36pkt 36fpkt"];
605--8688[label="0.029511;35pkt 35fpkt"];
605--8743[label="0.0303541;36pkt 36fpkt"];
605--8765[label="0.029511;35pkt 35fpkt"];
605--8790[label="0.0303541;36pkt 36fpkt"];
605--8811[label="0.029511;35pkt 35fpkt"];
605--9298[label="0.00252951;3pkt 3fpkt"];
605--9323[label="0.153846;2pkt 2fpkt"];
605--10130[label="0.0322581;1pkt 1fpkt"];
605--10394[label="0.000934579;1pkt 1fpkt"];
605--10667[label="0.0666667;1pkt 1fpkt"];
605--11207[label="0.00970874;1pkt 1fpkt"];
605--11943[label="0.0232558;1pkt 1fpkt"];
605--12262[label="0.00571429;1pkt 1fpkt"];
605--12914[label="0.00252951;3pkt 3fpkt"];
605--13305[label="0.0333333;1pkt 1fpkt"];
605--13437[label="0.000934579;1pkt 1fpkt"];
605--13556[label="0.0666667;1pkt 1fpkt"];
605--13796[label="0.00970874;1pkt 1fpkt"];
605--14130[label="0.0238095;1pkt 1fpkt"];
605--14577[label="0.00252951;3pkt 3fpkt"];
605--14800[label="0.000933707;1pkt 1fpkt"];
605--14956[label="0.00970874;1pkt 1fpkt"];
660--1726[label="1;1pkt 1fpkt"];
804--1726[label="1;1pkt 1fpkt"];
804--8182[label="1;1pkt 1fpkt"];
1015--1726[label="1;1pkt 1fpkt"];
1328--1726[label="1;1pkt 1fpkt"];
1726--1763[label="1;1pkt 1fpkt"];
1726--1782[label="0.00116279;1pkt 1fpkt"];
1726--1811[label="1;1pkt 1fpkt"];
1726--1996[label="0.00549451;2pkt 2fpkt"];
1726--2014[label="1;1pkt 1fpkt"];
1726--2160[label="0.00295858;1pkt 1fpkt"];
1726--2191[label="0.00823045;2pkt 2fpkt"];
1726--2231[label="0.00167504;1pkt 1fpkt"];
1726--2254[label="0.0106952;6pkt 6fpkt"];
1726--2275[label="0.0132743;6pkt 6fpkt"];
1726--2282[label="0.0104439;4pkt 4fpkt"];
1726--2343[label="0.00877193;1pkt 1fpkt"];
1726--2447[label="0.0296496;11pkt 11fpkt"];
1726--2607[label="1;1pkt 1fpkt"];
1726--2722[label="0.00540541;1pkt 1fpkt"];
1726--2731[label="0.00458716;1pkt 1fpkt"];
1726--2821[label="0.00917431;3pkt 3fpkt"];
1726--2908[label="0.00490196;2pkt 2fpkt"];
1726--2983[label="1;1pkt 1fpkt"];
1726--3305[label="0.5;1pkt 1fpkt"];
1726--3324[label="0.5;1pkt 1fpkt"];
1726--3337[label="1;1pkt 1fpkt"];
1726--3662[label="1;1pkt 1fpkt"];
1726--3791[label="0.00409836;1pkt 1fpkt"];
1726--3910[label="0.0285714;4pkt 4fpkt"];
1726--4027[label="0.0704225;5pkt 5fpkt"];
1726--4394[label="0.015625;2pkt 2fpkt"];
1726--4486[label="1;1pkt 1fpkt"];
1726--4496[label="0.0643564;13pkt 13fpkt"];
1726--4547[label="0.26087;24pkt 24fpkt"];
1726--4594[label="0.00787402;1pkt 1fpkt"];
1726--4612[label="1;1pkt 1fpkt"];
1726--4618[label="0.00787402;1pkt 1fpkt"];
1726--4680[label="0.010929;2pkt 2fpkt"];
1726--4740[label="0.0196078;2pkt 2fpkt"];
1726--4744[label="1;1pkt 1fpkt"];
1726--5176[label="0.0273224;5pkt 5fpkt"];
1726--5229[label="0.0285714;2pkt 2fpkt"];
1726--5253[label="0.129412;11pkt 11fpkt"];
1726--5314[label="0.00568182;1pkt 1fpkt"];
1726--5907[label="0.0289855;2pkt 2fpkt"];
1726--6252[label="1;2pkt 2fpkt"];
1726--6583[label="1;1pkt 1fpkt"];
1726--6812[label="1;1pkt 1fpkt"];
1726--6817[label="1;1pkt 1fpkt"];
1726--6825[label="0.666667;2pkt 2fpkt"];
1726--6872[label="1;1pkt 1fpkt"];
1726--7228[label="0.084507;6pkt 6fpkt"];
1726--7249[label="0.0410959;3pkt 3fpkt"];
1726--7499[label="0.5;1pkt 1fpkt"];
1726--7501[label="1;1pkt 1fpkt"];
1726--7815[label="0.00114286;1pkt 1fpkt"];
1726--7853[label="0.0135135;1pkt 1fpkt"];
1726--7858[label="0.00729927;1pkt 1fpkt"];
1726--7983[label="0.0384615;5pkt 5fpkt"];
1726--7996[label="0.00537634;1pkt 1fpkt"];
1726--8027[label="0.0114286;10pkt 10fpkt"];
1726--8041[label="0.00247525;1pkt 1fpkt"];
1726--8059[label="0.00574713;1pkt 1fpkt"];
1726--8131[label="0.025;10pkt 10fpkt"];
1726--8182[label="1;1pkt 1fpkt"];
1726--8203[label="0.00557103;4pkt 4fpkt"];
1726--8243[label="0.0114286;4pkt 4fpkt"];
1726--8276[label="0.0307692;4pkt 4fpkt"];
1726--8278[label="0.0155039;2pkt 2fpkt"];
1726--8326[label="1;1pkt 1fpkt"];
1726--8347[label="1;2pkt 2fpkt"];
1726--8452[label="0.00130548;1pkt 1fpkt"];
1726--8460[label="1;1pkt 1fpkt"];
1726--8538[label="1;1pkt 1fpkt"];
1726--8664[label="0.0491429;43pkt 43fpkt"];
1726--8666[label="0.0114286;10pkt 10fpkt"];
1726--8688[label="0.0697143;61pkt 61fpkt"];
1726--8689[label="0.00457143;4pkt 4fpkt"];
1726--8743[label="0.0491429;43pkt 43fpkt"];
1726--8745[label="0.0114286;10pkt 10fpkt"];
1726--8765[label="0.0697143;61pkt 61fpkt"];
1726--8766[label="0.00457143;4pkt 4fpkt"];
1726--8790[label="0.0491429;43pkt 43fpkt"];
1726--8792[label="0.0114286;10pkt 10fpkt"];
1726--8811[label="0.0697143;61pkt 61fpkt"];
1726--8812[label="0.00457143;4pkt 4fpkt"];
1802--2805[label="1;1pkt 1fpkt"];
2353--5330[label="0.00980392;1pkt 1fpkt"];
2353--6095[label="0.00724638;1pkt 1fpkt"];
2353--8688[label="0.00328947;1pkt 1fpkt"];
2353--8689[label="0.00328947;1pkt 1fpkt"];
2353--8765[label="0.00328947;1pkt 1fpkt"];
2353--8766[label="0.00328947;1pkt 1fpkt"];
2353--8811[label="0.00328947;1pkt 1fpkt"];
2353--8812[label="0.00328947;1pkt 1fpkt"];
2805--2811[label="0.00518135;1pkt 1fpkt"];
2805--2955[label="0.012766;3pkt 3fpkt"];
2805--3791[label="0.0163934;4pkt 4fpkt"];
2805--4496[label="0.0049505;1pkt 1fpkt"];
2805--5891[label="0.00900901;1pkt 1fpkt"];
2805--6018[label="0.00649351;1pkt 1fpkt"];
2805--7061[label="0.0178571;1pkt 1fpkt"];
2805--8395[label="0.00662252;1pkt 1fpkt"];
2805--8582[label="0.012766;3pkt 3fpkt"];
2805--8664[label="0.00236407;1pkt 1fpkt"];
2805--8688[label="0.0567376;24pkt 24fpkt"];
2805--8743[label="0.00236407;1pkt 1fpkt"];
2805--8765[label="0.0567376;24pkt 24fpkt"];
2805--8790[label="0.00236407;1pkt 1fpkt"];
2805--8811[label="0.0567376;24pkt 24fpkt"];
3337--8326[label="1;1pkt 1fpkt"];
3613--8664[label="0.0116279;3pkt 3fpkt"];
3613--8743[label="0.0116279;3pkt 3fpkt"];
3613--8790[label="0.0116279;3pkt 3fpkt"];
4547--4637[label="0.0625;5pkt 5fpkt"];
4547--6608[label="0.0263158;1pkt 1fpkt"];
4547--7169[label="0.015625;1pkt 1fpkt"];
4547--8664[label="0.0326087;3pkt 3fpkt"];
4547--8666[label="0.0108696;1pkt 1fpkt"];
4547--8688[label="0.0108696;1pkt 1fpkt"];
4547--8743[label="0.0326087;3pkt 3fpkt"];
4547--8745[label="0.0108696;1pkt 1fpkt"];
4547--8765[label="0.0108696;1pkt 1fpkt"];
4547--8790[label="0.0326087;3pkt 3fpkt"];
4547--8792[label="0.0108696;1pkt 1fpkt"];
4547--8811[label="0.0108696;1pkt 1fpkt"];
4547--10196[label="0.0217391;2pkt 2fpkt"];
4547--10468[label="0.0344828;1pkt 1fpkt"];
4547--10540[label="0.0151515;1pkt 1fpkt"];
4547--11642[label="0.0217391;2pkt 2fpkt"];
4547--11702[label="0.0108696;1pkt 1fpkt"];
4547--13341[label="0.0217391;2pkt 2fpkt"];
4547--13498[label="0.0151515;1pkt 1fpkt"];
4547--13995[label="0.0217391;2pkt 2fpkt"];
4547--14819[label="0.0151515;1pkt 1fpkt"];
6252--8347[label="1;2pkt 2fpkt"];
6583--8460[label="1;1pkt 1fpkt"];
10130--13305[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.112.28"/>
      <filter dst_ip="40.19.202.153" dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
4011[label="128.165.171.29;d;21pkt 21fpkt", shape=diamond, color=yellow];
5007[label="218.184.24.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.40.46.28:80, 128.165.171.29:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 43104: (4.54545%)&lt;BR/&gt; 443: (4.54545%)&lt;BR/&gt; 54652: (2.27273%)&lt;BR/&gt; 54645: (2.27273%)&gt;];
}
4011--5007[label="1;1pkt 1fpkt"];
4011--5199[label="0.047619;1pkt 1fpkt"];
4011--11720[label="0.117647;2pkt 2fpkt"];
4011--14030[label="0.125;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.171.29" src_ip="24.40.46.28" src_port="80"/>
    </slice>
    <from sec="1289451641" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
465[label="210.33.155.23;s;660pkt 660fpkt", shape=diamond, color=yellow];
2011[label="24.35.223.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
3052[label="2.44.55.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
4604[label="25.19.106.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
5353[label="7.157.170.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
5359[label="8.90.74.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
5864[label="80.96.142.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
6706[label="192.170.132.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
6804[label="14.44.33.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
8240[label="2.44.55.255;d;1pkt 1fpkt", shape=hexagon, color=black];
8493[label="192.170.132.89;d;1pkt 1fpkt", shape=hexagon, color=black];
8583[label="80.96.142.53;d;1pkt 1fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.155.23:8090, *:*}[41.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (30.0298%)&lt;BR/&gt; 8183: (8.27124%)&lt;BR/&gt; 80: (5.81222%)&lt;BR/&gt; 17573: (5.14158%)&lt;BR/&gt; 15000: (1.49031%)&gt;];
}
465--2011[label="1;1pkt 1fpkt"];
465--3052[label="1;1pkt 1fpkt"];
465--3843[label="0.02;1pkt 1fpkt"];
465--4604[label="1;1pkt 1fpkt"];
465--5353[label="1;1pkt 1fpkt"];
465--5359[label="1;1pkt 1fpkt"];
465--5864[label="1;1pkt 1fpkt"];
465--6706[label="1;1pkt 1fpkt"];
465--6804[label="1;1pkt 1fpkt"];
465--8240[label="1;1pkt 1fpkt"];
465--8493[label="1;1pkt 1fpkt"];
465--8583[label="1;1pkt 1fpkt"];
465--8664[label="0.00151515;1pkt 1fpkt"];
465--8688[label="0.0030303;2pkt 2fpkt"];
465--8743[label="0.00151515;1pkt 1fpkt"];
465--8765[label="0.0030303;2pkt 2fpkt"];
465--8790[label="0.00151515;1pkt 1fpkt"];
465--8811[label="0.0030303;2pkt 2fpkt"];
3052--8240[label="1;1pkt 1fpkt"];
5864--8583[label="1;1pkt 1fpkt"];
6706--8493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.33.155.23" src_port="8090"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
5322[label="211.185.146.170;s;105pkt 105fpkt", shape=diamond, color=yellow];
5973[label="9.138.239.52;d;131pkt 131fpkt", shape=diamond, color=yellow];
8252[label="9.138.239.52;d;104pkt 104fpkt", shape=hexagon, color=black];
11586[label="211.185.146.170;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.146.170:80, 9.138.239.52:*}[99.2958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7925%)&lt;BR/&gt; 4606: (0.414938%)&lt;BR/&gt; 4604: (0.414938%)&lt;BR/&gt; 4602: (0.414938%)&lt;BR/&gt; 4600: (0.414938%)&gt;];
}
5322--5973[label="0.990476;104pkt 104fpkt"];
5322--6483[label="0.00952381;1pkt 1fpkt"];
5322--8252[label="1;104pkt 104fpkt"];
5322--8684[label="0.0285714;3pkt 3fpkt"];
5322--8761[label="0.0285714;3pkt 3fpkt"];
5322--8807[label="0.0285714;3pkt 3fpkt"];
5322--11586[label="1;105pkt 105fpkt"];
5973--8252[label="1;104pkt 104fpkt"];
5973--8684[label="0.0458015;6pkt 6fpkt"];
5973--8761[label="0.0458015;6pkt 6fpkt"];
5973--8807[label="0.0458015;6pkt 6fpkt"];
5973--11586[label="1;131pkt 131fpkt"];
8252--8684[label="0.0288462;3pkt 3fpkt"];
8252--8761[label="0.0288462;3pkt 3fpkt"];
8252--8807[label="0.0288462;3pkt 3fpkt"];
8252--11586[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_ip="9.138.239.52" src_ip="211.185.146.170" src_port="80"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
4601[label="210.42.220.138;d;629pkt 629fpkt", shape=diamond, color=yellow];
8260[label="210.42.220.138;d;576pkt 576fpkt", shape=hexagon, color=black];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8090, 210.42.220.138:4647}[42.2893%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4647: (50%)&lt;BR/&gt; 8090: (21.2033%)&lt;BR/&gt; 10100: (1.12033%)&lt;BR/&gt; 10002: (1.03734%)&lt;BR/&gt; 10102: (0.954357%)&gt;];
}
4601--8260[label="1;576pkt 576fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.220.138" dst_port="4647" src_port="8090"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
630[label="168.77.54.166;d;2pkt 2fpkt", shape=diamond, color=yellow];
2803[label="128.19.201.127;s;14pkt 14fpkt", shape=diamond, color=yellow];
8164[label="168.77.54.166;d;2pkt 2fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.201.127:*, 43.89.184.92:80}[50%]&lt;BR/&gt;{128.19.201.127:*, 43.89.184.94:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1935: (16.6667%)&lt;BR/&gt; 49573: (8.33333%)&lt;BR/&gt; 49362: (8.33333%)&lt;BR/&gt; 49582: (2.77778%)&gt;];
}
630--2803[label="1;2pkt 2fpkt"];
630--8164[label="1;2pkt 2fpkt"];
2803--6128[label="0.0714286;1pkt 1fpkt"];
2803--8164[label="1;2pkt 2fpkt"];
2803--8294[label="0.0714286;1pkt 1fpkt"];
2803--8646[label="0.0714286;1pkt 1fpkt"];
2803--8664[label="0.214286;3pkt 3fpkt"];
2803--8743[label="0.214286;3pkt 3fpkt"];
2803--8790[label="0.214286;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="43.89.184.92" dst_port="80" src_ip="128.19.201.127"/>
      <filter dst_ip="43.89.184.94" dst_port="80" src_ip="128.19.201.127"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
3357[label="197.169.22.112;d;84pkt 84fpkt", shape=diamond, color=yellow];
3371[label="158.196.130.169;s;22pkt 22fpkt", shape=diamond, color=yellow];
4187[label="158.196.130.180;s;25pkt 25fpkt", shape=diamond, color=yellow];
6356[label="203.47.62.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
8327[label="197.169.22.112;d;84pkt 84fpkt", shape=hexagon, color=black];
11397[label="158.196.28.159;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11738[label="158.196.130.180;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13883[label="158.196.28.159;21pkt 21fpkt", shape=invtriangle, color=brown];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.130.180:80, 197.169.22.112:*}[26.5957%]&lt;BR/&gt;{158.196.130.169:80, 197.169.22.112:*}[22.3404%]&lt;BR/&gt;{158.196.28.159:80, *:*}[22.3404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54745: (0.711744%)&lt;BR/&gt; 54743: (0.711744%)&lt;BR/&gt; 54742: (0.711744%)&lt;BR/&gt; 54741: (0.711744%)&gt;];
}
3357--3371[label="0.954545;21pkt 21fpkt"];
3357--4187[label="1;25pkt 25fpkt"];
3357--8327[label="1;84pkt 84fpkt"];
3357--11397[label="0.6;12pkt 12fpkt"];
3357--11738[label="1;24pkt 24fpkt"];
3357--13883[label="0.571429;12pkt 12fpkt"];
3371--8327[label="0.954545;21pkt 21fpkt"];
4187--8327[label="1;25pkt 25fpkt"];
4187--11738[label="1;24pkt 24fpkt"];
6356--11397[label="1;1pkt 1fpkt"];
6356--13883[label="1;1pkt 1fpkt"];
8327--11397[label="0.6;12pkt 12fpkt"];
8327--11738[label="1;24pkt 24fpkt"];
8327--13883[label="0.571429;12pkt 12fpkt"];
11397--13883[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="158.196.28.159" src_port="80"/>
      <filter dst_ip="197.169.22.112" src_ip="158.196.130.180" src_port="80"/>
      <filter dst_ip="197.169.22.112" src_ip="158.196.130.169" src_port="80"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
4899[label="214.210.176.104;d;111pkt 111fpkt", shape=diamond, color=yellow];
8337[label="214.210.176.104;d;111pkt 111fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.179.88:*, 214.210.176.104:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57356: (0.45045%)&lt;BR/&gt; 57310: (0.45045%)&lt;BR/&gt; 57297: (0.45045%)&lt;BR/&gt; 57207: (0.45045%)&gt;];
}
4899--8337[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="214.210.176.104" dst_port="80" src_ip="166.26.179.88"/>
    </slice>
    <from sec="1289451845" usec="0"/>
    <to sec="1289452167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.102.142.9"/>
      <from sec="1289451908" usec="0"/>
      <to sec="1289452248" usec="0"/>
    </slice>
    <from sec="1289451908" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
4030[label="133.4.193.73;s;14pkt 14fpkt", shape=diamond, color=yellow];
6260[label="203.88.104.49;d;8pkt 8fpkt", shape=diamond, color=yellow];
10113[label="133.4.193.73;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.193.73:*, 203.88.104.49:80}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3175: (4.28571%)&lt;BR/&gt; 3167: (4.28571%)&lt;BR/&gt; 3158: (4.28571%)&lt;BR/&gt; 3156: (4.28571%)&gt;];
}
4030--6260[label="1;8pkt 8fpkt"];
4030--8395[label="0.0714286;1pkt 1fpkt"];
4030--8688[label="0.0714286;1pkt 1fpkt"];
4030--8765[label="0.0714286;1pkt 1fpkt"];
4030--8811[label="0.0714286;1pkt 1fpkt"];
4030--10113[label="1;13pkt 13fpkt"];
6260--8688[label="0.125;1pkt 1fpkt"];
6260--8765[label="0.125;1pkt 1fpkt"];
6260--8811[label="0.125;1pkt 1fpkt"];
6260--10113[label="0.875;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="203.88.104.49" dst_port="80" src_ip="133.4.193.73"/>
    </slice>
    <from sec="1289451662" usec="0"/>
    <to sec="1289452310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
4555[label="164.251.17.96;d;34pkt 34fpkt", shape=diamond, color=yellow];
8471[label="164.251.17.96;d;34pkt 34fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.251.17.96:5938}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5938: (45.5882%)&lt;BR/&gt; 40100: (4.41176%)&lt;BR/&gt; 64421: (1.47059%)&lt;BR/&gt; 62319: (1.47059%)&lt;BR/&gt; 61943: (1.47059%)&gt;];
}
4555--8471[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.17.96" dst_port="5938"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
4927[label="192.32.163.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
8530[label="192.32.163.26;d;1pkt 1fpkt", shape=hexagon, color=black];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.108.78:45841, 192.32.163.26:60945}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60945: (50%)&lt;BR/&gt; 45841: (50%)&gt;];
}
4927--8530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.32.163.26" dst_port="60945" src_ip="210.33.108.78" src_port="45841"/>
    </slice>
    <from sec="1289451880" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.152.34.131"/>
      <from sec="1289452024" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="53041552" usec="0"/>
    <to sec="53041456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
6355[label="85.135.72.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
8548[label="85.135.72.100;d;1pkt 1fpkt", shape=hexagon, color=black];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.144.19:80, 85.135.72.100:3543}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3543: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6355--8548[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.135.72.100" dst_port="3543" src_ip="211.185.144.19" src_port="80"/>
    </slice>
    <from sec="1289452108" usec="0"/>
    <to sec="1289452203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13745,3.59117,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="62.207.22.179"/>
      <from sec="1289452209" usec="0"/>
      <to sec="1289452338" usec="0"/>
    </slice>
    <from sec="1289452209" usec="0"/>
    <to sec="1289452338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
6236[label="128.19.153.12;s;80pkt 80fpkt", shape=diamond, color=yellow];
6383[label="219.224.210.186;d;27pkt 27fpkt", shape=diamond, color=yellow];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.153.12:*, 219.224.210.186:80}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5327%)&lt;BR/&gt; 50351: (0.934579%)&lt;BR/&gt; 50349: (0.934579%)&lt;BR/&gt; 50344: (0.934579%)&lt;BR/&gt; 50343: (0.934579%)&gt;];
}
6236--6383[label="1;27pkt 27fpkt"];
6236--8036[label="0.0125;1pkt 1fpkt"];
6236--8131[label="0.025;2pkt 2fpkt"];
6236--8420[label="0.0125;1pkt 1fpkt"];
6236--8578[label="0.0875;7pkt 7fpkt"];
6236--8688[label="0.0125;1pkt 1fpkt"];
6236--8765[label="0.0125;1pkt 1fpkt"];
6236--8811[label="0.0125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.224.210.186" dst_port="80" src_ip="128.19.153.12"/>
    </slice>
    <from sec="1289451896" usec="0"/>
    <to sec="1289452391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
833[label="133.4.237.147;s;70pkt 70fpkt", shape=diamond, color=yellow];
2378[label="9.138.246.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
2864[label="7.46.47.36;d;4pkt 4fpkt", shape=diamond, color=yellow];
3022[label="187.167.192.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
3435[label="25.114.80.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
5569[label="25.178.17.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
7956[label="9.138.246.94;d;1pkt 1fpkt", shape=hexagon, color=black];
11245[label="133.4.237.147;140pkt 140fpkt", shape=pentagon, color=darkviolet];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.237.147:*, 14.198.129.243:80}[28.3688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.2785%)&lt;BR/&gt; 21749: (7.53425%)&lt;BR/&gt; 4558: (6.16438%)&lt;BR/&gt; 443: (2.73973%)&lt;BR/&gt; 17632: (1.82648%)&gt;];
}
833--2378[label="1;1pkt 1fpkt"];
833--2488[label="0.0571429;4pkt 4fpkt"];
833--2864[label="0.25;1pkt 1fpkt"];
833--3022[label="1;1pkt 1fpkt"];
833--3024[label="0.0142857;1pkt 1fpkt"];
833--5569[label="1;1pkt 1fpkt"];
833--7956[label="1;1pkt 1fpkt"];
833--8596[label="0.0571429;4pkt 4fpkt"];
833--8664[label="0.0428571;3pkt 3fpkt"];
833--8688[label="0.0142857;1pkt 1fpkt"];
833--8743[label="0.0428571;3pkt 3fpkt"];
833--8765[label="0.0142857;1pkt 1fpkt"];
833--8790[label="0.0428571;3pkt 3fpkt"];
833--8811[label="0.0142857;1pkt 1fpkt"];
833--11245[label="0.985714;69pkt 69fpkt"];
2378--7956[label="1;1pkt 1fpkt"];
2378--11245[label="1;1pkt 1fpkt"];
2864--11245[label="1;4pkt 4fpkt"];
3022--11245[label="1;1pkt 1fpkt"];
3435--11245[label="1;1pkt 1fpkt"];
5569--11245[label="1;1pkt 1fpkt"];
7956--11245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="14.198.129.243" dst_port="80" src_ip="133.4.237.147"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21401,3.55792,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
7342[label="158.196.16.18;s;19pkt 19fpkt", shape=diamond, color=yellow];
7434[label="203.47.62.182;d;3pkt 3fpkt", shape=diamond, color=yellow];
8606[label="203.47.62.182;d;3pkt 3fpkt", shape=hexagon, color=black];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.16.18:80, 42.146.68.124:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46%)&lt;BR/&gt; 45125: (6%)&lt;BR/&gt; 61402: (4%)&lt;BR/&gt; 45495: (4%)&lt;BR/&gt; 8090: (4%)&gt;];
}
7342--7434[label="0.333333;1pkt 1fpkt"];
7342--8606[label="0.333333;1pkt 1fpkt"];
7434--8606[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.124" src_ip="158.196.16.18" src_port="80"/>
    </slice>
    <from sec="1289451654" usec="0"/>
    <to sec="1289452414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
1885[label="211.185.158.172;s;807pkt 807fpkt", shape=diamond, color=yellow];
3547[label="128.19.148.52;s;112pkt 112fpkt", shape=diamond, color=yellow];
5738[label="214.83.224.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
8377[label="214.83.224.209;d;2pkt 2fpkt", shape=hexagon, color=black];
11621[label="211.185.158.172;875pkt 875fpkt", shape=pentagon, color=darkviolet];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.158.172:*, *:80}[68.8889%]&lt;BR/&gt;{*:*, *:443}[21.5152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.9055%)&lt;BR/&gt; 443: (9.56618%)&lt;BR/&gt; 8443: (0.361513%)&lt;BR/&gt; 0: (0.111235%)&lt;BR/&gt; 50638: (0.083426%)&gt;];
}
1885--1886[label="0.00303951;1pkt 1fpkt"];
1885--2149[label="0.00371747;3pkt 3fpkt"];
1885--2160[label="0.00295858;1pkt 1fpkt"];
1885--2173[label="0.0101868;6pkt 6fpkt"];
1885--2194[label="0.00414938;1pkt 1fpkt"];
1885--2213[label="0.003003;1pkt 1fpkt"];
1885--2222[label="0.00578035;2pkt 2fpkt"];
1885--2254[label="0.00178253;1pkt 1fpkt"];
1885--2262[label="0.00757576;1pkt 1fpkt"];
1885--2340[label="0.00977199;3pkt 3fpkt"];
1885--3119[label="0.00651466;2pkt 2fpkt"];
1885--3297[label="0.0227273;1pkt 1fpkt"];
1885--4002[label="0.0252101;3pkt 3fpkt"];
1885--4197[label="0.0046729;1pkt 1fpkt"];
1885--4559[label="0.0097561;2pkt 2fpkt"];
1885--5266[label="0.0309278;3pkt 3fpkt"];
1885--5332[label="0.0337079;3pkt 3fpkt"];
1885--5433[label="0.0298507;2pkt 2fpkt"];
1885--5818[label="0.1;1pkt 1fpkt"];
1885--6128[label="0.0101523;2pkt 2fpkt"];
1885--6483[label="0.00123916;1pkt 1fpkt"];
1885--8203[label="0.00417827;3pkt 3fpkt"];
1885--8218[label="0.0045045;3pkt 3fpkt"];
1885--8249[label="0.00623053;2pkt 2fpkt"];
1885--8294[label="0.0166667;2pkt 2fpkt"];
1885--8432[label="0.00303951;1pkt 1fpkt"];
1885--8515[label="0.0267857;3pkt 3fpkt"];
1885--8519[label="0.0227273;1pkt 1fpkt"];
1885--8646[label="0.0166667;2pkt 2fpkt"];
1885--8664[label="0.00123916;1pkt 1fpkt"];
1885--8666[label="0.0123916;10pkt 10fpkt"];
1885--8688[label="0.00371747;3pkt 3fpkt"];
1885--8689[label="0.00619579;5pkt 5fpkt"];
1885--8743[label="0.00123916;1pkt 1fpkt"];
1885--8745[label="0.0123916;10pkt 10fpkt"];
1885--8765[label="0.00371747;3pkt 3fpkt"];
1885--8766[label="0.00619579;5pkt 5fpkt"];
1885--8790[label="0.00123916;1pkt 1fpkt"];
1885--8792[label="0.0123916;10pkt 10fpkt"];
1885--8811[label="0.00371747;3pkt 3fpkt"];
1885--8812[label="0.00619579;5pkt 5fpkt"];
1885--11621[label="0.997522;805pkt 805fpkt"];
3547--3671[label="0.0178571;2pkt 2fpkt"];
3547--3745[label="0.00892857;1pkt 1fpkt"];
3547--5738[label="0.5;1pkt 1fpkt"];
3547--6018[label="0.00892857;1pkt 1fpkt"];
3547--8377[label="0.5;1pkt 1fpkt"];
3547--8432[label="0.0178571;2pkt 2fpkt"];
3547--8452[label="0.0535714;6pkt 6fpkt"];
3547--8666[label="0.00892857;1pkt 1fpkt"];
3547--8688[label="0.0178571;2pkt 2fpkt"];
3547--8689[label="0.00892857;1pkt 1fpkt"];
3547--8745[label="0.00892857;1pkt 1fpkt"];
3547--8765[label="0.0178571;2pkt 2fpkt"];
3547--8766[label="0.00892857;1pkt 1fpkt"];
3547--8792[label="0.00892857;1pkt 1fpkt"];
3547--8811[label="0.0178571;2pkt 2fpkt"];
3547--8812[label="0.00892857;1pkt 1fpkt"];
5738--8377[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="443"/>
      <filter dst_port="80" src_ip="211.185.158.172"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
525[label="210.42.212.221;d;1070pkt 1070fpkt", shape=diamond, color=yellow];
1474[label="42.146.68.238;d;13pkt 13fpkt", shape=diamond, color=yellow];
1647[label="210.42.212.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
1650[label="213.131.246.253;s;2pkt 2fpkt", shape=diamond, color=yellow];
1657[label="133.4.164.9;d;474pkt 474fpkt", shape=diamond, color=yellow];
1784[label="35.51.1.144;s;175pkt 175fpkt", shape=diamond, color=yellow];
2775[label="35.51.1.146;s;15pkt 15fpkt", shape=diamond, color=yellow];
3344[label="1.32.164.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
3349[label="81.75.34.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
4768[label="128.7.125.82;s;38pkt 38fpkt", shape=diamond, color=yellow];
5133[label="6.166.157.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
7373[label="2.12.228.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
7428[label="158.196.130.1;s;5pkt 5fpkt", shape=diamond, color=yellow];
7532[label="35.51.1.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
7571[label="5.169.237.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
7623[label="182.7.205.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
8132[label="210.42.212.219;d;1pkt 1fpkt", shape=hexagon, color=black];
8856[label="158.196.130.1;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10264[label="128.7.125.82;40pkt 40fpkt", shape=pentagon, color=darkviolet];
10477[label="220.102.134.97;26pkt 26fpkt", shape=pentagon, color=darkviolet];
11216[label="35.51.1.146;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11298[label="35.51.1.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11828[label="84.68.234.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12069[label="171.55.85.205;23pkt 23fpkt", shape=pentagon, color=darkviolet];
12528[label="112.146.151.238;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12686[label="213.131.246.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12708[label="158.196.130.1;8pkt 8fpkt", shape=invtriangle, color=brown];
12746[label="1.32.164.5;1pkt 1fpkt", shape=invtriangle, color=brown];
13478[label="220.102.134.97;27pkt 27fpkt", shape=invtriangle, color=brown];
13798[label="35.51.1.146;16pkt 16fpkt", shape=invtriangle, color=brown];
14180[label="171.55.85.205;23pkt 23fpkt", shape=invtriangle, color=brown];
14455[label="213.131.246.253;2pkt 2fpkt", shape=invtriangle, color=brown];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.42.212.221:*}[66.9788%]&lt;BR/&gt;{*:*, 133.4.164.9:*}[29.588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (14.036%)&lt;BR/&gt; 80: (8.64136%)&lt;BR/&gt; 53: (6.34366%)&lt;BR/&gt; 12312: (5.51948%)&lt;BR/&gt; 4543: (4.07093%)&gt;];
}
525--860[label="0.00357143;3pkt 3fpkt"];
525--1213[label="0.0348259;7pkt 7fpkt"];
525--1650[label="0.5;1pkt 1fpkt"];
525--1653[label="0.00389105;1pkt 1fpkt"];
525--1774[label="0.00373832;4pkt 4fpkt"];
525--1784[label="1;175pkt 175fpkt"];
525--1794[label="0.00392157;1pkt 1fpkt"];
525--1914[label="0.00367647;1pkt 1fpkt"];
525--2050[label="0.00516351;3pkt 3fpkt"];
525--2086[label="0.00362319;1pkt 1fpkt"];
525--2161[label="0.00617284;1pkt 1fpkt"];
525--2168[label="0.00925926;3pkt 3fpkt"];
525--2200[label="0.0140845;1pkt 1fpkt"];
525--2280[label="0.00436681;1pkt 1fpkt"];
525--2715[label="0.0075188;3pkt 3fpkt"];
525--2748[label="0.00469484;1pkt 1fpkt"];
525--2775[label="1;15pkt 15fpkt"];
525--2782[label="0.0168067;2pkt 2fpkt"];
525--2858[label="0.0045045;1pkt 1fpkt"];
525--2914[label="0.0204082;2pkt 2fpkt"];
525--2933[label="0.00909091;3pkt 3fpkt"];
525--2942[label="0.00215517;1pkt 1fpkt"];
525--2968[label="0.00646552;3pkt 3fpkt"];
525--3079[label="0.0166667;1pkt 1fpkt"];
525--3220[label="0.0135135;1pkt 1fpkt"];
525--3621[label="0.0037037;1pkt 1fpkt"];
525--3672[label="0.0120482;2pkt 2fpkt"];
525--3711[label="0.00381679;1pkt 1fpkt"];
525--3715[label="0.00653595;1pkt 1fpkt"];
525--3819[label="0.00950119;4pkt 4fpkt"];
525--3893[label="0.0111111;1pkt 1fpkt"];
525--3925[label="0.0357143;1pkt 1fpkt"];
525--4322[label="0.00892857;1pkt 1fpkt"];
525--4382[label="0.00622407;3pkt 3fpkt"];
525--4481[label="0.00506329;2pkt 2fpkt"];
525--4505[label="0.00367647;1pkt 1fpkt"];
525--4512[label="0.0196078;1pkt 1fpkt"];
525--4515[label="0.00571429;1pkt 1fpkt"];
525--4804[label="0.025;1pkt 1fpkt"];
525--5141[label="0.0317757;34pkt 34fpkt"];
525--5420[label="0.0194175;2pkt 2fpkt"];
525--6507[label="0.00401606;1pkt 1fpkt"];
525--6726[label="0.05;1pkt 1fpkt"];
525--7081[label="0.00615385;4pkt 4fpkt"];
525--7216[label="0.113208;6pkt 6fpkt"];
525--7532[label="1;1pkt 1fpkt"];
525--7623[label="1;1pkt 1fpkt"];
525--8658[label="0.00790514;8pkt 8fpkt"];
525--8676[label="0.00841121;9pkt 9fpkt"];
525--8684[label="0.017757;19pkt 19fpkt"];
525--8685[label="0.0205607;22pkt 22fpkt"];
525--8696[label="0.00186916;2pkt 2fpkt"];
525--8738[label="0.00790514;8pkt 8fpkt"];
525--8761[label="0.017757;19pkt 19fpkt"];
525--8762[label="0.0205607;22pkt 22fpkt"];
525--8773[label="0.00186916;2pkt 2fpkt"];
525--8787[label="0.00790514;8pkt 8fpkt"];
525--8807[label="0.017757;19pkt 19fpkt"];
525--8808[label="0.0205607;22pkt 22fpkt"];
525--8819[label="0.00186916;2pkt 2fpkt"];
525--9153[label="0.0289855;8pkt 8fpkt"];
525--9440[label="0.00766284;2pkt 2fpkt"];
525--9528[label="0.00228833;1pkt 1fpkt"];
525--9780[label="0.00471698;1pkt 1fpkt"];
525--10224[label="0.00294985;1pkt 1fpkt"];
525--10265[label="0.0238095;1pkt 1fpkt"];
525--10549[label="0.0108696;1pkt 1fpkt"];
525--10584[label="0.0185185;1pkt 1fpkt"];
525--10655[label="0.047619;1pkt 1fpkt"];
525--10656[label="0.0028169;1pkt 1fpkt"];
525--10662[label="0.011236;2pkt 2fpkt"];
525--10671[label="0.00699301;1pkt 1fpkt"];
525--11054[label="0.0121951;1pkt 1fpkt"];
525--11123[label="0.05;1pkt 1fpkt"];
525--11216[label="1;15pkt 15fpkt"];
525--11298[label="1;1pkt 1fpkt"];
525--11432[label="0.0833333;1pkt 1fpkt"];
525--11488[label="0.046875;3pkt 3fpkt"];
525--11557[label="0.047619;1pkt 1fpkt"];
525--11668[label="0.0909091;1pkt 1fpkt"];
525--12069[label="0.73913;17pkt 17fpkt"];
525--12356[label="0.007109;3pkt 3fpkt"];
525--12528[label="0.625;5pkt 5fpkt"];
525--12990[label="0.00763359;2pkt 2fpkt"];
525--13354[label="0.00294985;1pkt 1fpkt"];
525--13379[label="0.0238095;1pkt 1fpkt"];
525--13551[label="0.0028169;1pkt 1fpkt"];
525--13553[label="0.0112994;2pkt 2fpkt"];
525--13763[label="0.05;1pkt 1fpkt"];
525--13798[label="1;16pkt 16fpkt"];
525--13926[label="0.046875;3pkt 3fpkt"];
525--13969[label="0.012987;1pkt 1fpkt"];
525--14009[label="0.0833333;1pkt 1fpkt"];
525--14180[label="0.73913;17pkt 17fpkt"];
525--14455[label="0.5;1pkt 1fpkt"];
525--14775[label="0.0238095;1pkt 1fpkt"];
525--15060[label="0.0909091;1pkt 1fpkt"];
1474--4768[label="0.769231;10pkt 10fpkt"];
1474--7428[label="0.4;2pkt 2fpkt"];
1474--8685[label="0.0769231;1pkt 1fpkt"];
1474--8762[label="0.0769231;1pkt 1fpkt"];
1474--8808[label="0.0769231;1pkt 1fpkt"];
1474--8856[label="0.375;3pkt 3fpkt"];
1474--10264[label="0.769231;10pkt 10fpkt"];
1474--12708[label="0.375;3pkt 3fpkt"];
1647--1650[label="1;1pkt 1fpkt"];
1647--8132[label="1;1pkt 1fpkt"];
1647--12686[label="1;1pkt 1fpkt"];
1647--14455[label="1;1pkt 1fpkt"];
1650--8132[label="1;1pkt 1fpkt"];
1650--12686[label="1;1pkt 1fpkt"];
1650--14455[label="1;2pkt 2fpkt"];
1657--2330[label="0.0083682;2pkt 2fpkt"];
1657--2767[label="0.00819672;3pkt 3fpkt"];
1657--3344[label="1;1pkt 1fpkt"];
1657--3349[label="1;1pkt 1fpkt"];
1657--3818[label="0.0294118;6pkt 6fpkt"];
1657--5133[label="1;1pkt 1fpkt"];
1657--5912[label="0.0688259;17pkt 17fpkt"];
1657--6800[label="1;1pkt 1fpkt"];
1657--7373[label="1;2pkt 2fpkt"];
1657--7571[label="1;1pkt 1fpkt"];
1657--8684[label="0.0168776;8pkt 8fpkt"];
1657--8685[label="0.00421941;2pkt 2fpkt"];
1657--8761[label="0.0168776;8pkt 8fpkt"];
1657--8762[label="0.00421941;2pkt 2fpkt"];
1657--8807[label="0.0168776;8pkt 8fpkt"];
1657--8808[label="0.00421941;2pkt 2fpkt"];
1657--10345[label="0.00260417;1pkt 1fpkt"];
1657--10477[label="1;26pkt 26fpkt"];
1657--11828[label="1;1pkt 1fpkt"];
1657--12370[label="0.00961538;1pkt 1fpkt"];
1657--12746[label="1;1pkt 1fpkt"];
1657--13415[label="0.00261097;1pkt 1fpkt"];
1657--13478[label="1;27pkt 27fpkt"];
1784--8685[label="0.0628571;11pkt 11fpkt"];
1784--8762[label="0.0628571;11pkt 11fpkt"];
1784--8808[label="0.0628571;11pkt 11fpkt"];
2775--11216[label="0.933333;14pkt 14fpkt"];
2775--13798[label="1;15pkt 15fpkt"];
3344--12746[label="1;1pkt 1fpkt"];
4768--8684[label="0.157895;6pkt 6fpkt"];
4768--8685[label="0.0263158;1pkt 1fpkt"];
4768--8761[label="0.157895;6pkt 6fpkt"];
4768--8762[label="0.0263158;1pkt 1fpkt"];
4768--8807[label="0.157895;6pkt 6fpkt"];
4768--8808[label="0.0263158;1pkt 1fpkt"];
4768--10264[label="1;38pkt 38fpkt"];
7428--8856[label="1;5pkt 5fpkt"];
7428--12708[label="1;5pkt 5fpkt"];
8132--12686[label="1;1pkt 1fpkt"];
8132--14455[label="1;1pkt 1fpkt"];
8856--12708[label="1;8pkt 8fpkt"];
10477--13478[label="1;26pkt 26fpkt"];
11216--13798[label="1;15pkt 15fpkt"];
12069--14180[label="1;23pkt 23fpkt"];
12686--14455[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.212.221"/>
      <filter dst_ip="133.4.164.9"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.5.0"/>
    </slice>
    <from sec="1289451808" usec="0"/>
    <to sec="1289451825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.72.24.0"/>
    </slice>
    <from sec="1289451717" usec="0"/>
    <to sec="1289451986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.141.0"/>
    </slice>
    <from sec="1289451652" usec="0"/>
    <to sec="1289451658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.150.190.1"/>
    </slice>
    <from sec="1289451606" usec="0"/>
    <to sec="1289452481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.162.177.2"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.81.3"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.138.39.4"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.149.141.4"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.128.43.5"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289452027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.146.68.5"/>
    </slice>
    <from sec="1289451661" usec="0"/>
    <to sec="1289451672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.192.126.5"/>
    </slice>
    <from sec="48553064" usec="0"/>
    <to sec="48553064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.162.149.5"/>
    </slice>
    <from sec="1289452416" usec="0"/>
    <to sec="1289452430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.32.164.5"/>
    </slice>
    <from sec="1289451705" usec="0"/>
    <to sec="1289452309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.64.165.5"/>
    </slice>
    <from sec="1289452103" usec="0"/>
    <to sec="1289452114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.34.196.5"/>
    </slice>
    <from sec="1289451826" usec="0"/>
    <to sec="1289451852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.137.6.6"/>
    </slice>
    <from sec="1289452310" usec="0"/>
    <to sec="1289452454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.59.6"/>
    </slice>
    <from sec="1289451678" usec="0"/>
    <to sec="1289451681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.236.69.6"/>
    </slice>
    <from sec="1289452165" usec="0"/>
    <to sec="1289452179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
8946[label="50.30.86.6;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.30.86.6:418, *:80}[33.5106%]&lt;BR/&gt;{50.30.86.6:418, *:3128}[32.9787%]&lt;BR/&gt;{50.30.86.6:418, *:8080}[32.4468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 418: (49.4681%)&lt;BR/&gt; 80: (17.2872%)&lt;BR/&gt; 3128: (16.4894%)&lt;BR/&gt; 8080: (16.2234%)&lt;BR/&gt; 56717: (0.265957%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="50.30.86.6" src_port="418"/>
      <filter dst_port="3128" src_ip="50.30.86.6" src_port="418"/>
      <filter dst_port="8080" src_ip="50.30.86.6" src_port="418"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.25.96.7"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.112.7"/>
    </slice>
    <from sec="1289452465" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.230.144.7"/>
    </slice>
    <from sec="1289452267" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.176.7"/>
    </slice>
    <from sec="1289451686" usec="0"/>
    <to sec="1289451698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.172.193.7"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.218.69.8"/>
    </slice>
    <from sec="1289452337" usec="0"/>
    <to sec="1289452387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.201.116.8"/>
    </slice>
    <from sec="1289452158" usec="0"/>
    <to sec="1289452203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.22.209.8"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.105.235.8"/>
    </slice>
    <from sec="1289452196" usec="0"/>
    <to sec="1289452209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.69.96.10"/>
    </slice>
    <from sec="1289451865" usec="0"/>
    <to sec="1289451891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.190.10"/>
    </slice>
    <from sec="1289451646" usec="0"/>
    <to sec="1289452222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.77.201.10"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.9.134.11"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.83.140.11"/>
    </slice>
    <from sec="1289451942" usec="0"/>
    <to sec="1289452006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.15.12"/>
    </slice>
    <from sec="1289452287" usec="0"/>
    <to sec="1289452305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.128.43.12"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.51.1.13"/>
    </slice>
    <from sec="1289452282" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.104.174.13"/>
    </slice>
    <from sec="1289452060" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.129.212.13"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289451760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.58.65.14"/>
    </slice>
    <from sec="1289452205" usec="0"/>
    <to sec="1289452227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.154.102.14"/>
    </slice>
    <from sec="1289451712" usec="0"/>
    <to sec="1289452412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.50.112.14"/>
    </slice>
    <from sec="1289452406" usec="0"/>
    <to sec="1289452410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.69.114.14"/>
    </slice>
    <from sec="1289451809" usec="0"/>
    <to sec="1289451918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.146.14"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.154.14"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.36.194.14"/>
    </slice>
    <from sec="1289451732" usec="0"/>
    <to sec="1289451994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.17.203.14"/>
    </slice>
    <from sec="1289452227" usec="0"/>
    <to sec="1289452448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.216.14"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.137.45.15"/>
    </slice>
    <from sec="1289451921" usec="0"/>
    <to sec="1289451934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.49.112.15"/>
    </slice>
    <from sec="1289451857" usec="0"/>
    <to sec="1289451945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.160.15"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.38.198.15"/>
    </slice>
    <from sec="1289452072" usec="0"/>
    <to sec="1289452093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.5.37.16"/>
    </slice>
    <from sec="1289451669" usec="0"/>
    <to sec="1289451929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.80.70.16"/>
    </slice>
    <from sec="1289451654" usec="0"/>
    <to sec="1289451667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.73.185.16"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.226.51.17"/>
    </slice>
    <from sec="1289451652" usec="0"/>
    <to sec="1289452473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.148.120.17"/>
    </slice>
    <from sec="1289452060" usec="0"/>
    <to sec="1289452064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.123.18"/>
    </slice>
    <from sec="1289452124" usec="0"/>
    <to sec="1289452136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
7268[label="211.185.132.18;s;29pkt 29fpkt", shape=diamond, color=yellow];
9171[label="211.185.132.18;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.132.18:*, 213.30.224.185:80}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4576%)&lt;BR/&gt; 1061: (2.54237%)&lt;BR/&gt; 61743: (1.69492%)&lt;BR/&gt; 2928: (1.69492%)&lt;BR/&gt; 2919: (1.69492%)&gt;];
}
7268--8664[label="0.0689655;2pkt 2fpkt"];
7268--8688[label="0.0344828;1pkt 1fpkt"];
7268--8743[label="0.0689655;2pkt 2fpkt"];
7268--8765[label="0.0344828;1pkt 1fpkt"];
7268--8790[label="0.0689655;2pkt 2fpkt"];
7268--8811[label="0.0344828;1pkt 1fpkt"];
7268--9171[label="0.965517;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="213.30.224.185" dst_port="80" src_ip="211.185.132.18"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.139.6.19"/>
    </slice>
    <from sec="1289451933" usec="0"/>
    <to sec="1289451952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.62.19"/>
    </slice>
    <from sec="1289451762" usec="0"/>
    <to sec="1289451773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.84.19"/>
    </slice>
    <from sec="1289452432" usec="0"/>
    <to sec="1289452445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.17.109.19"/>
    </slice>
    <from sec="1289452333" usec="0"/>
    <to sec="1289452344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.74.203.19"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.152.20"/>
    </slice>
    <from sec="1289452051" usec="0"/>
    <to sec="1289452473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.182.220.20"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.194.225.20"/>
    </slice>
    <from sec="1289452010" usec="0"/>
    <to sec="1289452331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.201.236.20"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289451797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.249.251.20"/>
    </slice>
    <from sec="1289451705" usec="0"/>
    <to sec="1289451810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.116.37.21"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.131.61.21"/>
    </slice>
    <from sec="1289451951" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.139.65.21"/>
    </slice>
    <from sec="1289452226" usec="0"/>
    <to sec="1289452320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
4493[label="133.4.2.0;s;327pkt 327fpkt", shape=diamond, color=yellow];
7017[label="176.196.2.132;d;22pkt 22fpkt", shape=diamond, color=yellow];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.2.0:*, *:80}[99.3884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7135%)&lt;BR/&gt; 4844: (0.286533%)&lt;BR/&gt; 4842: (0.286533%)&lt;BR/&gt; 4838: (0.286533%)&lt;BR/&gt; 4832: (0.286533%)&gt;];
}
4493--4710[label="0.0217391;1pkt 1fpkt"];
4493--4810[label="0.277778;30pkt 30fpkt"];
4493--5314[label="0.0454545;8pkt 8fpkt"];
4493--5337[label="0.0503597;7pkt 7fpkt"];
4493--5458[label="0.0178571;1pkt 1fpkt"];
4493--6157[label="0.0384615;6pkt 6fpkt"];
4493--7017[label="1;22pkt 22fpkt"];
4493--7996[label="0.00537634;1pkt 1fpkt"];
4493--8664[label="0.0030581;1pkt 1fpkt"];
4493--8688[label="0.0397554;13pkt 13fpkt"];
4493--8743[label="0.0030581;1pkt 1fpkt"];
4493--8765[label="0.0397554;13pkt 13fpkt"];
4493--8790[label="0.0030581;1pkt 1fpkt"];
4493--8811[label="0.0397554;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.2.0"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.1.197.21"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289452322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.216.21"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.146.85.22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.178.23"/>
    </slice>
    <from sec="1289451872" usec="0"/>
    <to sec="1289451883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.217.23"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.10.65.24"/>
    </slice>
    <from sec="1289452053" usec="0"/>
    <to sec="1289452056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.118.24"/>
    </slice>
    <from sec="1289452479" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.131.166.24"/>
    </slice>
    <from sec="1289451812" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.186.168.24"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.129.225.24"/>
    </slice>
    <from sec="1289452352" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.100.0.25"/>
    </slice>
    <from sec="1289451764" usec="0"/>
    <to sec="1289452170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.185.10.25"/>
    </slice>
    <from sec="1289451725" usec="0"/>
    <to sec="1289451739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.3.40.25"/>
    </slice>
    <from sec="1289451622" usec="0"/>
    <to sec="1289451730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.230.138.25"/>
    </slice>
    <from sec="1289451823" usec="0"/>
    <to sec="1289451854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.189.25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.22.26"/>
    </slice>
    <from sec="1289452297" usec="0"/>
    <to sec="1289452309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.249.95.26"/>
    </slice>
    <from sec="1289451645" usec="0"/>
    <to sec="1289451649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
4843[label="133.4.203.90;d;14pkt 14fpkt", shape=diamond, color=yellow];
9317[label="194.52.104.26;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12924[label="194.52.104.26;5pkt 5fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.52.104.10:80, 133.4.203.90:*}[42.8571%]&lt;BR/&gt;{194.52.104.26:80, 133.4.203.90:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49661: (6.25%)&lt;BR/&gt; 49660: (6.25%)&lt;BR/&gt; 49659: (6.25%)&lt;BR/&gt; 49658: (6.25%)&gt;];
}
4843--9317[label="1;5pkt 5fpkt"];
4843--12924[label="1;5pkt 5fpkt"];
9317--12924[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.203.90" src_ip="194.52.104.26" src_port="80"/>
      <filter dst_ip="133.4.203.90" src_ip="194.52.104.10" src_port="80"/>
    </slice>
    <from sec="1289451697" usec="0"/>
    <to sec="1289452062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.36.163.26"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.143.167.26"/>
    </slice>
    <from sec="1289451780" usec="0"/>
    <to sec="1289451807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.238.29.27"/>
    </slice>
    <from sec="1289452067" usec="0"/>
    <to sec="1289452080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.93.117.27"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.95.178.27"/>
    </slice>
    <from sec="1289451889" usec="0"/>
    <to sec="1289451901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.224.176.28"/>
    </slice>
    <from sec="1289451893" usec="0"/>
    <to sec="1289451907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.146.56.29"/>
    </slice>
    <from sec="1289451941" usec="0"/>
    <to sec="1289452164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.62.30"/>
    </slice>
    <from sec="1289452067" usec="0"/>
    <to sec="1289452078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.95.64.30"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.87.131.30"/>
    </slice>
    <from sec="1289451657" usec="0"/>
    <to sec="1289451661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.128.139.30"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.217.30"/>
    </slice>
    <from sec="1289452439" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.238.241.30"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.238.219.31"/>
    </slice>
    <from sec="1289452139" usec="0"/>
    <to sec="1289452146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.203.10.32"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.145.149.32"/>
    </slice>
    <from sec="1289452089" usec="0"/>
    <to sec="1289452094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.239.109.33"/>
    </slice>
    <from sec="1289452357" usec="0"/>
    <to sec="1289452377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.41.122.33"/>
    </slice>
    <from sec="1289451753" usec="0"/>
    <to sec="1289451796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.222.31.34"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.60.34"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.27.113.34"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.162.123.34"/>
    </slice>
    <from sec="1289451711" usec="0"/>
    <to sec="1289451780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.0.210.34"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.212.34"/>
    </slice>
    <from sec="1289451673" usec="0"/>
    <to sec="1289452486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.217.34"/>
    </slice>
    <from sec="1289451743" usec="0"/>
    <to sec="1289451755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
769[label="128.19.151.67;d;98pkt 98fpkt", shape=diamond, color=yellow];
2850[label="192.140.217.243;s;5pkt 5fpkt", shape=diamond, color=yellow];
3923[label="8.192.236.34;s;53pkt 53fpkt", shape=diamond, color=yellow];
5004[label="7.217.6.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
9460[label="8.192.236.34;53pkt 53fpkt", shape=pentagon, color=darkviolet];
10248[label="192.140.193.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.192.236.34:80, 128.19.151.67:*}[54.0816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.763%)&lt;BR/&gt; 49463: (0.7109%)&lt;BR/&gt; 49462: (0.7109%)&lt;BR/&gt; 49461: (0.7109%)&lt;BR/&gt; 49460: (0.7109%)&gt;];
}
769--2850[label="1;5pkt 5fpkt"];
769--3923[label="1;53pkt 53fpkt"];
769--5004[label="1;1pkt 1fpkt"];
769--8684[label="0.0102041;1pkt 1fpkt"];
769--8761[label="0.0102041;1pkt 1fpkt"];
769--8807[label="0.0102041;1pkt 1fpkt"];
769--9460[label="1;53pkt 53fpkt"];
769--10248[label="1;1pkt 1fpkt"];
3923--9460[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.151.67" src_ip="8.192.236.34" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.185.6.35"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.169.8.35"/>
    </slice>
    <from sec="1289452258" usec="0"/>
    <to sec="1289452266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.76.89.35"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.242.96.35"/>
    </slice>
    <from sec="1289452108" usec="0"/>
    <to sec="1289452132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.219.138.36"/>
    </slice>
    <from sec="1289451735" usec="0"/>
    <to sec="1289452103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.148.36"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
7173[label="211.185.155.36;s;625pkt 625fpkt", shape=diamond, color=yellow];
9494[label="211.185.155.36;628pkt 628fpkt", shape=pentagon, color=darkviolet];
13018[label="211.185.155.36;628pkt 628fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.155.36:0, *:0}[99.8413%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8405%)&lt;BR/&gt; 6000: (0.0797448%)&lt;BR/&gt; 4899: (0.0797448%)&gt;];
}
7173--9494[label="0.9968;623pkt 623fpkt"];
7173--13018[label="0.9968;623pkt 623fpkt"];
9494--13018[label="1;628pkt 628fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.155.36"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.83.169.36"/>
    </slice>
    <from sec="1289451709" usec="0"/>
    <to sec="1289451725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.242.236.36"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289451735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.109.12.38"/>
    </slice>
    <from sec="1289452281" usec="0"/>
    <to sec="1289452298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.171.57.39"/>
    </slice>
    <from sec="1289452227" usec="0"/>
    <to sec="1289452240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.101.106.39"/>
    </slice>
    <from sec="1289452345" usec="0"/>
    <to sec="1289452365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
1582[label="166.26.115.40;s;98pkt 98fpkt", shape=diamond, color=yellow];
2682[label="32.176.21.100;d;2pkt 2fpkt", shape=diamond, color=yellow];
9560[label="166.26.115.40;98pkt 98fpkt", shape=pentagon, color=darkviolet];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.115.40:13511, *:17788}[50.5051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13511: (43.6869%)&lt;BR/&gt; 17788: (25.2525%)&lt;BR/&gt; 80: (4.54545%)&lt;BR/&gt; 8800: (4.0404%)&lt;BR/&gt; 8400: (3.53535%)&gt;];
}
1582--2682[label="0.5;1pkt 1fpkt"];
1582--8664[label="0.0306122;3pkt 3fpkt"];
1582--8743[label="0.0306122;3pkt 3fpkt"];
1582--8790[label="0.0306122;3pkt 3fpkt"];
1582--9560[label="1;98pkt 98fpkt"];
2682--9560[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="166.26.115.40" src_port="13511"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.143.117.40"/>
    </slice>
    <from sec="1289451853" usec="0"/>
    <to sec="1289452050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.9.134.40"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.104.154.40"/>
    </slice>
    <from sec="1289452109" usec="0"/>
    <to sec="1289452123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.174.219.40"/>
    </slice>
    <from sec="1289451770" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.240.145.41"/>
    </slice>
    <from sec="1289451861" usec="0"/>
    <to sec="1289451887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.69.68.42"/>
    </slice>
    <from sec="1289451944" usec="0"/>
    <to sec="1289451993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
9607[label="210.33.132.42;270pkt 270fpkt", shape=pentagon, color=darkviolet];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.132.42:*, *:53}[82.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.2963%)&lt;BR/&gt; 25: (7.40741%)&lt;BR/&gt; 0: (0.740741%)&lt;BR/&gt; 443: (0.555556%)&lt;BR/&gt; 123: (0.37037%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="210.33.132.42"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289452484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.203.142.42"/>
    </slice>
    <from sec="1289452141" usec="0"/>
    <to sec="1289452154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.145.144.42"/>
    </slice>
    <from sec="1289451725" usec="0"/>
    <to sec="1289451924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.90.158.42"/>
    </slice>
    <from sec="1289451733" usec="0"/>
    <to sec="1289452118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
1345[label="210.33.108.101;d;281pkt 281fpkt", shape=diamond, color=yellow];
1545[label="9.183.198.19;s;53pkt 53fpkt", shape=diamond, color=yellow];
2645[label="81.100.0.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
3534[label="202.9.135.140;s;147pkt 147fpkt", shape=diamond, color=yellow];
5114[label="211.165.9.247;s;9pkt 9fpkt", shape=diamond, color=yellow];
7868[label="210.33.108.101;d;219pkt 219fpkt", shape=hexagon, color=black];
11138[label="202.9.135.140;146pkt 146fpkt", shape=pentagon, color=darkviolet];
12915[label="81.100.0.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.9.135.140:80, 210.33.108.101:*}[52.3132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9417%)&lt;BR/&gt; 58087: (0.350058%)&lt;BR/&gt; 60846: (0.233372%)&lt;BR/&gt; 60837: (0.233372%)&lt;BR/&gt; 60834: (0.233372%)&gt;];
}
1345--1545[label="1;53pkt 53fpkt"];
1345--2142[label="0.00711744;2pkt 2fpkt"];
1345--2279[label="0.00961538;1pkt 1fpkt"];
1345--2645[label="1;1pkt 1fpkt"];
1345--3026[label="0.00862069;1pkt 1fpkt"];
1345--3534[label="1;147pkt 147fpkt"];
1345--3561[label="0.0331754;7pkt 7fpkt"];
1345--3899[label="0.0125;1pkt 1fpkt"];
1345--3960[label="0.00917431;1pkt 1fpkt"];
1345--4508[label="0.00711744;2pkt 2fpkt"];
1345--5114[label="1;9pkt 9fpkt"];
1345--5910[label="0.0175439;1pkt 1fpkt"];
1345--7868[label="1;219pkt 219fpkt"];
1345--8684[label="0.0142349;4pkt 4fpkt"];
1345--8685[label="0.00355872;1pkt 1fpkt"];
1345--8761[label="0.0142349;4pkt 4fpkt"];
1345--8762[label="0.00355872;1pkt 1fpkt"];
1345--8807[label="0.0142349;4pkt 4fpkt"];
1345--8808[label="0.00355872;1pkt 1fpkt"];
1345--9088[label="0.0384615;1pkt 1fpkt"];
1345--9147[label="0.0204082;1pkt 1fpkt"];
1345--9484[label="0.0833333;1pkt 1fpkt"];
1345--9578[label="0.047619;1pkt 1fpkt"];
1345--9668[label="0.0294118;1pkt 1fpkt"];
1345--9684[label="0.037037;1pkt 1fpkt"];
1345--11138[label="1;146pkt 146fpkt"];
1345--12915[label="1;1pkt 1fpkt"];
1345--13106[label="0.030303;1pkt 1fpkt"];
1545--7868[label="1;53pkt 53fpkt"];
2645--7868[label="1;1pkt 1fpkt"];
2645--12915[label="1;1pkt 1fpkt"];
3534--7868[label="0.748299;110pkt 110fpkt"];
3534--11138[label="1;146pkt 146fpkt"];
5114--7868[label="0.888889;8pkt 8fpkt"];
7868--9088[label="0.0384615;1pkt 1fpkt"];
7868--9147[label="0.0204082;1pkt 1fpkt"];
7868--9484[label="0.0833333;1pkt 1fpkt"];
7868--9668[label="0.0294118;1pkt 1fpkt"];
7868--9684[label="0.037037;1pkt 1fpkt"];
7868--11138[label="0.746575;109pkt 109fpkt"];
7868--12915[label="1;1pkt 1fpkt"];
7868--13106[label="0.030303;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.108.101" src_ip="202.9.135.140" src_port="80"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.1.229.43"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.215.88.44"/>
    </slice>
    <from sec="1289452039" usec="0"/>
    <to sec="1289452104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
112[label="133.4.89.245;s;1588pkt 1588fpkt", shape=diamond, color=yellow];
649[label="62.201.44.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
653[label="62.206.213.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
654[label="195.229.47.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
659[label="38.9.222.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
714[label="209.195.108.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
717[label="222.202.125.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
720[label="27.15.1.190;d;8pkt 8fpkt", shape=diamond, color=yellow];
811[label="166.26.114.44;s;53pkt 53fpkt", shape=diamond, color=yellow];
1498[label="36.151.113.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1585[label="80.94.6.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
1812[label="98.136.173.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
1813[label="8.34.124.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
1816[label="4.165.47.207;d;2pkt 2fpkt", shape=diamond, color=yellow];
1839[label="133.4.140.153;s;643pkt 643fpkt", shape=diamond, color=yellow];
1842[label="36.2.47.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
1844[label="8.168.220.192;d;6pkt 6fpkt", shape=diamond, color=yellow];
1845[label="47.84.139.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
1846[label="24.181.17.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
2084[label="192.104.147.25;d;4pkt 4fpkt", shape=diamond, color=yellow];
2246[label="46.76.89.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
2285[label="5.34.4.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2813[label="200.224.88.61;d;2pkt 2fpkt", shape=diamond, color=yellow];
2814[label="196.40.210.122;d;2pkt 2fpkt", shape=diamond, color=yellow];
2815[label="0.136.81.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
2828[label="8.217.133.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
2829[label="196.46.221.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
2830[label="81.134.17.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
2833[label="40.2.110.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
3622[label="9.59.47.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
3626[label="84.72.251.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
3684[label="7.53.223.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
4039[label="202.56.157.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
4103[label="171.15.68.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
4347[label="192.170.175.34;d;4pkt 4fpkt", shape=diamond, color=yellow];
4348[label="3.235.128.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
4349[label="81.64.230.251;d;2pkt 2fpkt", shape=diamond, color=yellow];
4569[label="24.64.226.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
4954[label="27.79.89.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
5158[label="8.174.113.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
5240[label="133.4.60.115;s;982pkt 982fpkt", shape=diamond, color=yellow];
5384[label="0.183.210.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
6758[label="81.139.9.151;d;5pkt 5fpkt", shape=diamond, color=yellow];
7056[label="25.17.97.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
7807[label="38.9.222.235;d;1pkt 1fpkt", shape=hexagon, color=black];
7814[label="222.202.125.169;d;1pkt 1fpkt", shape=hexagon, color=black];
7945[label="192.104.147.25;d;4pkt 4fpkt", shape=hexagon, color=black];
8064[label="47.84.139.53;d;2pkt 2fpkt", shape=hexagon, color=black];
8167[label="195.229.47.197;d;1pkt 1fpkt", shape=hexagon, color=black];
8168[label="8.34.124.247;d;1pkt 1fpkt", shape=hexagon, color=black];
8422[label="0.136.81.182;d;1pkt 1fpkt", shape=hexagon, color=black];
8427[label="196.46.221.41;d;1pkt 1fpkt", shape=hexagon, color=black];
8574[label="24.181.17.229;d;1pkt 1fpkt", shape=hexagon, color=black];
9642[label="166.26.114.44;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12606[label="133.4.89.245;1598pkt 1598fpkt", shape=pentagon, color=darkviolet];
13089[label="166.26.114.44;3pkt 3fpkt", shape=invtriangle, color=brown];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.89.245:8500, *:*}[44.1123%]&lt;BR/&gt;{133.4.60.115:39510, *:*}[29.5302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8500: (31.327%)&lt;BR/&gt; 39510: (9.7859%)&lt;BR/&gt; 8334: (1.9188%)&lt;BR/&gt; 8084: (1.63603%)&lt;BR/&gt; 11206: (0.959402%)&gt;];
}
112--405[label="0.0105263;2pkt 2fpkt"];
112--649[label="1;1pkt 1fpkt"];
112--653[label="1;1pkt 1fpkt"];
112--654[label="1;1pkt 1fpkt"];
112--659[label="1;1pkt 1fpkt"];
112--681[label="0.000631712;1pkt 1fpkt"];
112--714[label="1;1pkt 1fpkt"];
112--717[label="1;1pkt 1fpkt"];
112--720[label="0.125;1pkt 1fpkt"];
112--1585[label="1;2pkt 2fpkt"];
112--1608[label="0.00342466;1pkt 1fpkt"];
112--1641[label="0.00558659;3pkt 3fpkt"];
112--1812[label="1;1pkt 1fpkt"];
112--1813[label="1;1pkt 1fpkt"];
112--1816[label="1;2pkt 2fpkt"];
112--1842[label="1;1pkt 1fpkt"];
112--1844[label="1;6pkt 6fpkt"];
112--1845[label="1;2pkt 2fpkt"];
112--1846[label="1;1pkt 1fpkt"];
112--2084[label="0.75;3pkt 3fpkt"];
112--2813[label="0.5;1pkt 1fpkt"];
112--2814[label="1;2pkt 2fpkt"];
112--2815[label="1;1pkt 1fpkt"];
112--2828[label="1;1pkt 1fpkt"];
112--2829[label="1;1pkt 1fpkt"];
112--2830[label="1;1pkt 1fpkt"];
112--3622[label="1;1pkt 1fpkt"];
112--3626[label="1;1pkt 1fpkt"];
112--4347[label="1;4pkt 4fpkt"];
112--4348[label="1;1pkt 1fpkt"];
112--4349[label="1;2pkt 2fpkt"];
112--5158[label="1;1pkt 1fpkt"];
112--5808[label="0.0117647;1pkt 1fpkt"];
112--6736[label="0.016129;1pkt 1fpkt"];
112--6758[label="1;5pkt 5fpkt"];
112--7056[label="1;1pkt 1fpkt"];
112--7807[label="1;1pkt 1fpkt"];
112--7814[label="1;1pkt 1fpkt"];
112--7945[label="0.75;3pkt 3fpkt"];
112--8027[label="0.00113379;1pkt 1fpkt"];
112--8064[label="1;2pkt 2fpkt"];
112--8167[label="1;1pkt 1fpkt"];
112--8168[label="1;1pkt 1fpkt"];
112--8422[label="1;1pkt 1fpkt"];
112--8427[label="1;1pkt 1fpkt"];
112--8574[label="1;1pkt 1fpkt"];
112--8664[label="0.00314861;5pkt 5fpkt"];
112--8689[label="0.000629723;1pkt 1fpkt"];
112--8743[label="0.00314861;5pkt 5fpkt"];
112--8766[label="0.000629723;1pkt 1fpkt"];
112--8790[label="0.00314861;5pkt 5fpkt"];
112--8812[label="0.000629723;1pkt 1fpkt"];
112--12606[label="0.99937;1587pkt 1587fpkt"];
649--12606[label="1;1pkt 1fpkt"];
653--12606[label="1;1pkt 1fpkt"];
654--8167[label="1;1pkt 1fpkt"];
654--12606[label="1;1pkt 1fpkt"];
659--7807[label="1;1pkt 1fpkt"];
659--12606[label="1;1pkt 1fpkt"];
714--12606[label="1;1pkt 1fpkt"];
717--7814[label="1;1pkt 1fpkt"];
717--12606[label="1;1pkt 1fpkt"];
720--811[label="0.125;1pkt 1fpkt"];
720--1839[label="0.75;6pkt 6fpkt"];
720--12606[label="0.125;1pkt 1fpkt"];
811--1498[label="1;1pkt 1fpkt"];
811--2246[label="1;1pkt 1fpkt"];
811--2285[label="1;1pkt 1fpkt"];
811--4039[label="1;1pkt 1fpkt"];
811--4103[label="1;1pkt 1fpkt"];
811--4569[label="1;1pkt 1fpkt"];
811--4954[label="1;1pkt 1fpkt"];
811--9642[label="1;3pkt 3fpkt"];
811--13089[label="1;3pkt 3fpkt"];
1585--12606[label="1;2pkt 2fpkt"];
1812--12606[label="1;1pkt 1fpkt"];
1813--8168[label="1;1pkt 1fpkt"];
1813--12606[label="1;1pkt 1fpkt"];
1816--12606[label="1;2pkt 2fpkt"];
1839--2833[label="1;1pkt 1fpkt"];
1839--3684[label="1;1pkt 1fpkt"];
1839--5384[label="1;1pkt 1fpkt"];
1839--8664[label="0.00466563;3pkt 3fpkt"];
1839--8688[label="0.00466563;3pkt 3fpkt"];
1839--8743[label="0.00466563;3pkt 3fpkt"];
1839--8765[label="0.00466563;3pkt 3fpkt"];
1839--8790[label="0.00466563;3pkt 3fpkt"];
1839--8811[label="0.00466563;3pkt 3fpkt"];
1842--12606[label="1;1pkt 1fpkt"];
1844--12606[label="1;6pkt 6fpkt"];
1845--8064[label="1;2pkt 2fpkt"];
1845--12606[label="1;2pkt 2fpkt"];
1846--8574[label="1;1pkt 1fpkt"];
1846--12606[label="1;1pkt 1fpkt"];
2084--7945[label="1;4pkt 4fpkt"];
2084--12606[label="0.75;3pkt 3fpkt"];
2246--9642[label="1;1pkt 1fpkt"];
2246--13089[label="1;1pkt 1fpkt"];
2813--5240[label="0.5;1pkt 1fpkt"];
2813--12606[label="0.5;1pkt 1fpkt"];
2814--12606[label="1;2pkt 2fpkt"];
2815--8422[label="1;1pkt 1fpkt"];
2815--12606[label="1;1pkt 1fpkt"];
2828--12606[label="1;1pkt 1fpkt"];
2829--8427[label="1;1pkt 1fpkt"];
2829--12606[label="1;1pkt 1fpkt"];
2830--12606[label="1;1pkt 1fpkt"];
3622--12606[label="1;1pkt 1fpkt"];
3626--12606[label="1;1pkt 1fpkt"];
4347--12606[label="1;4pkt 4fpkt"];
4348--12606[label="1;1pkt 1fpkt"];
4349--12606[label="1;2pkt 2fpkt"];
5158--12606[label="1;1pkt 1fpkt"];
5240--7048[label="0.0392157;4pkt 4fpkt"];
5240--8664[label="0.00101833;1pkt 1fpkt"];
5240--8688[label="0.00101833;1pkt 1fpkt"];
5240--8743[label="0.00101833;1pkt 1fpkt"];
5240--8765[label="0.00101833;1pkt 1fpkt"];
5240--8790[label="0.00101833;1pkt 1fpkt"];
5240--8811[label="0.00101833;1pkt 1fpkt"];
6758--12606[label="1;5pkt 5fpkt"];
7056--12606[label="1;1pkt 1fpkt"];
7807--12606[label="1;1pkt 1fpkt"];
7814--12606[label="1;1pkt 1fpkt"];
7945--12606[label="0.75;3pkt 3fpkt"];
8064--12606[label="1;2pkt 2fpkt"];
8167--12606[label="1;1pkt 1fpkt"];
8168--12606[label="1;1pkt 1fpkt"];
8422--12606[label="1;1pkt 1fpkt"];
8427--12606[label="1;1pkt 1fpkt"];
8574--12606[label="1;1pkt 1fpkt"];
9642--13089[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.89.245" src_port="8500"/>
      <filter src_ip="133.4.60.115" src_port="39510"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.149.33.45"/>
    </slice>
    <from sec="1289451777" usec="0"/>
    <to sec="1289451789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.157.204.45"/>
    </slice>
    <from sec="1289452085" usec="0"/>
    <to sec="1289452094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.136.132.46"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289451886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.80.30.47"/>
    </slice>
    <from sec="1289452282" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.218.69.47"/>
    </slice>
    <from sec="1289452336" usec="0"/>
    <to sec="1289452402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.130.142.47"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.149.150.47"/>
    </slice>
    <from sec="1289452073" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.139.151.47"/>
    </slice>
    <from sec="1289451819" usec="0"/>
    <to sec="1289451852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.10.94.48"/>
    </slice>
    <from sec="1289452302" usec="0"/>
    <to sec="1289452381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.68.134.48"/>
    </slice>
    <from sec="1289451805" usec="0"/>
    <to sec="1289451836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.41.179.48"/>
    </slice>
    <from sec="1289451640" usec="0"/>
    <to sec="1289452485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.156.181.48"/>
    </slice>
    <from sec="1289451718" usec="0"/>
    <to sec="1289451911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.57.201.48"/>
    </slice>
    <from sec="1289452463" usec="0"/>
    <to sec="1289452472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.20.99.49"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.55.3.50"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
5219[label="133.4.96.50;s;753pkt 753fpkt", shape=diamond, color=yellow];
9746[label="133.4.96.50;908pkt 908fpkt", shape=pentagon, color=darkviolet];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.96.50:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5219--9746[label="0.994688;749pkt 749fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.96.50"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.135.24.51"/>
    </slice>
    <from sec="1289452179" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
7635[label="14.11.27.51;s;14pkt 14fpkt", shape=diamond, color=yellow];
9761[label="14.11.27.51;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.11.27.51:*, 166.26.179.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54916: (3.57143%)&lt;BR/&gt; 54915: (3.57143%)&lt;BR/&gt; 54913: (3.57143%)&lt;BR/&gt; 54912: (3.57143%)&gt;];
}
7635--9761[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="14.11.27.51"/>
    </slice>
    <from sec="1289452392" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
6270[label="32.24.42.51;s;62pkt 62fpkt", shape=diamond, color=yellow];
9762[label="32.24.42.51;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.24.42.51:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6270--9762[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="32.24.42.51"/>
    </slice>
    <from sec="1289451992" usec="0"/>
    <to sec="1289452242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.25.160.51"/>
    </slice>
    <from sec="1289451636" usec="0"/>
    <to sec="1289451724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.40.237.51"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289451662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.155.52"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.106.53"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289452107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.69.199.53"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
3927[label="166.26.10.57;d;51pkt 51fpkt", shape=diamond, color=yellow];
4938[label="211.54.0.54;s;9pkt 9fpkt", shape=diamond, color=yellow];
9805[label="211.54.0.54;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13167[label="211.54.0.54;8pkt 8fpkt", shape=invtriangle, color=brown];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.10.57:*}[80.3922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.6053%)&lt;BR/&gt; 443: (20.3947%)&lt;BR/&gt; 58465: (2.63158%)&lt;BR/&gt; 58464: (2.63158%)&lt;BR/&gt; 58462: (2.63158%)&gt;];
}
3927--4256[label="0.137255;7pkt 7fpkt"];
3927--4284[label="0.0196078;1pkt 1fpkt"];
3927--4364[label="0.0196078;1pkt 1fpkt"];
3927--4938[label="1;9pkt 9fpkt"];
3927--7052[label="0.0392157;2pkt 2fpkt"];
3927--9779[label="0.0392157;2pkt 2fpkt"];
3927--9805[label="1;8pkt 8fpkt"];
3927--13167[label="1;8pkt 8fpkt"];
4938--9805[label="1;8pkt 8fpkt"];
4938--13167[label="1;8pkt 8fpkt"];
9805--13167[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.10.57" src_port="80"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289451997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.118.3.54"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.9.133.54"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.104.164.54"/>
    </slice>
    <from sec="1289451856" usec="0"/>
    <to sec="1289451951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.42.167.54"/>
    </slice>
    <from sec="1289451660" usec="0"/>
    <to sec="1289451875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
7445[label="132.110.3.55;s;14pkt 14fpkt", shape=diamond, color=yellow];
9823[label="132.110.3.55;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.110.3.55:80, 211.55.224.4:*}[60%]&lt;BR/&gt;{132.110.3.55:80, 42.146.69.80:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64666: (3.44828%)&lt;BR/&gt; 55268: (3.44828%)&lt;BR/&gt; 49157: (3.44828%)&lt;BR/&gt; 48100: (3.44828%)&gt;];
}
7445--9823[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="211.55.224.4" src_ip="132.110.3.55" src_port="80"/>
      <filter dst_ip="42.146.69.80" src_ip="132.110.3.55" src_port="80"/>
    </slice>
    <from sec="1289451714" usec="0"/>
    <to sec="1289452417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.10.55"/>
    </slice>
    <from sec="1289452106" usec="0"/>
    <to sec="1289452110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.243.42.55"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.75.84.55"/>
    </slice>
    <from sec="1289452005" usec="0"/>
    <to sec="1289452027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.76.18.56"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289452481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.244.85.56"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.112.114.56"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289451666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716444,3.58199,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
832[label="133.4.237.147;d;97pkt 97fpkt", shape=diamond, color=yellow];
3214[label="9.138.246.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
3770[label="187.167.192.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
6526[label="7.46.47.36;s;4pkt 4fpkt", shape=diamond, color=yellow];
13157[label="15.25.160.51;1pkt 1fpkt", shape=invtriangle, color=brown];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.67.70.146:80, 133.4.237.147:*}[24.7423%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.8846%)&lt;BR/&gt; 21749: (10.5769%)&lt;BR/&gt; 4558: (7.21154%)&lt;BR/&gt; 443: (2.40385%)&lt;BR/&gt; 57765: (0.961538%)&gt;];
}
832--1261[label="0.0103093;1pkt 1fpkt"];
832--2124[label="0.0103093;1pkt 1fpkt"];
832--3214[label="1;1pkt 1fpkt"];
832--3304[label="0.0412371;4pkt 4fpkt"];
832--3770[label="1;1pkt 1fpkt"];
832--6526[label="1;4pkt 4fpkt"];
832--8684[label="0.0309278;3pkt 3fpkt"];
832--8688[label="0.0206186;2pkt 2fpkt"];
832--8761[label="0.0309278;3pkt 3fpkt"];
832--8765[label="0.0206186;2pkt 2fpkt"];
832--8807[label="0.0309278;3pkt 3fpkt"];
832--8811[label="0.0206186;2pkt 2fpkt"];
832--9627[label="0.0103093;1pkt 1fpkt"];
832--9854[label="0.0412371;4pkt 4fpkt"];
832--13079[label="0.0103093;1pkt 1fpkt"];
832--13157[label="1;1pkt 1fpkt"];
832--13188[label="0.0412371;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.237.147" src_ip="84.67.70.146" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.172.32.57"/>
    </slice>
    <from sec="1289452488" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.210.133.57"/>
    </slice>
    <from sec="1289452293" usec="0"/>
    <to sec="1289452327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.86.189.57"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289451742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.68.212.57"/>
    </slice>
    <from sec="1289452328" usec="0"/>
    <to sec="1289452383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.57.89.58"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289452438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.58"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289452062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.217.171.60"/>
    </slice>
    <from sec="1289452197" usec="0"/>
    <to sec="1289452212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.128.43.61"/>
    </slice>
    <from sec="1289452106" usec="0"/>
    <to sec="1289452195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.14.42.62"/>
    </slice>
    <from sec="1289452159" usec="0"/>
    <to sec="1289452185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.155.62"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.112.10.63"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.65.174.63"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.58.8.64"/>
    </slice>
    <from sec="1289451866" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.3.113.64"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289451961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
4355[label="210.33.130.64;s;1186pkt 1186fpkt", shape=diamond, color=yellow];
9951[label="210.33.130.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.130.64:10508, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10508: (50%)&lt;BR/&gt; 16001: (1.13541%)&lt;BR/&gt; 51413: (0.462574%)&lt;BR/&gt; 6881: (0.462574%)&lt;BR/&gt; 35691: (0.378469%)&gt;];
}
4355--8664[label="0.00084317;1pkt 1fpkt"];
4355--8743[label="0.00084317;1pkt 1fpkt"];
4355--8790[label="0.00084317;1pkt 1fpkt"];
4355--9951[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.33.130.64" src_port="10508"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.108.224.64"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.166.17.65"/>
    </slice>
    <from sec="1289452425" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.43.36.65"/>
    </slice>
    <from sec="1289451685" usec="0"/>
    <to sec="1289451694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.49.180.65"/>
    </slice>
    <from sec="1289451741" usec="0"/>
    <to sec="1289452352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.225.232.65"/>
    </slice>
    <from sec="1289451782" usec="0"/>
    <to sec="1289451801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.247.65"/>
    </slice>
    <from sec="1289452467" usec="0"/>
    <to sec="1289452476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
10003[label="133.4.88.67;87pkt 87fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.88.67:53, *:*}[41.3793%]&lt;BR/&gt;{133.4.88.67:32823, *:53}[36.7816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.0805%)&lt;BR/&gt; 32823: (18.3908%)&lt;BR/&gt; 25: (6.89655%)&lt;BR/&gt; 0: (3.44828%)&lt;BR/&gt; 80: (2.29885%)&gt;];
}
</description>
    <slice>
      <filter src_ip="133.4.88.67" src_port="53"/>
      <filter dst_port="53" src_ip="133.4.88.67" src_port="32823"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289452472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.69.194.67"/>
    </slice>
    <from sec="1289452164" usec="0"/>
    <to sec="1289452186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.1.68"/>
    </slice>
    <from sec="1289451873" usec="0"/>
    <to sec="1289451896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.11.68"/>
    </slice>
    <from sec="1289452191" usec="0"/>
    <to sec="1289452195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.146.67.68"/>
    </slice>
    <from sec="1289452334" usec="0"/>
    <to sec="1289452345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
5061[label="37.227.131.35;d;28pkt 28fpkt", shape=diamond, color=yellow];
6278[label="166.26.144.68;s;38pkt 38fpkt", shape=diamond, color=yellow];
10027[label="166.26.144.68;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.144.68:*, 37.227.131.35:80}[60.9756%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1748%)&lt;BR/&gt; 25840: (4.85437%)&lt;BR/&gt; 6901: (3.8835%)&lt;BR/&gt; 58135: (2.91262%)&lt;BR/&gt; 2647: (1.45631%)&gt;];
}
5061--6278[label="0.892857;25pkt 25fpkt"];
5061--10027[label="0.857143;24pkt 24fpkt"];
6278--10027[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="37.227.131.35" dst_port="80" src_ip="166.26.144.68"/>
    </slice>
    <from sec="1289452003" usec="0"/>
    <to sec="1289452421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.152.68"/>
    </slice>
    <from sec="1289451852" usec="0"/>
    <to sec="1289451866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.153.69"/>
    </slice>
    <from sec="1289452476" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.98.249.69"/>
    </slice>
    <from sec="1289452093" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.15.68.70"/>
    </slice>
    <from sec="1289451805" usec="0"/>
    <to sec="1289451971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.130.70"/>
    </slice>
    <from sec="1289451616" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.57.64.71"/>
    </slice>
    <from sec="1289452465" usec="0"/>
    <to sec="1289452478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.91.129.71"/>
    </slice>
    <from sec="1289452439" usec="0"/>
    <to sec="1289452453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.27.180.71"/>
    </slice>
    <from sec="1289452005" usec="0"/>
    <to sec="1289452023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.71.96.72"/>
    </slice>
    <from sec="1289452242" usec="0"/>
    <to sec="1289452267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
1627[label="128.19.149.72;s;1514pkt 1514fpkt", shape=diamond, color=yellow];
10086[label="128.19.149.72;2973pkt 2973fpkt", shape=pentagon, color=darkviolet];
13292[label="128.19.149.72;2973pkt 2973fpkt", shape=invtriangle, color=brown];
14734[label="128.19.149.72;2973pkt 2973fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.149.72:63489, *:*}[93.7773%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63489: (46.8849%)&lt;BR/&gt; 443: (1.54318%)&lt;BR/&gt; 80: (1.50005%)&lt;BR/&gt; 1863: (0.0527173%)&lt;BR/&gt; 2097: (0.0479249%)&gt;];
}
1627--1782[label="0.0162791;14pkt 14fpkt"];
1627--1886[label="0.00607903;2pkt 2fpkt"];
1627--2133[label="0.0049505;2pkt 2fpkt"];
1627--2488[label="0.0445344;11pkt 11fpkt"];
1627--3745[label="0.0109091;3pkt 3fpkt"];
1627--4790[label="0.0163934;1pkt 1fpkt"];
1627--8027[label="0.00566893;5pkt 5fpkt"];
1627--8036[label="0.00552486;2pkt 2fpkt"];
1627--8432[label="0.00607903;2pkt 2fpkt"];
1627--8596[label="0.0445344;11pkt 11fpkt"];
1627--8664[label="0.00198151;3pkt 3fpkt"];
1627--8688[label="0.000660502;1pkt 1fpkt"];
1627--8743[label="0.00198151;3pkt 3fpkt"];
1627--8765[label="0.000660502;1pkt 1fpkt"];
1627--8790[label="0.00198151;3pkt 3fpkt"];
1627--8811[label="0.000660502;1pkt 1fpkt"];
1627--10086[label="1;1514pkt 1514fpkt"];
1627--13292[label="1;1514pkt 1514fpkt"];
1627--14734[label="1;1514pkt 1514fpkt"];
10086--13292[label="1;2973pkt 2973fpkt"];
10086--14734[label="1;2973pkt 2973fpkt"];
13292--14734[label="1;2973pkt 2973fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.149.72" src_port="63489"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.126.55.73"/>
    </slice>
    <from sec="1289451747" usec="0"/>
    <to sec="1289452231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.70.122.73"/>
    </slice>
    <from sec="1289451978" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.181.39.74"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.192.57.74"/>
    </slice>
    <from sec="1289452385" usec="0"/>
    <to sec="1289452405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.8.75"/>
    </slice>
    <from sec="1289451868" usec="0"/>
    <to sec="1289451872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.146.34.75"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.65.111.76"/>
    </slice>
    <from sec="1289452367" usec="0"/>
    <to sec="1289452384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.74.130.76"/>
    </slice>
    <from sec="1289452340" usec="0"/>
    <to sec="1289452344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.188.243.76"/>
    </slice>
    <from sec="1289452486" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.171.58.77"/>
    </slice>
    <from sec="1289451872" usec="0"/>
    <to sec="1289451883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.140.96.78"/>
    </slice>
    <from sec="1289451825" usec="0"/>
    <to sec="1289451852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.177.136.78"/>
    </slice>
    <from sec="1289452470" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.145.144.78"/>
    </slice>
    <from sec="1289452238" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
4240[label="214.90.89.79;s;30pkt 30fpkt", shape=diamond, color=yellow];
6551[label="128.19.145.36;d;47pkt 47fpkt", shape=diamond, color=yellow];
10201[label="214.90.89.79;30pkt 30fpkt", shape=pentagon, color=darkviolet];
13343[label="214.90.89.79;30pkt 30fpkt", shape=invtriangle, color=brown];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.90.89.79:80, 128.19.145.36:*}[63.8298%]&lt;BR/&gt;{*:*, 128.19.145.36:29006}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1606%)&lt;BR/&gt; 29006: (4.37956%)&lt;BR/&gt; 51732: (1.45985%)&lt;BR/&gt; 51730: (1.45985%)&lt;BR/&gt; 51728: (1.45985%)&gt;];
}
4240--6551[label="1;30pkt 30fpkt"];
4240--10201[label="1;30pkt 30fpkt"];
4240--13343[label="1;30pkt 30fpkt"];
6551--10201[label="1;30pkt 30fpkt"];
6551--13343[label="1;30pkt 30fpkt"];
10201--13343[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.145.36" dst_port="29006"/>
      <filter dst_ip="128.19.145.36" src_ip="214.90.89.79" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.193.193.79"/>
    </slice>
    <from sec="1289451877" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.109.206.79"/>
    </slice>
    <from sec="1289452201" usec="0"/>
    <to sec="1289452272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.199.5.80"/>
    </slice>
    <from sec="1289451656" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.92.132.80"/>
    </slice>
    <from sec="1289451640" usec="0"/>
    <to sec="1289452308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.16.176.81"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.230.176.81"/>
    </slice>
    <from sec="1289451919" usec="0"/>
    <to sec="1289451926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.230.81"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.123.56.82"/>
    </slice>
    <from sec="1289452165" usec="0"/>
    <to sec="1289452187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.97.82"/>
    </slice>
    <from sec="1289451686" usec="0"/>
    <to sec="1289451690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.50.118.82"/>
    </slice>
    <from sec="1289451809" usec="0"/>
    <to sec="1289452435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.244.242.82"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.7.205.83"/>
    </slice>
    <from sec="1289452374" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.21.84"/>
    </slice>
    <from sec="1289452422" usec="0"/>
    <to sec="1289452431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.87.47.84"/>
    </slice>
    <from sec="1289452065" usec="0"/>
    <to sec="1289452149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.74.84"/>
    </slice>
    <from sec="1289451627" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.128.78.84"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.77.92.84"/>
    </slice>
    <from sec="1289452368" usec="0"/>
    <to sec="1289452442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.140.85"/>
    </slice>
    <from sec="1289452028" usec="0"/>
    <to sec="1289452319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.148.85"/>
    </slice>
    <from sec="1289452204" usec="0"/>
    <to sec="1289452479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.213.245.86"/>
    </slice>
    <from sec="1289452422" usec="0"/>
    <to sec="1289452434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.142.50.87"/>
    </slice>
    <from sec="1289451676" usec="0"/>
    <to sec="1289451699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.142.174.87"/>
    </slice>
    <from sec="1289452183" usec="0"/>
    <to sec="1289452190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.150.93.88"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289452275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.23.193.88"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.170.132.89"/>
    </slice>
    <from sec="1289451642" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.168.44.90"/>
    </slice>
    <from sec="1289452187" usec="0"/>
    <to sec="1289452216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.249.74.90"/>
    </slice>
    <from sec="1289451777" usec="0"/>
    <to sec="1289451791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.45.103.90"/>
    </slice>
    <from sec="1289451720" usec="0"/>
    <to sec="1289451781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.250.90"/>
    </slice>
    <from sec="1289451755" usec="0"/>
    <to sec="1289451766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.142.32.91"/>
    </slice>
    <from sec="1289452310" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.125.0.92"/>
    </slice>
    <from sec="1289451779" usec="0"/>
    <to sec="1289452086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
7270[label="166.26.231.92;s;19pkt 19fpkt", shape=diamond, color=yellow];
10413[label="166.26.231.92;22pkt 22fpkt", shape=pentagon, color=darkviolet];
13448[label="166.26.231.92;21pkt 21fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.231.92:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61855: (2.41935%)&lt;BR/&gt; 60024: (2.41935%)&lt;BR/&gt; 53637: (2.41935%)&lt;BR/&gt; 49248: (2.41935%)&gt;];
}
7270--8684[label="0.0526316;1pkt 1fpkt"];
7270--8761[label="0.0526316;1pkt 1fpkt"];
7270--8807[label="0.0526316;1pkt 1fpkt"];
7270--10413[label="1;19pkt 19fpkt"];
7270--13448[label="0.947368;18pkt 18fpkt"];
10413--13448[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="166.26.231.92" src_port="80"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
879[label="210.244.85.56;d;2pkt 2fpkt", shape=diamond, color=yellow];
3663[label="133.4.206.56;s;12pkt 12fpkt", shape=diamond, color=yellow];
9855[label="133.4.206.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13189[label="133.4.206.56;1pkt 1fpkt", shape=invtriangle, color=brown];
14690[label="133.4.206.56;1pkt 1fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.206.56:*, *:1863}[38.4615%]&lt;BR/&gt;{133.4.206.56:*, 40.19.94.189:3544}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (17.6471%)&lt;BR/&gt; 49341: (14.7059%)&lt;BR/&gt; 1863: (14.7059%)&lt;BR/&gt; 3544: (8.82353%)&lt;BR/&gt; 37855: (5.88235%)&gt;];
}
879--2095[label="0.5;1pkt 1fpkt"];
879--3663[label="0.5;1pkt 1fpkt"];
879--9855[label="1;1pkt 1fpkt"];
879--10414[label="0.5;1pkt 1fpkt"];
879--13189[label="1;1pkt 1fpkt"];
879--14690[label="1;1pkt 1fpkt"];
3663--8664[label="0.0833333;1pkt 1fpkt"];
3663--8688[label="0.0833333;1pkt 1fpkt"];
3663--8743[label="0.0833333;1pkt 1fpkt"];
3663--8765[label="0.0833333;1pkt 1fpkt"];
3663--8790[label="0.0833333;1pkt 1fpkt"];
3663--8811[label="0.0833333;1pkt 1fpkt"];
3663--9855[label="1;1pkt 1fpkt"];
3663--13189[label="1;1pkt 1fpkt"];
3663--14690[label="1;1pkt 1fpkt"];
9855--13189[label="1;1pkt 1fpkt"];
9855--14690[label="1;1pkt 1fpkt"];
13189--14690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="133.4.206.56"/>
      <filter dst_ip="40.19.94.189" dst_port="3544" src_ip="133.4.206.56"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.98.70.93"/>
    </slice>
    <from sec="1289452305" usec="0"/>
    <to sec="1289452333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.80.93"/>
    </slice>
    <from sec="1289451865" usec="0"/>
    <to sec="1289451917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.132.147.93"/>
    </slice>
    <from sec="1289452213" usec="0"/>
    <to sec="1289452226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.102.153.93"/>
    </slice>
    <from sec="1289452374" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.19.94"/>
    </slice>
    <from sec="1289452477" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.138.246.94"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289451831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.82.94.95"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.171.68.96"/>
    </slice>
    <from sec="1289451999" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
411[label="164.251.158.177;d;123pkt 123fpkt", shape=diamond, color=yellow];
10450[label="1.179.69.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12648[label="4.226.48.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13468[label="1.179.69.96;1pkt 1fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.251.158.177:17168}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17168: (50%)&lt;BR/&gt; 18130: (1.5748%)&lt;BR/&gt; 52668: (1.1811%)&lt;BR/&gt; 34067: (0.787402%)&lt;BR/&gt; 24227: (0.787402%)&gt;];
}
411--10450[label="1;1pkt 1fpkt"];
411--12648[label="1;2pkt 2fpkt"];
411--13468[label="1;1pkt 1fpkt"];
10450--13468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.158.177" dst_port="17168"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.103.109.96"/>
    </slice>
    <from sec="1289452319" usec="0"/>
    <to sec="1289452332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.34.174.96"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289451682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.116.203.96"/>
    </slice>
    <from sec="1289452077" usec="0"/>
    <to sec="1289452108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.221.96"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289452476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.1.34.97"/>
    </slice>
    <from sec="1289452373" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.3.98"/>
    </slice>
    <from sec="1289452397" usec="0"/>
    <to sec="1289452470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.44.18.98"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.26.71.98"/>
    </slice>
    <from sec="1289451832" usec="0"/>
    <to sec="1289451843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
4302[label="146.82.200.98;s;526pkt 526fpkt", shape=diamond, color=yellow];
10502[label="146.82.200.98;522pkt 522fpkt", shape=pentagon, color=darkviolet];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.82.200.98:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4302--10502[label="1;522pkt 522fpkt"];
</description>
    <slice>
      <filter src_ip="146.82.200.98"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.93.117.99"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.208.99"/>
    </slice>
    <from sec="1289451916" usec="0"/>
    <to sec="1289452099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.181.39.100"/>
    </slice>
    <from sec="1289451768" usec="0"/>
    <to sec="1289452481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.21.131.100"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.147.196.100"/>
    </slice>
    <from sec="1289452003" usec="0"/>
    <to sec="1289452383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.185.153.101"/>
    </slice>
    <from sec="1289451662" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.216.211.101"/>
    </slice>
    <from sec="1289452262" usec="0"/>
    <to sec="1289452311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.103.24.102"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3382[label="61.167.223.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
10553[label="128.19.137.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13505[label="128.19.137.102;2pkt 2fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.137.102:80, 213.179.182.145:32997}[50%]&lt;BR/&gt;{128.19.137.102:80, 61.167.223.244:64212}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64212: (30%)&lt;BR/&gt; 32997: (20%)&gt;];
}
3382--10553[label="1;1pkt 1fpkt"];
3382--13505[label="1;1pkt 1fpkt"];
10553--13505[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="61.167.223.244" dst_port="64212" src_ip="128.19.137.102" src_port="80"/>
      <filter dst_ip="213.179.182.145" dst_port="32997" src_ip="128.19.137.102" src_port="80"/>
    </slice>
    <from sec="1289451750" usec="0"/>
    <to sec="1289452201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.130.103"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289452381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.198.219.103"/>
    </slice>
    <from sec="1289451850" usec="0"/>
    <to sec="1289451905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.107.47.104"/>
    </slice>
    <from sec="1289451830" usec="0"/>
    <to sec="1289451853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.52.81.104"/>
    </slice>
    <from sec="1289451740" usec="0"/>
    <to sec="1289451850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.51.107.104"/>
    </slice>
    <from sec="1289452035" usec="0"/>
    <to sec="1289452048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.215.164.104"/>
    </slice>
    <from sec="1289451912" usec="0"/>
    <to sec="1289451926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.136.133.105"/>
    </slice>
    <from sec="1289451645" usec="0"/>
    <to sec="1289451656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.15.181.106"/>
    </slice>
    <from sec="1289452413" usec="0"/>
    <to sec="1289452429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.250.90.107"/>
    </slice>
    <from sec="1289451711" usec="0"/>
    <to sec="1289451985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.17.108"/>
    </slice>
    <from sec="1289452308" usec="0"/>
    <to sec="1289452346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.18.138.108"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289451699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.74.202.108"/>
    </slice>
    <from sec="1289451649" usec="0"/>
    <to sec="1289452423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.0.208.108"/>
    </slice>
    <from sec="1289451746" usec="0"/>
    <to sec="1289451929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.208.108"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.233.2.109"/>
    </slice>
    <from sec="1289452335" usec="0"/>
    <to sec="1289452349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.106.31.109"/>
    </slice>
    <from sec="1289451947" usec="0"/>
    <to sec="1289451960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.29.129.109"/>
    </slice>
    <from sec="1289452120" usec="0"/>
    <to sec="1289452131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.188.76.112"/>
    </slice>
    <from sec="1289451796" usec="0"/>
    <to sec="1289451816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.127.112"/>
    </slice>
    <from sec="1289452438" usec="0"/>
    <to sec="1289452470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.114.22.113"/>
    </slice>
    <from sec="1289452053" usec="0"/>
    <to sec="1289452066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.109.94.113"/>
    </slice>
    <from sec="1289451707" usec="0"/>
    <to sec="1289451860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.183.210.113"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.230.218.113"/>
    </slice>
    <from sec="1289451950" usec="0"/>
    <to sec="1289451964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.149.114"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.211.153.114"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.118.115"/>
    </slice>
    <from sec="1289452220" usec="0"/>
    <to sec="1289452233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.231.16.116"/>
    </slice>
    <from sec="1289452098" usec="0"/>
    <to sec="1289452182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.34.18.116"/>
    </slice>
    <from sec="1289452028" usec="0"/>
    <to sec="1289452039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.200.163.116"/>
    </slice>
    <from sec="1289451650" usec="0"/>
    <to sec="1289451659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.74.202.116"/>
    </slice>
    <from sec="1289452497" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.185.154.117"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
7535[label="49.16.165.118;s;2pkt 2fpkt", shape=diamond, color=yellow];
10777[label="49.16.165.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.16.165.118:59271, 211.185.158.106:80}[50%]&lt;BR/&gt;{49.16.165.118:61490, 211.185.158.106:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61490: (25%)&lt;BR/&gt; 59271: (25%)&gt;];
}
7535--10777[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.158.106" dst_port="80" src_ip="49.16.165.118" src_port="61490"/>
      <filter dst_ip="211.185.158.106" dst_port="80" src_ip="49.16.165.118" src_port="59271"/>
    </slice>
    <from sec="1289452285" usec="0"/>
    <to sec="1289452315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.173.235.118"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289451924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.151.113.119"/>
    </slice>
    <from sec="1289451649" usec="0"/>
    <to sec="1289451771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.14.0.120"/>
    </slice>
    <from sec="1289451679" usec="0"/>
    <to sec="1289452492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.209.58.120"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.68.120"/>
    </slice>
    <from sec="1289451687" usec="0"/>
    <to sec="1289451698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.119.71.120"/>
    </slice>
    <from sec="1289452120" usec="0"/>
    <to sec="1289452134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.100.227.120"/>
    </slice>
    <from sec="1289452459" usec="0"/>
    <to sec="1289452472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.79.89.121"/>
    </slice>
    <from sec="1289451904" usec="0"/>
    <to sec="1289452255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.106.18.122"/>
    </slice>
    <from sec="1289451758" usec="0"/>
    <to sec="1289451916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.41.36.122"/>
    </slice>
    <from sec="1289451888" usec="0"/>
    <to sec="1289451899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.152.110.122"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.25.149.122"/>
    </slice>
    <from sec="1289452191" usec="0"/>
    <to sec="1289452204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.184.122"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.69.235.122"/>
    </slice>
    <from sec="1289452007" usec="0"/>
    <to sec="1289452372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.80.16.123"/>
    </slice>
    <from sec="1289452491" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.7.30.123"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.208.124"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.236.7.125"/>
    </slice>
    <from sec="1289452453" usec="0"/>
    <to sec="1289452466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.23.13.127"/>
    </slice>
    <from sec="1289451742" usec="0"/>
    <to sec="1289451760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.244.30.127"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.45.99.127"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
347[label="166.26.115.42;d;88pkt 88fpkt", shape=diamond, color=yellow];
350[label="3.4.152.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
1093[label="171.78.215.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
1186[label="18.57.56.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
2198[label="16.174.50.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
2235[label="34.164.170.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
2238[label="17.52.72.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
2274[label="34.185.57.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
2320[label="34.77.108.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
2355[label="36.26.167.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
3091[label="17.118.190.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
3092[label="171.73.32.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
3134[label="34.94.104.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
3164[label="43.22.150.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
3190[label="17.38.28.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
3364[label="98.52.213.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
3657[label="16.18.75.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
3814[label="36.124.147.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
3824[label="17.90.188.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
3825[label="17.165.107.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
4543[label="16.20.173.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
4658[label="17.46.142.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
4817[label="16.119.219.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
5297[label="35.4.149.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
5325[label="36.14.209.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
5490[label="44.104.23.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
5933[label="36.165.146.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
6735[label="171.81.162.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
10883[label="17.38.28.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11339[label="16.25.67.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14327[label="98.52.213.226;1pkt 1fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.115.42:1088}[89.7727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1088: (46.1864%)&lt;BR/&gt; 17788: (5.9322%)&lt;BR/&gt; 80: (2.11864%)&lt;BR/&gt; 15648: (1.27119%)&lt;BR/&gt; 8144: (1.27119%)&gt;];
}
347--350[label="1;1pkt 1fpkt"];
347--1093[label="1;1pkt 1fpkt"];
347--1186[label="1;1pkt 1fpkt"];
347--2198[label="1;1pkt 1fpkt"];
347--2235[label="1;1pkt 1fpkt"];
347--2238[label="1;1pkt 1fpkt"];
347--2274[label="1;1pkt 1fpkt"];
347--2320[label="1;1pkt 1fpkt"];
347--2355[label="1;1pkt 1fpkt"];
347--3091[label="1;1pkt 1fpkt"];
347--3092[label="1;1pkt 1fpkt"];
347--3134[label="1;1pkt 1fpkt"];
347--3164[label="1;1pkt 1fpkt"];
347--3190[label="1;1pkt 1fpkt"];
347--3364[label="1;1pkt 1fpkt"];
347--3657[label="1;1pkt 1fpkt"];
347--3814[label="1;1pkt 1fpkt"];
347--3824[label="1;1pkt 1fpkt"];
347--3825[label="1;1pkt 1fpkt"];
347--4543[label="1;1pkt 1fpkt"];
347--4658[label="1;1pkt 1fpkt"];
347--4817[label="1;1pkt 1fpkt"];
347--5297[label="1;1pkt 1fpkt"];
347--5325[label="1;1pkt 1fpkt"];
347--5490[label="1;1pkt 1fpkt"];
347--5933[label="1;1pkt 1fpkt"];
347--6735[label="1;1pkt 1fpkt"];
347--10883[label="1;1pkt 1fpkt"];
347--11339[label="1;1pkt 1fpkt"];
347--14327[label="1;1pkt 1fpkt"];
3190--10883[label="1;1pkt 1fpkt"];
3364--14327[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.115.42" dst_port="1088"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.165.211.128"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
6451[label="47.71.145.122;d;31pkt 31fpkt", shape=diamond, color=yellow];
10898[label="133.4.14.129;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.14.129:80, 47.71.145.122:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51927: (1.5873%)&lt;BR/&gt; 51926: (1.5873%)&lt;BR/&gt; 51925: (1.5873%)&lt;BR/&gt; 51924: (1.5873%)&gt;];
}
6451--10898[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="47.71.145.122" src_ip="133.4.14.129" src_port="80"/>
    </slice>
    <from sec="1289451733" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.43.56.129"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289452482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.189.129"/>
    </slice>
    <from sec="1289451755" usec="0"/>
    <to sec="1289451840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.114.180.130"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.31.131"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.152.34.131"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.33.47.131"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.82.77.131"/>
    </slice>
    <from sec="1289452475" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
849[label="1.173.130.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
1598[label="166.26.114.159;d;83pkt 83fpkt", shape=diamond, color=yellow];
1875[label="98.28.131.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
2694[label="17.83.49.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
3178[label="168.241.138.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
3870[label="98.80.72.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
3926[label="1.136.206.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
5075[label="18.36.144.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
5551[label="176.204.2.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
6911[label="46.47.61.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
10405[label="161.144.1.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10956[label="18.36.144.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12110[label="96.149.14.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12269[label="52.227.79.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14276[label="52.227.79.218;1pkt 1fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.114.159:3209}[61.4458%]&lt;BR/&gt;{*:*, 166.26.114.159:1048}[36.1446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3209: (31.9588%)&lt;BR/&gt; 1048: (17.0103%)&lt;BR/&gt; 17788: (3.09278%)&lt;BR/&gt; 0: (3.09278%)&lt;BR/&gt; 8800: (2.06186%)&gt;];
}
849--1598[label="1;1pkt 1fpkt"];
1598--1875[label="1;1pkt 1fpkt"];
1598--2694[label="1;1pkt 1fpkt"];
1598--3178[label="1;1pkt 1fpkt"];
1598--3870[label="1;1pkt 1fpkt"];
1598--3926[label="1;1pkt 1fpkt"];
1598--5075[label="1;1pkt 1fpkt"];
1598--5551[label="1;1pkt 1fpkt"];
1598--6911[label="1;1pkt 1fpkt"];
1598--10405[label="1;1pkt 1fpkt"];
1598--10956[label="1;1pkt 1fpkt"];
1598--12110[label="1;1pkt 1fpkt"];
1598--12269[label="1;1pkt 1fpkt"];
1598--14276[label="1;1pkt 1fpkt"];
5075--10956[label="1;1pkt 1fpkt"];
12269--14276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.114.159" dst_port="3209"/>
      <filter dst_ip="166.26.114.159" dst_port="1048"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.96.158.131"/>
    </slice>
    <from sec="1289451709" usec="0"/>
    <to sec="1289451727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.41.209.131"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.5.34.132"/>
    </slice>
    <from sec="1289452000" usec="0"/>
    <to sec="1289452021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.105.132"/>
    </slice>
    <from sec="1289451818" usec="0"/>
    <to sec="1289452399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.93.117.132"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.153.126.132"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.206.132"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289452286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.8.105.133"/>
    </slice>
    <from sec="1289452345" usec="0"/>
    <to sec="1289452376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.95.168.133"/>
    </slice>
    <from sec="1289452144" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.236.109.134"/>
    </slice>
    <from sec="1289451837" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.34.71.135"/>
    </slice>
    <from sec="1289451873" usec="0"/>
    <to sec="1289451886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.23.81.135"/>
    </slice>
    <from sec="1289452007" usec="0"/>
    <to sec="1289452021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.69.100.135"/>
    </slice>
    <from sec="1289451824" usec="0"/>
    <to sec="1289451832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.164.129.135"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.27.130.135"/>
    </slice>
    <from sec="1289452086" usec="0"/>
    <to sec="1289452231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.32.5.136"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289452495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.14.136"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.169.36.136"/>
    </slice>
    <from sec="1289451821" usec="0"/>
    <to sec="1289452269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.145.99.136"/>
    </slice>
    <from sec="1289451853" usec="0"/>
    <to sec="1289451870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.76.133.136"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.186.160.136"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.66.80.137"/>
    </slice>
    <from sec="1289452072" usec="0"/>
    <to sec="1289452091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.244.140.137"/>
    </slice>
    <from sec="1289451833" usec="0"/>
    <to sec="1289451843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.152.209.137"/>
    </slice>
    <from sec="1289452028" usec="0"/>
    <to sec="1289452318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.104.23.138"/>
    </slice>
    <from sec="1289451699" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.80.89.138"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.189.138"/>
    </slice>
    <from sec="1289452444" usec="0"/>
    <to sec="1289452450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.74.205.138"/>
    </slice>
    <from sec="1289451718" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.250.138"/>
    </slice>
    <from sec="1289451985" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.21.24.139"/>
    </slice>
    <from sec="1289451714" usec="0"/>
    <to sec="1289451720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
1919[label="47.53.127.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
5813[label="128.19.192.139;s;3pkt 3fpkt", shape=diamond, color=yellow];
11128[label="128.19.192.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.195.3:0, 47.53.127.22:0}[25%]&lt;BR/&gt;{128.19.192.139:8277, 47.53.127.22:8292}[25%]&lt;BR/&gt;{128.19.192.139:8200, 202.104.252.192:8198}[25%]&lt;BR/&gt;{128.19.192.139:8229, 202.104.252.192:8194}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (25%)&lt;BR/&gt; 8277: (25%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 8229: (8.33333%)&lt;BR/&gt; 8200: (8.33333%)&gt;];
}
1919--5813[label="0.5;1pkt 1fpkt"];
1919--11128[label="1;1pkt 1fpkt"];
5813--11128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.104.252.192" dst_port="8194" src_ip="128.19.192.139" src_port="8229"/>
      <filter dst_ip="202.104.252.192" dst_port="8198" src_ip="128.19.192.139" src_port="8200"/>
      <filter dst_ip="47.53.127.22" dst_port="8292" src_ip="128.19.192.139" src_port="8277"/>
      <filter dst_ip="47.53.127.22" src_ip="128.19.195.3"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.96.18.140"/>
    </slice>
    <from sec="1289451672" usec="0"/>
    <to sec="1289451691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.137.112.140"/>
    </slice>
    <from sec="1289451898" usec="0"/>
    <to sec="1289451987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.164.173.140"/>
    </slice>
    <from sec="1289452105" usec="0"/>
    <to sec="1289452124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.48.229.141"/>
    </slice>
    <from sec="1289452271" usec="0"/>
    <to sec="1289452394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.197.25.142"/>
    </slice>
    <from sec="1289452011" usec="0"/>
    <to sec="1289452065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.248.42.143"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.98.66.143"/>
    </slice>
    <from sec="1289452145" usec="0"/>
    <to sec="1289452176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.30.123.143"/>
    </slice>
    <from sec="1289452157" usec="0"/>
    <to sec="1289452169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.226.34.144"/>
    </slice>
    <from sec="1289452267" usec="0"/>
    <to sec="1289452270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.27.97.144"/>
    </slice>
    <from sec="1289452050" usec="0"/>
    <to sec="1289452069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.32.220.144"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.238.234.144"/>
    </slice>
    <from sec="1289452340" usec="0"/>
    <to sec="1289452390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.43.50.145"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
1402[label="158.196.130.145;s;4pkt 4fpkt", shape=diamond, color=yellow];
11208[label="158.196.130.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.130.145:32769, 42.150.10.9:53}[20%]&lt;BR/&gt;{158.196.130.145:80, 203.47.62.106:34851}[20%]&lt;BR/&gt;{158.196.130.145:32769, 201.238.82.134:53}[20%]&lt;BR/&gt;{158.196.130.145:42358, 42.150.22.217:25}[20%]&lt;BR/&gt;{158.196.130.145:42357, 42.150.22.220:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (22.2222%)&lt;BR/&gt; 32769: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 42358: (11.1111%)&lt;BR/&gt; 42357: (11.1111%)&gt;];
}
1402--11208[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="42.150.22.220" dst_port="25" src_ip="158.196.130.145" src_port="42357"/>
      <filter dst_ip="42.150.22.217" dst_port="25" src_ip="158.196.130.145" src_port="42358"/>
      <filter dst_ip="201.238.82.134" dst_port="53" src_ip="158.196.130.145" src_port="32769"/>
      <filter dst_ip="203.47.62.106" dst_port="34851" src_ip="158.196.130.145" src_port="80"/>
      <filter dst_ip="42.150.10.9" dst_port="53" src_ip="158.196.130.145" src_port="32769"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.24.221.145"/>
    </slice>
    <from sec="1289452090" usec="0"/>
    <to sec="1289452445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.83.92.146"/>
    </slice>
    <from sec="1289451658" usec="0"/>
    <to sec="1289451875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.104.146"/>
    </slice>
    <from sec="1289452256" usec="0"/>
    <to sec="1289452268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.141.233.147"/>
    </slice>
    <from sec="1289452232" usec="0"/>
    <to sec="1289452244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.47.156.148"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.225.208.148"/>
    </slice>
    <from sec="1289451829" usec="0"/>
    <to sec="1289451842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
5316[label="201.141.26.12;d;105pkt 105fpkt", shape=diamond, color=yellow];
11264[label="166.26.114.149;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.211.64:*, 201.141.26.12:80}[32.381%]&lt;BR/&gt;{166.26.114.149:*, 201.141.26.12:80}[25.7143%]&lt;BR/&gt;{211.185.150.184:*, 201.141.26.12:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51394: (0.763359%)&lt;BR/&gt; 51393: (0.763359%)&lt;BR/&gt; 51392: (0.763359%)&lt;BR/&gt; 51391: (0.763359%)&gt;];
}
5316--8664[label="0.0571429;6pkt 6fpkt"];
5316--8688[label="0.0571429;6pkt 6fpkt"];
5316--8743[label="0.0571429;6pkt 6fpkt"];
5316--8765[label="0.0571429;6pkt 6fpkt"];
5316--8790[label="0.0571429;6pkt 6fpkt"];
5316--8811[label="0.0571429;6pkt 6fpkt"];
5316--11264[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="201.141.26.12" dst_port="80" src_ip="128.165.211.64"/>
      <filter dst_ip="201.141.26.12" dst_port="80" src_ip="166.26.114.149"/>
      <filter dst_ip="201.141.26.12" dst_port="80" src_ip="211.185.150.184"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.9.12.150"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.117.130.150"/>
    </slice>
    <from sec="1289452328" usec="0"/>
    <to sec="1289452350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.182.150"/>
    </slice>
    <from sec="1289451771" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
3696[label="128.7.75.151;s;6pkt 6fpkt", shape=diamond, color=yellow];
4124[label="203.47.62.136;d;4pkt 4fpkt", shape=diamond, color=yellow];
11289[label="128.7.75.151;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13831[label="128.7.75.151;10pkt 10fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.75.151:80, 42.146.67.109:*}[42.8571%]&lt;BR/&gt;{128.7.75.151:80, 42.146.67.230:*}[28.5714%]&lt;BR/&gt;{*:80, 203.47.62.136:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44185: (6.45161%)&lt;BR/&gt; 63114: (4.83871%)&lt;BR/&gt; 62581: (4.83871%)&lt;BR/&gt; 53621: (4.83871%)&gt;];
}
3696--4124[label="0.25;1pkt 1fpkt"];
3696--11289[label="1;6pkt 6fpkt"];
3696--13831[label="0.833333;5pkt 5fpkt"];
4124--11289[label="0.25;1pkt 1fpkt"];
4124--13831[label="0.25;1pkt 1fpkt"];
11289--13831[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.136" src_port="80"/>
      <filter dst_ip="42.146.67.109" src_ip="128.7.75.151" src_port="80"/>
      <filter dst_ip="42.146.67.230" src_ip="128.7.75.151" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.24.84.152"/>
    </slice>
    <from sec="1289451977" usec="0"/>
    <to sec="1289451987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.11.101.152"/>
    </slice>
    <from sec="1289452062" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.51.196.153"/>
    </slice>
    <from sec="1289452447" usec="0"/>
    <to sec="1289452479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.74.202.153"/>
    </slice>
    <from sec="1289451689" usec="0"/>
    <to sec="1289451820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.3.2.154"/>
    </slice>
    <from sec="1289451690" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.170.73.154"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.42.246.154"/>
    </slice>
    <from sec="1289452351" usec="0"/>
    <to sec="1289452367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.80.67.155"/>
    </slice>
    <from sec="1289452306" usec="0"/>
    <to sec="1289452317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
11354[label="200.244.253.155;259pkt 259fpkt", shape=pentagon, color=darkviolet];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.244.253.155:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="200.244.253.155"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.191.0.156"/>
    </slice>
    <from sec="1289452351" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.42.5.156"/>
    </slice>
    <from sec="1289451963" usec="0"/>
    <to sec="1289451969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
4270[label="53.72.5.157;s;1500pkt 1500fpkt", shape=diamond, color=yellow];
11374[label="53.72.5.157;1633pkt 1633fpkt", shape=pentagon, color=darkviolet];
13868[label="53.72.5.157;1633pkt 1633fpkt", shape=invtriangle, color=brown];
14984[label="53.72.5.157;1633pkt 1633fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.72.5.157:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 12772: (0.242225%)&lt;BR/&gt; 2625: (0.187529%)&lt;BR/&gt; 14851: (0.179716%)&lt;BR/&gt; 1409: (0.179716%)&gt;];
}
4270--8676[label="0.0506667;76pkt 76fpkt"];
4270--11374[label="0.999333;1499pkt 1499fpkt"];
4270--13868[label="0.999333;1499pkt 1499fpkt"];
4270--14984[label="0.999333;1499pkt 1499fpkt"];
11374--13868[label="1;1633pkt 1633fpkt"];
11374--14984[label="1;1633pkt 1633fpkt"];
13868--14984[label="1;1633pkt 1633fpkt"];
</description>
    <slice>
      <filter src_ip="53.72.5.157" src_port="53"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.108.71.157"/>
    </slice>
    <from sec="1289452293" usec="0"/>
    <to sec="1289452306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.147.192.158"/>
    </slice>
    <from sec="1289451864" usec="0"/>
    <to sec="1289452442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.27.221.158"/>
    </slice>
    <from sec="1289451675" usec="0"/>
    <to sec="1289452451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.198.238.158"/>
    </slice>
    <from sec="1289452078" usec="0"/>
    <to sec="1289452093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.183.141.159"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.160.163.159"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.152.164.159"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.100.209.159"/>
    </slice>
    <from sec="1289451895" usec="0"/>
    <to sec="1289451900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.69.62.160"/>
    </slice>
    <from sec="1289452226" usec="0"/>
    <to sec="1289452270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.99.160"/>
    </slice>
    <from sec="1289451989" usec="0"/>
    <to sec="1289452098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
2119[label="166.26.204.96;d;48pkt 48fpkt", shape=diamond, color=yellow];
6990[label="170.20.216.169;s;7pkt 7fpkt", shape=diamond, color=yellow];
7103[label="166.26.115.145;d;58pkt 58fpkt", shape=diamond, color=yellow];
11420[label="201.18.118.160;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11578[label="170.20.216.169;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12681[label="171.55.39.253;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13888[label="201.18.118.160;6pkt 6fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.204.96:*}[33.3333%]&lt;BR/&gt;{*:80, 166.26.115.145:*}[27.193%]&lt;BR/&gt;{*:*, 166.26.115.145:20000}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.5664%)&lt;BR/&gt; 20000: (9.09091%)&lt;BR/&gt; 443: (6.99301%)&lt;BR/&gt; 58745: (1.04895%)&lt;BR/&gt; 58743: (1.04895%)&gt;];
}
2119--2161[label="0.0208333;1pkt 1fpkt"];
2119--2689[label="0.0208333;1pkt 1fpkt"];
2119--2852[label="0.027027;1pkt 1fpkt"];
2119--3100[label="0.0208333;1pkt 1fpkt"];
2119--3960[label="0.125;6pkt 6fpkt"];
2119--3967[label="0.0208333;1pkt 1fpkt"];
2119--4256[label="0.0208333;1pkt 1fpkt"];
2119--4284[label="0.0208333;1pkt 1fpkt"];
2119--4380[label="0.0357143;1pkt 1fpkt"];
2119--4457[label="0.0208333;1pkt 1fpkt"];
2119--5367[label="0.0208333;1pkt 1fpkt"];
2119--5402[label="0.037037;1pkt 1fpkt"];
2119--8684[label="0.0833333;4pkt 4fpkt"];
2119--8761[label="0.0833333;4pkt 4fpkt"];
2119--8807[label="0.0833333;4pkt 4fpkt"];
2119--10062[label="0.0208333;1pkt 1fpkt"];
2119--10722[label="0.0357143;1pkt 1fpkt"];
2119--11420[label="1;6pkt 6fpkt"];
2119--12681[label="0.125;1pkt 1fpkt"];
2119--13282[label="0.0208333;1pkt 1fpkt"];
2119--13581[label="0.037037;1pkt 1fpkt"];
2119--13888[label="1;6pkt 6fpkt"];
6990--7103[label="1;7pkt 7fpkt"];
6990--11578[label="1;7pkt 7fpkt"];
7103--8684[label="0.0517241;3pkt 3fpkt"];
7103--8685[label="0.0172414;1pkt 1fpkt"];
7103--8761[label="0.0517241;3pkt 3fpkt"];
7103--8762[label="0.0172414;1pkt 1fpkt"];
7103--8807[label="0.0517241;3pkt 3fpkt"];
7103--8808[label="0.0172414;1pkt 1fpkt"];
7103--10738[label="0.047619;1pkt 1fpkt"];
7103--11578[label="0.8;8pkt 8fpkt"];
7103--12681[label="0.125;1pkt 1fpkt"];
11420--13888[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.115.145" src_port="80"/>
      <filter dst_ip="166.26.115.145" dst_port="20000"/>
      <filter dst_ip="166.26.204.96" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.246.149.160"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.249.90.161"/>
    </slice>
    <from sec="1289451943" usec="0"/>
    <to sec="1289452328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.10.164.161"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.161"/>
    </slice>
    <from sec="1289452128" usec="0"/>
    <to sec="1289452154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
4016[label="203.47.62.186;d;6pkt 6fpkt", shape=diamond, color=yellow];
11445[label="166.26.218.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.146.138:80, 203.47.62.186:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36105: (14.2857%)&lt;BR/&gt; 65382: (7.14286%)&lt;BR/&gt; 60129: (7.14286%)&lt;BR/&gt; 59121: (7.14286%)&gt;];
}
4016--4307[label="0.166667;1pkt 1fpkt"];
4016--11445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.186" src_ip="211.185.146.138" src_port="80"/>
    </slice>
    <from sec="1289451651" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.42.229.161"/>
    </slice>
    <from sec="1289451646" usec="0"/>
    <to sec="1289451866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.8.162"/>
    </slice>
    <from sec="1289451680" usec="0"/>
    <to sec="1289451687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.0.65.162"/>
    </slice>
    <from sec="1289452446" usec="0"/>
    <to sec="1289452463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.141.162"/>
    </slice>
    <from sec="1289451671" usec="0"/>
    <to sec="1289452431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
68[label="133.4.39.122;d;226pkt 226fpkt", shape=diamond, color=yellow];
107[label="133.4.69.15;d;658pkt 658fpkt", shape=diamond, color=yellow];
198[label="221.123.164.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
199[label="166.26.231.223;d;154pkt 154fpkt", shape=diamond, color=yellow];
416[label="211.185.146.174;d;775pkt 775fpkt", shape=diamond, color=yellow];
440[label="133.4.112.28;d;845pkt 845fpkt", shape=diamond, color=yellow];
442[label="5.2.9.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
648[label="0.44.18.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
825[label="35.145.124.178;s;12pkt 12fpkt", shape=diamond, color=yellow];
1145[label="133.4.131.139;d;45pkt 45fpkt", shape=diamond, color=yellow];
1427[label="171.54.160.162;s;6pkt 6fpkt", shape=diamond, color=yellow];
1570[label="176.8.207.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
1831[label="85.26.159.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
1950[label="24.128.139.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
2276[label="197.87.103.165;s;16pkt 16fpkt", shape=diamond, color=yellow];
2321[label="192.138.191.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
2325[label="0.33.105.152;s;6pkt 6fpkt", shape=diamond, color=yellow];
2426[label="9.106.74.108;s;59pkt 59fpkt", shape=diamond, color=yellow];
2923[label="198.138.39.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2929[label="5.166.89.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2984[label="84.66.92.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
3004[label="8.253.88.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
3246[label="0.33.105.128;s;17pkt 17fpkt", shape=diamond, color=yellow];
3257[label="80.233.78.36;s;2pkt 2fpkt", shape=diamond, color=yellow];
3325[label="5.174.72.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
3341[label="81.147.128.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3466[label="39.181.19.114;s;20pkt 20fpkt", shape=diamond, color=yellow];
3636[label="44.29.235.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
3641[label="41.21.131.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
3874[label="210.197.192.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
4022[label="14.96.225.248;s;2pkt 2fpkt", shape=diamond, color=yellow];
4226[label="4.130.164.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
4261[label="80.6.84.152;s;41pkt 41fpkt", shape=diamond, color=yellow];
4306[label="214.178.209.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
4321[label="194.91.209.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
4653[label="133.4.237.164;d;30pkt 30fpkt", shape=diamond, color=yellow];
4716[label="128.19.145.176;d;97pkt 97fpkt", shape=diamond, color=yellow];
4822[label="0.33.105.197;s;12pkt 12fpkt", shape=diamond, color=yellow];
4839[label="5.37.17.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
5099[label="198.236.87.56;s;45pkt 45fpkt", shape=diamond, color=yellow];
5184[label="213.40.220.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
6382[label="210.33.155.78;d;10pkt 10fpkt", shape=diamond, color=yellow];
7333[label="35.145.218.24;s;46pkt 46fpkt", shape=diamond, color=yellow];
7433[label="8.51.87.224;s;2pkt 2fpkt", shape=diamond, color=yellow];
7493[label="210.33.154.156;d;17pkt 17fpkt", shape=diamond, color=yellow];
8379[label="210.33.155.78;d;8pkt 8fpkt", shape=hexagon, color=black];
8999[label="5.37.17.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9224[label="211.52.130.20;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9250[label="202.28.151.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9296[label="35.145.218.24;48pkt 48fpkt", shape=pentagon, color=darkviolet];
9400[label="84.167.181.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9485[label="80.233.78.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9567[label="84.160.165.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9650[label="192.172.234.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9848[label="198.236.87.56;46pkt 46fpkt", shape=pentagon, color=darkviolet];
9910[label="192.144.80.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10636[label="9.106.74.108;72pkt 72fpkt", shape=pentagon, color=darkviolet];
10670[label="8.32.87.110;28pkt 28fpkt", shape=pentagon, color=darkviolet];
10676[label="44.115.4.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10719[label="39.181.19.114;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10968[label="0.238.59.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10971[label="193.156.75.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11043[label="2.242.96.135;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11182[label="0.33.105.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11277[label="80.82.105.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11457[label="67.80.89.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11464[label="171.54.160.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11590[label="8.36.156.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11809[label="202.28.150.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11886[label="211.241.36.192;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11934[label="0.33.105.195;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11968[label="0.33.105.197;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12166[label="202.9.133.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12305[label="18.179.71.220;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12341[label="211.241.56.224;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12343[label="192.144.80.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12372[label="202.28.150.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12453[label="0.33.105.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12552[label="171.98.184.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12602[label="198.205.6.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12620[label="197.87.180.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12987[label="197.41.122.33;1pkt 1fpkt", shape=invtriangle, color=brown];
13542[label="9.106.74.108;72pkt 72fpkt", shape=invtriangle, color=brown];
13695[label="0.238.59.132;1pkt 1fpkt", shape=invtriangle, color=brown];
13827[label="80.82.105.150;1pkt 1fpkt", shape=invtriangle, color=brown];
13909[label="67.80.89.162;1pkt 1fpkt", shape=invtriangle, color=brown];
14228[label="202.9.133.211;2pkt 2fpkt", shape=invtriangle, color=brown];
14408[label="171.98.184.240;2pkt 2fpkt", shape=invtriangle, color=brown];
14505[label="5.37.17.9;1pkt 1fpkt", shape=invhouse, color=bisque];
14567[label="202.28.151.21;1pkt 1fpkt", shape=invhouse, color=bisque];
14609[label="197.41.122.33;1pkt 1fpkt", shape=invhouse, color=bisque];
14817[label="41.21.131.100;1pkt 1fpkt", shape=invhouse, color=bisque];
14965[label="80.82.105.150;1pkt 1fpkt", shape=invhouse, color=bisque];
15004[label="171.54.160.162;5pkt 5fpkt", shape=invhouse, color=bisque];
15161[label="202.9.133.211;2pkt 2fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.112.28:*}[28.8199%]&lt;BR/&gt;{*:*, 133.4.69.15:123}[21.487%]&lt;BR/&gt;{*:80, 211.185.146.174:*}[20.8731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.3086%)&lt;BR/&gt; 123: (12.6543%)&lt;BR/&gt; 1122: (2.79181%)&lt;BR/&gt; 0: (1.23457%)&lt;BR/&gt; 443: (1.16442%)&gt;];
}
68--1121[label="0.00442478;1pkt 1fpkt"];
68--1220[label="0.00442478;1pkt 1fpkt"];
68--1261[label="0.00641026;1pkt 1fpkt"];
68--1347[label="0.00442478;1pkt 1fpkt"];
68--1570[label="1;1pkt 1fpkt"];
68--1653[label="0.00442478;1pkt 1fpkt"];
68--1831[label="1;1pkt 1fpkt"];
68--2161[label="0.00617284;1pkt 1fpkt"];
68--2174[label="0.00442478;1pkt 1fpkt"];
68--2229[label="0.00884956;2pkt 2fpkt"];
68--2276[label="0.1875;3pkt 3fpkt"];
68--2325[label="0.166667;1pkt 1fpkt"];
68--2330[label="0.00442478;1pkt 1fpkt"];
68--2379[label="0.0103093;1pkt 1fpkt"];
68--2987[label="0.0353982;8pkt 8fpkt"];
68--3068[label="0.0353982;8pkt 8fpkt"];
68--3100[label="0.00442478;1pkt 1fpkt"];
68--3120[label="0.00552486;1pkt 1fpkt"];
68--3341[label="1;1pkt 1fpkt"];
68--3601[label="0.0196078;1pkt 1fpkt"];
68--3636[label="1;1pkt 1fpkt"];
68--4321[label="1;1pkt 1fpkt"];
68--4560[label="0.01;1pkt 1fpkt"];
68--5138[label="0.0265487;6pkt 6fpkt"];
68--5184[label="1;1pkt 1fpkt"];
68--5426[label="0.0151515;1pkt 1fpkt"];
68--5912[label="0.00442478;1pkt 1fpkt"];
68--7291[label="0.151515;15pkt 15fpkt"];
68--8684[label="0.0221239;5pkt 5fpkt"];
68--8761[label="0.0221239;5pkt 5fpkt"];
68--8807[label="0.0221239;5pkt 5fpkt"];
68--9083[label="0.0265487;6pkt 6fpkt"];
68--9362[label="0.0140845;1pkt 1fpkt"];
68--9627[label="0.00558659;1pkt 1fpkt"];
68--9743[label="0.166667;3pkt 3fpkt"];
68--9777[label="0.2;1pkt 1fpkt"];
68--10670[label="0.821429;23pkt 23fpkt"];
68--10757[label="0.2;1pkt 1fpkt"];
68--11121[label="0.00442478;1pkt 1fpkt"];
68--11588[label="0.00990099;1pkt 1fpkt"];
68--11886[label="1;7pkt 7fpkt"];
68--12341[label="1;4pkt 4fpkt"];
68--12458[label="0.0103093;1pkt 1fpkt"];
68--12951[label="0.0138889;1pkt 1fpkt"];
68--13079[label="0.00561798;1pkt 1fpkt"];
68--13762[label="0.00442478;1pkt 1fpkt"];
68--13970[label="0.00990099;1pkt 1fpkt"];
107--1774[label="0.00151976;1pkt 1fpkt"];
107--3257[label="0.5;1pkt 1fpkt"];
107--3874[label="1;1pkt 1fpkt"];
107--4261[label="1;41pkt 41fpkt"];
107--8667[label="0.00151976;1pkt 1fpkt"];
107--8746[label="0.00151976;1pkt 1fpkt"];
107--8793[label="0.00151976;1pkt 1fpkt"];
107--9637[label="0.0689655;2pkt 2fpkt"];
107--13085[label="0.0689655;2pkt 2fpkt"];
107--14649[label="0.0689655;2pkt 2fpkt"];
198--199[label="1;1pkt 1fpkt"];
199--360[label="0.012987;2pkt 2fpkt"];
199--650[label="0.0943396;5pkt 5fpkt"];
199--1427[label="1;6pkt 6fpkt"];
199--1587[label="0.012987;2pkt 2fpkt"];
199--1778[label="0.0649351;10pkt 10fpkt"];
199--1991[label="0.0173913;2pkt 2fpkt"];
199--2257[label="0.00990099;1pkt 1fpkt"];
199--2426[label="0.898305;53pkt 53fpkt"];
199--3641[label="1;1pkt 1fpkt"];
199--3805[label="0.0116279;1pkt 1fpkt"];
199--4256[label="0.11039;17pkt 17fpkt"];
199--4284[label="0.0194805;3pkt 3fpkt"];
199--4335[label="0.0140845;1pkt 1fpkt"];
199--6596[label="0.00819672;1pkt 1fpkt"];
199--7298[label="0.0194175;2pkt 2fpkt"];
199--7936[label="0.0298507;2pkt 2fpkt"];
199--8626[label="0.0298507;2pkt 2fpkt"];
199--8684[label="0.025974;4pkt 4fpkt"];
199--8685[label="0.00649351;1pkt 1fpkt"];
199--8761[label="0.025974;4pkt 4fpkt"];
199--8762[label="0.00649351;1pkt 1fpkt"];
199--8807[label="0.025974;4pkt 4fpkt"];
199--8808[label="0.00649351;1pkt 1fpkt"];
199--10636[label="0.736111;53pkt 53fpkt"];
199--10741[label="0.00757576;1pkt 1fpkt"];
199--10904[label="0.0649351;10pkt 10fpkt"];
199--11464[label="1;6pkt 6fpkt"];
199--11550[label="0.0173913;2pkt 2fpkt"];
199--12305[label="1;5pkt 5fpkt"];
199--13542[label="0.736111;53pkt 53fpkt"];
199--13592[label="0.0075188;1pkt 1fpkt"];
199--14817[label="1;1pkt 1fpkt"];
199--14864[label="0.00757576;1pkt 1fpkt"];
199--15004[label="1;5pkt 5fpkt"];
416--418[label="0.25;1pkt 1fpkt"];
416--735[label="0.0530973;6pkt 6fpkt"];
416--742[label="0.0526316;4pkt 4fpkt"];
416--752[label="0.0253165;8pkt 8fpkt"];
416--825[label="0.583333;7pkt 7fpkt"];
416--860[label="0.00645161;5pkt 5fpkt"];
416--1071[label="0.0588235;1pkt 1fpkt"];
416--1213[label="0.0149254;3pkt 3fpkt"];
416--1704[label="0.0152284;3pkt 3fpkt"];
416--1706[label="0.00729927;1pkt 1fpkt"];
416--2156[label="0.0185185;1pkt 1fpkt"];
416--2168[label="0.00308642;1pkt 1fpkt"];
416--2276[label="0.0625;1pkt 1fpkt"];
416--2280[label="0.00436681;1pkt 1fpkt"];
416--2325[label="0.166667;1pkt 1fpkt"];
416--2426[label="0.0847458;5pkt 5fpkt"];
416--2689[label="0.015625;1pkt 1fpkt"];
416--2765[label="0.0666667;4pkt 4fpkt"];
416--2767[label="0.00273224;1pkt 1fpkt"];
416--2787[label="0.00395257;1pkt 1fpkt"];
416--2861[label="0.166667;11pkt 11fpkt"];
416--2959[label="0.0111111;1pkt 1fpkt"];
416--2987[label="0.00182815;1pkt 1fpkt"];
416--3220[label="0.027027;2pkt 2fpkt"];
416--3247[label="0.0333333;4pkt 4fpkt"];
416--3466[label="1;20pkt 20fpkt"];
416--3561[label="0.00947867;2pkt 2fpkt"];
416--3639[label="0.0196078;1pkt 1fpkt"];
416--3672[label="0.0180723;3pkt 3fpkt"];
416--4286[label="0.00387097;3pkt 3fpkt"];
416--4288[label="0.142857;1pkt 1fpkt"];
416--4306[label="1;2pkt 2fpkt"];
416--4380[label="0.0357143;1pkt 1fpkt"];
416--4508[label="0.0060241;2pkt 2fpkt"];
416--4822[label="0.0833333;1pkt 1fpkt"];
416--5099[label="0.933333;42pkt 42fpkt"];
416--5267[label="0.0128205;1pkt 1fpkt"];
416--5377[label="0.0144231;3pkt 3fpkt"];
416--6104[label="0.0666667;1pkt 1fpkt"];
416--6484[label="0.00129032;1pkt 1fpkt"];
416--6596[label="0.00819672;1pkt 1fpkt"];
416--6726[label="0.05;1pkt 1fpkt"];
416--7088[label="0.00900901;1pkt 1fpkt"];
416--7203[label="0.011236;1pkt 1fpkt"];
416--7333[label="0.456522;21pkt 21fpkt"];
416--7407[label="0.25;1pkt 1fpkt"];
416--8562[label="0.00129032;1pkt 1fpkt"];
416--8650[label="0.00129032;1pkt 1fpkt"];
416--8684[label="0.0645161;50pkt 50fpkt"];
416--8685[label="0.00645161;5pkt 5fpkt"];
416--8703[label="0.00129032;1pkt 1fpkt"];
416--8761[label="0.0645161;50pkt 50fpkt"];
416--8762[label="0.00645161;5pkt 5fpkt"];
416--8780[label="0.00129032;1pkt 1fpkt"];
416--8807[label="0.0645161;50pkt 50fpkt"];
416--8808[label="0.00645161;5pkt 5fpkt"];
416--8826[label="0.00129032;1pkt 1fpkt"];
416--8883[label="0.037037;1pkt 1fpkt"];
416--8887[label="0.0333333;1pkt 1fpkt"];
416--9026[label="0.00694444;1pkt 1fpkt"];
416--9069[label="0.0588235;2pkt 2fpkt"];
416--9153[label="0.0108696;3pkt 3fpkt"];
416--9195[label="0.0625;1pkt 1fpkt"];
416--9250[label="1;1pkt 1fpkt"];
416--9274[label="0.111111;1pkt 1fpkt"];
416--9296[label="0.4375;21pkt 21fpkt"];
416--9496[label="0.333333;1pkt 1fpkt"];
416--9526[label="0.243902;10pkt 10fpkt"];
416--9730[label="0.00436681;1pkt 1fpkt"];
416--9743[label="0.111111;2pkt 2fpkt"];
416--9777[label="0.2;1pkt 1fpkt"];
416--9848[label="0.913043;42pkt 42fpkt"];
416--9881[label="0.333333;1pkt 1fpkt"];
416--9910[label="1;1pkt 1fpkt"];
416--10000[label="0.0416667;1pkt 1fpkt"];
416--10062[label="0.0144928;1pkt 1fpkt"];
416--10363[label="0.0555556;1pkt 1fpkt"];
416--10636[label="0.0694444;5pkt 5fpkt"];
416--10655[label="0.047619;1pkt 1fpkt"];
416--10676[label="1;1pkt 1fpkt"];
416--10719[label="1;20pkt 20fpkt"];
416--10738[label="0.047619;1pkt 1fpkt"];
416--10741[label="0.00757576;1pkt 1fpkt"];
416--11457[label="1;2pkt 2fpkt"];
416--11488[label="0.015625;1pkt 1fpkt"];
416--11489[label="0.03125;1pkt 1fpkt"];
416--11590[label="0.5;1pkt 1fpkt"];
416--11720[label="0.0588235;1pkt 1fpkt"];
416--11809[label="1;1pkt 1fpkt"];
416--11968[label="0.0909091;1pkt 1fpkt"];
416--11979[label="0.0111111;1pkt 1fpkt"];
416--12147[label="1;6pkt 6fpkt"];
416--12283[label="0.333333;1pkt 1fpkt"];
416--12343[label="0.5;1pkt 1fpkt"];
416--12372[label="1;2pkt 2fpkt"];
416--12405[label="0.00129032;1pkt 1fpkt"];
416--12552[label="0.5;1pkt 1fpkt"];
416--12810[label="0.0571429;2pkt 2fpkt"];
416--13036[label="0.25;10pkt 10fpkt"];
416--13135[label="0.00438596;1pkt 1fpkt"];
416--13282[label="0.0144928;1pkt 1fpkt"];
416--13423[label="0.0526316;1pkt 1fpkt"];
416--13542[label="0.0694444;5pkt 5fpkt"];
416--13592[label="0.0075188;1pkt 1fpkt"];
416--13909[label="1;1pkt 1fpkt"];
416--13926[label="0.015625;1pkt 1fpkt"];
416--13969[label="0.025974;2pkt 2fpkt"];
416--14030[label="0.0625;1pkt 1fpkt"];
416--14142[label="0.0111111;1pkt 1fpkt"];
416--14284[label="0.333333;1pkt 1fpkt"];
416--14348[label="0.00129032;1pkt 1fpkt"];
416--14408[label="0.5;1pkt 1fpkt"];
416--14526[label="0.0571429;2pkt 2fpkt"];
416--14567[label="1;1pkt 1fpkt"];
416--14670[label="0.00436681;1pkt 1fpkt"];
416--14864[label="0.00757576;1pkt 1fpkt"];
416--15217[label="0.00129032;1pkt 1fpkt"];
440--442[label="1;1pkt 1fpkt"];
440--648[label="1;1pkt 1fpkt"];
440--682[label="0.0153846;13pkt 13fpkt"];
440--860[label="0.0130952;11pkt 11fpkt"];
440--975[label="0.00581395;2pkt 2fpkt"];
440--1100[label="0.00414938;1pkt 1fpkt"];
440--1121[label="0.0215054;6pkt 6fpkt"];
440--1220[label="0.00485437;2pkt 2fpkt"];
440--1244[label="0.00358423;1pkt 1fpkt"];
440--1261[label="0.00641026;1pkt 1fpkt"];
440--1347[label="0.0470588;12pkt 12fpkt"];
440--1653[label="0.00389105;1pkt 1fpkt"];
440--1674[label="0.00248139;1pkt 1fpkt"];
440--1719[label="0.0126582;2pkt 2fpkt"];
440--1950[label="1;1pkt 1fpkt"];
440--2050[label="0.00688468;4pkt 4fpkt"];
440--2161[label="0.00617284;1pkt 1fpkt"];
440--2276[label="0.0625;1pkt 1fpkt"];
440--2280[label="0.00436681;1pkt 1fpkt"];
440--2321[label="1;2pkt 2fpkt"];
440--2330[label="0.0041841;1pkt 1fpkt"];
440--2748[label="0.0234742;5pkt 5fpkt"];
440--2870[label="0.0324675;5pkt 5fpkt"];
440--2923[label="1;1pkt 1fpkt"];
440--2929[label="1;1pkt 1fpkt"];
440--2984[label="1;1pkt 1fpkt"];
440--2987[label="0.00182815;1pkt 1fpkt"];
440--3004[label="1;1pkt 1fpkt"];
440--3100[label="0.0137615;6pkt 6fpkt"];
440--3325[label="1;2pkt 2fpkt"];
440--3818[label="0.0196078;4pkt 4fpkt"];
440--3819[label="0.0023753;1pkt 1fpkt"];
440--4022[label="1;2pkt 2fpkt"];
440--4313[label="0.00148588;1pkt 1fpkt"];
440--4548[label="0.0555556;1pkt 1fpkt"];
440--4571[label="0.00854701;1pkt 1fpkt"];
440--4822[label="0.416667;5pkt 5fpkt"];
440--4839[label="1;2pkt 2fpkt"];
440--6537[label="0.0037594;1pkt 1fpkt"];
440--7139[label="0.203704;11pkt 11fpkt"];
440--7433[label="1;2pkt 2fpkt"];
440--8684[label="0.0295858;25pkt 25fpkt"];
440--8685[label="0.00236686;2pkt 2fpkt"];
440--8761[label="0.0295858;25pkt 25fpkt"];
440--8762[label="0.00236686;2pkt 2fpkt"];
440--8807[label="0.0295858;25pkt 25fpkt"];
440--8808[label="0.00236686;2pkt 2fpkt"];
440--8999[label="1;1pkt 1fpkt"];
440--9224[label="0.923077;12pkt 12fpkt"];
440--9400[label="1;1pkt 1fpkt"];
440--9567[label="1;2pkt 2fpkt"];
440--9627[label="0.00558659;1pkt 1fpkt"];
440--9777[label="0.2;1pkt 1fpkt"];
440--10065[label="0.0285714;1pkt 1fpkt"];
440--10429[label="0.00420168;1pkt 1fpkt"];
440--10670[label="0.0357143;1pkt 1fpkt"];
440--10968[label="1;1pkt 1fpkt"];
440--10971[label="1;1pkt 1fpkt"];
440--10988[label="0.0666667;1pkt 1fpkt"];
440--11043[label="1;2pkt 2fpkt"];
440--11121[label="0.0192926;6pkt 6fpkt"];
440--11499[label="0.011236;1pkt 1fpkt"];
440--11968[label="0.454545;5pkt 5fpkt"];
440--12001[label="0.00373134;1pkt 1fpkt"];
440--12166[label="1;1pkt 1fpkt"];
440--12359[label="0.00330033;1pkt 1fpkt"];
440--12370[label="0.00961538;1pkt 1fpkt"];
440--12594[label="0.00137741;1pkt 1fpkt"];
440--12602[label="1;1pkt 1fpkt"];
440--12620[label="1;1pkt 1fpkt"];
440--12987[label="1;1pkt 1fpkt"];
440--13079[label="0.00561798;1pkt 1fpkt"];
440--13457[label="0.00421941;1pkt 1fpkt"];
440--13695[label="1;1pkt 1fpkt"];
440--13704[label="0.0666667;1pkt 1fpkt"];
440--13762[label="0.0192308;6pkt 6fpkt"];
440--14228[label="0.5;1pkt 1fpkt"];
440--14505[label="1;1pkt 1fpkt"];
440--14609[label="1;1pkt 1fpkt"];
440--15161[label="0.5;1pkt 1fpkt"];
825--2704[label="0.0833333;1pkt 1fpkt"];
825--8404[label="0.0833333;1pkt 1fpkt"];
1145--2276[label="0.125;2pkt 2fpkt"];
1145--2325[label="0.166667;1pkt 1fpkt"];
1145--3257[label="0.5;1pkt 1fpkt"];
1145--4822[label="0.0833333;1pkt 1fpkt"];
1145--7291[label="0.0444444;2pkt 2fpkt"];
1145--7298[label="0.0444444;2pkt 2fpkt"];
1145--9485[label="1;1pkt 1fpkt"];
1145--9582[label="0.0588235;1pkt 1fpkt"];
1145--9743[label="0.0555556;1pkt 1fpkt"];
1145--10670[label="0.0357143;1pkt 1fpkt"];
1145--11934[label="0.25;1pkt 1fpkt"];
1145--11968[label="0.0909091;1pkt 1fpkt"];
1145--12453[label="1;1pkt 1fpkt"];
1145--13063[label="0.0588235;1pkt 1fpkt"];
1145--14639[label="0.0588235;1pkt 1fpkt"];
1427--11464[label="1;6pkt 6fpkt"];
1427--15004[label="1;5pkt 5fpkt"];
2276--3132[label="0.0625;1pkt 1fpkt"];
2276--4716[label="0.0625;1pkt 1fpkt"];
2276--5206[label="0.0625;1pkt 1fpkt"];
2276--7493[label="0.0625;1pkt 1fpkt"];
2426--10636[label="1;59pkt 59fpkt"];
2426--13542[label="1;59pkt 59fpkt"];
3246--4716[label="0.941176;16pkt 16fpkt"];
3246--7493[label="0.0588235;1pkt 1fpkt"];
3257--9485[label="1;1pkt 1fpkt"];
3466--10719[label="1;20pkt 20fpkt"];
3641--14817[label="1;1pkt 1fpkt"];
4226--4653[label="1;1pkt 1fpkt"];
4653--5361[label="0.0333333;1pkt 1fpkt"];
4653--7139[label="0.0333333;1pkt 1fpkt"];
4653--9650[label="0.5;1pkt 1fpkt"];
4716--8684[label="0.0103093;1pkt 1fpkt"];
4716--8761[label="0.0103093;1pkt 1fpkt"];
4716--8807[label="0.0103093;1pkt 1fpkt"];
4716--9743[label="0.111111;2pkt 2fpkt"];
4716--10670[label="0.0357143;1pkt 1fpkt"];
4716--11182[label="0.5;1pkt 1fpkt"];
4822--7493[label="0.0833333;1pkt 1fpkt"];
4822--11968[label="1;11pkt 11fpkt"];
4839--8999[label="1;1pkt 1fpkt"];
4839--14505[label="1;1pkt 1fpkt"];
5099--8684[label="0.0888889;4pkt 4fpkt"];
5099--8761[label="0.0888889;4pkt 4fpkt"];
5099--8807[label="0.0888889;4pkt 4fpkt"];
5099--9848[label="1;45pkt 45fpkt"];
6382--8379[label="1;8pkt 8fpkt"];
6382--11277[label="1;1pkt 1fpkt"];
6382--12343[label="0.5;1pkt 1fpkt"];
6382--13827[label="1;1pkt 1fpkt"];
6382--14965[label="1;1pkt 1fpkt"];
7333--9296[label="0.978261;45pkt 45fpkt"];
7493--8684[label="0.0588235;1pkt 1fpkt"];
7493--8761[label="0.0588235;1pkt 1fpkt"];
7493--8807[label="0.0588235;1pkt 1fpkt"];
7493--9650[label="0.5;1pkt 1fpkt"];
7493--11968[label="0.0909091;1pkt 1fpkt"];
8379--11277[label="1;1pkt 1fpkt"];
8379--12343[label="0.5;1pkt 1fpkt"];
8379--13827[label="1;1pkt 1fpkt"];
8379--14965[label="1;1pkt 1fpkt"];
8999--14505[label="1;1pkt 1fpkt"];
9250--14567[label="1;1pkt 1fpkt"];
10636--13542[label="1;72pkt 72fpkt"];
10968--13695[label="1;1pkt 1fpkt"];
11277--13827[label="1;1pkt 1fpkt"];
11277--14965[label="1;1pkt 1fpkt"];
11457--13909[label="1;1pkt 1fpkt"];
11464--15004[label="1;5pkt 5fpkt"];
12166--14228[label="1;1pkt 1fpkt"];
12166--15161[label="1;1pkt 1fpkt"];
12552--14408[label="1;2pkt 2fpkt"];
12987--14609[label="1;1pkt 1fpkt"];
13827--14965[label="1;1pkt 1fpkt"];
14228--15161[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.112.28"/>
      <filter dst_ip="211.185.146.174" src_port="80"/>
      <filter dst_ip="133.4.69.15" dst_port="123"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.44.180.162"/>
    </slice>
    <from sec="1289452438" usec="0"/>
    <to sec="1289452449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.13.182.162"/>
    </slice>
    <from sec="1289451646" usec="0"/>
    <to sec="1289452332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.237.162"/>
    </slice>
    <from sec="1289451845" usec="0"/>
    <to sec="1289452468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.163"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289451961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.212.163"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
2517[label="128.7.207.164;s;6pkt 6fpkt", shape=diamond, color=yellow];
2608[label="32.34.71.118;d;2pkt 2fpkt", shape=diamond, color=yellow];
3433[label="158.196.130.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
11492[label="128.7.207.164;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.207.164:80, 42.146.70.164:*}[33.3333%]&lt;BR/&gt;{128.7.207.164:80, 32.34.71.101:*}[22.2222%]&lt;BR/&gt;{*:80, 32.34.71.118:*}[22.2222%]&lt;BR/&gt;{158.196.130.102:80, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 60885: (9.375%)&lt;BR/&gt; 64912: (6.25%)&lt;BR/&gt; 53304: (6.25%)&lt;BR/&gt; 46074: (6.25%)&gt;];
}
2517--2608[label="0.5;1pkt 1fpkt"];
2517--11492[label="0.833333;5pkt 5fpkt"];
2608--3433[label="0.5;1pkt 1fpkt"];
2608--11492[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="158.196.130.102" src_port="80"/>
      <filter dst_ip="32.34.71.118" src_port="80"/>
      <filter dst_ip="42.146.70.164" src_ip="128.7.207.164" src_port="80"/>
      <filter dst_ip="32.34.71.101" src_ip="128.7.207.164" src_port="80"/>
    </slice>
    <from sec="1289451679" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.55.212.164"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.248.132.165"/>
    </slice>
    <from sec="1289452462" usec="0"/>
    <to sec="1289452474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.182.28.166"/>
    </slice>
    <from sec="1289452048" usec="0"/>
    <to sec="1289452276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.77.54.166"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.62.97.166"/>
    </slice>
    <from sec="1289451727" usec="0"/>
    <to sec="1289451745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.145.166"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.147.166"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.28.151.166"/>
    </slice>
    <from sec="1289451763" usec="0"/>
    <to sec="1289451797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.160.165.166"/>
    </slice>
    <from sec="1289452460" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.141.78.167"/>
    </slice>
    <from sec="1289451906" usec="0"/>
    <to sec="1289452014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.90.179.167"/>
    </slice>
    <from sec="1289451768" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
2817[label="128.19.151.128;d;49pkt 49fpkt", shape=diamond, color=yellow];
11540[label="202.49.210.167;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.49.210.167:80, 128.19.151.128:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3151%)&lt;BR/&gt; 49676: (1.36986%)&lt;BR/&gt; 49675: (1.36986%)&lt;BR/&gt; 49674: (1.36986%)&lt;BR/&gt; 49673: (1.36986%)&gt;];
}
2817--4495[label="0.0204082;1pkt 1fpkt"];
2817--4508[label="0.0204082;1pkt 1fpkt"];
2817--11540[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.151.128" src_ip="202.49.210.167" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.172.119.168"/>
    </slice>
    <from sec="1289452480" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.84.198.168"/>
    </slice>
    <from sec="1289451971" usec="0"/>
    <to sec="1289452446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.3.169"/>
    </slice>
    <from sec="1289451969" usec="0"/>
    <to sec="1289451974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.8.169"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.100.54.169"/>
    </slice>
    <from sec="1289451727" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.18.220.169"/>
    </slice>
    <from sec="1289451716" usec="0"/>
    <to sec="1289452449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.106.14.171"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.214.105.171"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289451962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.52.217.171"/>
    </slice>
    <from sec="1289451835" usec="0"/>
    <to sec="1289452462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.16.37.172"/>
    </slice>
    <from sec="1289452441" usec="0"/>
    <to sec="1289452458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.249.209.172"/>
    </slice>
    <from sec="1289451863" usec="0"/>
    <to sec="1289451876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
2588[label="84.179.84.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
11634[label="166.26.109.173;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.109.173:80, 84.179.84.216:46087}[33.3333%]&lt;BR/&gt;{166.26.109.173:80, 17.30.123.143:40256}[33.3333%]&lt;BR/&gt;{166.26.109.173:80, 17.30.123.143:40257}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46087: (25%)&lt;BR/&gt; 40257: (12.5%)&lt;BR/&gt; 40256: (12.5%)&gt;];
}
2588--11634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.30.123.143" dst_port="40257" src_ip="166.26.109.173" src_port="80"/>
      <filter dst_ip="17.30.123.143" dst_port="40256" src_ip="166.26.109.173" src_port="80"/>
      <filter dst_ip="84.179.84.216" dst_port="46087" src_ip="166.26.109.173" src_port="80"/>
    </slice>
    <from sec="1289451724" usec="0"/>
    <to sec="1289452182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.194.206.174"/>
    </slice>
    <from sec="1289451782" usec="0"/>
    <to sec="1289451796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.129.252.174"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.129.37.175"/>
    </slice>
    <from sec="1289451755" usec="0"/>
    <to sec="1289451772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.216.98.175"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.30.113.175"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.68.238.175"/>
    </slice>
    <from sec="1289452175" usec="0"/>
    <to sec="1289452226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.102.0.176"/>
    </slice>
    <from sec="1289452383" usec="0"/>
    <to sec="1289452397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.3.176"/>
    </slice>
    <from sec="1289452410" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.46.25.177"/>
    </slice>
    <from sec="1289451847" usec="0"/>
    <to sec="1289452462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.62.177"/>
    </slice>
    <from sec="1289451801" usec="0"/>
    <to sec="1289451815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.79.109.177"/>
    </slice>
    <from sec="1289452067" usec="0"/>
    <to sec="1289452108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.152.177"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.66.83.178"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.172.117.179"/>
    </slice>
    <from sec="1289452176" usec="0"/>
    <to sec="1289452248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.98.137.179"/>
    </slice>
    <from sec="1289451954" usec="0"/>
    <to sec="1289451963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.68.228.179"/>
    </slice>
    <from sec="1289452301" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.139.159.180"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289451866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.202.82.181"/>
    </slice>
    <from sec="1289451840" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.225.8.182"/>
    </slice>
    <from sec="1289451767" usec="0"/>
    <to sec="1289451812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.162.120.182"/>
    </slice>
    <from sec="1289452490" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.38.100.183"/>
    </slice>
    <from sec="1289451883" usec="0"/>
    <to sec="1289451896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.148.66.185"/>
    </slice>
    <from sec="1289452454" usec="0"/>
    <to sec="1289452467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.178.102.185"/>
    </slice>
    <from sec="1289451983" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.179.110.185"/>
    </slice>
    <from sec="1289451672" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.143.147.185"/>
    </slice>
    <from sec="1289451976" usec="0"/>
    <to sec="1289452001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.19.61.186"/>
    </slice>
    <from sec="1289451658" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.9.187"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.28.209.187"/>
    </slice>
    <from sec="1289451887" usec="0"/>
    <to sec="1289451898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.79.91.188"/>
    </slice>
    <from sec="1289451894" usec="0"/>
    <to sec="1289451907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
11839[label="211.185.159.188;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.159.188:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="211.185.159.188"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289452477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.85.160.188"/>
    </slice>
    <from sec="1289452311" usec="0"/>
    <to sec="1289452325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.172.189"/>
    </slice>
    <from sec="1289452412" usec="0"/>
    <to sec="1289452414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.125.194.189"/>
    </slice>
    <from sec="1289451919" usec="0"/>
    <to sec="1289451935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.170.217.189"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.47.8.191"/>
    </slice>
    <from sec="1289452482" usec="0"/>
    <to sec="1289452489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.234.19.191"/>
    </slice>
    <from sec="1289452163" usec="0"/>
    <to sec="1289452194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
5328[label="133.4.19.162;d;36pkt 36fpkt", shape=diamond, color=yellow];
5647[label="133.4.182.240;d;11pkt 11fpkt", shape=diamond, color=yellow];
6239[label="67.66.185.134;s;12pkt 12fpkt", shape=diamond, color=yellow];
11023[label="67.66.185.134;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11868[label="80.70.32.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14099[label="80.70.32.191;1pkt 1fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.66.6:80, 133.4.19.162:*}[32.6531%]&lt;BR/&gt;{67.66.185.134:*, 133.4.182.240:*}[22.449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.9737%)&lt;BR/&gt; 21: (2.63158%)&lt;BR/&gt; 62562: (1.97368%)&lt;BR/&gt; 60580: (1.97368%)&lt;BR/&gt; 55861: (1.97368%)&gt;];
}
5328--6239[label="0.0833333;1pkt 1fpkt"];
5328--8684[label="0.25;9pkt 9fpkt"];
5328--8685[label="0.0277778;1pkt 1fpkt"];
5328--8761[label="0.25;9pkt 9fpkt"];
5328--8762[label="0.0277778;1pkt 1fpkt"];
5328--8807[label="0.25;9pkt 9fpkt"];
5328--8808[label="0.0277778;1pkt 1fpkt"];
5328--10062[label="0.0277778;1pkt 1fpkt"];
5328--11023[label="0.0714286;1pkt 1fpkt"];
5328--11868[label="1;2pkt 2fpkt"];
5328--13282[label="0.0277778;1pkt 1fpkt"];
5328--14099[label="1;1pkt 1fpkt"];
5647--6239[label="1;11pkt 11fpkt"];
5647--11023[label="1;11pkt 11fpkt"];
6239--11023[label="1;12pkt 12fpkt"];
11868--14099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.182.240" src_ip="67.66.185.134"/>
      <filter dst_ip="133.4.19.162" src_ip="192.144.66.6" src_port="80"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.66.52.191"/>
    </slice>
    <from sec="1289451661" usec="0"/>
    <to sec="1289451818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.69.99.191"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.162.194.191"/>
    </slice>
    <from sec="1289452222" usec="0"/>
    <to sec="1289452235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.46.206.191"/>
    </slice>
    <from sec="1289452017" usec="0"/>
    <to sec="1289452258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.98.206.191"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.9.12.192"/>
    </slice>
    <from sec="1289452030" usec="0"/>
    <to sec="1289452094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
4401[label="211.185.146.192;s;1030pkt 1030fpkt", shape=diamond, color=yellow];
11892[label="211.185.146.192;1088pkt 1088fpkt", shape=pentagon, color=darkviolet];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.146.192:51137, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51137: (50%)&lt;BR/&gt; 16001: (1.08593%)&lt;BR/&gt; 51413: (0.472144%)&lt;BR/&gt; 4041: (0.377715%)&lt;BR/&gt; 6881: (0.354108%)&gt;];
}
4401--8666[label="0.000970874;1pkt 1fpkt"];
4401--8689[label="0.000970874;1pkt 1fpkt"];
4401--8745[label="0.000970874;1pkt 1fpkt"];
4401--8766[label="0.000970874;1pkt 1fpkt"];
4401--8792[label="0.000970874;1pkt 1fpkt"];
4401--8812[label="0.000970874;1pkt 1fpkt"];
4401--11892[label="1;1030pkt 1030fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.146.192" src_port="51137"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.227.194.192"/>
    </slice>
    <from sec="1289451955" usec="0"/>
    <to sec="1289451982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.15.199.192"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.66.208.193"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289451668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.238.14.194"/>
    </slice>
    <from sec="1289451975" usec="0"/>
    <to sec="1289451988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.64.76.194"/>
    </slice>
    <from sec="1289452068" usec="0"/>
    <to sec="1289452082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.80.89.194"/>
    </slice>
    <from sec="1289451763" usec="0"/>
    <to sec="1289451773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.83.224.194"/>
    </slice>
    <from sec="1289451897" usec="0"/>
    <to sec="1289451949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.4.248.194"/>
    </slice>
    <from sec="1289452080" usec="0"/>
    <to sec="1289452093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.120.195"/>
    </slice>
    <from sec="1289451666" usec="0"/>
    <to sec="1289452328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.237.173.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.105.197.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.58.48.199"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.182.139.199"/>
    </slice>
    <from sec="1289452023" usec="0"/>
    <to sec="1289452115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.236.24.200"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.65.118.201"/>
    </slice>
    <from sec="1289452240" usec="0"/>
    <to sec="1289452286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.82.145.202"/>
    </slice>
    <from sec="1289452188" usec="0"/>
    <to sec="1289452194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.92.230.202"/>
    </slice>
    <from sec="1289451927" usec="0"/>
    <to sec="1289452251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.5.203"/>
    </slice>
    <from sec="1289451719" usec="0"/>
    <to sec="1289452346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.192.236.203"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.117.65.204"/>
    </slice>
    <from sec="1289451928" usec="0"/>
    <to sec="1289451942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.155.204"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.36.25.205"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
46[label="133.4.19.101;d;5pkt 5fpkt", shape=diamond, color=yellow];
486[label="133.4.84.213;d;88pkt 88fpkt", shape=diamond, color=yellow];
1056[label="133.4.50.83;d;107pkt 107fpkt", shape=diamond, color=yellow];
1373[label="2.3.128.166;s;5pkt 5fpkt", shape=diamond, color=yellow];
2870[label="35.40.87.69;s;154pkt 154fpkt", shape=diamond, color=yellow];
2993[label="134.93.112.203;s;217pkt 217fpkt", shape=diamond, color=yellow];
3546[label="35.40.49.219;s;3pkt 3fpkt", shape=diamond, color=yellow];
3590[label="35.40.49.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
3820[label="166.26.112.104;d;69pkt 69fpkt", shape=diamond, color=yellow];
5221[label="35.40.49.201;s;3pkt 3fpkt", shape=diamond, color=yellow];
5222[label="35.40.49.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
5283[label="128.19.145.201;d;38pkt 38fpkt", shape=diamond, color=yellow];
5832[label="133.4.90.142;d;5pkt 5fpkt", shape=diamond, color=yellow];
6336[label="132.209.117.115;s;45pkt 45fpkt", shape=diamond, color=yellow];
6630[label="133.4.236.205;d;49pkt 49fpkt", shape=diamond, color=yellow];
7797[label="133.4.84.213;d;88pkt 88fpkt", shape=hexagon, color=black];
8388[label="133.4.19.101;d;5pkt 5fpkt", shape=hexagon, color=black];
10739[label="132.209.117.115;44pkt 44fpkt", shape=pentagon, color=darkviolet];
10858[label="47.194.117.125;16pkt 16fpkt", shape=pentagon, color=darkviolet];
11458[label="203.46.90.162;16pkt 16fpkt", shape=pentagon, color=darkviolet];
11518[label="2.3.128.166;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11537[label="6.41.178.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12066[label="35.40.49.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13910[label="203.46.90.162;16pkt 16fpkt", shape=invtriangle, color=brown];
13938[label="2.3.128.166;8pkt 8fpkt", shape=invtriangle, color=brown];
15002[label="203.46.90.162;15pkt 15fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.93.112.203:80, *:*}[23.9782%]&lt;BR/&gt;{35.40.87.69:*, *:*}[20.9809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.0297%)&lt;BR/&gt; 443: (3.71287%)&lt;BR/&gt; 1935: (1.38614%)&lt;BR/&gt; 32768: (1.23762%)&lt;BR/&gt; 53: (1.23762%)&gt;];
}
46--2993[label="0.2;1pkt 1fpkt"];
46--3546[label="0.333333;1pkt 1fpkt"];
46--4313[label="0.2;1pkt 1fpkt"];
46--5222[label="0.5;1pkt 1fpkt"];
46--6336[label="0.2;1pkt 1fpkt"];
46--8388[label="1;5pkt 5fpkt"];
46--10739[label="0.2;1pkt 1fpkt"];
46--12066[label="0.5;1pkt 1fpkt"];
46--12594[label="0.2;1pkt 1fpkt"];
486--682[label="0.159091;14pkt 14fpkt"];
486--1347[label="0.0113636;1pkt 1fpkt"];
486--3546[label="0.333333;1pkt 1fpkt"];
486--3590[label="1;1pkt 1fpkt"];
486--4293[label="0.159091;14pkt 14fpkt"];
486--4508[label="0.0113636;1pkt 1fpkt"];
486--5222[label="0.5;1pkt 1fpkt"];
486--7797[label="1;88pkt 88fpkt"];
486--8684[label="0.0568182;5pkt 5fpkt"];
486--8761[label="0.0568182;5pkt 5fpkt"];
486--8807[label="0.0568182;5pkt 5fpkt"];
486--12066[label="0.5;1pkt 1fpkt"];
1056--1373[label="1;5pkt 5fpkt"];
1056--4580[label="0.00934579;1pkt 1fpkt"];
1056--5170[label="0.0186916;2pkt 2fpkt"];
1056--5929[label="0.00934579;1pkt 1fpkt"];
1056--6336[label="0.955556;43pkt 43fpkt"];
1056--7132[label="0.0625;1pkt 1fpkt"];
1056--7165[label="0.030303;1pkt 1fpkt"];
1056--8684[label="0.0280374;3pkt 3fpkt"];
1056--8761[label="0.0280374;3pkt 3fpkt"];
1056--8807[label="0.0280374;3pkt 3fpkt"];
1056--10327[label="0.0526316;1pkt 1fpkt"];
1056--10739[label="0.977273;43pkt 43fpkt"];
1056--11518[label="0.5;4pkt 4fpkt"];
1056--11846[label="0.030303;1pkt 1fpkt"];
1056--13404[label="0.0526316;1pkt 1fpkt"];
1056--13938[label="0.5;4pkt 4fpkt"];
1056--14297[label="0.0625;1pkt 1fpkt"];
1373--11518[label="0.8;4pkt 4fpkt"];
1373--13938[label="0.8;4pkt 4fpkt"];
2870--2941[label="0.00787402;1pkt 1fpkt"];
2870--3094[label="0.0185185;1pkt 1fpkt"];
2870--3664[label="0.00649351;1pkt 1fpkt"];
2870--4341[label="0.0105263;1pkt 1fpkt"];
2870--4440[label="0.0123457;1pkt 1fpkt"];
2870--5121[label="0.025974;4pkt 4fpkt"];
2870--5756[label="0.031746;2pkt 2fpkt"];
2870--5773[label="0.025974;4pkt 4fpkt"];
2870--5832[label="0.8;4pkt 4fpkt"];
2870--6513[label="0.0519481;8pkt 8fpkt"];
2870--6538[label="0.0185185;1pkt 1fpkt"];
2870--6659[label="0.0357143;1pkt 1fpkt"];
2870--7726[label="0.00813008;1pkt 1fpkt"];
2870--7916[label="0.00649351;1pkt 1fpkt"];
2870--8072[label="0.015625;1pkt 1fpkt"];
2870--8625[label="0.00649351;1pkt 1fpkt"];
2870--8684[label="0.025974;4pkt 4fpkt"];
2870--8761[label="0.025974;4pkt 4fpkt"];
2870--8807[label="0.025974;4pkt 4fpkt"];
2993--3606[label="0.2;1pkt 1fpkt"];
2993--3751[label="0.0666667;1pkt 1fpkt"];
2993--3772[label="0.0263158;1pkt 1fpkt"];
2993--4255[label="0.0153846;1pkt 1fpkt"];
2993--4341[label="0.0105263;1pkt 1fpkt"];
2993--4398[label="0.0783133;13pkt 13fpkt"];
2993--4440[label="0.037037;3pkt 3fpkt"];
2993--4741[label="0.00819672;1pkt 1fpkt"];
2993--5188[label="0.00724638;1pkt 1fpkt"];
2993--5228[label="0.0454545;4pkt 4fpkt"];
2993--5283[label="0.0263158;1pkt 1fpkt"];
2993--5296[label="0.00675676;1pkt 1fpkt"];
2993--5345[label="0.015625;1pkt 1fpkt"];
2993--5372[label="0.0434783;2pkt 2fpkt"];
2993--5825[label="0.0495868;6pkt 6fpkt"];
2993--6212[label="0.0714286;4pkt 4fpkt"];
2993--6538[label="0.0185185;1pkt 1fpkt"];
2993--6621[label="0.0188679;1pkt 1fpkt"];
2993--6630[label="0.326531;16pkt 16fpkt"];
2993--7210[label="0.0294118;1pkt 1fpkt"];
2993--7273[label="0.0465116;2pkt 2fpkt"];
2993--7312[label="0.0357143;3pkt 3fpkt"];
2993--7688[label="0.00719424;1pkt 1fpkt"];
2993--7916[label="0.00921659;2pkt 2fpkt"];
2993--7999[label="0.0151515;2pkt 2fpkt"];
2993--8033[label="0.0114943;1pkt 1fpkt"];
2993--8072[label="0.046875;3pkt 3fpkt"];
2993--8388[label="0.2;1pkt 1fpkt"];
2993--8397[label="0.0144928;3pkt 3fpkt"];
2993--8410[label="0.0324074;7pkt 7fpkt"];
2993--8451[label="0.0454545;4pkt 4fpkt"];
2993--8485[label="0.0454545;2pkt 2fpkt"];
2993--8581[label="0.0783133;13pkt 13fpkt"];
2993--8625[label="0.00921659;2pkt 2fpkt"];
2993--8684[label="0.0921659;20pkt 20fpkt"];
2993--8685[label="0.0184332;4pkt 4fpkt"];
2993--8761[label="0.0921659;20pkt 20fpkt"];
2993--8762[label="0.0184332;4pkt 4fpkt"];
2993--8807[label="0.0921659;20pkt 20fpkt"];
2993--8808[label="0.0184332;4pkt 4fpkt"];
3546--3820[label="0.333333;1pkt 1fpkt"];
3546--7797[label="0.333333;1pkt 1fpkt"];
3546--8388[label="0.333333;1pkt 1fpkt"];
3590--7797[label="1;1pkt 1fpkt"];
3820--3893[label="0.0144928;1pkt 1fpkt"];
3820--3967[label="0.057971;4pkt 4fpkt"];
3820--4256[label="0.0144928;1pkt 1fpkt"];
3820--4508[label="0.0144928;1pkt 1fpkt"];
3820--4552[label="0.0333333;1pkt 1fpkt"];
3820--5221[label="0.333333;1pkt 1fpkt"];
3820--5264[label="0.0344828;1pkt 1fpkt"];
3820--5367[label="0.0289855;2pkt 2fpkt"];
3820--7237[label="0.2;1pkt 1fpkt"];
3820--8685[label="0.0144928;1pkt 1fpkt"];
3820--8762[label="0.0144928;1pkt 1fpkt"];
3820--8808[label="0.0144928;1pkt 1fpkt"];
3820--10000[label="0.0416667;1pkt 1fpkt"];
3820--10549[label="0.0144928;1pkt 1fpkt"];
3820--10858[label="0.5625;9pkt 9fpkt"];
3820--11458[label="0.3125;5pkt 5fpkt"];
3820--12235[label="0.166667;1pkt 1fpkt"];
3820--13910[label="0.3125;5pkt 5fpkt"];
3820--15002[label="0.333333;5pkt 5fpkt"];
5221--5832[label="0.333333;1pkt 1fpkt"];
5221--7252[label="0.333333;1pkt 1fpkt"];
5222--7797[label="0.5;1pkt 1fpkt"];
5222--8388[label="0.5;1pkt 1fpkt"];
5222--12066[label="1;2pkt 2fpkt"];
5283--8684[label="0.0263158;1pkt 1fpkt"];
5283--8761[label="0.0263158;1pkt 1fpkt"];
5283--8807[label="0.0263158;1pkt 1fpkt"];
5283--11537[label="1;1pkt 1fpkt"];
6336--8388[label="0.2;1pkt 1fpkt"];
6336--8684[label="0.0222222;1pkt 1fpkt"];
6336--8761[label="0.0222222;1pkt 1fpkt"];
6336--8807[label="0.0222222;1pkt 1fpkt"];
6336--10739[label="1;44pkt 44fpkt"];
6630--8684[label="0.0408163;2pkt 2fpkt"];
6630--8761[label="0.0408163;2pkt 2fpkt"];
6630--8807[label="0.0408163;2pkt 2fpkt"];
6630--9083[label="0.0816327;4pkt 4fpkt"];
6630--10224[label="0.0204082;1pkt 1fpkt"];
6630--11881[label="0.0454545;1pkt 1fpkt"];
6630--12359[label="0.0204082;1pkt 1fpkt"];
6630--13354[label="0.0204082;1pkt 1fpkt"];
7797--8684[label="0.0568182;5pkt 5fpkt"];
7797--8761[label="0.0568182;5pkt 5fpkt"];
7797--8807[label="0.0568182;5pkt 5fpkt"];
7797--12066[label="0.5;1pkt 1fpkt"];
8388--10739[label="0.2;1pkt 1fpkt"];
8388--12066[label="0.5;1pkt 1fpkt"];
8388--12594[label="0.2;1pkt 1fpkt"];
11458--13910[label="1;16pkt 16fpkt"];
11458--15002[label="1;15pkt 15fpkt"];
11518--13938[label="1;8pkt 8fpkt"];
13910--15002[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="35.40.87.69"/>
      <filter src_ip="134.93.112.203" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.173.170.205"/>
    </slice>
    <from sec="1289451616" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.0.11.206"/>
    </slice>
    <from sec="1289451783" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.59.37.206"/>
    </slice>
    <from sec="1289452336" usec="0"/>
    <to sec="1289452437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.30.96.206"/>
    </slice>
    <from sec="1289451618" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
6269[label="166.26.246.10;d;234pkt 234fpkt", shape=diamond, color=yellow];
6332[label="210.7.97.206;s;226pkt 226fpkt", shape=diamond, color=yellow];
12086[label="210.7.97.206;225pkt 225fpkt", shape=pentagon, color=darkviolet];
14185[label="210.7.97.206;225pkt 225fpkt", shape=invtriangle, color=brown];
15138[label="210.7.97.206;226pkt 226fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.7.97.206:80, 166.26.246.10:*}[96.5812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4504: (0.22007%)&lt;BR/&gt; 4503: (0.22007%)&lt;BR/&gt; 4501: (0.22007%)&lt;BR/&gt; 4500: (0.22007%)&gt;];
}
6269--6332[label="1;226pkt 226fpkt"];
6269--8684[label="0.0042735;1pkt 1fpkt"];
6269--8761[label="0.0042735;1pkt 1fpkt"];
6269--8807[label="0.0042735;1pkt 1fpkt"];
6269--12086[label="1;225pkt 225fpkt"];
6269--14185[label="1;225pkt 225fpkt"];
6269--15138[label="1;226pkt 226fpkt"];
6332--12086[label="1;225pkt 225fpkt"];
6332--14185[label="1;225pkt 225fpkt"];
6332--15138[label="1;226pkt 226fpkt"];
12086--14185[label="1;225pkt 225fpkt"];
12086--15138[label="1;225pkt 225fpkt"];
14185--15138[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.246.10" src_ip="210.7.97.206" src_port="80"/>
    </slice>
    <from sec="1289451992" usec="0"/>
    <to sec="1289452245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
470[label="53.66.208.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
471[label="133.4.1.213;s;29pkt 29fpkt", shape=diamond, color=yellow];
778[label="53.66.208.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
2265[label="221.115.144.88;d;109pkt 109fpkt", shape=diamond, color=yellow];
2383[label="221.115.146.75;d;117pkt 117fpkt", shape=diamond, color=yellow];
3430[label="133.4.128.206;s;11pkt 11fpkt", shape=diamond, color=yellow];
4546[label="210.33.155.24;s;84pkt 84fpkt", shape=diamond, color=yellow];
5517[label="133.4.140.146;s;98pkt 98fpkt", shape=diamond, color=yellow];
5585[label="133.4.133.93;s;7pkt 7fpkt", shape=diamond, color=yellow];
5701[label="63.169.6.43;d;3pkt 3fpkt", shape=diamond, color=yellow];
6722[label="47.236.10.75;d;61pkt 61fpkt", shape=diamond, color=yellow];
7383[label="133.4.1.177;s;20pkt 20fpkt", shape=diamond, color=yellow];
7871[label="221.115.146.75;d;26pkt 26fpkt", shape=hexagon, color=black];
8180[label="53.66.208.192;d;1pkt 1fpkt", shape=hexagon, color=black];
9288[label="210.33.155.24;92pkt 92fpkt", shape=pentagon, color=darkviolet];
9479[label="133.4.2.36;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9790[label="133.4.1.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9924[label="133.4.128.62;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10227[label="133.4.133.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11580[label="133.4.1.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11687[label="133.4.1.177;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12089[label="133.4.128.206;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12123[label="133.4.128.208;48pkt 48fpkt", shape=pentagon, color=darkviolet];
12187[label="133.4.1.213;29pkt 29fpkt", shape=pentagon, color=darkviolet];
12596[label="133.4.138.244;49pkt 49fpkt", shape=pentagon, color=darkviolet];
12909[label="210.33.155.24;92pkt 92fpkt", shape=invtriangle, color=brown];
14017[label="133.4.1.177;19pkt 19fpkt", shape=invtriangle, color=brown];
14205[label="133.4.128.208;47pkt 47fpkt", shape=invtriangle, color=brown];
14423[label="133.4.138.244;50pkt 50fpkt", shape=invtriangle, color=brown];
15149[label="133.4.128.208;48pkt 48fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3829%)&lt;BR/&gt; 443: (8.4392%)&lt;BR/&gt; 7024: (1.04356%)&lt;BR/&gt; 1031: (0.499093%)&lt;BR/&gt; 1026: (0.499093%)&gt;];
}
470--471[label="1;1pkt 1fpkt"];
470--12187[label="1;1pkt 1fpkt"];
471--778[label="1;1pkt 1fpkt"];
471--2265[label="0.0344828;1pkt 1fpkt"];
471--8180[label="1;1pkt 1fpkt"];
471--8664[label="0.0344828;1pkt 1fpkt"];
471--8688[label="0.0344828;1pkt 1fpkt"];
471--8743[label="0.0344828;1pkt 1fpkt"];
471--8765[label="0.0344828;1pkt 1fpkt"];
471--8790[label="0.0344828;1pkt 1fpkt"];
471--8811[label="0.0344828;1pkt 1fpkt"];
471--12187[label="1;29pkt 29fpkt"];
778--8180[label="1;1pkt 1fpkt"];
778--12187[label="1;1pkt 1fpkt"];
2265--2866[label="0.0108696;1pkt 1fpkt"];
2265--2882[label="0.00917431;1pkt 1fpkt"];
2265--2954[label="0.00917431;1pkt 1fpkt"];
2265--3285[label="0.0461538;3pkt 3fpkt"];
2265--3430[label="0.454545;5pkt 5fpkt"];
2265--4546[label="0.0119048;1pkt 1fpkt"];
2265--4724[label="0.011236;1pkt 1fpkt"];
2265--4919[label="0.0169492;1pkt 1fpkt"];
2265--5131[label="0.0642202;7pkt 7fpkt"];
2265--5508[label="0.0634921;4pkt 4fpkt"];
2265--5585[label="0.428571;3pkt 3fpkt"];
2265--6119[label="0.00917431;1pkt 1fpkt"];
2265--7068[label="0.0192308;1pkt 1fpkt"];
2265--7383[label="0.05;1pkt 1fpkt"];
2265--8664[label="0.0550459;6pkt 6fpkt"];
2265--8688[label="0.119266;13pkt 13fpkt"];
2265--8743[label="0.0550459;6pkt 6fpkt"];
2265--8765[label="0.119266;13pkt 13fpkt"];
2265--8790[label="0.0550459;6pkt 6fpkt"];
2265--8811[label="0.119266;13pkt 13fpkt"];
2265--9288[label="0.0108696;1pkt 1fpkt"];
2265--9359[label="0.0172414;1pkt 1fpkt"];
2265--9414[label="0.047619;1pkt 1fpkt"];
2265--9479[label="0.4;2pkt 2fpkt"];
2265--9924[label="0.142857;1pkt 1fpkt"];
2265--10006[label="0.0909091;2pkt 2fpkt"];
2265--10500[label="0.0434783;1pkt 1fpkt"];
2265--11064[label="0.181818;2pkt 2fpkt"];
2265--11137[label="0.2;1pkt 1fpkt"];
2265--11580[label="1;1pkt 1fpkt"];
2265--11687[label="0.05;1pkt 1fpkt"];
2265--11952[label="0.0384615;1pkt 1fpkt"];
2265--12089[label="0.208333;5pkt 5fpkt"];
2265--12123[label="0.0625;3pkt 3fpkt"];
2265--12187[label="0.0344828;1pkt 1fpkt"];
2265--12526[label="0.0217391;1pkt 1fpkt"];
2265--12572[label="0.011236;1pkt 1fpkt"];
2265--12909[label="0.0108696;1pkt 1fpkt"];
2265--12948[label="0.0169492;1pkt 1fpkt"];
2265--13258[label="0.0909091;2pkt 2fpkt"];
2265--13741[label="0.2;2pkt 2fpkt"];
2265--14017[label="0.0526316;1pkt 1fpkt"];
2265--14205[label="0.0638298;3pkt 3fpkt"];
2265--14395[label="0.0217391;1pkt 1fpkt"];
2265--14418[label="0.0113636;1pkt 1fpkt"];
2265--15149[label="0.0625;3pkt 3fpkt"];
2383--2692[label="0.00854701;1pkt 1fpkt"];
2383--2780[label="0.00854701;1pkt 1fpkt"];
2383--2866[label="0.0108696;1pkt 1fpkt"];
2383--3724[label="0.00854701;1pkt 1fpkt"];
2383--3773[label="0.00854701;1pkt 1fpkt"];
2383--3885[label="0.00854701;1pkt 1fpkt"];
2383--4546[label="0.0119048;1pkt 1fpkt"];
2383--4876[label="0.0263158;3pkt 3fpkt"];
2383--5131[label="0.034188;4pkt 4fpkt"];
2383--5203[label="0.0135135;1pkt 1fpkt"];
2383--5585[label="0.285714;2pkt 2fpkt"];
2383--5778[label="0.00854701;1pkt 1fpkt"];
2383--6319[label="0.0138889;1pkt 1fpkt"];
2383--6705[label="0.0175439;1pkt 1fpkt"];
2383--6786[label="0.0185185;1pkt 1fpkt"];
2383--7200[label="0.0294118;1pkt 1fpkt"];
2383--7383[label="0.1;2pkt 2fpkt"];
2383--7871[label="1;26pkt 26fpkt"];
2383--8664[label="0.0512821;6pkt 6fpkt"];
2383--8678[label="0.00854701;1pkt 1fpkt"];
2383--8688[label="0.128205;15pkt 15fpkt"];
2383--8743[label="0.0512821;6pkt 6fpkt"];
2383--8755[label="0.00854701;1pkt 1fpkt"];
2383--8765[label="0.128205;15pkt 15fpkt"];
2383--8790[label="0.0512821;6pkt 6fpkt"];
2383--8801[label="0.00854701;1pkt 1fpkt"];
2383--8811[label="0.128205;15pkt 15fpkt"];
2383--9288[label="0.0108696;1pkt 1fpkt"];
2383--9298[label="0.017094;2pkt 2fpkt"];
2383--9431[label="0.00854701;1pkt 1fpkt"];
2383--9790[label="1;1pkt 1fpkt"];
2383--9894[label="0.0294118;1pkt 1fpkt"];
2383--10227[label="1;2pkt 2fpkt"];
2383--10408[label="0.0175439;1pkt 1fpkt"];
2383--10862[label="0.0322581;1pkt 1fpkt"];
2383--11263[label="0.017094;2pkt 2fpkt"];
2383--11642[label="0.00854701;1pkt 1fpkt"];
2383--11649[label="0.00854701;1pkt 1fpkt"];
2383--11687[label="0.1;2pkt 2fpkt"];
2383--12909[label="0.0108696;1pkt 1fpkt"];
2383--12914[label="0.017094;2pkt 2fpkt"];
2383--13646[label="0.0333333;1pkt 1fpkt"];
2383--13995[label="0.00854701;1pkt 1fpkt"];
2383--14017[label="0.105263;2pkt 2fpkt"];
2383--14577[label="0.017094;2pkt 2fpkt"];
3430--4544[label="0.0909091;1pkt 1fpkt"];
3430--4682[label="0.0909091;1pkt 1fpkt"];
3430--5872[label="0.0909091;1pkt 1fpkt"];
3430--6722[label="0.0909091;1pkt 1fpkt"];
3430--8449[label="0.0909091;1pkt 1fpkt"];
3430--12089[label="1;11pkt 11fpkt"];
4546--6527[label="0.0384615;2pkt 2fpkt"];
4546--7871[label="0.0384615;1pkt 1fpkt"];
4546--8201[label="0.0119048;1pkt 1fpkt"];
4546--8664[label="0.0952381;8pkt 8fpkt"];
4546--8666[label="0.0357143;3pkt 3fpkt"];
4546--8743[label="0.0952381;8pkt 8fpkt"];
4546--8745[label="0.0357143;3pkt 3fpkt"];
4546--8790[label="0.0952381;8pkt 8fpkt"];
4546--8792[label="0.0357143;3pkt 3fpkt"];
4546--9288[label="0.988095;83pkt 83fpkt"];
4546--12909[label="0.988095;83pkt 83fpkt"];
5517--5701[label="1;3pkt 3fpkt"];
5517--5808[label="0.0117647;1pkt 1fpkt"];
5517--6699[label="0.0119048;1pkt 1fpkt"];
5517--6722[label="0.0163934;1pkt 1fpkt"];
5517--7061[label="0.0178571;1pkt 1fpkt"];
5517--7355[label="0.0652174;3pkt 3fpkt"];
5517--8045[label="0.0232558;2pkt 2fpkt"];
5517--8133[label="0.0204082;2pkt 2fpkt"];
5517--8452[label="0.0102041;1pkt 1fpkt"];
5517--8688[label="0.0102041;1pkt 1fpkt"];
5517--8765[label="0.0102041;1pkt 1fpkt"];
5517--8811[label="0.0102041;1pkt 1fpkt"];
5585--6722[label="0.142857;1pkt 1fpkt"];
5585--7249[label="0.142857;1pkt 1fpkt"];
6722--7383[label="0.05;1pkt 1fpkt"];
6722--8666[label="0.0655738;4pkt 4fpkt"];
6722--8689[label="0.0491803;3pkt 3fpkt"];
6722--8745[label="0.0655738;4pkt 4fpkt"];
6722--8766[label="0.0491803;3pkt 3fpkt"];
6722--8792[label="0.0655738;4pkt 4fpkt"];
6722--8812[label="0.0491803;3pkt 3fpkt"];
6722--9165[label="0.0163934;1pkt 1fpkt"];
6722--9298[label="0.0491803;3pkt 3fpkt"];
6722--9431[label="0.0163934;1pkt 1fpkt"];
6722--9479[label="0.2;1pkt 1fpkt"];
6722--9894[label="0.0294118;1pkt 1fpkt"];
6722--9928[label="0.0416667;1pkt 1fpkt"];
6722--11207[label="0.0163934;1pkt 1fpkt"];
6722--11687[label="0.05;1pkt 1fpkt"];
6722--11727[label="0.0163934;1pkt 1fpkt"];
6722--12089[label="0.0416667;1pkt 1fpkt"];
6722--12123[label="0.0208333;1pkt 1fpkt"];
6722--12596[label="0.0204082;1pkt 1fpkt"];
6722--12853[label="0.0163934;1pkt 1fpkt"];
6722--12914[label="0.0491803;3pkt 3fpkt"];
6722--13796[label="0.0163934;1pkt 1fpkt"];
6722--14017[label="0.0526316;1pkt 1fpkt"];
6722--14205[label="0.0212766;1pkt 1fpkt"];
6722--14423[label="0.02;1pkt 1fpkt"];
6722--14547[label="0.0163934;1pkt 1fpkt"];
6722--14577[label="0.0491803;3pkt 3fpkt"];
6722--14956[label="0.0163934;1pkt 1fpkt"];
6722--15149[label="0.0208333;1pkt 1fpkt"];
7383--11687[label="1;20pkt 20fpkt"];
7383--14017[label="1;19pkt 19fpkt"];
7871--8664[label="0.230769;6pkt 6fpkt"];
7871--8743[label="0.230769;6pkt 6fpkt"];
7871--8790[label="0.230769;6pkt 6fpkt"];
7871--9288[label="0.0384615;1pkt 1fpkt"];
7871--9431[label="0.0384615;1pkt 1fpkt"];
7871--10227[label="1;2pkt 2fpkt"];
7871--12909[label="0.0384615;1pkt 1fpkt"];
8180--12187[label="1;1pkt 1fpkt"];
9288--12909[label="1;92pkt 92fpkt"];
11687--14017[label="1;19pkt 19fpkt"];
12123--14205[label="1;47pkt 47fpkt"];
12123--15149[label="1;48pkt 48fpkt"];
12596--14423[label="1;49pkt 49fpkt"];
14205--15149[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.226.153.206"/>
    </slice>
    <from sec="1289451630" usec="0"/>
    <to sec="1289451643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.159.199.206"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
6098[label="166.26.234.131;d;110pkt 110fpkt", shape=diamond, color=yellow];
12094[label="210.226.16.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.234.131:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62492: (0.900901%)&lt;BR/&gt; 65264: (0.45045%)&lt;BR/&gt; 64275: (0.45045%)&lt;BR/&gt; 64218: (0.45045%)&gt;];
}
6098--12094[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.234.131" dst_port="25"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.220.85.207"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.90.68.208"/>
    </slice>
    <from sec="1289452250" usec="0"/>
    <to sec="1289452263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.226.101.209"/>
    </slice>
    <from sec="1289452296" usec="0"/>
    <to sec="1289452310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.65.16.210"/>
    </slice>
    <from sec="1289452250" usec="0"/>
    <to sec="1289452263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.182.130.211"/>
    </slice>
    <from sec="1289451687" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.211"/>
    </slice>
    <from sec="1289452141" usec="0"/>
    <to sec="1289452193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.66.216.211"/>
    </slice>
    <from sec="1289451999" usec="0"/>
    <to sec="1289452013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.222.211"/>
    </slice>
    <from sec="1289451666" usec="0"/>
    <to sec="1289452275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.137.208.212"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
4475[label="210.42.224.16;d;264pkt 264fpkt", shape=diamond, color=yellow];
12186[label="188.138.229.212;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.42.224.16:45730}[82.1561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45730: (41.0169%)&lt;BR/&gt; 48200: (0.677966%)&lt;BR/&gt; 18268: (0.508475%)&lt;BR/&gt; 58858: (0.338983%)&lt;BR/&gt; 58434: (0.338983%)&gt;];
}
4475--12186[label="0.83871;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.224.16" dst_port="45730"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.133.19.213"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.235.109.213"/>
    </slice>
    <from sec="1289451606" usec="0"/>
    <to sec="1289451615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.212.184.213"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.6.91.214"/>
    </slice>
    <from sec="1289451909" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.176.21.215"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.3.98.215"/>
    </slice>
    <from sec="1289451739" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.82.142.215"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.82.23.216"/>
    </slice>
    <from sec="1289451815" usec="0"/>
    <to sec="1289451865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.34.71.216"/>
    </slice>
    <from sec="1289451823" usec="0"/>
    <to sec="1289451835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.52.72.216"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.179.84.216"/>
    </slice>
    <from sec="1289451725" usec="0"/>
    <to sec="1289452005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.77.96.216"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289451692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.225.115.216"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.216"/>
    </slice>
    <from sec="1289452399" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.40.49.217"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.45.69.217"/>
    </slice>
    <from sec="1289451794" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.65.9.218"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289452447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.98.97.218"/>
    </slice>
    <from sec="1289451732" usec="0"/>
    <to sec="1289451745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.133.141.218"/>
    </slice>
    <from sec="1289452014" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.3.63.219"/>
    </slice>
    <from sec="1289452232" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.226.179.219"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.219"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.162.69.220"/>
    </slice>
    <from sec="1289451971" usec="0"/>
    <to sec="1289452181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.94.220"/>
    </slice>
    <from sec="1289452474" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.48.173.220"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.148.148.223"/>
    </slice>
    <from sec="1289452334" usec="0"/>
    <to sec="1289452347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.67.180.223"/>
    </slice>
    <from sec="1289451886" usec="0"/>
    <to sec="1289451909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.6.12.224"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289451717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.59.66.225"/>
    </slice>
    <from sec="1289452057" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.121.225"/>
    </slice>
    <from sec="1289451627" usec="0"/>
    <to sec="1289452322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
3940[label="128.19.208.226;s;81pkt 81fpkt", shape=diamond, color=yellow];
6808[label="219.253.97.180;d;31pkt 31fpkt", shape=diamond, color=yellow];
12373[label="128.19.208.226;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.208.226:993, 219.253.97.180:*}[45.0549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (41.5423%)&lt;BR/&gt; 587: (2.98507%)&lt;BR/&gt; 465: (2.98507%)&lt;BR/&gt; 143: (1.49254%)&lt;BR/&gt; 57504: (0.995025%)&gt;];
}
3940--6808[label="0.935484;29pkt 29fpkt"];
3940--12373[label="1;81pkt 81fpkt"];
6808--12373[label="0.935484;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="219.253.97.180" src_ip="128.19.208.226" src_port="993"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.52.213.226"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289452356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.54.227"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.8.90.227"/>
    </slice>
    <from sec="1289451752" usec="0"/>
    <to sec="1289451754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.33.155.227"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.52.209.227"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.132.19.228"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
12399[label="80.236.39.228;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.236.39.228:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
</description>
    <slice>
      <filter dst_port="5060" src_ip="80.236.39.228" src_port="5060"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
98[label="210.33.108.78;d;2670pkt 2670fpkt", shape=diamond, color=yellow];
766[label="213.68.23.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
835[label="192.244.30.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
1010[label="133.4.185.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1519[label="202.52.209.53;s;8pkt 8fpkt", shape=diamond, color=yellow];
1706[label="47.44.9.11;s;137pkt 137fpkt", shape=diamond, color=yellow];
2027[label="9.74.200.46;s;2pkt 2fpkt", shape=diamond, color=yellow];
2497[label="210.43.50.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
3317[label="53.5.37.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
3361[label="202.52.209.52;s;3pkt 3fpkt", shape=diamond, color=yellow];
3373[label="202.52.209.60;s;22pkt 22fpkt", shape=diamond, color=yellow];
3753[label="210.33.154.114;d;23pkt 23fpkt", shape=diamond, color=yellow];
3817[label="210.43.50.225;s;62pkt 62fpkt", shape=diamond, color=yellow];
3963[label="128.19.149.167;d;230pkt 230fpkt", shape=diamond, color=yellow];
4034[label="211.37.80.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
4150[label="192.144.80.52;s;49pkt 49fpkt", shape=diamond, color=yellow];
4163[label="192.32.163.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
4442[label="7.9.184.72;s;7pkt 7fpkt", shape=diamond, color=yellow];
4529[label="128.19.217.78;d;105pkt 105fpkt", shape=diamond, color=yellow];
4749[label="210.250.190.84;s;26pkt 26fpkt", shape=diamond, color=yellow];
4926[label="108.138.151.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
5025[label="211.239.44.59;s;2pkt 2fpkt", shape=diamond, color=yellow];
5085[label="35.145.151.142;s;22pkt 22fpkt", shape=diamond, color=yellow];
5165[label="133.4.65.192;d;85pkt 85fpkt", shape=diamond, color=yellow];
5446[label="210.33.155.29;d;9pkt 9fpkt", shape=diamond, color=yellow];
5737[label="202.52.209.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
5955[label="200.244.255.191;d;46pkt 46fpkt", shape=diamond, color=yellow];
6326[label="211.57.107.224;s;7pkt 7fpkt", shape=diamond, color=yellow];
6864[label="202.52.209.134;s;5pkt 5fpkt", shape=diamond, color=yellow];
6917[label="211.63.83.228;s;2pkt 2fpkt", shape=diamond, color=yellow];
7044[label="7.64.97.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
7217[label="128.19.150.42;d;20pkt 20fpkt", shape=diamond, color=yellow];
7285[label="210.43.50.242;s;35pkt 35fpkt", shape=diamond, color=yellow];
7529[label="202.52.208.96;s;11pkt 11fpkt", shape=diamond, color=yellow];
7556[label="202.52.208.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
7576[label="15.173.135.2;s;5pkt 5fpkt", shape=diamond, color=yellow];
8876[label="15.173.135.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9026[label="47.44.9.11;144pkt 144fpkt", shape=pentagon, color=darkviolet];
9134[label="213.111.99.16;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9304[label="202.9.134.25;35pkt 35fpkt", shape=pentagon, color=darkviolet];
9418[label="108.138.151.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9492[label="108.138.151.36;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9539[label="168.124.12.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9548[label="108.138.151.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9580[label="192.121.61.41;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9603[label="213.111.101.42;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9629[label="202.9.133.43;23pkt 23fpkt", shape=pentagon, color=darkviolet];
9678[label="9.74.200.46;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9684[label="42.129.32.47;27pkt 27fpkt", shape=pentagon, color=darkviolet];
9778[label="192.144.80.52;49pkt 49fpkt", shape=pentagon, color=darkviolet];
9788[label="202.52.209.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9802[label="202.52.209.53;27pkt 27fpkt", shape=pentagon, color=darkviolet];
9838[label="14.38.207.55;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10053[label="213.111.99.70;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10108[label="35.145.151.73;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10232[label="8.160.247.80;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10399[label="108.210.187.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10570[label="59.201.226.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10605[label="46.153.210.105;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11026[label="202.52.209.134;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11168[label="35.145.151.142;22pkt 22fpkt", shape=pentagon, color=darkviolet];
11241[label="108.138.141.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11474[label="15.45.108.163;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12404[label="211.63.83.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12566[label="210.43.50.242;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12617[label="217.74.58.246;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12677[label="201.141.213.252;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12689[label="203.77.138.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12718[label="15.173.135.2;5pkt 5fpkt", shape=invtriangle, color=brown];
12841[label="213.111.99.16;6pkt 6fpkt", shape=invtriangle, color=brown];
12980[label="108.138.151.32;11pkt 11fpkt", shape=invtriangle, color=brown];
13016[label="108.138.151.36;13pkt 13fpkt", shape=invtriangle, color=brown];
13081[label="202.9.133.43;23pkt 23fpkt", shape=invtriangle, color=brown];
13111[label="9.74.200.46;1pkt 1fpkt", shape=invtriangle, color=brown];
13181[label="14.38.207.55;3pkt 3fpkt", shape=invtriangle, color=brown];
13301[label="35.145.151.73;3pkt 3fpkt", shape=invtriangle, color=brown];
13358[label="8.160.247.80;2pkt 2fpkt", shape=invtriangle, color=brown];
13452[label="192.144.80.93;1pkt 1fpkt", shape=invtriangle, color=brown];
13723[label="202.52.209.134;5pkt 5fpkt", shape=invtriangle, color=brown];
14347[label="211.63.83.228;5pkt 5fpkt", shape=invtriangle, color=brown];
14414[label="210.43.50.242;36pkt 36fpkt", shape=invtriangle, color=brown];
14426[label="217.74.58.246;9pkt 9fpkt", shape=invtriangle, color=brown];
14454[label="201.141.213.252;2pkt 2fpkt", shape=invtriangle, color=brown];
14469[label="15.173.135.2;6pkt 6fpkt", shape=invhouse, color=bisque];
14604[label="108.138.151.32;10pkt 10fpkt", shape=invhouse, color=bisque];
14621[label="108.138.151.36;13pkt 13fpkt", shape=invhouse, color=bisque];
14646[label="202.9.133.43;23pkt 23fpkt", shape=invhouse, color=bisque];
14739[label="35.145.151.73;4pkt 4fpkt", shape=invhouse, color=bisque];
14917[label="202.52.209.134;4pkt 4fpkt", shape=invhouse, color=bisque];
15216[label="211.63.83.228;4pkt 4fpkt", shape=invhouse, color=bisque];
15259[label="217.74.58.246;9pkt 9fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 210.33.108.78:*}[47.6275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.1605%)&lt;BR/&gt; 24236: (6.52829%)&lt;BR/&gt; 443: (4.61503%)&lt;BR/&gt; 5223: (0.730519%)&lt;BR/&gt; 53: (0.5218%)&gt;];
}
98--127[label="0.00304878;2pkt 2fpkt"];
98--215[label="0.0434783;1pkt 1fpkt"];
98--251[label="0.00460829;1pkt 1fpkt"];
98--253[label="0.00502513;1pkt 1fpkt"];
98--682[label="0.0194175;22pkt 22fpkt"];
98--752[label="0.0664557;21pkt 21fpkt"];
98--766[label="1;1pkt 1fpkt"];
98--835[label="1;1pkt 1fpkt"];
98--860[label="0.00714286;6pkt 6fpkt"];
98--888[label="0.0157895;3pkt 3fpkt"];
98--942[label="1;1pkt 1fpkt"];
98--1077[label="0.0196629;7pkt 7fpkt"];
98--1090[label="0.163968;81pkt 81fpkt"];
98--1137[label="0.0892857;35pkt 35fpkt"];
98--1153[label="0.0192308;2pkt 2fpkt"];
98--1158[label="0.0239852;13pkt 13fpkt"];
98--1229[label="0.0116279;1pkt 1fpkt"];
98--1519[label="1;8pkt 8fpkt"];
98--1653[label="0.00389105;1pkt 1fpkt"];
98--1698[label="0.231481;25pkt 25fpkt"];
98--1704[label="0.0101523;2pkt 2fpkt"];
98--1706[label="0.627737;86pkt 86fpkt"];
98--2024[label="0.137079;61pkt 61fpkt"];
98--2027[label="0.5;1pkt 1fpkt"];
98--2050[label="0.00516351;3pkt 3fpkt"];
98--2086[label="0.0253623;7pkt 7fpkt"];
98--2142[label="0.0936556;31pkt 31fpkt"];
98--2168[label="0.0555556;18pkt 18fpkt"];
98--2200[label="0.0140845;1pkt 1fpkt"];
98--2206[label="0.0333333;1pkt 1fpkt"];
98--2223[label="0.0814815;11pkt 11fpkt"];
98--2280[label="0.0218341;5pkt 5fpkt"];
98--2379[label="0.0206186;2pkt 2fpkt"];
98--2387[label="0.11588;27pkt 27fpkt"];
98--2471[label="0.377778;17pkt 17fpkt"];
98--2497[label="1;1pkt 1fpkt"];
98--2787[label="0.00395257;1pkt 1fpkt"];
98--2942[label="0.0150862;7pkt 7fpkt"];
98--2987[label="0.00182815;1pkt 1fpkt"];
98--3026[label="0.0603448;7pkt 7fpkt"];
98--3120[label="0.0607735;11pkt 11fpkt"];
98--3220[label="0.0675676;5pkt 5fpkt"];
98--3317[label="1;1pkt 1fpkt"];
98--3361[label="0.666667;2pkt 2fpkt"];
98--3373[label="1;22pkt 22fpkt"];
98--3561[label="0.0521327;11pkt 11fpkt"];
98--3651[label="0.5;1pkt 1fpkt"];
98--3810[label="0.0588235;1pkt 1fpkt"];
98--3817[label="0.306452;19pkt 19fpkt"];
98--3819[label="0.0023753;1pkt 1fpkt"];
98--3858[label="0.0925926;5pkt 5fpkt"];
98--3893[label="0.111111;10pkt 10fpkt"];
98--3899[label="0.0125;1pkt 1fpkt"];
98--3925[label="0.0357143;1pkt 1fpkt"];
98--3967[label="0.0632911;5pkt 5fpkt"];
98--4034[label="1;1pkt 1fpkt"];
98--4150[label="1;49pkt 49fpkt"];
98--4163[label="1;2pkt 2fpkt"];
98--4286[label="0.0157729;15pkt 15fpkt"];
98--4293[label="0.0175747;10pkt 10fpkt"];
98--4313[label="0.0178306;12pkt 12fpkt"];
98--4322[label="0.00892857;1pkt 1fpkt"];
98--4364[label="0.0306122;6pkt 6fpkt"];
98--4442[label="0.142857;1pkt 1fpkt"];
98--4495[label="0.00735294;1pkt 1fpkt"];
98--4508[label="0.0210843;7pkt 7fpkt"];
98--4535[label="0.0611285;39pkt 39fpkt"];
98--4691[label="0.2;9pkt 9fpkt"];
98--4749[label="0.230769;6pkt 6fpkt"];
98--4769[label="0.0714286;4pkt 4fpkt"];
98--4799[label="0.0491803;9pkt 9fpkt"];
98--4804[label="0.175;7pkt 7fpkt"];
98--4926[label="0.5;1pkt 1fpkt"];
98--5025[label="1;2pkt 2fpkt"];
98--5085[label="1;22pkt 22fpkt"];
98--5138[label="0.00388098;3pkt 3fpkt"];
98--5268[label="0.0188679;1pkt 1fpkt"];
98--5426[label="0.0151515;1pkt 1fpkt"];
98--5549[label="0.244681;23pkt 23fpkt"];
98--5737[label="1;2pkt 2fpkt"];
98--5917[label="0.0227273;1pkt 1fpkt"];
98--6192[label="0.0277778;1pkt 1fpkt"];
98--6326[label="0.285714;2pkt 2fpkt"];
98--6549[label="0.0470588;4pkt 4fpkt"];
98--6553[label="0.642857;9pkt 9fpkt"];
98--6655[label="0.0588235;1pkt 1fpkt"];
98--6864[label="0.8;4pkt 4fpkt"];
98--6917[label="1;2pkt 2fpkt"];
98--7044[label="1;1pkt 1fpkt"];
98--7245[label="0.105263;2pkt 2fpkt"];
98--7284[label="0.0106383;1pkt 1fpkt"];
98--7285[label="1;35pkt 35fpkt"];
98--7368[label="0.285714;4pkt 4fpkt"];
98--7404[label="0.153846;6pkt 6fpkt"];
98--7529[label="1;11pkt 11fpkt"];
98--7556[label="1;1pkt 1fpkt"];
98--8684[label="0.0670412;179pkt 179fpkt"];
98--8685[label="0.0119272;19pkt 19fpkt"];
98--8761[label="0.0670412;179pkt 179fpkt"];
98--8762[label="0.0119272;19pkt 19fpkt"];
98--8807[label="0.0670412;179pkt 179fpkt"];
98--8808[label="0.0119272;19pkt 19fpkt"];
98--8887[label="0.233333;7pkt 7fpkt"];
98--9026[label="0.597222;86pkt 86fpkt"];
98--9075[label="0.05;1pkt 1fpkt"];
98--9083[label="0.00362319;3pkt 3fpkt"];
98--9088[label="0.153846;4pkt 4fpkt"];
98--9134[label="0.166667;1pkt 1fpkt"];
98--9147[label="0.0408163;2pkt 2fpkt"];
98--9153[label="0.00362319;1pkt 1fpkt"];
98--9304[label="0.228571;8pkt 8fpkt"];
98--9362[label="0.0140845;1pkt 1fpkt"];
98--9418[label="0.909091;10pkt 10fpkt"];
98--9428[label="0.287671;21pkt 21fpkt"];
98--9484[label="0.0833333;1pkt 1fpkt"];
98--9492[label="0.384615;5pkt 5fpkt"];
98--9539[label="0.666667;2pkt 2fpkt"];
98--9548[label="0.333333;1pkt 1fpkt"];
98--9578[label="0.047619;1pkt 1fpkt"];
98--9580[label="1;11pkt 11fpkt"];
98--9603[label="0.4;2pkt 2fpkt"];
98--9629[label="0.347826;8pkt 8fpkt"];
98--9668[label="0.0588235;2pkt 2fpkt"];
98--9678[label="0.5;1pkt 1fpkt"];
98--9684[label="0.407407;11pkt 11fpkt"];
98--9730[label="0.00436681;1pkt 1fpkt"];
98--9749[label="0.232323;23pkt 23fpkt"];
98--9778[label="1;49pkt 49fpkt"];
98--9780[label="0.00471698;1pkt 1fpkt"];
98--9788[label="0.666667;2pkt 2fpkt"];
98--9802[label="1;27pkt 27fpkt"];
98--9838[label="0.8;4pkt 4fpkt"];
98--9922[label="0.0526316;1pkt 1fpkt"];
98--9985[label="0.047619;1pkt 1fpkt"];
98--10053[label="0.733333;11pkt 11fpkt"];
98--10108[label="1;3pkt 3fpkt"];
98--10232[label="0.333333;1pkt 1fpkt"];
98--10265[label="0.166667;7pkt 7fpkt"];
98--10345[label="0.0182292;7pkt 7fpkt"];
98--10363[label="0.0555556;1pkt 1fpkt"];
98--10549[label="0.108696;10pkt 10fpkt"];
98--10570[label="1;1pkt 1fpkt"];
98--10605[label="0.75;6pkt 6fpkt"];
98--10642[label="0.162162;6pkt 6fpkt"];
98--10901[label="0.105263;2pkt 2fpkt"];
98--10988[label="0.133333;2pkt 2fpkt"];
98--11000[label="0.0785714;11pkt 11fpkt"];
98--11026[label="0.8;4pkt 4fpkt"];
98--11075[label="0.0967742;3pkt 3fpkt"];
98--11168[label="1;22pkt 22fpkt"];
98--11389[label="0.025641;1pkt 1fpkt"];
98--11474[label="1;24pkt 24fpkt"];
98--11720[label="0.0588235;1pkt 1fpkt"];
98--11835[label="1;61pkt 61fpkt"];
98--11950[label="0.14781;81pkt 81fpkt"];
98--11975[label="0.166667;5pkt 5fpkt"];
98--11995[label="0.111111;5pkt 5fpkt"];
98--12069[label="0.0434783;1pkt 1fpkt"];
98--12256[label="0.0454545;1pkt 1fpkt"];
98--12333[label="0.0625;1pkt 1fpkt"];
98--12404[label="1;4pkt 4fpkt"];
98--12458[label="0.0206186;2pkt 2fpkt"];
98--12566[label="0.944444;34pkt 34fpkt"];
98--12594[label="0.0165289;12pkt 12fpkt"];
98--12617[label="0.777778;7pkt 7fpkt"];
98--12677[label="1;2pkt 2fpkt"];
98--12841[label="0.166667;1pkt 1fpkt"];
98--12951[label="0.0138889;1pkt 1fpkt"];
98--12980[label="0.909091;10pkt 10fpkt"];
98--13016[label="0.384615;5pkt 5fpkt"];
98--13081[label="0.347826;8pkt 8fpkt"];
98--13106[label="0.0606061;2pkt 2fpkt"];
98--13135[label="0.00438596;1pkt 1fpkt"];
98--13147[label="0.234694;23pkt 23fpkt"];
98--13181[label="1;3pkt 3fpkt"];
98--13301[label="1;3pkt 3fpkt"];
98--13358[label="0.5;1pkt 1fpkt"];
98--13379[label="0.166667;7pkt 7fpkt"];
98--13415[label="0.0182768;7pkt 7fpkt"];
98--13423[label="0.0526316;1pkt 1fpkt"];
98--13452[label="1;1pkt 1fpkt"];
98--13544[label="0.162162;6pkt 6fpkt"];
98--13662[label="0.105263;2pkt 2fpkt"];
98--13704[label="0.133333;2pkt 2fpkt"];
98--13709[label="0.0791367;11pkt 11fpkt"];
98--13723[label="0.8;4pkt 4fpkt"];
98--13878[label="0.025;1pkt 1fpkt"];
98--13969[label="0.0649351;5pkt 5fpkt"];
98--14030[label="0.0625;1pkt 1fpkt"];
98--14081[label="1;60pkt 60fpkt"];
98--14180[label="0.0434783;1pkt 1fpkt"];
98--14347[label="1;5pkt 5fpkt"];
98--14414[label="0.944444;34pkt 34fpkt"];
98--14426[label="0.777778;7pkt 7fpkt"];
98--14454[label="1;2pkt 2fpkt"];
98--14604[label="0.9;9pkt 9fpkt"];
98--14621[label="0.384615;5pkt 5fpkt"];
98--14646[label="0.347826;8pkt 8fpkt"];
98--14670[label="0.00436681;1pkt 1fpkt"];
98--14739[label="1;4pkt 4fpkt"];
98--14775[label="0.166667;7pkt 7fpkt"];
98--14892[label="0.105263;2pkt 2fpkt"];
98--14917[label="0.75;3pkt 3fpkt"];
98--14989[label="0.025;1pkt 1fpkt"];
98--14994[label="0.00943396;1pkt 1fpkt"];
98--15216[label="1;4pkt 4fpkt"];
98--15259[label="0.777778;7pkt 7fpkt"];
1010--2027[label="1;1pkt 1fpkt"];
1010--9678[label="1;1pkt 1fpkt"];
1010--13111[label="1;1pkt 1fpkt"];
1519--9802[label="0.875;7pkt 7fpkt"];
1706--2691[label="0.00729927;1pkt 1fpkt"];
1706--5188[label="0.00729927;1pkt 1fpkt"];
1706--6628[label="0.097561;4pkt 4fpkt"];
1706--7688[label="0.00729927;1pkt 1fpkt"];
1706--8684[label="0.0875912;12pkt 12fpkt"];
1706--8761[label="0.0875912;12pkt 12fpkt"];
1706--8807[label="0.0875912;12pkt 12fpkt"];
1706--9026[label="1;137pkt 137fpkt"];
2027--9678[label="1;2pkt 2fpkt"];
2027--13111[label="1;1pkt 1fpkt"];
3361--9788[label="1;3pkt 3fpkt"];
3753--4442[label="0.142857;1pkt 1fpkt"];
3753--6702[label="0.0434783;1pkt 1fpkt"];
3753--7368[label="0.0714286;1pkt 1fpkt"];
3753--10363[label="0.0555556;1pkt 1fpkt"];
3753--11123[label="0.05;1pkt 1fpkt"];
3753--11241[label="1;1pkt 1fpkt"];
3753--11249[label="0.0434783;1pkt 1fpkt"];
3753--12689[label="1;1pkt 1fpkt"];
3753--13423[label="0.0526316;1pkt 1fpkt"];
3753--13763[label="0.05;1pkt 1fpkt"];
3817--3848[label="0.016129;1pkt 1fpkt"];
3817--4004[label="0.177419;11pkt 11fpkt"];
3817--4144[label="0.0204082;1pkt 1fpkt"];
3817--4619[label="0.0172414;1pkt 1fpkt"];
3817--4726[label="0.0967742;6pkt 6fpkt"];
3817--4731[label="0.0227273;1pkt 1fpkt"];
3817--4793[label="0.016129;1pkt 1fpkt"];
3817--5045[label="0.027027;1pkt 1fpkt"];
3817--6002[label="0.0227273;1pkt 1fpkt"];
3817--6392[label="0.016129;1pkt 1fpkt"];
3817--7829[label="0.016129;1pkt 1fpkt"];
3817--8258[label="0.0806452;5pkt 5fpkt"];
3817--8635[label="0.016129;1pkt 1fpkt"];
3817--8684[label="0.0483871;3pkt 3fpkt"];
3817--8761[label="0.0483871;3pkt 3fpkt"];
3817--8807[label="0.0483871;3pkt 3fpkt"];
3963--4049[label="0.047619;1pkt 1fpkt"];
3963--4322[label="0.0267857;3pkt 3fpkt"];
3963--4508[label="0.00434783;1pkt 1fpkt"];
3963--4661[label="0.285714;8pkt 8fpkt"];
3963--5170[label="0.0628931;10pkt 10fpkt"];
3963--5450[label="0.015873;1pkt 1fpkt"];
3963--5558[label="0.133333;2pkt 2fpkt"];
3963--5912[label="0.00434783;1pkt 1fpkt"];
3963--6549[label="0.0117647;1pkt 1fpkt"];
3963--6780[label="0.0147059;1pkt 1fpkt"];
3963--8684[label="0.0434783;10pkt 10fpkt"];
3963--8761[label="0.0434783;10pkt 10fpkt"];
3963--8807[label="0.0434783;10pkt 10fpkt"];
3963--9427[label="0.030303;1pkt 1fpkt"];
3963--9629[label="0.217391;5pkt 5fpkt"];
3963--9780[label="0.0188679;4pkt 4fpkt"];
3963--10065[label="0.0285714;1pkt 1fpkt"];
3963--10224[label="0.0130435;3pkt 3fpkt"];
3963--10345[label="0.026087;6pkt 6fpkt"];
3963--10362[label="0.166667;1pkt 1fpkt"];
3963--12663[label="0.0666667;2pkt 2fpkt"];
3963--13081[label="0.217391;5pkt 5fpkt"];
3963--13354[label="0.0130435;3pkt 3fpkt"];
3963--13415[label="0.026087;6pkt 6fpkt"];
3963--14445[label="0.0645161;2pkt 2fpkt"];
3963--14646[label="0.217391;5pkt 5fpkt"];
3963--15270[label="0.0645161;2pkt 2fpkt"];
4150--9778[label="1;49pkt 49fpkt"];
4442--5446[label="0.142857;1pkt 1fpkt"];
4442--6263[label="0.142857;1pkt 1fpkt"];
4529--4548[label="0.0555556;1pkt 1fpkt"];
4529--4571[label="0.00952381;1pkt 1fpkt"];
4529--4769[label="0.0357143;2pkt 2fpkt"];
4529--5450[label="0.0952381;6pkt 6fpkt"];
4529--5480[label="0.0181818;1pkt 1fpkt"];
4529--8684[label="0.0285714;3pkt 3fpkt"];
4529--8761[label="0.0285714;3pkt 3fpkt"];
4529--8807[label="0.0285714;3pkt 3fpkt"];
4529--9629[label="0.304348;7pkt 7fpkt"];
4529--10345[label="0.00952381;1pkt 1fpkt"];
4529--10362[label="0.166667;1pkt 1fpkt"];
4529--10429[label="0.0571429;6pkt 6fpkt"];
4529--11666[label="0.111111;1pkt 1fpkt"];
4529--13081[label="0.304348;7pkt 7fpkt"];
4529--13415[label="0.00952381;1pkt 1fpkt"];
4529--13457[label="0.0571429;6pkt 6fpkt"];
4529--14646[label="0.304348;7pkt 7fpkt"];
4749--6272[label="0.153846;4pkt 4fpkt"];
4749--7217[label="0.3;6pkt 6fpkt"];
4749--8355[label="0.153846;4pkt 4fpkt"];
4926--5446[label="0.5;1pkt 1fpkt"];
4926--9548[label="1;2pkt 2fpkt"];
5085--8684[label="0.0454545;1pkt 1fpkt"];
5085--8761[label="0.0454545;1pkt 1fpkt"];
5085--8807[label="0.0454545;1pkt 1fpkt"];
5085--11168[label="1;22pkt 22fpkt"];
5165--5912[label="0.0117647;1pkt 1fpkt"];
5165--5929[label="0.0235294;2pkt 2fpkt"];
5165--6326[label="0.142857;1pkt 1fpkt"];
5165--6537[label="0.0117647;1pkt 1fpkt"];
5165--8676[label="0.0470588;4pkt 4fpkt"];
5165--8685[label="0.0352941;3pkt 3fpkt"];
5165--8762[label="0.0352941;3pkt 3fpkt"];
5165--8808[label="0.0352941;3pkt 3fpkt"];
5165--9627[label="0.0117647;1pkt 1fpkt"];
5165--10013[label="0.0941176;8pkt 8fpkt"];
5165--10429[label="0.0117647;1pkt 1fpkt"];
5165--11000[label="0.0117647;1pkt 1fpkt"];
5165--11121[label="0.0117647;1pkt 1fpkt"];
5165--12001[label="0.0117647;1pkt 1fpkt"];
5165--12594[label="0.0117647;1pkt 1fpkt"];
5165--13079[label="0.0117647;1pkt 1fpkt"];
5165--13457[label="0.0117647;1pkt 1fpkt"];
5165--13588[label="0.0117647;1pkt 1fpkt"];
5165--13709[label="0.0117647;1pkt 1fpkt"];
5165--13762[label="0.0117647;1pkt 1fpkt"];
5446--9548[label="0.333333;1pkt 1fpkt"];
5446--10399[label="1;1pkt 1fpkt"];
5955--7576[label="0.8;4pkt 4fpkt"];
5955--8684[label="0.0217391;1pkt 1fpkt"];
5955--8685[label="0.0217391;1pkt 1fpkt"];
5955--8761[label="0.0217391;1pkt 1fpkt"];
5955--8762[label="0.0217391;1pkt 1fpkt"];
5955--8807[label="0.0217391;1pkt 1fpkt"];
5955--8808[label="0.0217391;1pkt 1fpkt"];
5955--8876[label="0.6;3pkt 3fpkt"];
5955--9134[label="0.166667;1pkt 1fpkt"];
5955--12718[label="0.6;3pkt 3fpkt"];
5955--12841[label="0.166667;1pkt 1fpkt"];
5955--14469[label="0.666667;4pkt 4fpkt"];
6864--8498[label="0.2;1pkt 1fpkt"];
6864--8684[label="0.2;1pkt 1fpkt"];
6864--8761[label="0.2;1pkt 1fpkt"];
6864--8807[label="0.2;1pkt 1fpkt"];
6864--11026[label="1;5pkt 5fpkt"];
6864--13723[label="1;5pkt 5fpkt"];
6864--14917[label="1;4pkt 4fpkt"];
6917--12404[label="1;2pkt 2fpkt"];
6917--14347[label="1;2pkt 2fpkt"];
6917--15216[label="1;2pkt 2fpkt"];
7285--8684[label="0.0857143;3pkt 3fpkt"];
7285--8761[label="0.0857143;3pkt 3fpkt"];
7285--8807[label="0.0857143;3pkt 3fpkt"];
7285--12566[label="0.971429;34pkt 34fpkt"];
7285--14414[label="0.971429;34pkt 34fpkt"];
7576--8876[label="0.8;4pkt 4fpkt"];
7576--12718[label="0.8;4pkt 4fpkt"];
7576--14469[label="1;5pkt 5fpkt"];
8876--12718[label="1;5pkt 5fpkt"];
8876--14469[label="1;5pkt 5fpkt"];
9134--12841[label="1;6pkt 6fpkt"];
9418--12980[label="1;11pkt 11fpkt"];
9418--14604[label="1;10pkt 10fpkt"];
9492--13016[label="1;13pkt 13fpkt"];
9492--14621[label="1;13pkt 13fpkt"];
9629--13081[label="1;23pkt 23fpkt"];
9629--14646[label="1;23pkt 23fpkt"];
9678--13111[label="1;1pkt 1fpkt"];
9838--13181[label="1;3pkt 3fpkt"];
10108--13301[label="1;3pkt 3fpkt"];
10108--14739[label="1;3pkt 3fpkt"];
10232--13358[label="1;2pkt 2fpkt"];
11026--13723[label="1;5pkt 5fpkt"];
11026--14917[label="1;4pkt 4fpkt"];
12404--14347[label="1;4pkt 4fpkt"];
12404--15216[label="1;4pkt 4fpkt"];
12566--14414[label="1;36pkt 36fpkt"];
12617--14426[label="1;9pkt 9fpkt"];
12617--15259[label="1;9pkt 9fpkt"];
12677--14454[label="1;2pkt 2fpkt"];
12718--14469[label="1;5pkt 5fpkt"];
12980--14604[label="1;10pkt 10fpkt"];
13016--14621[label="1;13pkt 13fpkt"];
13081--14646[label="1;23pkt 23fpkt"];
13301--14739[label="1;3pkt 3fpkt"];
13723--14917[label="1;4pkt 4fpkt"];
14347--15216[label="1;4pkt 4fpkt"];
14426--15259[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.108.78" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.196.225.228"/>
    </slice>
    <from sec="1289451615" usec="0"/>
    <to sec="1289452268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.181.17.229"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.226.64.229"/>
    </slice>
    <from sec="1289452057" usec="0"/>
    <to sec="1289452179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.9.132.229"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.69.154.229"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.182.229"/>
    </slice>
    <from sec="1289451722" usec="0"/>
    <to sec="1289452481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.63.240.229"/>
    </slice>
    <from sec="1289452382" usec="0"/>
    <to sec="1289452385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.200.173.231"/>
    </slice>
    <from sec="1289451991" usec="0"/>
    <to sec="1289451994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.109.111.232"/>
    </slice>
    <from sec="1289451622" usec="0"/>
    <to sec="1289451641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.204.164.232"/>
    </slice>
    <from sec="1289452084" usec="0"/>
    <to sec="1289452102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.26.18.233"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.115.20.233"/>
    </slice>
    <from sec="1289451614" usec="0"/>
    <to sec="1289452444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.35.136.234"/>
    </slice>
    <from sec="1289452094" usec="0"/>
    <to sec="1289452151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.172.226.234"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.20.173.235"/>
    </slice>
    <from sec="1289451618" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.50.106.236"/>
    </slice>
    <from sec="1289452245" usec="0"/>
    <to sec="1289452426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
670[label="47.46.228.60;d;21pkt 21fpkt", shape=diamond, color=yellow];
12505[label="210.33.155.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17185, 47.46.228.60:35509}[57.1429%]&lt;BR/&gt;{*:17185, 47.46.228.60:58200}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17185: (50%)&lt;BR/&gt; 35509: (29.5455%)&lt;BR/&gt; 58200: (18.1818%)&lt;BR/&gt; 56270: (2.27273%)&gt;];
}
670--12505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="47.46.228.60" dst_port="35509" src_port="17185"/>
      <filter dst_ip="47.46.228.60" dst_port="58200" src_port="17185"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.169.236"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289451764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.83.190.236"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.8.40.237"/>
    </slice>
    <from sec="1289452190" usec="0"/>
    <to sec="1289452264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.245.173.237"/>
    </slice>
    <from sec="1289451752" usec="0"/>
    <to sec="1289451757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.248.148.238"/>
    </slice>
    <from sec="1289452477" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.137.205.238"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
6674[label="166.26.114.239;s;114pkt 114fpkt", shape=diamond, color=yellow];
12535[label="166.26.114.239;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.114.239:*, 14.169.176.123:80}[77.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2738: (0.409836%)&lt;BR/&gt; 2737: (0.409836%)&lt;BR/&gt; 2736: (0.409836%)&lt;BR/&gt; 2735: (0.409836%)&gt;];
}
6674--8664[label="0.0350877;4pkt 4fpkt"];
6674--8688[label="0.0789474;9pkt 9fpkt"];
6674--8743[label="0.0350877;4pkt 4fpkt"];
6674--8765[label="0.0789474;9pkt 9fpkt"];
6674--8790[label="0.0350877;4pkt 4fpkt"];
6674--8811[label="0.0789474;9pkt 9fpkt"];
6674--12535[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="14.169.176.123" dst_port="80" src_ip="166.26.114.239"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.200.203.239"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.204.23.240"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.186.232.240"/>
    </slice>
    <from sec="1289452138" usec="0"/>
    <to sec="1289452149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.63.30.241"/>
    </slice>
    <from sec="1289451638" usec="0"/>
    <to sec="1289452322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.116.100.241"/>
    </slice>
    <from sec="1289451788" usec="0"/>
    <to sec="1289451827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.26.114.242"/>
    </slice>
    <from sec="1289452135" usec="0"/>
    <to sec="1289452147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.7.117.243"/>
    </slice>
    <from sec="1289451616" usec="0"/>
    <to sec="1289451627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.109.157.244"/>
    </slice>
    <from sec="1289451791" usec="0"/>
    <to sec="1289451917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.83.224.244"/>
    </slice>
    <from sec="1289451638" usec="0"/>
    <to sec="1289451695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.66.87.245"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.70.42.246"/>
    </slice>
    <from sec="1289452037" usec="0"/>
    <to sec="1289452059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.0.154.246"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.164.198.248"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.136.243.248"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.45.74.249"/>
    </slice>
    <from sec="1289451863" usec="0"/>
    <to sec="1289451873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.196.44.250"/>
    </slice>
    <from sec="1289452046" usec="0"/>
    <to sec="1289452059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.4.65.250"/>
    </slice>
    <from sec="1289451856" usec="0"/>
    <to sec="1289451872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.42.220.250"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.69.74.251"/>
    </slice>
    <from sec="1289452027" usec="0"/>
    <to sec="1289452040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.77.162.252"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.39.177.252"/>
    </slice>
    <from sec="1289452151" usec="0"/>
    <to sec="1289452171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.395842,3.61051,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.38.118.253"/>
    </slice>
    <from sec="1289452461" usec="0"/>
    <to sec="1289452474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.5.0"/>
    </slice>
    <from sec="1289451808" usec="0"/>
    <to sec="1289451825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.141.0"/>
    </slice>
    <from sec="1289451652" usec="0"/>
    <to sec="1289451658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
1658[label="202.52.209.143;d;8pkt 8fpkt", shape=diamond, color=yellow];
6884[label="158.196.24.1;s;4pkt 4fpkt", shape=diamond, color=yellow];
8850[label="158.196.24.1;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12705[label="158.196.24.1;3pkt 3fpkt", shape=invtriangle, color=brown];
14463[label="158.196.24.1;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.24.1:*, 202.52.209.143:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50409: (11.3636%)&lt;BR/&gt; 50290: (11.3636%)&lt;BR/&gt; 50333: (9.09091%)&lt;BR/&gt; 50284: (6.81818%)&gt;];
}
1658--3099[label="0.125;1pkt 1fpkt"];
1658--3566[label="0.125;1pkt 1fpkt"];
1658--3737[label="0.125;1pkt 1fpkt"];
1658--4020[label="0.125;1pkt 1fpkt"];
1658--5131[label="0.125;1pkt 1fpkt"];
1658--6884[label="0.75;3pkt 3fpkt"];
1658--8664[label="0.125;1pkt 1fpkt"];
1658--8688[label="0.125;1pkt 1fpkt"];
1658--8743[label="0.125;1pkt 1fpkt"];
1658--8765[label="0.125;1pkt 1fpkt"];
1658--8790[label="0.125;1pkt 1fpkt"];
1658--8811[label="0.125;1pkt 1fpkt"];
1658--8850[label="0.75;3pkt 3fpkt"];
1658--12705[label="0.666667;2pkt 2fpkt"];
1658--14463[label="0.666667;2pkt 2fpkt"];
6884--8850[label="1;4pkt 4fpkt"];
6884--12705[label="1;3pkt 3fpkt"];
6884--14463[label="1;3pkt 3fpkt"];
8850--12705[label="1;3pkt 3fpkt"];
8850--14463[label="1;3pkt 3fpkt"];
12705--14463[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="202.52.209.143" dst_port="80" src_ip="158.196.24.1"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
8867[label="192.168.1.2;97pkt 97fpkt", shape=pentagon, color=darkviolet];
12712[label="192.168.1.2;96pkt 96fpkt", shape=invtriangle, color=brown];
14465[label="192.168.1.2;96pkt 96fpkt", shape=invhouse, color=bisque];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.168.1.2:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8867--12712[label="1;96pkt 96fpkt"];
8867--14465[label="1;96pkt 96fpkt"];
12712--14465[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter src_ip="192.168.1.2"/>
    </slice>
    <from sec="1289451639" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
8868[label="165.127.13.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12713[label="165.127.13.2;3pkt 3fpkt", shape=invtriangle, color=brown];
14466[label="165.127.13.2;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.127.13.2:443, 164.251.102.176:2361}[33.3333%]&lt;BR/&gt;{165.127.13.2:443, 164.251.102.176:2362}[33.3333%]&lt;BR/&gt;{165.127.13.2:443, 164.251.102.176:2366}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2366: (21.4286%)&lt;BR/&gt; 2362: (21.4286%)&lt;BR/&gt; 2361: (7.14286%)&gt;];
}
8868--12713[label="1;2pkt 2fpkt"];
8868--14466[label="1;2pkt 2fpkt"];
12713--14466[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.102.176" dst_port="2366" src_ip="165.127.13.2" src_port="443"/>
      <filter dst_ip="164.251.102.176" dst_port="2362" src_ip="165.127.13.2" src_port="443"/>
      <filter dst_ip="164.251.102.176" dst_port="2361" src_ip="165.127.13.2" src_port="443"/>
    </slice>
    <from sec="1289452201" usec="0"/>
    <to sec="1289452222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
8874[label="133.4.129.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12716[label="133.4.129.2;6pkt 6fpkt", shape=invtriangle, color=brown];
14468[label="133.4.129.2;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.129.2:80, 34.22.154.92:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61021: (8.82353%)&lt;BR/&gt; 61020: (8.82353%)&lt;BR/&gt; 61019: (8.82353%)&lt;BR/&gt; 61018: (8.82353%)&gt;];
}
8874--12716[label="1;5pkt 5fpkt"];
8874--14468[label="1;5pkt 5fpkt"];
12716--14468[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="34.22.154.92" src_ip="133.4.129.2" src_port="80"/>
    </slice>
    <from sec="1289451682" usec="0"/>
    <to sec="1289451705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.162.177.2"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
8893[label="214.218.124.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12723[label="214.218.124.3;1pkt 1fpkt", shape=invtriangle, color=brown];
14474[label="214.218.124.3;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.218.124.3:52998, 128.19.106.47:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52998: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8893--12723[label="1;1pkt 1fpkt"];
8893--14474[label="1;1pkt 1fpkt"];
12723--14474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.106.47" dst_port="80" src_ip="214.218.124.3" src_port="52998"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
8896[label="192.138.196.3;161pkt 161fpkt", shape=pentagon, color=darkviolet];
12724[label="192.138.196.3;161pkt 161fpkt", shape=invtriangle, color=brown];
14476[label="192.138.196.3;161pkt 161fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.138.196.3:5065, *:5060}[50.3106%]&lt;BR/&gt;{192.138.196.3:5069, *:5060}[49.6894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (50%)&lt;BR/&gt; 5065: (25.1553%)&lt;BR/&gt; 5069: (24.8447%)&gt;];
}
8896--12724[label="1;161pkt 161fpkt"];
8896--14476[label="1;161pkt 161fpkt"];
12724--14476[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="192.138.196.3" src_port="5065"/>
      <filter dst_port="5060" src_ip="192.138.196.3" src_port="5069"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
8900[label="166.26.9.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12728[label="166.26.9.4;1pkt 1fpkt", shape=invtriangle, color=brown];
14479[label="166.26.9.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.9.4:49170, 108.138.141.18:8443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49170: (50%)&lt;BR/&gt; 8443: (50%)&gt;];
}
8900--12728[label="1;1pkt 1fpkt"];
8900--14479[label="1;1pkt 1fpkt"];
12728--14479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="108.138.141.18" dst_port="8443" src_ip="166.26.9.4" src_port="49170"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
3014[label="133.4.12.80;s;118pkt 118fpkt", shape=diamond, color=yellow];
10215[label="133.4.12.80;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.12.80:25, *:*}[58.042%]&lt;BR/&gt;{133.4.12.80:*, *:80}[34.2657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.9575%)&lt;BR/&gt; 80: (17.1815%)&lt;BR/&gt; 53: (3.861%)&lt;BR/&gt; 64302: (0.3861%)&lt;BR/&gt; 63347: (0.3861%)&gt;];
}
3014--3024[label="0.0169492;2pkt 2fpkt"];
3014--3913[label="0.0169492;2pkt 2fpkt"];
3014--4334[label="0.010101;1pkt 1fpkt"];
3014--4496[label="0.059322;7pkt 7fpkt"];
3014--4594[label="0.00847458;1pkt 1fpkt"];
3014--4618[label="0.00847458;1pkt 1fpkt"];
3014--4728[label="0.00847458;1pkt 1fpkt"];
3014--7048[label="0.00980392;1pkt 1fpkt"];
3014--7340[label="0.0103093;1pkt 1fpkt"];
3014--8026[label="0.0131579;1pkt 1fpkt"];
3014--8027[label="0.00847458;1pkt 1fpkt"];
3014--8036[label="0.00847458;1pkt 1fpkt"];
3014--8088[label="0.0117647;1pkt 1fpkt"];
3014--8131[label="0.0254237;3pkt 3fpkt"];
3014--8664[label="0.00847458;1pkt 1fpkt"];
3014--8688[label="0.00847458;1pkt 1fpkt"];
3014--8743[label="0.00847458;1pkt 1fpkt"];
3014--8765[label="0.00847458;1pkt 1fpkt"];
3014--8790[label="0.00847458;1pkt 1fpkt"];
3014--8811[label="0.00847458;1pkt 1fpkt"];
3014--10215[label="0.983051;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.12.80" src_port="25"/>
      <filter dst_port="80" src_ip="133.4.12.80"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.146.68.5"/>
    </slice>
    <from sec="1289451661" usec="0"/>
    <to sec="1289451672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
8927[label="80.153.123.5;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12741[label="80.153.123.5;20pkt 20fpkt", shape=invtriangle, color=brown];
14486[label="80.153.123.5;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.153.123.5:*, 166.26.11.209:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49203: (2.58621%)&lt;BR/&gt; 49185: (2.58621%)&lt;BR/&gt; 49181: (2.58621%)&lt;BR/&gt; 49179: (2.58621%)&gt;];
}
8927--12741[label="1;19pkt 19fpkt"];
8927--14486[label="1;19pkt 19fpkt"];
12741--14486[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.11.209" dst_port="80" src_ip="80.153.123.5"/>
    </slice>
    <from sec="1289452467" usec="0"/>
    <to sec="1289452469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.192.126.5"/>
    </slice>
    <from sec="3014764" usec="0"/>
    <to sec="3014767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.162.149.5"/>
    </slice>
    <from sec="1289452416" usec="0"/>
    <to sec="1289452430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.59.6"/>
    </slice>
    <from sec="1289451678" usec="0"/>
    <to sec="1289451681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
8947[label="214.90.92.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12751[label="214.90.92.6;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.90.92.6:80, 128.19.160.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65445: (8.33333%)&lt;BR/&gt; 65180: (8.33333%)&lt;BR/&gt; 58553: (8.33333%)&lt;BR/&gt; 57347: (8.33333%)&gt;];
}
8947--12751[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.160.177" src_ip="214.90.92.6" src_port="80"/>
    </slice>
    <from sec="1289452431" usec="0"/>
    <to sec="1289452438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
8950[label="133.4.134.6;27pkt 27fpkt", shape=pentagon, color=darkviolet];
12753[label="133.4.134.6;27pkt 27fpkt", shape=invtriangle, color=brown];
14493[label="133.4.134.6;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.134.6:25, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60706: (1.82927%)&lt;BR/&gt; 60458: (1.82927%)&lt;BR/&gt; 54357: (1.82927%)&lt;BR/&gt; 52462: (1.82927%)&gt;];
}
8950--12753[label="1;27pkt 27fpkt"];
8950--14493[label="1;27pkt 27fpkt"];
12753--14493[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.134.6" src_port="25"/>
    </slice>
    <from sec="1289451640" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
8960[label="128.7.242.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12760[label="128.7.242.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.242.6:80, 42.146.68.52:40457}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40457: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8960--12760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.52" dst_port="40457" src_ip="128.7.242.6" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.72.43.7"/>
    </slice>
    <from sec="1289452145" usec="0"/>
    <to sec="1289452169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
8967[label="201.188.68.7;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12765[label="201.188.68.7;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.188.68.7:*, 211.185.145.69:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2798: (9.09091%)&lt;BR/&gt; 2797: (9.09091%)&lt;BR/&gt; 2793: (9.09091%)&lt;BR/&gt; 2792: (9.09091%)&gt;];
}
8967--12765[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.69" dst_port="80" src_ip="201.188.68.7"/>
    </slice>
    <from sec="1289452438" usec="0"/>
    <to sec="1289452451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
7072[label="218.64.196.8;s;1032pkt 1032fpkt", shape=diamond, color=yellow];
8991[label="218.64.196.8;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12771[label="218.64.196.8;13pkt 13fpkt", shape=invtriangle, color=brown];
14502[label="218.64.196.8;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.64.196.8:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2289: (0.233863%)&lt;BR/&gt; 2588: (0.187091%)&lt;BR/&gt; 2152: (0.187091%)&lt;BR/&gt; 61719: (0.140318%)&gt;];
}
7072--8676[label="0.0629845;65pkt 65fpkt"];
7072--12771[label="0.0769231;1pkt 1fpkt"];
8991--12771[label="1;12pkt 12fpkt"];
8991--14502[label="1;12pkt 12fpkt"];
12771--14502[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="218.64.196.8" src_port="53"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.105.235.8"/>
    </slice>
    <from sec="1289452196" usec="0"/>
    <to sec="1289452209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
9010[label="47.203.212.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12784[label="47.203.212.9;1pkt 1fpkt", shape=invtriangle, color=brown];
14509[label="47.203.212.9;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.203.212.9:42575, 211.185.145.108:80}[50%]&lt;BR/&gt;{47.203.212.9:48710, 211.185.145.111:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42575: (37.5%)&lt;BR/&gt; 48710: (12.5%)&gt;];
}
9010--12784[label="1;1pkt 1fpkt"];
9010--14509[label="1;1pkt 1fpkt"];
12784--14509[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.111" dst_port="80" src_ip="47.203.212.9" src_port="48710"/>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="47.203.212.9" src_port="42575"/>
    </slice>
    <from sec="1289451761" usec="0"/>
    <to sec="1289452399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
9011[label="9.55.217.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12785[label="9.55.217.9;2pkt 2fpkt", shape=invtriangle, color=brown];
14510[label="9.55.217.9;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.9:22, 200.244.253.242:59387}[50%]&lt;BR/&gt;{9.55.217.9:22, 200.244.253.242:59487}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 59487: (25%)&lt;BR/&gt; 59387: (25%)&gt;];
}
9011--12785[label="1;2pkt 2fpkt"];
9011--14510[label="1;2pkt 2fpkt"];
12785--14510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="59487" src_ip="9.55.217.9" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="59387" src_ip="9.55.217.9" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.69.96.10"/>
    </slice>
    <from sec="1289451865" usec="0"/>
    <to sec="1289451891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.77.201.10"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.153.24.11"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289451959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,053,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.9.134.11"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
655[label="195.229.47.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
1586[label="133.4.89.245;d;1035pkt 1035fpkt", shape=diamond, color=yellow];
1814[label="8.34.124.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
1847[label="24.181.17.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
2816[label="0.136.81.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
2827[label="80.232.0.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
2831[label="8.174.113.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
2832[label="8.168.220.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
3554[label="80.94.6.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
3623[label="9.59.47.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
3632[label="196.46.221.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
3784[label="192.147.93.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
4327[label="200.224.88.61;s;2pkt 2fpkt", shape=diamond, color=yellow];
4328[label="196.40.210.122;s;2pkt 2fpkt", shape=diamond, color=yellow];
4350[label="81.64.230.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
4351[label="186.128.78.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
4939[label="80.225.41.33;s;132pkt 132fpkt", shape=diamond, color=yellow];
5157[label="192.170.175.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
5256[label="133.4.65.78;d;173pkt 173fpkt", shape=diamond, color=yellow];
5798[label="8.217.133.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
5799[label="81.134.17.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
5886[label="80.96.236.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
6759[label="81.139.9.151;s;4pkt 4fpkt", shape=diamond, color=yellow];
6779[label="210.33.111.145;d;43pkt 43fpkt", shape=diamond, color=yellow];
6905[label="210.43.219.93;s;14pkt 14fpkt", shape=diamond, color=yellow];
7382[label="1.40.28.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
9035[label="210.43.187.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9202[label="18.134.138.19;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9214[label="8.243.14.20;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9596[label="196.46.221.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9742[label="81.136.50.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10337[label="6.185.178.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10802[label="192.170.26.121;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11099[label="84.65.68.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11964[label="195.229.47.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12161[label="193.145.45.211;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12625[label="8.34.124.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12793[label="210.43.187.11;2pkt 2fpkt", shape=invtriangle, color=brown];
12866[label="18.134.138.19;18pkt 18fpkt", shape=invtriangle, color=brown];
12870[label="8.243.14.20;19pkt 19fpkt", shape=invtriangle, color=brown];
13617[label="192.170.26.121;5pkt 5fpkt", shape=invtriangle, color=brown];
14226[label="193.145.45.211;18pkt 18fpkt", shape=invtriangle, color=brown];
14428[label="8.34.124.247;1pkt 1fpkt", shape=invtriangle, color=brown];
14515[label="210.43.187.11;2pkt 2fpkt", shape=invhouse, color=bisque];
14553[label="8.243.14.20;20pkt 20fpkt", shape=invhouse, color=bisque];
14873[label="192.170.26.121;5pkt 5fpkt", shape=invhouse, color=bisque];
15160[label="193.145.45.211;18pkt 18fpkt", shape=invhouse, color=bisque];
15261[label="8.34.124.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.89.245:8500}[53.0374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8500: (23.1753%)&lt;BR/&gt; 80: (12.1335%)&lt;BR/&gt; 0: (9.9189%)&lt;BR/&gt; 8334: (6.39426%)&lt;BR/&gt; 5041: (3.08796%)&gt;];
}
655--1586[label="1;1pkt 1fpkt"];
655--11964[label="1;1pkt 1fpkt"];
1586--1814[label="1;1pkt 1fpkt"];
1586--1847[label="1;1pkt 1fpkt"];
1586--2816[label="1;1pkt 1fpkt"];
1586--2827[label="1;1pkt 1fpkt"];
1586--2831[label="1;1pkt 1fpkt"];
1586--2832[label="1;1pkt 1fpkt"];
1586--3554[label="1;2pkt 2fpkt"];
1586--3623[label="1;1pkt 1fpkt"];
1586--3632[label="1;1pkt 1fpkt"];
1586--3784[label="1;1pkt 1fpkt"];
1586--4327[label="0.5;1pkt 1fpkt"];
1586--4328[label="1;2pkt 2fpkt"];
1586--4350[label="1;1pkt 1fpkt"];
1586--4351[label="1;1pkt 1fpkt"];
1586--5157[label="1;1pkt 1fpkt"];
1586--5798[label="1;1pkt 1fpkt"];
1586--5799[label="1;1pkt 1fpkt"];
1586--5886[label="0.5;1pkt 1fpkt"];
1586--6759[label="1;4pkt 4fpkt"];
1586--7382[label="1;1pkt 1fpkt"];
1586--8664[label="0.000966184;1pkt 1fpkt"];
1586--8688[label="0.000966184;1pkt 1fpkt"];
1586--8743[label="0.000966184;1pkt 1fpkt"];
1586--8765[label="0.000966184;1pkt 1fpkt"];
1586--8790[label="0.000966184;1pkt 1fpkt"];
1586--8811[label="0.000966184;1pkt 1fpkt"];
1586--9202[label="0.0555556;1pkt 1fpkt"];
1586--9214[label="0.842105;16pkt 16fpkt"];
1586--9596[label="1;1pkt 1fpkt"];
1586--9742[label="1;1pkt 1fpkt"];
1586--10337[label="1;1pkt 1fpkt"];
1586--10802[label="1;5pkt 5fpkt"];
1586--11099[label="1;1pkt 1fpkt"];
1586--11964[label="1;1pkt 1fpkt"];
1586--12161[label="0.888889;16pkt 16fpkt"];
1586--12625[label="1;1pkt 1fpkt"];
1586--12866[label="0.0555556;1pkt 1fpkt"];
1586--12870[label="0.842105;16pkt 16fpkt"];
1586--13617[label="1;5pkt 5fpkt"];
1586--14226[label="0.888889;16pkt 16fpkt"];
1586--14428[label="1;1pkt 1fpkt"];
1586--14553[label="0.85;17pkt 17fpkt"];
1586--14873[label="1;5pkt 5fpkt"];
1586--15160[label="0.888889;16pkt 16fpkt"];
1586--15261[label="1;1pkt 1fpkt"];
1814--12625[label="1;1pkt 1fpkt"];
1814--14428[label="1;1pkt 1fpkt"];
1814--15261[label="1;1pkt 1fpkt"];
3632--9596[label="1;1pkt 1fpkt"];
4939--5256[label="1;132pkt 132fpkt"];
5256--9202[label="0.0555556;1pkt 1fpkt"];
5256--9338[label="0.142857;1pkt 1fpkt"];
5256--9854[label="0.00578035;1pkt 1fpkt"];
5256--12866[label="0.0555556;1pkt 1fpkt"];
5256--13188[label="0.00578035;1pkt 1fpkt"];
6779--6905[label="0.357143;5pkt 5fpkt"];
6779--9035[label="0.333333;1pkt 1fpkt"];
6779--9202[label="0.0555556;1pkt 1fpkt"];
6779--9578[label="0.047619;1pkt 1fpkt"];
6779--11489[label="0.0625;2pkt 2fpkt"];
6779--12866[label="0.0555556;1pkt 1fpkt"];
9035--12793[label="1;2pkt 2fpkt"];
9035--14515[label="1;2pkt 2fpkt"];
9202--12866[label="1;18pkt 18fpkt"];
9214--12870[label="1;19pkt 19fpkt"];
9214--14553[label="1;19pkt 19fpkt"];
10802--13617[label="1;5pkt 5fpkt"];
10802--14873[label="1;5pkt 5fpkt"];
12161--14226[label="1;18pkt 18fpkt"];
12161--15160[label="1;18pkt 18fpkt"];
12625--14428[label="1;1pkt 1fpkt"];
12625--15261[label="1;1pkt 1fpkt"];
12793--14515[label="1;2pkt 2fpkt"];
12870--14553[label="1;19pkt 19fpkt"];
13617--14873[label="1;5pkt 5fpkt"];
14226--15160[label="1;18pkt 18fpkt"];
14428--15261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.89.245" dst_port="8500"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
4038[label="202.0.130.71;d;10pkt 10fpkt", shape=diamond, color=yellow];
5571[label="166.26.1.121;s;116pkt 116fpkt", shape=diamond, color=yellow];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.1.121:*, 220.81.107.16:80}[55.1724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49377: (0.793651%)&lt;BR/&gt; 49376: (0.793651%)&lt;BR/&gt; 49365: (0.793651%)&lt;BR/&gt; 49361: (0.793651%)&gt;];
}
4038--5571[label="1;10pkt 10fpkt"];
5571--8688[label="0.0689655;8pkt 8fpkt"];
5571--8765[label="0.0689655;8pkt 8fpkt"];
5571--8811[label="0.0689655;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="220.81.107.16" dst_port="80" src_ip="166.26.1.121"/>
    </slice>
    <from sec="1289451975" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
9068[label="46.245.30.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12809[label="46.245.30.13;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.245.30.13:80, 210.33.142.206:61900}[50%]&lt;BR/&gt;{46.245.30.13:80, 210.33.142.206:61901}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61901: (25%)&lt;BR/&gt; 61900: (25%)&gt;];
}
9068--12809[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.142.206" dst_port="61901" src_ip="46.245.30.13" src_port="80"/>
      <filter dst_ip="210.33.142.206" dst_port="61900" src_ip="46.245.30.13" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.104.174.13"/>
    </slice>
    <from sec="1289452060" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
9086[label="9.55.216.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12818[label="9.55.216.13;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.216.13:22, 200.244.253.242:47391}[50%]&lt;BR/&gt;{9.55.216.13:22, 200.244.253.242:47475}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 47475: (25%)&lt;BR/&gt; 47391: (25%)&gt;];
}
9086--12818[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="47475" src_ip="9.55.216.13" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="47391" src_ip="9.55.216.13" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.58.65.14"/>
    </slice>
    <from sec="1289452205" usec="0"/>
    <to sec="1289452227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.154.102.14"/>
    </slice>
    <from sec="1289451712" usec="0"/>
    <to sec="1289452412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.50.112.14"/>
    </slice>
    <from sec="1289452406" usec="0"/>
    <to sec="1289452410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.69.114.14"/>
    </slice>
    <from sec="1289451809" usec="0"/>
    <to sec="1289451918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.19.146.14"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.36.194.14"/>
    </slice>
    <from sec="1289451732" usec="0"/>
    <to sec="1289451994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.17.203.14"/>
    </slice>
    <from sec="1289452227" usec="0"/>
    <to sec="1289452448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
5676[label="211.185.143.54;s;11pkt 11fpkt", shape=diamond, color=yellow];
5764[label="53.72.5.157;d;310pkt 310fpkt", shape=diamond, color=yellow];
6515[label="192.144.1.159;d;290pkt 290fpkt", shape=diamond, color=yellow];
6548[label="4.137.118.253;d;291pkt 291fpkt", shape=diamond, color=yellow];
9105[label="210.42.203.14;71pkt 71fpkt", shape=pentagon, color=darkviolet];
9674[label="201.196.142.46;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11304[label="166.26.185.152;48pkt 48fpkt", shape=pentagon, color=darkviolet];
11684[label="210.42.208.176;38pkt 38fpkt", shape=pentagon, color=darkviolet];
12832[label="210.42.203.14;71pkt 71fpkt", shape=invtriangle, color=brown];
14016[label="210.42.208.176;39pkt 39fpkt", shape=invtriangle, color=brown];
14537[label="210.42.203.14;72pkt 72fpkt", shape=invhouse, color=bisque];
15065[label="210.42.208.176;38pkt 38fpkt", shape=invhouse, color=bisque];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 53.72.5.157:0}[28.8246%]&lt;BR/&gt;{*:0, 4.137.118.253:0}[27.1455%]&lt;BR/&gt;{*:0, 192.144.1.159:0}[27.0522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2294%)&lt;BR/&gt; 80: (0.461894%)&lt;BR/&gt; 64553: (0.115473%)&lt;BR/&gt; 64552: (0.115473%)&lt;BR/&gt; 64551: (0.115473%)&gt;];
}
5676--6548[label="0.0909091;1pkt 1fpkt"];
5764--7110[label="0.00374532;1pkt 1fpkt"];
5764--7173[label="0.00322581;1pkt 1fpkt"];
5764--7198[label="0.00909091;1pkt 1fpkt"];
5764--7300[label="0.0285714;1pkt 1fpkt"];
5764--8867[label="0.0103093;1pkt 1fpkt"];
5764--9105[label="0.0140845;1pkt 1fpkt"];
5764--9494[label="0.00322581;1pkt 1fpkt"];
5764--9674[label="0.05;1pkt 1fpkt"];
5764--9731[label="0.00833333;1pkt 1fpkt"];
5764--9833[label="0.00350877;1pkt 1fpkt"];
5764--9906[label="0.0060241;1pkt 1fpkt"];
5764--11304[label="0.0208333;1pkt 1fpkt"];
5764--11526[label="0.0075188;1pkt 1fpkt"];
5764--11839[label="0.0106383;1pkt 1fpkt"];
5764--12712[label="0.0104167;1pkt 1fpkt"];
5764--12832[label="0.0140845;1pkt 1fpkt"];
5764--13018[label="0.00322581;1pkt 1fpkt"];
5764--13179[label="0.00352113;1pkt 1fpkt"];
5764--14465[label="0.0104167;1pkt 1fpkt"];
5764--14537[label="0.0138889;1pkt 1fpkt"];
5764--14686[label="0.00350877;1pkt 1fpkt"];
6515--7110[label="0.00374532;1pkt 1fpkt"];
6515--7173[label="0.00344828;1pkt 1fpkt"];
6515--7369[label="0.00558659;1pkt 1fpkt"];
6515--8867[label="0.0103093;1pkt 1fpkt"];
6515--9040[label="0.00806452;1pkt 1fpkt"];
6515--9105[label="0.0140845;1pkt 1fpkt"];
6515--9494[label="0.00344828;1pkt 1fpkt"];
6515--9674[label="0.05;1pkt 1fpkt"];
6515--9833[label="0.00350877;1pkt 1fpkt"];
6515--11354[label="0.003861;1pkt 1fpkt"];
6515--11839[label="0.0106383;1pkt 1fpkt"];
6515--12712[label="0.0104167;1pkt 1fpkt"];
6515--12832[label="0.0140845;1pkt 1fpkt"];
6515--13018[label="0.00344828;1pkt 1fpkt"];
6515--13179[label="0.00352113;1pkt 1fpkt"];
6515--14465[label="0.0104167;1pkt 1fpkt"];
6515--14537[label="0.0138889;1pkt 1fpkt"];
6515--14686[label="0.00350877;1pkt 1fpkt"];
6548--7110[label="0.00374532;1pkt 1fpkt"];
6548--7173[label="0.00343643;1pkt 1fpkt"];
6548--8867[label="0.0103093;1pkt 1fpkt"];
6548--9105[label="0.0140845;1pkt 1fpkt"];
6548--9494[label="0.00343643;1pkt 1fpkt"];
6548--9674[label="0.05;1pkt 1fpkt"];
6548--9833[label="0.00350877;1pkt 1fpkt"];
6548--11354[label="0.003861;1pkt 1fpkt"];
6548--11684[label="0.0263158;1pkt 1fpkt"];
6548--12712[label="0.0104167;1pkt 1fpkt"];
6548--12832[label="0.0140845;1pkt 1fpkt"];
6548--13018[label="0.00343643;1pkt 1fpkt"];
6548--13179[label="0.00352113;1pkt 1fpkt"];
6548--14016[label="0.025641;1pkt 1fpkt"];
6548--14465[label="0.0104167;1pkt 1fpkt"];
6548--14537[label="0.0138889;1pkt 1fpkt"];
6548--14686[label="0.00350877;1pkt 1fpkt"];
6548--15065[label="0.0263158;1pkt 1fpkt"];
9105--12832[label="1;71pkt 71fpkt"];
9105--14537[label="1;71pkt 71fpkt"];
11684--14016[label="1;38pkt 38fpkt"];
11684--15065[label="1;38pkt 38fpkt"];
12832--14537[label="1;71pkt 71fpkt"];
14016--15065[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="53.72.5.157"/>
      <filter dst_ip="4.137.118.253"/>
      <filter dst_ip="192.144.1.159"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
3771[label="218.31.80.168;d;342pkt 342fpkt", shape=diamond, color=yellow];
6175[label="218.117.252.14;s;257pkt 257fpkt", shape=diamond, color=yellow];
9109[label="218.117.252.14;290pkt 290fpkt", shape=pentagon, color=darkviolet];
12834[label="218.117.252.14;291pkt 291fpkt", shape=invtriangle, color=brown];
14538[label="218.117.252.14;291pkt 291fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.117.252.14:*, 218.31.80.168:53}[72.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.83%)&lt;BR/&gt; 0: (0.271924%)&lt;BR/&gt; 47904: (0.203943%)&lt;BR/&gt; 60876: (0.169952%)&lt;BR/&gt; 60806: (0.169952%)&gt;];
}
3771--5078[label="0.00392157;1pkt 1fpkt"];
3771--6175[label="0.906615;233pkt 233fpkt"];
3771--9109[label="0.8;232pkt 232fpkt"];
3771--12834[label="0.800687;233pkt 233fpkt"];
3771--14538[label="0.800687;233pkt 233fpkt"];
6175--9109[label="0.996109;256pkt 256fpkt"];
6175--12834[label="1;257pkt 257fpkt"];
6175--14538[label="1;257pkt 257fpkt"];
9109--12834[label="1;290pkt 290fpkt"];
9109--14538[label="1;290pkt 290fpkt"];
12834--14538[label="1;291pkt 291fpkt"];
</description>
    <slice>
      <filter dst_ip="218.31.80.168" dst_port="53" src_ip="218.117.252.14"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.80.70.16"/>
    </slice>
    <from sec="1289451654" usec="0"/>
    <to sec="1289451667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
9136[label="210.33.111.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12842[label="210.33.111.16;5pkt 5fpkt", shape=invtriangle, color=brown];
14542[label="210.33.111.16;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.111.16:*, 210.43.232.104:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49469: (9.375%)&lt;BR/&gt; 49468: (9.375%)&lt;BR/&gt; 49467: (9.375%)&lt;BR/&gt; 49466: (9.375%)&gt;];
}
9136--12842[label="1;5pkt 5fpkt"];
9136--14542[label="1;5pkt 5fpkt"];
12842--14542[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="210.43.232.104" dst_port="80" src_ip="210.33.111.16"/>
    </slice>
    <from sec="1289452021" usec="0"/>
    <to sec="1289452051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
9143[label="208.168.175.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12844[label="208.168.175.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.168.175.16:1774, 128.158.159.105:445}[50%]&lt;BR/&gt;{208.168.175.16:1232, 128.158.179.154:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1774: (25%)&lt;BR/&gt; 1232: (25%)&gt;];
}
9143--12844[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.158.179.154" dst_port="445" src_ip="208.168.175.16" src_port="1232"/>
      <filter dst_ip="128.158.159.105" dst_port="445" src_ip="208.168.175.16" src_port="1774"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.73.185.16"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
363[label="166.26.179.18;d;1673pkt 1673fpkt", shape=diamond, color=yellow];
866[label="214.65.48.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
1732[label="83.50.118.88;s;2980pkt 2980fpkt", shape=diamond, color=yellow];
2614[label="45.36.131.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
2794[label="166.26.234.158;d;2074pkt 2074fpkt", shape=diamond, color=yellow];
3426[label="211.185.145.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
3954[label="43.65.149.79;s;68pkt 68fpkt", shape=diamond, color=yellow];
4215[label="211.18.21.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
4225[label="217.203.18.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
7616[label="192.120.82.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
9005[label="51.150.130.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9015[label="25.69.59.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9046[label="6.137.25.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9167[label="6.121.102.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9216[label="14.138.57.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9262[label="77.96.103.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9381[label="44.182.102.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9472[label="14.136.174.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9504[label="55.104.19.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9512[label="194.150.166.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9537[label="178.151.235.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9621[label="217.203.10.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9655[label="7.131.56.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9732[label="25.68.218.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9864[label="25.70.72.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9889[label="25.69.33.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9915[label="210.121.138.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10041[label="14.21.139.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10203[label="43.65.149.79;74pkt 74fpkt", shape=pentagon, color=darkviolet];
10217[label="184.96.19.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10291[label="42.71.72.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10318[label="202.29.80.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10343[label="77.45.84.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10351[label="16.225.213.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10418[label="51.41.67.93;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10448[label="26.136.9.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10452[label="44.165.72.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10548[label="214.65.48.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10572[label="44.202.13.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10602[label="57.147.154.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10709[label="196.202.149.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10732[label="205.53.183.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10767[label="14.22.247.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10774[label="63.34.131.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10780[label="32.25.209.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10884[label="43.85.45.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10933[label="5.74.145.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11036[label="40.33.22.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11088[label="211.29.185.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11101[label="4.165.76.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11117[label="177.181.74.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11202[label="17.212.13.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11344[label="197.69.86.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11410[label="168.233.212.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11553[label="203.222.129.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11567[label="46.139.52.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11603[label="171.85.138.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11797[label="46.34.170.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11813[label="59.57.249.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11884[label="18.178.9.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11953[label="205.7.153.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12058[label="184.100.121.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12176[label="25.71.32.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12279[label="210.174.162.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12431[label="51.235.48.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12524[label="25.69.102.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12559[label="59.214.45.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12630[label="39.184.112.248;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12633[label="18.56.140.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12642[label="17.29.212.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12685[label="177.242.215.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12780[label="51.150.130.9;1pkt 1fpkt", shape=invtriangle, color=brown];
12798[label="6.137.25.12;1pkt 1fpkt", shape=invtriangle, color=brown];
12854[label="6.121.102.18;2pkt 2fpkt", shape=invtriangle, color=brown];
12887[label="55.116.37.21;1pkt 1fpkt", shape=invtriangle, color=brown];
13028[label="194.150.166.37;2pkt 2fpkt", shape=invtriangle, color=brown];
13040[label="178.151.235.38;1pkt 1fpkt", shape=invtriangle, color=brown];
13098[label="7.131.56.45;1pkt 1fpkt", shape=invtriangle, color=brown];
13193[label="25.70.72.57;1pkt 1fpkt", shape=invtriangle, color=brown];
13388[label="53.87.47.84;1pkt 1fpkt", shape=invtriangle, color=brown];
13418[label="16.225.213.88;1pkt 1fpkt", shape=invtriangle, color=brown];
13502[label="214.65.48.102;2pkt 2fpkt", shape=invtriangle, color=brown];
13514[label="44.202.13.104;2pkt 2fpkt", shape=invtriangle, color=brown];
13532[label="43.15.181.106;1pkt 1fpkt", shape=invtriangle, color=brown];
13576[label="196.202.149.113;1pkt 1fpkt", shape=invtriangle, color=brown];
13604[label="14.22.247.117;1pkt 1fpkt", shape=invtriangle, color=brown];
13654[label="43.85.45.128;1pkt 1fpkt", shape=invtriangle, color=brown];
13760[label="14.21.24.139;1pkt 1fpkt", shape=invtriangle, color=brown];
13795[label="17.212.13.145;2pkt 2fpkt", shape=invtriangle, color=brown];
13835[label="176.11.101.152;1pkt 1fpkt", shape=invtriangle, color=brown];
13956[label="203.222.129.168;1pkt 1fpkt", shape=invtriangle, color=brown];
13963[label="46.139.52.169;2pkt 2fpkt", shape=invtriangle, color=brown];
14106[label="18.178.9.192;2pkt 2fpkt", shape=invtriangle, color=brown];
14161[label="45.82.145.202;1pkt 1fpkt", shape=invtriangle, color=brown];
14233[label="25.71.32.212;1pkt 1fpkt", shape=invtriangle, color=brown];
14394[label="25.69.102.238;1pkt 1fpkt", shape=invtriangle, color=brown];
14432[label="18.56.140.248;2pkt 2fpkt", shape=invtriangle, color=brown];
14436[label="17.29.212.249;2pkt 2fpkt", shape=invtriangle, color=brown];
14548[label="6.121.102.18;2pkt 2fpkt", shape=invhouse, color=bisque];
14601[label="217.203.10.32;1pkt 1fpkt", shape=invhouse, color=bisque];
14658[label="53.157.204.45;1pkt 1fpkt", shape=invhouse, color=bisque];
14779[label="53.87.47.84;1pkt 1fpkt", shape=invhouse, color=bisque];
14793[label="16.225.213.88;1pkt 1fpkt", shape=invhouse, color=bisque];
14823[label="214.65.48.102;2pkt 2fpkt", shape=invhouse, color=bisque];
15030[label="203.222.129.168;1pkt 1fpkt", shape=invhouse, color=bisque];
15035[label="46.139.52.169;2pkt 2fpkt", shape=invhouse, color=bisque];
15229[label="45.204.164.232;1pkt 1fpkt", shape=invhouse, color=bisque];
15243[label="25.69.102.238;1pkt 1fpkt", shape=invhouse, color=bisque];
15263[label="18.56.140.248;2pkt 2fpkt", shape=invhouse, color=bisque];
15266[label="17.29.212.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.234.158:53}[35.7156%]&lt;BR/&gt;{83.50.118.88:*, 166.26.179.18:80}[21.4041%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.9586%)&lt;BR/&gt; 53: (14.8629%)&lt;BR/&gt; 0: (0.199886%)&lt;BR/&gt; 19918: (0.0999429%)&lt;BR/&gt; 873: (0.0713878%)&gt;];
}
363--866[label="0.5;1pkt 1fpkt"];
363--1692[label="1;1pkt 1fpkt"];
363--1732[label="0.710699;1189pkt 1189fpkt"];
363--2614[label="1;1pkt 1fpkt"];
363--3954[label="0.955882;65pkt 65fpkt"];
363--4215[label="1;1pkt 1fpkt"];
363--4225[label="1;1pkt 1fpkt"];
363--7455[label="1;1pkt 1fpkt"];
363--7616[label="1;1pkt 1fpkt"];
363--8664[label="0.0185296;31pkt 31fpkt"];
363--8688[label="0.0280932;47pkt 47fpkt"];
363--8743[label="0.0185296;31pkt 31fpkt"];
363--8765[label="0.0280932;47pkt 47fpkt"];
363--8790[label="0.0185296;31pkt 31fpkt"];
363--8811[label="0.0280932;47pkt 47fpkt"];
363--9002[label="1;2pkt 2fpkt"];
363--9005[label="1;2pkt 2fpkt"];
363--9015[label="1;2pkt 2fpkt"];
363--9046[label="1;1pkt 1fpkt"];
363--9133[label="1;1pkt 1fpkt"];
363--9167[label="1;2pkt 2fpkt"];
363--9216[label="1;1pkt 1fpkt"];
363--9262[label="1;1pkt 1fpkt"];
363--9381[label="1;2pkt 2fpkt"];
363--9472[label="1;1pkt 1fpkt"];
363--9504[label="0.333333;1pkt 1fpkt"];
363--9512[label="1;2pkt 2fpkt"];
363--9537[label="1;1pkt 1fpkt"];
363--9621[label="1;1pkt 1fpkt"];
363--9655[label="1;1pkt 1fpkt"];
363--9718[label="1;1pkt 1fpkt"];
363--9732[label="1;1pkt 1fpkt"];
363--9864[label="1;1pkt 1fpkt"];
363--9889[label="1;1pkt 1fpkt"];
363--9915[label="1;1pkt 1fpkt"];
363--9950[label="1;1pkt 1fpkt"];
363--10041[label="1;1pkt 1fpkt"];
363--10203[label="0.878378;65pkt 65fpkt"];
363--10217[label="1;1pkt 1fpkt"];
363--10291[label="1;1pkt 1fpkt"];
363--10318[label="1;1pkt 1fpkt"];
363--10343[label="1;1pkt 1fpkt"];
363--10351[label="1;1pkt 1fpkt"];
363--10373[label="1;2pkt 2fpkt"];
363--10418[label="0.5;1pkt 1fpkt"];
363--10448[label="1;1pkt 1fpkt"];
363--10452[label="0.5;1pkt 1fpkt"];
363--10548[label="0.5;1pkt 1fpkt"];
363--10572[label="1;1pkt 1fpkt"];
363--10602[label="1;2pkt 2fpkt"];
363--10709[label="1;1pkt 1fpkt"];
363--10732[label="1;1pkt 1fpkt"];
363--10767[label="1;1pkt 1fpkt"];
363--10774[label="1;1pkt 1fpkt"];
363--10780[label="1;1pkt 1fpkt"];
363--10833[label="1;1pkt 1fpkt"];
363--10842[label="1;1pkt 1fpkt"];
363--10884[label="1;1pkt 1fpkt"];
363--10933[label="1;1pkt 1fpkt"];
363--11036[label="1;1pkt 1fpkt"];
363--11088[label="1;1pkt 1fpkt"];
363--11101[label="1;1pkt 1fpkt"];
363--11117[label="1;1pkt 1fpkt"];
363--11202[label="1;2pkt 2fpkt"];
363--11344[label="1;1pkt 1fpkt"];
363--11388[label="1;1pkt 1fpkt"];
363--11410[label="1;1pkt 1fpkt"];
363--11553[label="1;1pkt 1fpkt"];
363--11567[label="1;2pkt 2fpkt"];
363--11603[label="1;2pkt 2fpkt"];
363--11696[label="1;1pkt 1fpkt"];
363--11797[label="1;1pkt 1fpkt"];
363--11813[label="1;1pkt 1fpkt"];
363--11953[label="1;1pkt 1fpkt"];
363--12058[label="1;1pkt 1fpkt"];
363--12176[label="1;1pkt 1fpkt"];
363--12180[label="1;2pkt 2fpkt"];
363--12279[label="1;1pkt 1fpkt"];
363--12431[label="1;1pkt 1fpkt"];
363--12436[label="1;1pkt 1fpkt"];
363--12524[label="1;1pkt 1fpkt"];
363--12559[label="0.5;1pkt 1fpkt"];
363--12630[label="1;2pkt 2fpkt"];
363--12685[label="1;1pkt 1fpkt"];
363--12777[label="1;1pkt 1fpkt"];
363--12780[label="1;1pkt 1fpkt"];
363--12798[label="1;1pkt 1fpkt"];
363--12854[label="1;2pkt 2fpkt"];
363--12887[label="1;1pkt 1fpkt"];
363--13028[label="1;2pkt 2fpkt"];
363--13040[label="1;1pkt 1fpkt"];
363--13098[label="1;1pkt 1fpkt"];
363--13193[label="1;1pkt 1fpkt"];
363--13234[label="1;1pkt 1fpkt"];
363--13388[label="1;1pkt 1fpkt"];
363--13418[label="1;1pkt 1fpkt"];
363--13428[label="1;1pkt 1fpkt"];
363--13502[label="0.5;1pkt 1fpkt"];
363--13514[label="1;2pkt 2fpkt"];
363--13526[label="1;1pkt 1fpkt"];
363--13532[label="1;1pkt 1fpkt"];
363--13576[label="1;1pkt 1fpkt"];
363--13604[label="1;1pkt 1fpkt"];
363--13634[label="1;2pkt 2fpkt"];
363--13654[label="1;1pkt 1fpkt"];
363--13760[label="1;1pkt 1fpkt"];
363--13795[label="1;2pkt 2fpkt"];
363--13835[label="1;1pkt 1fpkt"];
363--13956[label="1;1pkt 1fpkt"];
363--13963[label="1;2pkt 2fpkt"];
363--14106[label="0.5;1pkt 1fpkt"];
363--14161[label="1;1pkt 1fpkt"];
363--14233[label="1;1pkt 1fpkt"];
363--14394[label="1;1pkt 1fpkt"];
363--14432[label="0.5;1pkt 1fpkt"];
363--14436[label="0.5;1pkt 1fpkt"];
363--14506[label="1;2pkt 2fpkt"];
363--14548[label="1;2pkt 2fpkt"];
363--14601[label="1;1pkt 1fpkt"];
363--14658[label="1;1pkt 1fpkt"];
363--14681[label="1;1pkt 1fpkt"];
363--14709[label="1;1pkt 1fpkt"];
363--14779[label="1;1pkt 1fpkt"];
363--14793[label="1;1pkt 1fpkt"];
363--14823[label="0.5;1pkt 1fpkt"];
363--14836[label="1;1pkt 1fpkt"];
363--15030[label="1;1pkt 1fpkt"];
363--15035[label="1;2pkt 2fpkt"];
363--15229[label="1;1pkt 1fpkt"];
363--15243[label="1;1pkt 1fpkt"];
363--15263[label="0.5;1pkt 1fpkt"];
866--3426[label="1;1pkt 1fpkt"];
866--10548[label="1;2pkt 2fpkt"];
866--13502[label="1;2pkt 2fpkt"];
866--14823[label="1;2pkt 2fpkt"];
1732--2733[label="0.145973;435pkt 435fpkt"];
1732--7910[label="0.0769962;81pkt 81fpkt"];
1732--7981[label="0.110704;121pkt 121fpkt"];
1732--8387[label="0.254959;437pkt 437fpkt"];
1732--8664[label="0.0627517;187pkt 187fpkt"];
1732--8688[label="0.0107383;32pkt 32fpkt"];
1732--8743[label="0.0627517;187pkt 187fpkt"];
1732--8765[label="0.0107383;32pkt 32fpkt"];
1732--8790[label="0.0627517;187pkt 187fpkt"];
1732--8811[label="0.0107383;32pkt 32fpkt"];
2794--2858[label="0.0045045;1pkt 1fpkt"];
2794--2968[label="0.00215517;1pkt 1fpkt"];
2794--4096[label="0.0156951;7pkt 7fpkt"];
2794--4382[label="0.0124481;6pkt 6fpkt"];
2794--4481[label="0.0126582;5pkt 5fpkt"];
2794--4490[label="0.0814815;11pkt 11fpkt"];
2794--4505[label="0.0294118;8pkt 8fpkt"];
2794--4515[label="0.00571429;1pkt 1fpkt"];
2794--4616[label="0.272727;3pkt 3fpkt"];
2794--5141[label="0.0101254;21pkt 21fpkt"];
2794--6166[label="0.0227273;1pkt 1fpkt"];
2794--7405[label="0.0526316;1pkt 1fpkt"];
2794--8676[label="0.00144648;3pkt 3fpkt"];
2794--8906[label="0.00869565;1pkt 1fpkt"];
2794--8937[label="0.0163934;2pkt 2fpkt"];
2794--9126[label="0.153846;2pkt 2fpkt"];
2794--9206[label="0.0121951;2pkt 2fpkt"];
2794--9222[label="0.00909091;1pkt 1fpkt"];
2794--9275[label="0.0322581;1pkt 1fpkt"];
2794--9446[label="0.0181818;2pkt 2fpkt"];
2794--9504[label="0.333333;1pkt 1fpkt"];
2794--9695[label="0.0245098;5pkt 5fpkt"];
2794--10487[label="0.0175439;2pkt 2fpkt"];
2794--10766[label="0.0333333;5pkt 5fpkt"];
2794--11167[label="0.037037;1pkt 1fpkt"];
2794--12099[label="0.0491803;6pkt 6fpkt"];
2794--12356[label="0.00236967;1pkt 1fpkt"];
2794--12732[label="0.00877193;1pkt 1fpkt"];
2794--12994[label="0.0181818;2pkt 2fpkt"];
2794--13121[label="0.0246305;5pkt 5fpkt"];
2794--14613[label="0.0181818;2pkt 2fpkt"];
3426--10548[label="1;1pkt 1fpkt"];
3426--13502[label="1;1pkt 1fpkt"];
3426--14823[label="1;1pkt 1fpkt"];
3954--5856[label="0.0147059;1pkt 1fpkt"];
3954--8664[label="0.0294118;2pkt 2fpkt"];
3954--8688[label="0.0588235;4pkt 4fpkt"];
3954--8743[label="0.0294118;2pkt 2fpkt"];
3954--8765[label="0.0588235;4pkt 4fpkt"];
3954--8790[label="0.0294118;2pkt 2fpkt"];
3954--8811[label="0.0588235;4pkt 4fpkt"];
3954--10203[label="1;68pkt 68fpkt"];
9005--12780[label="1;1pkt 1fpkt"];
9046--12798[label="1;1pkt 1fpkt"];
9167--12854[label="1;2pkt 2fpkt"];
9167--14548[label="1;2pkt 2fpkt"];
9512--13028[label="1;2pkt 2fpkt"];
9537--13040[label="1;1pkt 1fpkt"];
9655--13098[label="1;1pkt 1fpkt"];
9864--13193[label="1;1pkt 1fpkt"];
10351--13418[label="1;1pkt 1fpkt"];
10351--14793[label="1;1pkt 1fpkt"];
10548--13502[label="1;2pkt 2fpkt"];
10548--14823[label="1;2pkt 2fpkt"];
10572--13514[label="1;1pkt 1fpkt"];
10709--13576[label="1;1pkt 1fpkt"];
10767--13604[label="1;1pkt 1fpkt"];
10884--13654[label="1;1pkt 1fpkt"];
11202--13795[label="1;2pkt 2fpkt"];
11553--13956[label="1;1pkt 1fpkt"];
11553--15030[label="1;1pkt 1fpkt"];
11567--13963[label="1;2pkt 2fpkt"];
11567--15035[label="1;2pkt 2fpkt"];
11884--14106[label="1;1pkt 1fpkt"];
12176--14233[label="1;1pkt 1fpkt"];
12524--14394[label="1;1pkt 1fpkt"];
12524--15243[label="1;1pkt 1fpkt"];
12633--14432[label="1;1pkt 1fpkt"];
12633--15263[label="1;1pkt 1fpkt"];
12642--14436[label="1;1pkt 1fpkt"];
12642--15266[label="1;1pkt 1fpkt"];
12854--14548[label="1;2pkt 2fpkt"];
13388--14779[label="1;1pkt 1fpkt"];
13418--14793[label="1;1pkt 1fpkt"];
13502--14823[label="1;2pkt 2fpkt"];
13956--15030[label="1;1pkt 1fpkt"];
13963--15035[label="1;2pkt 2fpkt"];
14394--15243[label="1;1pkt 1fpkt"];
14432--15263[label="1;2pkt 2fpkt"];
14436--15266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.234.158" dst_port="53"/>
      <filter dst_ip="166.26.179.18" dst_port="80" src_ip="83.50.118.88"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
9168[label="133.4.112.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12855[label="133.4.112.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.112.18:1137, 35.149.143.163:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1137: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9168--12855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="35.149.143.163" dst_port="80" src_ip="133.4.112.18" src_port="1137"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
9190[label="128.7.74.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12862[label="128.7.74.19;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.74.19:80, 42.146.68.153:42503}[50%]&lt;BR/&gt;{128.7.74.19:80, 42.146.68.153:51608}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51608: (33.3333%)&lt;BR/&gt; 42503: (16.6667%)&gt;];
}
9190--12862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.153" dst_port="51608" src_ip="128.7.74.19" src_port="80"/>
      <filter dst_ip="42.146.68.153" dst_port="42503" src_ip="128.7.74.19" src_port="80"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289451943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.74.203.19"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289452422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.71.208.19"/>
    </slice>
    <from sec="1289451989" usec="0"/>
    <to sec="1289452002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
9215[label="166.26.40.20;79pkt 79fpkt", shape=pentagon, color=darkviolet];
12871[label="166.26.40.20;79pkt 79fpkt", shape=invtriangle, color=brown];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.40.20:*, 58.150.215.152:80}[55.6962%]&lt;BR/&gt;{166.26.40.20:*, 171.49.180.65:80}[32.9114%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59038: (0.632911%)&lt;BR/&gt; 59037: (0.632911%)&lt;BR/&gt; 58808: (0.632911%)&lt;BR/&gt; 58807: (0.632911%)&gt;];
}
9215--12871[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="58.150.215.152" dst_port="80" src_ip="166.26.40.20"/>
      <filter dst_ip="171.49.180.65" dst_port="80" src_ip="166.26.40.20"/>
    </slice>
    <from sec="1289451741" usec="0"/>
    <to sec="1289452392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
881[label="133.4.81.40;s;1833pkt 1833fpkt", shape=diamond, color=yellow];
3311[label="133.4.159.33;s;32pkt 32fpkt", shape=diamond, color=yellow];
4109[label="35.50.24.165;d;27pkt 27fpkt", shape=diamond, color=yellow];
9434[label="133.4.159.33;32pkt 32fpkt", shape=pentagon, color=darkviolet];
9554[label="133.4.81.40;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12988[label="133.4.159.33;32pkt 32fpkt", shape=invtriangle, color=brown];
13049[label="133.4.81.40;21pkt 21fpkt", shape=invtriangle, color=brown];
14634[label="133.4.81.40;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.81.40:9000, *:9000}[54.9468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (70.6786%)&lt;BR/&gt; 80: (5.74542%)&lt;BR/&gt; 9001: (0.396236%)&lt;BR/&gt; 10000: (0.247647%)&lt;BR/&gt; 49860: (0.0990589%)&gt;];
}
881--2213[label="0.00600601;2pkt 2fpkt"];
881--2231[label="0.00670017;4pkt 4fpkt"];
881--2347[label="0.00636943;1pkt 1fpkt"];
881--2811[label="0.00518135;1pkt 1fpkt"];
881--3863[label="0.0381679;5pkt 5fpkt"];
881--4109[label="0.518519;14pkt 14fpkt"];
881--4587[label="0.0346535;7pkt 7fpkt"];
881--5176[label="0.010929;2pkt 2fpkt"];
881--6012[label="0.0111111;1pkt 1fpkt"];
881--6018[label="0.038961;6pkt 6fpkt"];
881--6552[label="0.0294118;2pkt 2fpkt"];
881--6570[label="0.0263158;1pkt 1fpkt"];
881--8041[label="0.00990099;4pkt 4fpkt"];
881--8664[label="0.000545554;1pkt 1fpkt"];
881--8688[label="0.00163666;3pkt 3fpkt"];
881--8743[label="0.000545554;1pkt 1fpkt"];
881--8765[label="0.00163666;3pkt 3fpkt"];
881--8790[label="0.000545554;1pkt 1fpkt"];
881--8811[label="0.00163666;3pkt 3fpkt"];
881--9554[label="0.857143;18pkt 18fpkt"];
881--13049[label="0.857143;18pkt 18fpkt"];
881--14634[label="0.857143;18pkt 18fpkt"];
3311--3973[label="0.0625;2pkt 2fpkt"];
3311--4109[label="0.037037;1pkt 1fpkt"];
3311--8297[label="0.0625;2pkt 2fpkt"];
3311--9434[label="1;32pkt 32fpkt"];
3311--12988[label="1;32pkt 32fpkt"];
4109--9434[label="0.037037;1pkt 1fpkt"];
4109--12988[label="0.037037;1pkt 1fpkt"];
9434--12988[label="1;32pkt 32fpkt"];
9554--13049[label="1;21pkt 21fpkt"];
9554--14634[label="1;21pkt 21fpkt"];
13049--14634[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="9000" src_ip="133.4.81.40" src_port="9000"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
9233[label="9.55.217.20;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12881[label="9.55.217.20;3pkt 3fpkt", shape=invtriangle, color=brown];
14559[label="9.55.217.20;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.20:22, 200.244.253.242:40615}[33.3333%]&lt;BR/&gt;{9.55.217.20:22, 200.244.253.242:40702}[33.3333%]&lt;BR/&gt;{9.55.217.20:22, 200.244.253.242:40784}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40784: (16.6667%)&lt;BR/&gt; 40702: (16.6667%)&lt;BR/&gt; 40615: (16.6667%)&gt;];
}
9233--12881[label="1;3pkt 3fpkt"];
9233--14559[label="1;3pkt 3fpkt"];
12881--14559[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="40784" src_ip="9.55.217.20" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="40702" src_ip="9.55.217.20" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="40615" src_ip="9.55.217.20" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.182.220.20"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.194.225.20"/>
    </slice>
    <from sec="1289452010" usec="0"/>
    <to sec="1289452331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.201.236.20"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289451797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.28.151.21"/>
    </slice>
    <from sec="1289451763" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.1.197.21"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289452322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
9256[label="59.201.236.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12893[label="59.201.236.21;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.201.236.21:80, 166.26.16.130:49486}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49486: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9256--12893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.16.130" dst_port="49486" src_ip="59.201.236.21" src_port="80"/>
    </slice>
    <from sec="1289452353" usec="0"/>
    <to sec="1289452397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
9258[label="2.224.39.22;49pkt 49fpkt", shape=pentagon, color=darkviolet];
12894[label="2.224.39.22;49pkt 49fpkt", shape=invtriangle, color=brown];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.224.39.22:*, 166.26.179.89:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2077: (1.02041%)&lt;BR/&gt; 2076: (1.02041%)&lt;BR/&gt; 2075: (1.02041%)&lt;BR/&gt; 2074: (1.02041%)&gt;];
}
9258--12894[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.89" dst_port="80" src_ip="2.224.39.22"/>
    </slice>
    <from sec="1289452429" usec="0"/>
    <to sec="1289452485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
9263[label="210.33.128.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12896[label="210.33.128.22;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.128.22:4135, 203.47.52.21:80}[50%]&lt;BR/&gt;{210.33.128.22:4137, 203.47.52.21:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4137: (25%)&lt;BR/&gt; 4135: (25%)&gt;];
}
9263--12896[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.52.21" dst_port="80" src_ip="210.33.128.22" src_port="4137"/>
      <filter dst_ip="203.47.52.21" dst_port="80" src_ip="210.33.128.22" src_port="4135"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
4207[label="8.176.160.155;s;6pkt 6fpkt", shape=diamond, color=yellow];
4877[label="166.26.206.96;d;81pkt 81fpkt", shape=diamond, color=yellow];
8332[label="166.26.206.96;d;8pkt 8fpkt", shape=hexagon, color=black];
9273[label="200.251.96.23;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9334[label="200.251.96.27;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10124[label="200.251.96.74;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11351[label="8.176.160.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11453[label="80.132.75.162;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12902[label="200.251.96.23;8pkt 8fpkt", shape=invtriangle, color=brown];
12932[label="200.251.96.27;15pkt 15fpkt", shape=invtriangle, color=brown];
13859[label="8.176.160.155;5pkt 5fpkt", shape=invtriangle, color=brown];
14571[label="200.251.96.23;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.206.96:*}[97.5309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4083%)&lt;BR/&gt; 56096: (1.47929%)&lt;BR/&gt; 56094: (1.47929%)&lt;BR/&gt; 56093: (1.47929%)&lt;BR/&gt; 56091: (1.47929%)&gt;];
}
4207--4877[label="1;6pkt 6fpkt"];
4207--8332[label="1;6pkt 6fpkt"];
4207--8684[label="0.166667;1pkt 1fpkt"];
4207--8761[label="0.166667;1pkt 1fpkt"];
4207--8807[label="0.166667;1pkt 1fpkt"];
4207--11351[label="1;6pkt 6fpkt"];
4207--13859[label="1;5pkt 5fpkt"];
4877--8332[label="1;8pkt 8fpkt"];
4877--8684[label="0.0123457;1pkt 1fpkt"];
4877--8761[label="0.0123457;1pkt 1fpkt"];
4877--8807[label="0.0123457;1pkt 1fpkt"];
4877--9273[label="1;9pkt 9fpkt"];
4877--9334[label="1;14pkt 14fpkt"];
4877--10124[label="1;3pkt 3fpkt"];
4877--11351[label="1;6pkt 6fpkt"];
4877--11453[label="1;5pkt 5fpkt"];
4877--12902[label="1;8pkt 8fpkt"];
4877--12932[label="1;15pkt 15fpkt"];
4877--13859[label="1;5pkt 5fpkt"];
4877--14571[label="1;9pkt 9fpkt"];
8332--8684[label="0.125;1pkt 1fpkt"];
8332--8761[label="0.125;1pkt 1fpkt"];
8332--8807[label="0.125;1pkt 1fpkt"];
8332--11351[label="1;6pkt 6fpkt"];
8332--13859[label="1;5pkt 5fpkt"];
9273--12902[label="1;8pkt 8fpkt"];
9273--14571[label="1;9pkt 9fpkt"];
9334--12932[label="1;14pkt 14fpkt"];
11351--13859[label="1;5pkt 5fpkt"];
12902--14571[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.206.96" src_port="80"/>
    </slice>
    <from sec="1289451802" usec="0"/>
    <to sec="1289452429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.178.23"/>
    </slice>
    <from sec="1289451872" usec="0"/>
    <to sec="1289451883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.28.188.23"/>
    </slice>
    <from sec="1289452125" usec="0"/>
    <to sec="1289452396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
5410[label="210.33.107.76;d;81pkt 81fpkt", shape=diamond, color=yellow];
9278[label="25.15.189.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10150[label="203.47.62.76;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12905[label="25.15.189.23;2pkt 2fpkt", shape=invtriangle, color=brown];
14572[label="25.15.189.23;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.65.134.192:*, 210.33.107.76:80}[30.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4536%)&lt;BR/&gt; 55771: (2.06186%)&lt;BR/&gt; 55770: (2.06186%)&lt;BR/&gt; 8080: (1.54639%)&lt;BR/&gt; 60215: (1.03093%)&gt;];
}
5410--8664[label="0.0123457;1pkt 1fpkt"];
5410--8688[label="0.0617284;5pkt 5fpkt"];
5410--8743[label="0.0123457;1pkt 1fpkt"];
5410--8765[label="0.0617284;5pkt 5fpkt"];
5410--8790[label="0.0123457;1pkt 1fpkt"];
5410--8811[label="0.0617284;5pkt 5fpkt"];
5410--8922[label="0.0512821;2pkt 2fpkt"];
5410--9278[label="1;2pkt 2fpkt"];
5410--10150[label="0.6;6pkt 6fpkt"];
5410--12905[label="1;2pkt 2fpkt"];
5410--14572[label="1;2pkt 2fpkt"];
9278--12905[label="1;2pkt 2fpkt"];
9278--14572[label="1;2pkt 2fpkt"];
12905--14572[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.107.76" dst_port="80" src_ip="43.65.134.192"/>
    </slice>
    <from sec="1289451611" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.10.65.24"/>
    </slice>
    <from sec="1289452053" usec="0"/>
    <to sec="1289452056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
9287[label="146.0.149.24;31pkt 31fpkt", shape=pentagon, color=darkviolet];
12908[label="146.0.149.24;32pkt 32fpkt", shape=invtriangle, color=brown];
14573[label="146.0.149.24;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.149.24:80, 84.108.198.64:*}[53.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1053%)&lt;BR/&gt; 3124: (6.31579%)&lt;BR/&gt; 0: (3.15789%)&lt;BR/&gt; 53194: (1.57895%)&lt;BR/&gt; 49917: (1.57895%)&gt;];
}
9287--12908[label="1;31pkt 31fpkt"];
9287--14573[label="1;31pkt 31fpkt"];
12908--14573[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="84.108.198.64" src_ip="146.0.149.24" src_port="80"/>
    </slice>
    <from sec="1289451679" usec="0"/>
    <to sec="1289452411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.131.166.24"/>
    </slice>
    <from sec="1289451812" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
9295[label="9.55.217.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12913[label="9.55.217.24;1pkt 1fpkt", shape=invtriangle, color=brown];
14576[label="9.55.217.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.24:22, 200.244.253.242:51087}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51087: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9295--12913[label="1;1pkt 1fpkt"];
9295--14576[label="1;1pkt 1fpkt"];
12913--14576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="51087" src_ip="9.55.217.24" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
2157[label="47.44.9.8;d;125pkt 125fpkt", shape=diamond, color=yellow];
2743[label="210.33.136.122;s;6pkt 6fpkt", shape=diamond, color=yellow];
2744[label="8.41.209.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
3431[label="133.4.166.180;s;51pkt 51fpkt", shape=diamond, color=yellow];
4441[label="7.9.184.72;d;8pkt 8fpkt", shape=diamond, color=yellow];
4487[label="210.33.154.114;s;77pkt 77fpkt", shape=diamond, color=yellow];
4649[label="166.26.6.139;s;2pkt 2fpkt", shape=diamond, color=yellow];
4807[label="128.19.146.227;s;45pkt 45fpkt", shape=diamond, color=yellow];
5189[label="210.33.144.198;s;96pkt 96fpkt", shape=diamond, color=yellow];
6231[label="55.199.15.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
6436[label="184.5.60.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
6890[label="8.246.149.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
6891[label="18.165.198.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
6895[label="60.135.24.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
10730[label="210.33.154.114;95pkt 95fpkt", shape=pentagon, color=darkviolet];
11114[label="166.26.6.139;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11740[label="133.4.166.180;50pkt 50fpkt", shape=pentagon, color=darkviolet];
11980[label="210.33.144.198;188pkt 188fpkt", shape=pentagon, color=darkviolet];
13585[label="210.33.154.114;95pkt 95fpkt", shape=invtriangle, color=brown];
14040[label="133.4.166.180;50pkt 50fpkt", shape=invtriangle, color=brown];
14143[label="210.33.144.198;189pkt 189fpkt", shape=invtriangle, color=brown];
15072[label="133.4.166.180;51pkt 51fpkt", shape=invhouse, color=bisque];
15118[label="210.33.144.198;188pkt 188fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.144.198:*, *:80}[35.4772%]&lt;BR/&gt;{*:*, 47.44.9.8:80}[29.2531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3985%)&lt;BR/&gt; 443: (2.4812%)&lt;BR/&gt; 1252: (2.03008%)&lt;BR/&gt; 8080: (0.526316%)&lt;BR/&gt; 8102: (0.263158%)&gt;];
}
2157--2331[label="0.056;7pkt 7fpkt"];
2157--2692[label="0.064;8pkt 8fpkt"];
2157--2742[label="0.008;1pkt 1fpkt"];
2157--2743[label="0.166667;1pkt 1fpkt"];
2157--3431[label="0.372549;19pkt 19fpkt"];
2157--3773[label="0.024;3pkt 3fpkt"];
2157--4128[label="0.008;1pkt 1fpkt"];
2157--4370[label="0.008;1pkt 1fpkt"];
2157--4807[label="0.311111;14pkt 14fpkt"];
2157--5131[label="0.056;7pkt 7fpkt"];
2157--5189[label="0.09375;9pkt 9fpkt"];
2157--8656[label="0.016;2pkt 2fpkt"];
2157--8664[label="0.112;14pkt 14fpkt"];
2157--8736[label="0.016;2pkt 2fpkt"];
2157--8743[label="0.112;14pkt 14fpkt"];
2157--8785[label="0.016;2pkt 2fpkt"];
2157--8790[label="0.112;14pkt 14fpkt"];
2157--9298[label="0.064;8pkt 8fpkt"];
2157--9516[label="0.12;15pkt 15fpkt"];
2157--11069[label="0.0204082;1pkt 1fpkt"];
2157--11719[label="0.008;1pkt 1fpkt"];
2157--11740[label="0.38;19pkt 19fpkt"];
2157--11980[label="0.072;9pkt 9fpkt"];
2157--12914[label="0.064;8pkt 8fpkt"];
2157--14029[label="0.008;1pkt 1fpkt"];
2157--14040[label="0.38;19pkt 19fpkt"];
2157--14143[label="0.072;9pkt 9fpkt"];
2157--14577[label="0.064;8pkt 8fpkt"];
2157--15072[label="0.372549;19pkt 19fpkt"];
2157--15118[label="0.072;9pkt 9fpkt"];
2743--2744[label="1;1pkt 1fpkt"];
2743--7853[label="0.166667;1pkt 1fpkt"];
3431--3863[label="0.0392157;2pkt 2fpkt"];
3431--7308[label="0.0588235;3pkt 3fpkt"];
3431--8412[label="0.0196078;1pkt 1fpkt"];
3431--8688[label="0.0196078;1pkt 1fpkt"];
3431--8765[label="0.0196078;1pkt 1fpkt"];
3431--8811[label="0.0196078;1pkt 1fpkt"];
3431--11740[label="1;50pkt 50fpkt"];
3431--14040[label="1;50pkt 50fpkt"];
3431--15072[label="1;51pkt 51fpkt"];
4441--4487[label="0.125;1pkt 1fpkt"];
4441--4757[label="0.125;1pkt 1fpkt"];
4441--7092[label="0.125;1pkt 1fpkt"];
4441--10730[label="0.125;1pkt 1fpkt"];
4441--13585[label="0.125;1pkt 1fpkt"];
4487--5401[label="0.0298507;2pkt 2fpkt"];
4487--8281[label="0.0338983;2pkt 2fpkt"];
4487--8664[label="0.038961;3pkt 3fpkt"];
4487--8743[label="0.038961;3pkt 3fpkt"];
4487--8790[label="0.038961;3pkt 3fpkt"];
4487--10730[label="1;77pkt 77fpkt"];
4487--13585[label="1;77pkt 77fpkt"];
4649--6231[label="1;1pkt 1fpkt"];
4649--11114[label="1;2pkt 2fpkt"];
5189--6248[label="0.0222222;1pkt 1fpkt"];
5189--8074[label="0.0104167;1pkt 1fpkt"];
5189--8201[label="0.0729167;7pkt 7fpkt"];
5189--8412[label="0.114583;11pkt 11fpkt"];
5189--8482[label="0.03125;3pkt 3fpkt"];
5189--8664[label="0.1875;18pkt 18fpkt"];
5189--8688[label="0.0104167;1pkt 1fpkt"];
5189--8743[label="0.1875;18pkt 18fpkt"];
5189--8765[label="0.0104167;1pkt 1fpkt"];
5189--8790[label="0.1875;18pkt 18fpkt"];
5189--8811[label="0.0104167;1pkt 1fpkt"];
5189--11980[label="1;96pkt 96fpkt"];
5189--14143[label="1;96pkt 96fpkt"];
5189--15118[label="1;96pkt 96fpkt"];
6231--11114[label="1;1pkt 1fpkt"];
6436--11980[label="1;1pkt 1fpkt"];
6436--14143[label="1;1pkt 1fpkt"];
6436--15118[label="1;1pkt 1fpkt"];
6890--11980[label="1;2pkt 2fpkt"];
6890--14143[label="1;2pkt 2fpkt"];
6890--15118[label="1;2pkt 2fpkt"];
6891--11980[label="1;1pkt 1fpkt"];
6891--14143[label="1;1pkt 1fpkt"];
6891--15118[label="1;1pkt 1fpkt"];
6895--11980[label="1;1pkt 1fpkt"];
6895--14143[label="1;1pkt 1fpkt"];
6895--15118[label="1;1pkt 1fpkt"];
10730--13585[label="1;95pkt 95fpkt"];
11740--14040[label="1;50pkt 50fpkt"];
11740--15072[label="1;50pkt 50fpkt"];
11980--14143[label="1;188pkt 188fpkt"];
11980--15118[label="1;188pkt 188fpkt"];
14040--15072[label="1;50pkt 50fpkt"];
14143--15118[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="210.33.144.198"/>
      <filter dst_ip="47.44.9.8" dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.185.155.25"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
9312[label="9.55.216.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12922[label="9.55.216.25;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.216.25:22, 200.244.253.242:40956}[33.3333%]&lt;BR/&gt;{9.55.216.25:22, 200.244.253.242:41051}[33.3333%]&lt;BR/&gt;{9.55.216.25:22, 200.244.253.242:41142}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 41142: (16.6667%)&lt;BR/&gt; 41051: (16.6667%)&lt;BR/&gt; 40956: (16.6667%)&gt;];
}
9312--12922[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="41142" src_ip="9.55.216.25" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="41051" src_ip="9.55.216.25" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="40956" src_ip="9.55.216.25" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
5286[label="133.4.74.95;s;134pkt 134fpkt", shape=diamond, color=yellow];
7036[label="133.4.84.181;d;77pkt 77fpkt", shape=diamond, color=yellow];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.74.95:60032, *:53}[33.1754%]&lt;BR/&gt;{*:*, 133.4.84.181:25}[27.0142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.8294%)&lt;BR/&gt; 53: (22.9858%)&lt;BR/&gt; 60032: (16.5877%)&lt;BR/&gt; 0: (0.947867%)&lt;BR/&gt; 445: (0.7109%)&gt;];
}
5286--5814[label="0.00746269;1pkt 1fpkt"];
5286--6566[label="0.00746269;1pkt 1fpkt"];
5286--7082[label="0.00746269;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.84.181" dst_port="25"/>
      <filter dst_port="53" src_ip="133.4.74.95" src_port="60032"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.93.117.27"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
9344[label="9.55.217.27;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12937[label="9.55.217.27;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.27:22, 200.244.253.242:42807}[50%]&lt;BR/&gt;{9.55.217.27:22, 200.244.253.242:42899}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 42899: (25%)&lt;BR/&gt; 42807: (25%)&gt;];
}
9344--12937[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="42899" src_ip="9.55.217.27" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="42807" src_ip="9.55.217.27" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.4.247.27"/>
    </slice>
    <from sec="1289451926" usec="0"/>
    <to sec="1289452140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
9349[label="210.3.77.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12941[label="210.3.77.28;1pkt 1fpkt", shape=invtriangle, color=brown];
14590[label="210.3.77.28;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.3.77.28:80, 164.251.19.95:2876}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2876: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9349--12941[label="1;1pkt 1fpkt"];
9349--14590[label="1;1pkt 1fpkt"];
12941--14590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.19.95" dst_port="2876" src_ip="210.3.77.28" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
5113[label="133.4.184.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
5630[label="202.52.209.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
6095[label="221.115.220.2;d;138pkt 138fpkt", shape=diamond, color=yellow];
10923[label="133.4.221.129;69pkt 69fpkt", shape=pentagon, color=darkviolet];
11761[label="133.4.184.182;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13671[label="133.4.221.129;69pkt 69fpkt", shape=invtriangle, color=brown];
14052[label="133.4.184.182;19pkt 19fpkt", shape=invtriangle, color=brown];
14895[label="133.4.221.129;68pkt 68fpkt", shape=invhouse, color=bisque];
15076[label="133.4.184.182;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 221.115.220.2:80}[61.215%]&lt;BR/&gt;{133.4.221.129:*, *:80}[20.5607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.1521%)&lt;BR/&gt; 7024: (8.10474%)&lt;BR/&gt; 1795: (4.11471%)&lt;BR/&gt; 64677: (3.99002%)&lt;BR/&gt; 443: (1.87032%)&gt;];
}
5113--5630[label="1;1pkt 1fpkt"];
5113--11761[label="1;1pkt 1fpkt"];
5113--14052[label="1;1pkt 1fpkt"];
5113--15076[label="1;1pkt 1fpkt"];
5630--11761[label="1;1pkt 1fpkt"];
5630--14052[label="1;1pkt 1fpkt"];
5630--15076[label="1;1pkt 1fpkt"];
6095--7035[label="0.00724638;1pkt 1fpkt"];
6095--7089[label="0.0277778;1pkt 1fpkt"];
6095--7234[label="0.0075188;1pkt 1fpkt"];
6095--7287[label="0.02;2pkt 2fpkt"];
6095--7320[label="0.031746;2pkt 2fpkt"];
6095--8656[label="0.00724638;1pkt 1fpkt"];
6095--8664[label="0.0652174;9pkt 9fpkt"];
6095--8678[label="0.0144928;2pkt 2fpkt"];
6095--8688[label="0.0797101;11pkt 11fpkt"];
6095--8736[label="0.00724638;1pkt 1fpkt"];
6095--8743[label="0.0652174;9pkt 9fpkt"];
6095--8755[label="0.0144928;2pkt 2fpkt"];
6095--8765[label="0.0797101;11pkt 11fpkt"];
6095--8785[label="0.00724638;1pkt 1fpkt"];
6095--8790[label="0.0652174;9pkt 9fpkt"];
6095--8801[label="0.0144928;2pkt 2fpkt"];
6095--8811[label="0.0797101;11pkt 11fpkt"];
6095--9123[label="0.047619;2pkt 2fpkt"];
6095--9176[label="0.0638298;3pkt 3fpkt"];
6095--9298[label="0.0434783;6pkt 6fpkt"];
6095--9409[label="0.027027;1pkt 1fpkt"];
6095--9497[label="0.0384615;2pkt 2fpkt"];
6095--9606[label="0.03125;2pkt 2fpkt"];
6095--9782[label="0.00724638;1pkt 1fpkt"];
6095--9990[label="0.018018;2pkt 2fpkt"];
6095--10116[label="0.037037;1pkt 1fpkt"];
6095--10129[label="0.0222222;1pkt 1fpkt"];
6095--10155[label="0.00840336;1pkt 1fpkt"];
6095--10406[label="0.0263158;1pkt 1fpkt"];
6095--10430[label="0.00900901;1pkt 1fpkt"];
6095--10783[label="0.0377358;2pkt 2fpkt"];
6095--10885[label="0.0120482;1pkt 1fpkt"];
6095--10923[label="0.0144928;1pkt 1fpkt"];
6095--10969[label="0.0172414;2pkt 2fpkt"];
6095--11158[label="0.25;2pkt 2fpkt"];
6095--11596[label="0.173913;4pkt 4fpkt"];
6095--11649[label="0.0144928;2pkt 2fpkt"];
6095--11761[label="0.555556;10pkt 10fpkt"];
6095--12113[label="0.0153846;1pkt 1fpkt"];
6095--12914[label="0.0434783;6pkt 6fpkt"];
6095--13019[label="0.0384615;2pkt 2fpkt"];
6095--13071[label="0.0307692;2pkt 2fpkt"];
6095--13304[label="0.0222222;1pkt 1fpkt"];
6095--13320[label="0.00840336;1pkt 1fpkt"];
6095--13443[label="0.0263158;1pkt 1fpkt"];
6095--13458[label="0.00900901;1pkt 1fpkt"];
6095--13671[label="0.0144928;1pkt 1fpkt"];
6095--14052[label="0.578947;11pkt 11fpkt"];
6095--14577[label="0.0434783;6pkt 6fpkt"];
6095--14622[label="0.0384615;2pkt 2fpkt"];
6095--14643[label="0.03125;2pkt 2fpkt"];
6095--14895[label="0.0147059;1pkt 1fpkt"];
6095--15076[label="0.555556;10pkt 10fpkt"];
10923--13671[label="1;69pkt 69fpkt"];
10923--14895[label="1;68pkt 68fpkt"];
11761--14052[label="1;18pkt 18fpkt"];
11761--15076[label="1;18pkt 18fpkt"];
13671--14895[label="1;68pkt 68fpkt"];
14052--15076[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.221.129"/>
      <filter dst_ip="221.115.220.2" dst_port="80"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
9351[label="128.19.109.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12943[label="128.19.109.28;3pkt 3fpkt", shape=invtriangle, color=brown];
14591[label="128.19.109.28;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.109.28:28759, 24.119.215.86:15653}[33.3333%]&lt;BR/&gt;{128.19.109.28:28759, 2.119.149.101:443}[33.3333%]&lt;BR/&gt;{128.19.109.28:28759, 2.65.157.235:19920}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28759: (50%)&lt;BR/&gt; 19920: (21.4286%)&lt;BR/&gt; 443: (21.4286%)&lt;BR/&gt; 15653: (7.14286%)&gt;];
}
9351--12943[label="1;2pkt 2fpkt"];
9351--14591[label="1;2pkt 2fpkt"];
12943--14591[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.65.157.235" dst_port="19920" src_ip="128.19.109.28" src_port="28759"/>
      <filter dst_ip="2.119.149.101" dst_port="443" src_ip="128.19.109.28" src_port="28759"/>
      <filter dst_ip="24.119.215.86" dst_port="15653" src_ip="128.19.109.28" src_port="28759"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
9353[label="18.134.138.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12945[label="18.134.138.28;2pkt 2fpkt", shape=invtriangle, color=brown];
14592[label="18.134.138.28;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.134.138.28:3478, 166.26.19.217:52225}[50%]&lt;BR/&gt;{18.134.138.28:3478, 166.26.136.232:62740}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3478: (50%)&lt;BR/&gt; 62740: (25%)&lt;BR/&gt; 52225: (25%)&gt;];
}
9353--12945[label="1;2pkt 2fpkt"];
9353--14592[label="1;2pkt 2fpkt"];
12945--14592[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.136.232" dst_port="62740" src_ip="18.134.138.28" src_port="3478"/>
      <filter dst_ip="166.26.19.217" dst_port="52225" src_ip="18.134.138.28" src_port="3478"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
9354[label="128.19.149.28;33pkt 33fpkt", shape=pentagon, color=darkviolet];
12946[label="128.19.149.28;33pkt 33fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.149.28:*, *:80}[87.8788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.9394%)&lt;BR/&gt; 995: (4.54545%)&lt;BR/&gt; 0: (3.0303%)&lt;BR/&gt; 59588: (1.51515%)&lt;BR/&gt; 59582: (1.51515%)&gt;];
}
9354--12946[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.19.149.28"/>
    </slice>
    <from sec="1289451747" usec="0"/>
    <to sec="1289452375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
9361[label="158.232.199.28;219pkt 219fpkt", shape=pentagon, color=darkviolet];
12950[label="158.232.199.28;220pkt 220fpkt", shape=invtriangle, color=brown];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.232.199.28:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60929: (0.22779%)&lt;BR/&gt; 60867: (0.22779%)&lt;BR/&gt; 60842: (0.22779%)&lt;BR/&gt; 60776: (0.22779%)&gt;];
}
9361--12950[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="158.232.199.28"/>
    </slice>
    <from sec="1289451798" usec="0"/>
    <to sec="1289451803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
9363[label="196.141.22.29;182pkt 182fpkt", shape=pentagon, color=darkviolet];
12952[label="196.141.22.29;182pkt 182fpkt", shape=invtriangle, color=brown];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.141.22.29:0, *:0}[97.8022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8022%)&lt;BR/&gt; 4899: (1.0989%)&lt;BR/&gt; 4909: (0.274725%)&lt;BR/&gt; 2777: (0.274725%)&lt;BR/&gt; 2513: (0.274725%)&gt;];
}
9363--12952[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter src_ip="196.141.22.29"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
9369[label="133.4.142.29;46pkt 46fpkt", shape=pentagon, color=darkviolet];
12955[label="133.4.142.29;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.142.29:53, *:*}[43.4783%]&lt;BR/&gt;{133.4.142.29:*, *:25}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (21.7391%)&lt;BR/&gt; 25: (21.7391%)&lt;BR/&gt; 113: (5.43478%)&lt;BR/&gt; 64957: (1.08696%)&lt;BR/&gt; 63329: (1.08696%)&gt;];
}
9369--12955[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.142.29" src_port="53"/>
      <filter dst_port="25" src_ip="133.4.142.29"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
9370[label="128.19.144.29;62pkt 62fpkt", shape=pentagon, color=darkviolet];
12956[label="128.19.144.29;62pkt 62fpkt", shape=invtriangle, color=brown];
14593[label="128.19.144.29;61pkt 61fpkt", shape=invhouse, color=bisque];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.144.29:*, 202.12.193.59:53}[85.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.973%)&lt;BR/&gt; 80: (7.02703%)&lt;BR/&gt; 65381: (0.810811%)&lt;BR/&gt; 65329: (0.810811%)&lt;BR/&gt; 65118: (0.810811%)&gt;];
}
9370--12956[label="1;62pkt 62fpkt"];
9370--14593[label="1;61pkt 61fpkt"];
12956--14593[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="202.12.193.59" dst_port="53" src_ip="128.19.144.29"/>
    </slice>
    <from sec="1289452056" usec="0"/>
    <to sec="1289452458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
204[label="133.4.52.245;d;280pkt 280fpkt", shape=diamond, color=yellow];
1807[label="6.149.168.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
2895[label="6.43.34.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
3251[label="9.202.223.15;s;2pkt 2fpkt", shape=diamond, color=yellow];
3402[label="8.36.25.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
3683[label="80.76.133.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
5148[label="5.44.58.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
5500[label="15.137.8.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
8129[label="133.4.52.245;d;231pkt 231fpkt", shape=hexagon, color=black];
9127[label="9.202.223.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9376[label="15.137.8.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11368[label="197.73.146.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11627[label="84.162.229.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12959[label="15.137.8.30;2pkt 2fpkt", shape=invtriangle, color=brown];
15050[label="84.162.229.172;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.52.245:7562}[80.8511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7562: (39.8674%)&lt;BR/&gt; 7552: (5.58712%)&lt;BR/&gt; 0: (2.27273%)&lt;BR/&gt; 4672: (1.89394%)&lt;BR/&gt; 80: (1.60985%)&gt;];
}
204--682[label="0.00714286;2pkt 2fpkt"];
204--1807[label="1;1pkt 1fpkt"];
204--2895[label="1;1pkt 1fpkt"];
204--3251[label="1;2pkt 2fpkt"];
204--3402[label="1;1pkt 1fpkt"];
204--3683[label="1;1pkt 1fpkt"];
204--4293[label="0.025;7pkt 7fpkt"];
204--5148[label="1;1pkt 1fpkt"];
204--5500[label="0.5;1pkt 1fpkt"];
204--8129[label="1;231pkt 231fpkt"];
204--8684[label="0.00714286;2pkt 2fpkt"];
204--8685[label="0.0107143;3pkt 3fpkt"];
204--8761[label="0.00714286;2pkt 2fpkt"];
204--8762[label="0.0107143;3pkt 3fpkt"];
204--8807[label="0.00714286;2pkt 2fpkt"];
204--8808[label="0.0107143;3pkt 3fpkt"];
204--9127[label="1;1pkt 1fpkt"];
204--11368[label="1;1pkt 1fpkt"];
204--11627[label="1;1pkt 1fpkt"];
204--15050[label="1;1pkt 1fpkt"];
1807--8129[label="1;1pkt 1fpkt"];
2895--8129[label="1;1pkt 1fpkt"];
3251--8129[label="1;2pkt 2fpkt"];
3251--9127[label="1;1pkt 1fpkt"];
3402--8129[label="1;1pkt 1fpkt"];
3683--8129[label="1;1pkt 1fpkt"];
5148--8129[label="1;1pkt 1fpkt"];
5500--8129[label="0.5;1pkt 1fpkt"];
5500--9376[label="0.5;1pkt 1fpkt"];
5500--12959[label="0.5;1pkt 1fpkt"];
8129--8684[label="0.004329;1pkt 1fpkt"];
8129--8685[label="0.012987;3pkt 3fpkt"];
8129--8761[label="0.004329;1pkt 1fpkt"];
8129--8762[label="0.012987;3pkt 3fpkt"];
8129--8807[label="0.004329;1pkt 1fpkt"];
8129--8808[label="0.012987;3pkt 3fpkt"];
8129--9127[label="1;1pkt 1fpkt"];
8129--11368[label="1;1pkt 1fpkt"];
8129--11627[label="1;1pkt 1fpkt"];
8129--15050[label="1;1pkt 1fpkt"];
9376--12959[label="1;2pkt 2fpkt"];
11627--15050[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.52.245" dst_port="7562"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.95.64.30"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.87.131.30"/>
    </slice>
    <from sec="1289451657" usec="0"/>
    <to sec="1289451661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.128.139.30"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
9390[label="46.42.233.30;34pkt 34fpkt", shape=pentagon, color=darkviolet];
12965[label="46.42.233.30;35pkt 35fpkt", shape=invtriangle, color=brown];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.42.233.30:*, 133.4.14.129:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3472: (1.44928%)&lt;BR/&gt; 3452: (1.44928%)&lt;BR/&gt; 3449: (1.44928%)&lt;BR/&gt; 3448: (1.44928%)&gt;];
}
9390--12965[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.14.129" dst_port="80" src_ip="46.42.233.30"/>
    </slice>
    <from sec="1289451733" usec="0"/>
    <to sec="1289451813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1097{
style=filled;
color=gray75;
9396[label="146.0.149.31;85pkt 85fpkt", shape=pentagon, color=darkviolet];
12966[label="146.0.149.31;85pkt 85fpkt", shape=invtriangle, color=brown];
14598[label="146.0.149.31;85pkt 85fpkt", shape=invhouse, color=bisque];
stat1097[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.149.31:80, 84.108.198.4:*}[44.7059%]&lt;BR/&gt;{146.0.149.31:80, 2.229.85.93:*}[24.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 3128: (5.29412%)&lt;BR/&gt; 3127: (2.35294%)&lt;BR/&gt; 8080: (1.17647%)&lt;BR/&gt; 0: (1.17647%)&gt;];
}
9396--12966[label="1;85pkt 85fpkt"];
9396--14598[label="1;85pkt 85fpkt"];
12966--14598[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="84.108.198.4" src_ip="146.0.149.31" src_port="80"/>
      <filter dst_ip="2.229.85.93" src_ip="146.0.149.31" src_port="80"/>
    </slice>
    <from sec="1289451651" usec="0"/>
    <to sec="1289452377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.238.219.31"/>
    </slice>
    <from sec="1289452139" usec="0"/>
    <to sec="1289452146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.203.10.32"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596685,3.60357,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
4185[label="42.232.149.124;d;7pkt 7fpkt", shape=diamond, color=yellow];
7558[label="166.26.72.68;s;181pkt 181fpkt", shape=diamond, color=yellow];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.72.68:*, *:80}[97.7901%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9362%)&lt;BR/&gt; 443: (1.06383%)&lt;BR/&gt; 49468: (0.531915%)&lt;BR/&gt; 49289: (0.531915%)&lt;BR/&gt; 49288: (0.531915%)&gt;];
}
4185--7558[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="166.26.72.68"/>
    </slice>
    <from sec="1289452310" usec="0"/>
    <to sec="1289452411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.5.34.32"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
9413[label="98.39.121.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12978[label="98.39.121.32;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.39.121.32:60970, 211.185.145.108:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60970: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9413--12978[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="98.39.121.32" src_port="60970"/>
    </slice>
    <from sec="1289451774" usec="0"/>
    <to sec="1289452418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
185[label="211.185.157.227;d;4808pkt 4808fpkt", shape=diamond, color=yellow];
982[label="211.227.37.14;s;3pkt 3fpkt", shape=diamond, color=yellow];
2397[label="25.244.72.176;s;4pkt 4fpkt", shape=diamond, color=yellow];
2400[label="177.131.63.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
3389[label="98.227.231.197;s;3pkt 3fpkt", shape=diamond, color=yellow];
3650[label="62.237.159.165;s;2pkt 2fpkt", shape=diamond, color=yellow];
3661[label="8.212.97.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
4120[label="177.169.36.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
5178[label="46.40.144.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
5329[label="60.138.155.54;s;141pkt 141fpkt", shape=diamond, color=yellow];
5513[label="32.232.37.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
6747[label="195.240.248.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
7069[label="36.2.175.188;s;98pkt 98fpkt", shape=diamond, color=yellow];
7475[label="25.70.60.167;s;12pkt 12fpkt", shape=diamond, color=yellow];
8399[label="211.185.157.227;d;4320pkt 4320fpkt", shape=hexagon, color=black];
8839[label="177.131.63.0;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9055[label="50.22.179.12;41pkt 41fpkt", shape=pentagon, color=darkviolet];
9436[label="168.213.170.33;43pkt 43fpkt", shape=pentagon, color=darkviolet];
9690[label="188.142.132.47;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9815[label="60.138.155.54;150pkt 150fpkt", shape=pentagon, color=darkviolet];
9936[label="46.69.26.63;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10117[label="47.183.242.73;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10428[label="16.25.197.93;29pkt 29fpkt", shape=pentagon, color=darkviolet];
10583[label="57.2.139.104;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10630[label="171.106.245.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10772[label="36.15.60.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10793[label="54.187.77.120;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10886[label="98.76.68.128;33pkt 33fpkt", shape=pentagon, color=darkviolet];
11103[label="98.128.115.138;51pkt 51fpkt", shape=pentagon, color=darkviolet];
11154[label="46.26.189.141;52pkt 52fpkt", shape=pentagon, color=darkviolet];
11292[label="27.76.128.151;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11323[label="46.193.19.154;24pkt 24fpkt", shape=pentagon, color=darkviolet];
11330[label="62.27.147.154;43pkt 43fpkt", shape=pentagon, color=darkviolet];
11362[label="210.165.82.156;51pkt 51fpkt", shape=pentagon, color=darkviolet];
11408[label="168.213.194.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11498[label="2.28.34.165;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11744[label="98.1.81.181;43pkt 43fpkt", shape=pentagon, color=darkviolet];
11791[label="45.73.81.185;49pkt 49fpkt", shape=pentagon, color=darkviolet];
11810[label="17.102.174.186;42pkt 42fpkt", shape=pentagon, color=darkviolet];
11976[label="98.227.231.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12260[label="45.93.174.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12425[label="178.159.210.229;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12698[label="177.131.63.0;4pkt 4fpkt", shape=invtriangle, color=brown];
12989[label="168.213.170.33;43pkt 43fpkt", shape=invtriangle, color=brown];
13456[label="16.25.197.93;29pkt 29fpkt", shape=invtriangle, color=brown];
13655[label="98.76.68.128;33pkt 33fpkt", shape=invtriangle, color=brown];
13773[label="46.26.189.141;52pkt 52fpkt", shape=invtriangle, color=brown];
13833[label="27.76.128.151;4pkt 4fpkt", shape=invtriangle, color=brown];
13846[label="46.193.19.154;24pkt 24fpkt", shape=invtriangle, color=brown];
13864[label="210.165.82.156;51pkt 51fpkt", shape=invtriangle, color=brown];
14043[label="98.1.81.181;43pkt 43fpkt", shape=invtriangle, color=brown];
14065[label="45.73.81.185;49pkt 49fpkt", shape=invtriangle, color=brown];
14074[label="17.102.174.186;42pkt 42fpkt", shape=invtriangle, color=brown];
14610[label="168.213.170.33;43pkt 43fpkt", shape=invhouse, color=bisque];
14972[label="46.193.19.154;24pkt 24fpkt", shape=invhouse, color=bisque];
15082[label="45.73.81.185;49pkt 49fpkt", shape=invhouse, color=bisque];
15087[label="17.102.174.186;42pkt 42fpkt", shape=invhouse, color=bisque];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.185.157.227:6881}[31.8519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (17.1053%)&lt;BR/&gt; 22302: (1.32515%)&lt;BR/&gt; 42498: (1.09571%)&lt;BR/&gt; 19171: (1.00674%)&lt;BR/&gt; 47561: (0.931822%)&gt;];
}
185--982[label="1;3pkt 3fpkt"];
185--2397[label="1;4pkt 4fpkt"];
185--2400[label="1;3pkt 3fpkt"];
185--3389[label="1;3pkt 3fpkt"];
185--3650[label="1;2pkt 2fpkt"];
185--3661[label="1;1pkt 1fpkt"];
185--4120[label="1;1pkt 1fpkt"];
185--5178[label="1;1pkt 1fpkt"];
185--5329[label="1;141pkt 141fpkt"];
185--5513[label="1;2pkt 2fpkt"];
185--6484[label="0.000207987;1pkt 1fpkt"];
185--6747[label="1;1pkt 1fpkt"];
185--7069[label="1;98pkt 98fpkt"];
185--7475[label="1;12pkt 12fpkt"];
185--8399[label="1;4320pkt 4320fpkt"];
185--8562[label="0.000207987;1pkt 1fpkt"];
185--8650[label="0.000207987;1pkt 1fpkt"];
185--8684[label="0.000207987;1pkt 1fpkt"];
185--8688[label="0.000831947;4pkt 4fpkt"];
185--8703[label="0.000207987;1pkt 1fpkt"];
185--8761[label="0.000207987;1pkt 1fpkt"];
185--8765[label="0.000831947;4pkt 4fpkt"];
185--8780[label="0.000207987;1pkt 1fpkt"];
185--8807[label="0.000207987;1pkt 1fpkt"];
185--8811[label="0.000831947;4pkt 4fpkt"];
185--8826[label="0.000207987;1pkt 1fpkt"];
185--8839[label="1;4pkt 4fpkt"];
185--9055[label="0.902439;37pkt 37fpkt"];
185--9436[label="1;43pkt 43fpkt"];
185--9690[label="0.833333;5pkt 5fpkt"];
185--9815[label="0.933333;140pkt 140fpkt"];
185--9936[label="0.882353;15pkt 15fpkt"];
185--10117[label="1;9pkt 9fpkt"];
185--10428[label="1;29pkt 29fpkt"];
185--10583[label="0.911765;31pkt 31fpkt"];
185--10630[label="1;2pkt 2fpkt"];
185--10772[label="1;2pkt 2fpkt"];
185--10793[label="0.833333;5pkt 5fpkt"];
185--10886[label="0.909091;30pkt 30fpkt"];
185--11103[label="0.921569;47pkt 47fpkt"];
185--11154[label="0.923077;48pkt 48fpkt"];
185--11292[label="1;4pkt 4fpkt"];
185--11323[label="0.875;21pkt 21fpkt"];
185--11330[label="0.953488;41pkt 41fpkt"];
185--11362[label="0.921569;47pkt 47fpkt"];
185--11408[label="1;1pkt 1fpkt"];
185--11498[label="1;5pkt 5fpkt"];
185--11744[label="0.930233;40pkt 40fpkt"];
185--11791[label="0.918367;45pkt 45fpkt"];
185--11810[label="0.904762;38pkt 38fpkt"];
185--11976[label="1;2pkt 2fpkt"];
185--12260[label="1;1pkt 1fpkt"];
185--12405[label="0.000207987;1pkt 1fpkt"];
185--12425[label="1;2pkt 2fpkt"];
185--12698[label="1;4pkt 4fpkt"];
185--12989[label="1;43pkt 43fpkt"];
185--13456[label="1;29pkt 29fpkt"];
185--13655[label="0.909091;30pkt 30fpkt"];
185--13773[label="0.923077;48pkt 48fpkt"];
185--13833[label="1;4pkt 4fpkt"];
185--13846[label="0.875;21pkt 21fpkt"];
185--13864[label="0.921569;47pkt 47fpkt"];
185--14043[label="0.930233;40pkt 40fpkt"];
185--14065[label="0.918367;45pkt 45fpkt"];
185--14074[label="0.904762;38pkt 38fpkt"];
185--14348[label="0.000207987;1pkt 1fpkt"];
185--14610[label="1;43pkt 43fpkt"];
185--14972[label="0.875;21pkt 21fpkt"];
185--15082[label="0.918367;45pkt 45fpkt"];
185--15087[label="0.904762;38pkt 38fpkt"];
185--15217[label="0.000207987;1pkt 1fpkt"];
982--8399[label="1;3pkt 3fpkt"];
2397--8399[label="1;4pkt 4fpkt"];
2400--8399[label="1;3pkt 3fpkt"];
2400--8839[label="0.666667;2pkt 2fpkt"];
2400--12698[label="0.666667;2pkt 2fpkt"];
3389--8399[label="1;3pkt 3fpkt"];
3389--11976[label="1;2pkt 2fpkt"];
3650--8399[label="1;2pkt 2fpkt"];
3661--8399[label="1;1pkt 1fpkt"];
4120--8399[label="1;1pkt 1fpkt"];
5178--8399[label="1;1pkt 1fpkt"];
5329--8399[label="0.886525;125pkt 125fpkt"];
5329--9815[label="0.992908;140pkt 140fpkt"];
5513--8399[label="1;2pkt 2fpkt"];
6747--8399[label="1;1pkt 1fpkt"];
7069--8399[label="0.887755;87pkt 87fpkt"];
7475--8399[label="1;12pkt 12fpkt"];
7475--8688[label="0.333333;4pkt 4fpkt"];
7475--8765[label="0.333333;4pkt 4fpkt"];
7475--8811[label="0.333333;4pkt 4fpkt"];
8399--8562[label="0.000231481;1pkt 1fpkt"];
8399--8650[label="0.000231481;1pkt 1fpkt"];
8399--8684[label="0.000231481;1pkt 1fpkt"];
8399--8688[label="0.000925926;4pkt 4fpkt"];
8399--8703[label="0.000231481;1pkt 1fpkt"];
8399--8761[label="0.000231481;1pkt 1fpkt"];
8399--8765[label="0.000925926;4pkt 4fpkt"];
8399--8780[label="0.000231481;1pkt 1fpkt"];
8399--8807[label="0.000231481;1pkt 1fpkt"];
8399--8811[label="0.000925926;4pkt 4fpkt"];
8399--8826[label="0.000231481;1pkt 1fpkt"];
8399--8839[label="0.5;2pkt 2fpkt"];
8399--9055[label="0.804878;33pkt 33fpkt"];
8399--9436[label="0.953488;41pkt 41fpkt"];
8399--9690[label="0.833333;5pkt 5fpkt"];
8399--9815[label="0.826667;124pkt 124fpkt"];
8399--9936[label="0.705882;12pkt 12fpkt"];
8399--10117[label="1;9pkt 9fpkt"];
8399--10428[label="1;29pkt 29fpkt"];
8399--10583[label="0.764706;26pkt 26fpkt"];
8399--10630[label="1;2pkt 2fpkt"];
8399--10793[label="0.833333;5pkt 5fpkt"];
8399--10886[label="0.787879;26pkt 26fpkt"];
8399--11103[label="0.803922;41pkt 41fpkt"];
8399--11154[label="0.826923;43pkt 43fpkt"];
8399--11292[label="1;4pkt 4fpkt"];
8399--11323[label="0.666667;16pkt 16fpkt"];
8399--11330[label="0.837209;36pkt 36fpkt"];
8399--11362[label="0.803922;41pkt 41fpkt"];
8399--11408[label="1;1pkt 1fpkt"];
8399--11498[label="1;5pkt 5fpkt"];
8399--11744[label="0.813953;35pkt 35fpkt"];
8399--11791[label="0.816327;40pkt 40fpkt"];
8399--11810[label="0.785714;33pkt 33fpkt"];
8399--11976[label="1;2pkt 2fpkt"];
8399--12260[label="1;1pkt 1fpkt"];
8399--12405[label="0.000231481;1pkt 1fpkt"];
8399--12425[label="1;2pkt 2fpkt"];
8399--12698[label="0.5;2pkt 2fpkt"];
8399--12989[label="0.953488;41pkt 41fpkt"];
8399--13456[label="1;29pkt 29fpkt"];
8399--13655[label="0.787879;26pkt 26fpkt"];
8399--13773[label="0.826923;43pkt 43fpkt"];
8399--13833[label="1;4pkt 4fpkt"];
8399--13846[label="0.666667;16pkt 16fpkt"];
8399--13864[label="0.803922;41pkt 41fpkt"];
8399--14043[label="0.813953;35pkt 35fpkt"];
8399--14065[label="0.816327;40pkt 40fpkt"];
8399--14074[label="0.785714;33pkt 33fpkt"];
8399--14348[label="0.000231481;1pkt 1fpkt"];
8399--14610[label="0.953488;41pkt 41fpkt"];
8399--14972[label="0.666667;16pkt 16fpkt"];
8399--15082[label="0.816327;40pkt 40fpkt"];
8399--15087[label="0.785714;33pkt 33fpkt"];
8399--15217[label="0.000231481;1pkt 1fpkt"];
8839--12698[label="1;4pkt 4fpkt"];
9436--12989[label="1;43pkt 43fpkt"];
9436--14610[label="1;43pkt 43fpkt"];
10428--13456[label="1;29pkt 29fpkt"];
10886--13655[label="1;33pkt 33fpkt"];
11154--13773[label="1;52pkt 52fpkt"];
11292--13833[label="1;4pkt 4fpkt"];
11323--13846[label="1;24pkt 24fpkt"];
11323--14972[label="1;24pkt 24fpkt"];
11362--13864[label="1;51pkt 51fpkt"];
11744--14043[label="1;43pkt 43fpkt"];
11791--14065[label="1;49pkt 49fpkt"];
11791--15082[label="1;49pkt 49fpkt"];
11810--14074[label="1;42pkt 42fpkt"];
11810--15087[label="1;42pkt 42fpkt"];
12989--14610[label="1;43pkt 43fpkt"];
13846--14972[label="1;24pkt 24fpkt"];
14065--15082[label="1;49pkt 49fpkt"];
14074--15087[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.227" dst_port="6881"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.4.60.34"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.27.113.34"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
9458[label="9.55.217.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12999[label="9.55.217.34;2pkt 2fpkt", shape=invtriangle, color=brown];
14616[label="9.55.217.34;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.34:22, 200.244.253.242:39094}[50%]&lt;BR/&gt;{9.55.217.34:22, 200.244.253.242:39180}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 39180: (25%)&lt;BR/&gt; 39094: (25%)&gt;];
}
9458--12999[label="1;2pkt 2fpkt"];
9458--14616[label="1;2pkt 2fpkt"];
12999--14616[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="39180" src_ip="9.55.217.34" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="39094" src_ip="9.55.217.34" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.185.6.35"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.76.89.35"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.136.174.35"/>
    </slice>
    <from sec="1289451880" usec="0"/>
    <to sec="1289451891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
9483[label="133.4.19.36;23pkt 23fpkt", shape=pentagon, color=darkviolet];
13012[label="133.4.19.36;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.19.36:*, *:25}[56.5217%]&lt;BR/&gt;{133.4.19.36:*, *:113}[21.7391%]&lt;BR/&gt;{133.4.19.36:25, *:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (38.8889%)&lt;BR/&gt; 113: (11.1111%)&lt;BR/&gt; 46886: (2.22222%)&lt;BR/&gt; 40831: (2.22222%)&lt;BR/&gt; 31231: (2.22222%)&gt;];
}
9483--13012[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.19.36" src_port="25"/>
      <filter dst_port="25" src_ip="133.4.19.36"/>
      <filter dst_port="113" src_ip="133.4.19.36"/>
    </slice>
    <from sec="1289451664" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.55.83.36"/>
    </slice>
    <from sec="1289451927" usec="0"/>
    <to sec="1289451959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.138.83.36"/>
    </slice>
    <from sec="1289451694" usec="0"/>
    <to sec="1289451722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.242.236.36"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289451735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.3.37"/>
    </slice>
    <from sec="1289451696" usec="0"/>
    <to sec="1289451700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.109.12.38"/>
    </slice>
    <from sec="1289452281" usec="0"/>
    <to sec="1289452298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
9518[label="24.112.32.38;35pkt 35fpkt", shape=pentagon, color=darkviolet];
13032[label="24.112.32.38;34pkt 34fpkt", shape=invtriangle, color=brown];
14627[label="24.112.32.38;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.112.32.38:*, 210.33.133.135:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1147: (1.44231%)&lt;BR/&gt; 1146: (1.44231%)&lt;BR/&gt; 1145: (1.44231%)&lt;BR/&gt; 1144: (1.44231%)&gt;];
}
9518--13032[label="1;34pkt 34fpkt"];
9518--14627[label="1;35pkt 35fpkt"];
13032--14627[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.133.135" dst_port="80" src_ip="24.112.32.38"/>
    </slice>
    <from sec="1289452471" usec="0"/>
    <to sec="1289452475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
167[label="166.26.179.31;d;1728pkt 1728fpkt", shape=diamond, color=yellow];
597[label="128.165.218.197;d;13pkt 13fpkt", shape=diamond, color=yellow];
1041[label="166.26.179.24;d;1336pkt 1336fpkt", shape=diamond, color=yellow];
2424[label="198.211.116.20;s;21pkt 21fpkt", shape=diamond, color=yellow];
3362[label="3.5.48.219;s;14pkt 14fpkt", shape=diamond, color=yellow];
3368[label="193.24.193.79;s;7pkt 7fpkt", shape=diamond, color=yellow];
3495[label="14.9.223.101;s;14pkt 14fpkt", shape=diamond, color=yellow];
4056[label="80.144.216.108;s;15pkt 15fpkt", shape=diamond, color=yellow];
4131[label="210.43.247.9;s;5pkt 5fpkt", shape=diamond, color=yellow];
4133[label="3.178.166.68;s;31pkt 31fpkt", shape=diamond, color=yellow];
4189[label="166.26.70.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
4314[label="112.243.15.133;s;88pkt 88fpkt", shape=diamond, color=yellow];
4563[label="128.165.245.226;d;30pkt 30fpkt", shape=diamond, color=yellow];
5967[label="198.211.112.203;s;3pkt 3fpkt", shape=diamond, color=yellow];
6008[label="8.73.92.210;s;2pkt 2fpkt", shape=diamond, color=yellow];
6324[label="16.3.169.169;s;16pkt 16fpkt", shape=diamond, color=yellow];
6851[label="163.108.9.123;s;5pkt 5fpkt", shape=diamond, color=yellow];
7350[label="163.108.9.16;s;17pkt 17fpkt", shape=diamond, color=yellow];
7525[label="9.39.118.206;s;30pkt 30fpkt", shape=diamond, color=yellow];
8083[label="128.165.245.226;d;24pkt 24fpkt", shape=hexagon, color=black];
8948[label="201.152.97.6;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8984[label="213.34.148.8;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9014[label="210.43.247.9;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9019[label="14.208.147.10;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9135[label="15.76.109.16;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9184[label="163.108.9.19;17pkt 17fpkt", shape=pentagon, color=darkviolet];
9331[label="192.69.44.27;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9523[label="170.228.65.38;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9555[label="14.8.87.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9645[label="201.162.155.44;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9723[label="201.128.115.49;25pkt 25fpkt", shape=pentagon, color=darkviolet];
9759[label="15.76.7.51;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10017[label="24.170.11.68;21pkt 21fpkt", shape=pentagon, color=darkviolet];
10186[label="6.133.133.78;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10190[label="210.104.147.78;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10193[label="200.241.168.78;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10195[label="45.220.203.78;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10209[label="193.24.193.79;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10241[label="9.38.68.81;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10274[label="170.228.65.83;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10651[label="80.144.216.108;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10669[label="14.214.81.110;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10694[label="170.228.76.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10769[label="98.2.9.118;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10817[label="163.108.9.122;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10820[label="36.118.43.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11140[label="192.65.148.140;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11162[label="81.101.52.142;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11185[label="197.129.171.143;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11383[label="14.208.232.157;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11398[label="80.29.36.159;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11460[label="200.176.116.162;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11576[label="16.3.169.169;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11608[label="197.119.206.171;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11675[label="8.139.52.176;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11708[label="198.211.96.178;24pkt 24fpkt", shape=pentagon, color=darkviolet];
11751[label="193.19.19.182;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11974[label="5.87.187.197;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12068[label="81.103.80.205;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12149[label="8.73.92.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12178[label="15.100.65.212;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12229[label="3.178.150.215;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12261[label="200.132.178.217;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12291[label="15.77.198.219;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12297[label="80.22.254.219;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12313[label="200.132.178.220;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12326[label="197.117.175.222;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12451[label="9.32.75.232;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12513[label="197.116.24.237;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12565[label="80.244.33.242;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12591[label="36.143.100.244;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12641[label="6.135.182.249;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12692[label="197.116.136.255;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12752[label="201.152.97.6;5pkt 5fpkt", shape=invtriangle, color=brown];
13034[label="170.228.65.38;6pkt 6fpkt", shape=invtriangle, color=brown];
13050[label="14.8.87.40;6pkt 6fpkt", shape=invtriangle, color=brown];
13091[label="201.162.155.44;5pkt 5fpkt", shape=invtriangle, color=brown];
13154[label="15.76.7.51;15pkt 15fpkt", shape=invtriangle, color=brown];
13263[label="24.170.11.68;21pkt 21fpkt", shape=invtriangle, color=brown];
13334[label="6.133.133.78;6pkt 6fpkt", shape=invtriangle, color=brown];
13338[label="210.104.147.78;12pkt 12fpkt", shape=invtriangle, color=brown];
13340[label="45.220.203.78;6pkt 6fpkt", shape=invtriangle, color=brown];
13347[label="193.24.193.79;11pkt 11fpkt", shape=invtriangle, color=brown];
13549[label="80.144.216.108;15pkt 15fpkt", shape=invtriangle, color=brown];
13558[label="14.214.81.110;8pkt 8fpkt", shape=invtriangle, color=brown];
13768[label="192.65.148.140;18pkt 18fpkt", shape=invtriangle, color=brown];
13874[label="14.208.232.157;8pkt 8fpkt", shape=invtriangle, color=brown];
13884[label="80.29.36.159;5pkt 5fpkt", shape=invtriangle, color=brown];
14179[label="81.103.80.205;20pkt 20fpkt", shape=invtriangle, color=brown];
14253[label="3.178.150.215;5pkt 5fpkt", shape=invtriangle, color=brown];
14296[label="200.132.178.220;13pkt 13fpkt", shape=invtriangle, color=brown];
14302[label="197.117.175.222;6pkt 6fpkt", shape=invtriangle, color=brown];
14389[label="197.116.24.237;5pkt 5fpkt", shape=invtriangle, color=brown];
14413[label="80.244.33.242;9pkt 9fpkt", shape=invtriangle, color=brown];
14421[label="36.143.100.244;13pkt 13fpkt", shape=invtriangle, color=brown];
14458[label="197.116.136.255;7pkt 7fpkt", shape=invtriangle, color=brown];
14492[label="201.152.97.6;5pkt 5fpkt", shape=invhouse, color=bisque];
14628[label="170.228.65.38;6pkt 6fpkt", shape=invhouse, color=bisque];
14635[label="14.8.87.40;5pkt 5fpkt", shape=invhouse, color=bisque];
14675[label="15.76.7.51;15pkt 15fpkt", shape=invhouse, color=bisque];
14760[label="193.24.193.79;12pkt 12fpkt", shape=invhouse, color=bisque];
14991[label="80.29.36.159;6pkt 6fpkt", shape=invhouse, color=bisque];
15174[label="3.178.150.215;5pkt 5fpkt", shape=invhouse, color=bisque];
15196[label="197.117.175.222;5pkt 5fpkt", shape=invhouse, color=bisque];
15239[label="197.116.24.237;6pkt 6fpkt", shape=invhouse, color=bisque];
15250[label="80.244.33.242;10pkt 10fpkt", shape=invhouse, color=bisque];
15256[label="36.143.100.244;13pkt 13fpkt", shape=invhouse, color=bisque];
15275[label="197.116.136.255;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.179.31:80}[53.3746%]&lt;BR/&gt;{*:*, 166.26.179.24:80}[42.4458%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0358%)&lt;BR/&gt; 443: (0.84686%)&lt;BR/&gt; 9100: (0.552811%)&lt;BR/&gt; 137: (0.329334%)&lt;BR/&gt; 42380: (0.164667%)&gt;];
}
167--1420[label="0.5;1pkt 1fpkt"];
167--2257[label="0.138614;14pkt 14fpkt"];
167--2424[label="1;21pkt 21fpkt"];
167--3362[label="1;14pkt 14fpkt"];
167--3368[label="0.571429;4pkt 4fpkt"];
167--3495[label="1;14pkt 14fpkt"];
167--4056[label="0.933333;14pkt 14fpkt"];
167--4131[label="0.4;2pkt 2fpkt"];
167--4133[label="1;31pkt 31fpkt"];
167--4490[label="0.103704;14pkt 14fpkt"];
167--4990[label="0.5;1pkt 1fpkt"];
167--6324[label="1;16pkt 16fpkt"];
167--7282[label="0.137931;8pkt 8fpkt"];
167--7350[label="0.529412;9pkt 9fpkt"];
167--8664[label="0.0844907;146pkt 146fpkt"];
167--8669[label="0.00267023;2pkt 2fpkt"];
167--8688[label="0.0428241;74pkt 74fpkt"];
167--8743[label="0.0844907;146pkt 146fpkt"];
167--8748[label="0.00267023;2pkt 2fpkt"];
167--8765[label="0.0428241;74pkt 74fpkt"];
167--8790[label="0.0844907;146pkt 146fpkt"];
167--8795[label="0.00267023;2pkt 2fpkt"];
167--8811[label="0.0428241;74pkt 74fpkt"];
167--8860[label="0.133333;8pkt 8fpkt"];
167--8913[label="0.0408163;2pkt 2fpkt"];
167--8934[label="0.101449;7pkt 7fpkt"];
167--8948[label="1;5pkt 5fpkt"];
167--8984[label="1;11pkt 11fpkt"];
167--9014[label="0.333333;3pkt 3fpkt"];
167--9047[label="1;5pkt 5fpkt"];
167--9135[label="1;8pkt 8fpkt"];
167--9184[label="0.588235;10pkt 10fpkt"];
167--9398[label="0.25;11pkt 11fpkt"];
167--9555[label="1;6pkt 6fpkt"];
167--10017[label="0.666667;14pkt 14fpkt"];
167--10186[label="1;7pkt 7fpkt"];
167--10190[label="1;11pkt 11fpkt"];
167--10193[label="1;7pkt 7fpkt"];
167--10195[label="1;5pkt 5fpkt"];
167--10209[label="0.5;6pkt 6fpkt"];
167--10274[label="1;9pkt 9fpkt"];
167--10398[label="0.2;1pkt 1fpkt"];
167--10651[label="0.928571;13pkt 13fpkt"];
167--10770[label="1;13pkt 13fpkt"];
167--10817[label="0.333333;1pkt 1fpkt"];
167--10922[label="0.5;2pkt 2fpkt"];
167--11140[label="0.294118;5pkt 5fpkt"];
167--11162[label="1;15pkt 15fpkt"];
167--11185[label="1;5pkt 5fpkt"];
167--11398[label="1;6pkt 6fpkt"];
167--11576[label="1;15pkt 15fpkt"];
167--11661[label="0.34;17pkt 17fpkt"];
167--11751[label="0.4;4pkt 4fpkt"];
167--11908[label="1;6pkt 6fpkt"];
167--11974[label="1;5pkt 5fpkt"];
167--12229[label="1;6pkt 6fpkt"];
167--12261[label="0.291667;7pkt 7fpkt"];
167--12313[label="0.230769;3pkt 3fpkt"];
167--12451[label="1;6pkt 6fpkt"];
167--12641[label="1;5pkt 5fpkt"];
167--12692[label="1;8pkt 8fpkt"];
167--12710[label="0.131148;8pkt 8fpkt"];
167--12735[label="0.0416667;2pkt 2fpkt"];
167--12745[label="0.114286;8pkt 8fpkt"];
167--12752[label="1;5pkt 5fpkt"];
167--12799[label="1;6pkt 6fpkt"];
167--12968[label="0.232558;10pkt 10fpkt"];
167--13050[label="1;6pkt 6fpkt"];
167--13263[label="0.666667;14pkt 14fpkt"];
167--13334[label="1;6pkt 6fpkt"];
167--13338[label="1;12pkt 12fpkt"];
167--13340[label="1;6pkt 6fpkt"];
167--13347[label="0.454545;5pkt 5fpkt"];
167--13549[label="0.933333;14pkt 14fpkt"];
167--13606[label="1;14pkt 14fpkt"];
167--13768[label="0.333333;6pkt 6fpkt"];
167--13884[label="1;5pkt 5fpkt"];
167--14253[label="1;5pkt 5fpkt"];
167--14296[label="0.230769;3pkt 3fpkt"];
167--14458[label="1;7pkt 7fpkt"];
167--14483[label="0.0408163;2pkt 2fpkt"];
167--14489[label="0.114286;8pkt 8fpkt"];
167--14492[label="1;5pkt 5fpkt"];
167--14518[label="1;5pkt 5fpkt"];
167--14635[label="1;5pkt 5fpkt"];
167--14760[label="0.5;6pkt 6fpkt"];
167--14868[label="1;13pkt 13fpkt"];
167--14991[label="1;6pkt 6fpkt"];
167--15174[label="1;5pkt 5fpkt"];
167--15275[label="1;8pkt 8fpkt"];
597--4314[label="1;13pkt 13fpkt"];
1041--2257[label="0.00990099;1pkt 1fpkt"];
1041--3368[label="0.428571;3pkt 3fpkt"];
1041--4490[label="0.125926;17pkt 17fpkt"];
1041--5967[label="0.333333;1pkt 1fpkt"];
1041--6851[label="0.6;3pkt 3fpkt"];
1041--7282[label="0.241379;14pkt 14fpkt"];
1041--7525[label="0.266667;8pkt 8fpkt"];
1041--8664[label="0.0688623;92pkt 92fpkt"];
1041--8688[label="0.0928144;124pkt 124fpkt"];
1041--8743[label="0.0688623;92pkt 92fpkt"];
1041--8765[label="0.0928144;124pkt 124fpkt"];
1041--8790[label="0.0688623;92pkt 92fpkt"];
1041--8811[label="0.0928144;124pkt 124fpkt"];
1041--8860[label="0.233333;14pkt 14fpkt"];
1041--8913[label="0.122449;6pkt 6fpkt"];
1041--9014[label="0.111111;1pkt 1fpkt"];
1041--9019[label="1;9pkt 9fpkt"];
1041--9184[label="0.176471;3pkt 3fpkt"];
1041--9331[label="1;5pkt 5fpkt"];
1041--9398[label="0.0227273;1pkt 1fpkt"];
1041--9523[label="1;6pkt 6fpkt"];
1041--9645[label="1;5pkt 5fpkt"];
1041--9723[label="1;25pkt 25fpkt"];
1041--9759[label="0.785714;11pkt 11fpkt"];
1041--10209[label="0.5;6pkt 6fpkt"];
1041--10241[label="1;5pkt 5fpkt"];
1041--10392[label="1;6pkt 6fpkt"];
1041--10669[label="1;7pkt 7fpkt"];
1041--10694[label="1;9pkt 9fpkt"];
1041--10769[label="1;15pkt 15fpkt"];
1041--10820[label="1;6pkt 6fpkt"];
1041--10868[label="1;6pkt 6fpkt"];
1041--11140[label="0.705882;12pkt 12fpkt"];
1041--11383[label="1;9pkt 9fpkt"];
1041--11460[label="1;17pkt 17fpkt"];
1041--11502[label="1;6pkt 6fpkt"];
1041--11608[label="1;7pkt 7fpkt"];
1041--11661[label="0.54;27pkt 27fpkt"];
1041--11675[label="1;12pkt 12fpkt"];
1041--11708[label="1;24pkt 24fpkt"];
1041--11751[label="0.6;6pkt 6fpkt"];
1041--12068[label="1;20pkt 20fpkt"];
1041--12178[label="1;5pkt 5fpkt"];
1041--12261[label="0.375;9pkt 9fpkt"];
1041--12291[label="1;6pkt 6fpkt"];
1041--12297[label="1;6pkt 6fpkt"];
1041--12313[label="0.615385;8pkt 8fpkt"];
1041--12326[label="1;6pkt 6fpkt"];
1041--12513[label="1;6pkt 6fpkt"];
1041--12565[label="0.1;1pkt 1fpkt"];
1041--12591[label="1;13pkt 13fpkt"];
1041--12646[label="0.857143;6pkt 6fpkt"];
1041--12710[label="0.229508;14pkt 14fpkt"];
1041--12735[label="0.125;6pkt 6fpkt"];
1041--12968[label="0.0232558;1pkt 1fpkt"];
1041--13034[label="1;6pkt 6fpkt"];
1041--13091[label="1;5pkt 5fpkt"];
1041--13154[label="0.8;12pkt 12fpkt"];
1041--13347[label="0.545455;6pkt 6fpkt"];
1041--13436[label="1;6pkt 6fpkt"];
1041--13558[label="1;8pkt 8fpkt"];
1041--13768[label="0.666667;12pkt 12fpkt"];
1041--13874[label="1;8pkt 8fpkt"];
1041--14179[label="1;20pkt 20fpkt"];
1041--14296[label="0.615385;8pkt 8fpkt"];
1041--14302[label="1;6pkt 6fpkt"];
1041--14389[label="1;5pkt 5fpkt"];
1041--14413[label="0.111111;1pkt 1fpkt"];
1041--14421[label="1;13pkt 13fpkt"];
1041--14437[label="0.833333;5pkt 5fpkt"];
1041--14483[label="0.122449;6pkt 6fpkt"];
1041--14628[label="1;6pkt 6fpkt"];
1041--14675[label="0.8;12pkt 12fpkt"];
1041--14760[label="0.5;6pkt 6fpkt"];
1041--14799[label="1;5pkt 5fpkt"];
1041--15196[label="1;5pkt 5fpkt"];
1041--15239[label="1;6pkt 6fpkt"];
1041--15250[label="0.1;1pkt 1fpkt"];
1041--15256[label="1;13pkt 13fpkt"];
2424--8664[label="0.333333;7pkt 7fpkt"];
2424--8743[label="0.333333;7pkt 7fpkt"];
2424--8790[label="0.333333;7pkt 7fpkt"];
3368--10209[label="1;7pkt 7fpkt"];
3368--13347[label="0.857143;6pkt 6fpkt"];
3368--14760[label="1;7pkt 7fpkt"];
4056--10651[label="1;14pkt 14fpkt"];
4056--13549[label="1;15pkt 15fpkt"];
4131--4189[label="0.666667;2pkt 2fpkt"];
4131--9014[label="0.8;4pkt 4fpkt"];
4189--9014[label="0.666667;2pkt 2fpkt"];
4314--4563[label="0.866667;26pkt 26fpkt"];
4314--8083[label="0.833333;20pkt 20fpkt"];
4314--8666[label="0.0227273;2pkt 2fpkt"];
4314--8689[label="0.0227273;2pkt 2fpkt"];
4314--8745[label="0.0227273;2pkt 2fpkt"];
4314--8766[label="0.0227273;2pkt 2fpkt"];
4314--8792[label="0.0227273;2pkt 2fpkt"];
4314--8812[label="0.0227273;2pkt 2fpkt"];
4563--5967[label="0.666667;2pkt 2fpkt"];
4563--6008[label="1;2pkt 2fpkt"];
4563--8083[label="1;24pkt 24fpkt"];
4563--8666[label="0.0666667;2pkt 2fpkt"];
4563--8689[label="0.0666667;2pkt 2fpkt"];
4563--8745[label="0.0666667;2pkt 2fpkt"];
4563--8766[label="0.0666667;2pkt 2fpkt"];
4563--8792[label="0.0666667;2pkt 2fpkt"];
4563--8812[label="0.0666667;2pkt 2fpkt"];
4563--12149[label="1;1pkt 1fpkt"];
5967--8083[label="0.666667;2pkt 2fpkt"];
6008--8083[label="1;2pkt 2fpkt"];
6008--12149[label="1;1pkt 1fpkt"];
6324--11576[label="1;15pkt 15fpkt"];
7525--8688[label="0.0666667;2pkt 2fpkt"];
7525--8765[label="0.0666667;2pkt 2fpkt"];
7525--8811[label="0.0666667;2pkt 2fpkt"];
8083--8666[label="0.0833333;2pkt 2fpkt"];
8083--8745[label="0.0833333;2pkt 2fpkt"];
8083--8792[label="0.0833333;2pkt 2fpkt"];
8083--12149[label="1;1pkt 1fpkt"];
8948--12752[label="1;5pkt 5fpkt"];
8948--14492[label="1;5pkt 5fpkt"];
9523--13034[label="1;6pkt 6fpkt"];
9523--14628[label="1;6pkt 6fpkt"];
9555--13050[label="1;6pkt 6fpkt"];
9555--14635[label="1;5pkt 5fpkt"];
9645--13091[label="1;5pkt 5fpkt"];
9759--13154[label="1;14pkt 14fpkt"];
9759--14675[label="1;14pkt 14fpkt"];
10017--13263[label="1;21pkt 21fpkt"];
10186--13334[label="1;6pkt 6fpkt"];
10190--13338[label="1;11pkt 11fpkt"];
10195--13340[label="1;5pkt 5fpkt"];
10209--13347[label="1;11pkt 11fpkt"];
10209--14760[label="1;12pkt 12fpkt"];
10651--13549[label="1;14pkt 14fpkt"];
10669--13558[label="1;7pkt 7fpkt"];
11140--13768[label="1;17pkt 17fpkt"];
11383--13874[label="1;8pkt 8fpkt"];
11398--13884[label="1;5pkt 5fpkt"];
11398--14991[label="1;6pkt 6fpkt"];
12068--14179[label="1;20pkt 20fpkt"];
12229--14253[label="1;5pkt 5fpkt"];
12229--15174[label="1;5pkt 5fpkt"];
12313--14296[label="1;13pkt 13fpkt"];
12326--14302[label="1;6pkt 6fpkt"];
12326--15196[label="1;5pkt 5fpkt"];
12513--14389[label="1;5pkt 5fpkt"];
12513--15239[label="1;6pkt 6fpkt"];
12565--14413[label="1;9pkt 9fpkt"];
12565--15250[label="1;10pkt 10fpkt"];
12591--14421[label="1;13pkt 13fpkt"];
12591--15256[label="1;13pkt 13fpkt"];
12692--14458[label="1;7pkt 7fpkt"];
12692--15275[label="1;8pkt 8fpkt"];
12752--14492[label="1;5pkt 5fpkt"];
13034--14628[label="1;6pkt 6fpkt"];
13050--14635[label="1;5pkt 5fpkt"];
13154--14675[label="1;15pkt 15fpkt"];
13347--14760[label="1;11pkt 11fpkt"];
13884--14991[label="1;5pkt 5fpkt"];
14253--15174[label="1;5pkt 5fpkt"];
14302--15196[label="1;5pkt 5fpkt"];
14389--15239[label="1;5pkt 5fpkt"];
14413--15250[label="1;9pkt 9fpkt"];
14421--15256[label="1;13pkt 13fpkt"];
14458--15275[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80"/>
      <filter dst_ip="166.26.179.24" dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
9525[label="77.104.80.38;364pkt 364fpkt", shape=pentagon, color=darkviolet];
13035[label="77.104.80.38;364pkt 364fpkt", shape=invtriangle, color=brown];
14629[label="77.104.80.38;364pkt 364fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.104.80.38:*, *:22}[51.0989%]&lt;BR/&gt;{77.104.80.38:*, *:23}[48.9011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (25.5495%)&lt;BR/&gt; 23: (24.4505%)&lt;BR/&gt; 4596: (0.137363%)&lt;BR/&gt; 4595: (0.137363%)&lt;BR/&gt; 4594: (0.137363%)&gt;];
}
9525--13035[label="1;364pkt 364fpkt"];
9525--14629[label="1;364pkt 364fpkt"];
13035--14629[label="1;364pkt 364fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="77.104.80.38"/>
      <filter dst_port="23" src_ip="77.104.80.38"/>
    </slice>
    <from sec="1289451724" usec="0"/>
    <to sec="1289451746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.141.192.38"/>
    </slice>
    <from sec="1289451924" usec="0"/>
    <to sec="1289451926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
9546[label="219.179.113.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13044[label="219.179.113.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.179.113.39:0, 210.33.133.135:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9546--13044[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.133.135" src_ip="219.179.113.39"/>
    </slice>
    <from sec="1289452468" usec="0"/>
    <to sec="1289452481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.133.100.40"/>
    </slice>
    <from sec="1289451646" usec="0"/>
    <to sec="1289452448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.9.134.40"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.104.154.40"/>
    </slice>
    <from sec="1289452109" usec="0"/>
    <to sec="1289452123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
9571[label="9.55.217.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13059[label="9.55.217.40;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.40:22, 200.244.253.242:33224}[33.3333%]&lt;BR/&gt;{9.55.217.40:22, 200.244.253.242:33310}[33.3333%]&lt;BR/&gt;{9.55.217.40:22, 200.244.253.242:59190}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 33310: (20%)&lt;BR/&gt; 33224: (20%)&lt;BR/&gt; 59190: (10%)&gt;];
}
9571--13059[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="59190" src_ip="9.55.217.40" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="33310" src_ip="9.55.217.40" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="33224" src_ip="9.55.217.40" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.105.133.41"/>
    </slice>
    <from sec="1289451831" usec="0"/>
    <to sec="1289451957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.36.48.42"/>
    </slice>
    <from sec="1289452417" usec="0"/>
    <to sec="1289452433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1128{
style=filled;
color=gray75;
9617[label="9.55.217.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13075[label="9.55.217.42;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1128[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.217.42:22, 200.244.253.242:53598}[50%]&lt;BR/&gt;{9.55.217.42:22, 200.244.253.242:53685}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 53685: (25%)&lt;BR/&gt; 53598: (25%)&gt;];
}
9617--13075[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="53685" src_ip="9.55.217.42" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="53598" src_ip="9.55.217.42" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
2632[label="203.47.62.18;d;3pkt 3fpkt", shape=diamond, color=yellow];
4018[label="128.7.176.120;s;4pkt 4fpkt", shape=diamond, color=yellow];
9628[label="158.196.124.43;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13080[label="158.196.124.43;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.124.43:80, 42.146.68.106:*}[40%]&lt;BR/&gt;{128.7.176.120:80, 42.146.67.194:*}[30%]&lt;BR/&gt;{*:80, 203.47.62.18:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60166: (6.25%)&lt;BR/&gt; 54902: (6.25%)&lt;BR/&gt; 50416: (6.25%)&lt;BR/&gt; 50114: (6.25%)&gt;];
}
2632--4018[label="0.333333;1pkt 1fpkt"];
2632--9628[label="0.333333;1pkt 1fpkt"];
9628--13080[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.62.18" src_port="80"/>
      <filter dst_ip="42.146.68.106" src_ip="158.196.124.43" src_port="80"/>
      <filter dst_ip="42.146.67.194" src_ip="128.7.176.120" src_port="80"/>
    </slice>
    <from sec="1289451616" usec="0"/>
    <to sec="1289452355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
514[label="210.42.200.34;d;1837pkt 1837fpkt", shape=diamond, color=yellow];
2089[label="210.42.200.55;d;4pkt 4fpkt", shape=diamond, color=yellow];
2132[label="214.86.147.127;s;81pkt 81fpkt", shape=diamond, color=yellow];
2516[label="128.165.210.109;d;9pkt 9fpkt", shape=diamond, color=yellow];
2593[label="166.26.25.32;d;18pkt 18fpkt", shape=diamond, color=yellow];
3618[label="128.165.211.221;d;25pkt 25fpkt", shape=diamond, color=yellow];
3736[label="202.52.208.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
3909[label="43.65.200.178;s;10pkt 10fpkt", shape=diamond, color=yellow];
3992[label="42.201.39.190;s;46pkt 46fpkt", shape=diamond, color=yellow];
4074[label="117.136.97.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
4146[label="47.17.193.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
4151[label="117.136.97.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
5718[label="117.136.97.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
7206[label="32.251.216.86;s;2pkt 2fpkt", shape=diamond, color=yellow];
7399[label="17.69.249.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
7630[label="41.47.81.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
7639[label="117.136.97.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
7894[label="128.165.210.109;d;8pkt 8fpkt", shape=hexagon, color=black];
8994[label="205.152.223.8;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9003[label="117.136.97.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9635[label="221.114.199.43;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9794[label="43.113.128.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9865[label="117.136.97.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10324[label="32.251.216.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10715[label="47.130.170.113;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10734[label="168.76.218.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11041[label="117.143.93.135;83pkt 83fpkt", shape=pentagon, color=darkviolet];
11331[label="47.17.193.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11622[label="46.197.161.172;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12142[label="210.191.150.209;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12504[label="35.205.153.236;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12772[label="205.152.223.8;30pkt 30fpkt", shape=invtriangle, color=brown];
12778[label="117.136.97.9;1pkt 1fpkt", shape=invtriangle, color=brown];
13083[label="221.114.199.43;8pkt 8fpkt", shape=invtriangle, color=brown];
13850[label="47.17.193.154;2pkt 2fpkt", shape=invtriangle, color=brown];
13987[label="46.197.161.172;6pkt 6fpkt", shape=invtriangle, color=brown];
14503[label="205.152.223.8;29pkt 29fpkt", shape=invhouse, color=bisque];
14648[label="221.114.199.43;8pkt 8fpkt", shape=invhouse, color=bisque];
15048[label="46.197.161.172;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 210.42.200.34:*}[49.7556%]&lt;BR/&gt;{*:80, 210.42.200.34:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.2112%)&lt;BR/&gt; 53: (22.2513%)&lt;BR/&gt; 22: (1.96335%)&lt;BR/&gt; 443: (1.89791%)&lt;BR/&gt; 0: (0.91623%)&gt;];
}
514--975[label="0.0145349;5pkt 5fpkt"];
514--1273[label="0.0930233;4pkt 4fpkt"];
514--1653[label="0.00389105;1pkt 1fpkt"];
514--1774[label="0.00952381;16pkt 16fpkt"];
514--1794[label="0.00392157;1pkt 1fpkt"];
514--1855[label="0.000544366;1pkt 1fpkt"];
514--1914[label="0.00367647;1pkt 1fpkt"];
514--2132[label="0.308642;25pkt 25fpkt"];
514--2426[label="0.0169492;1pkt 1fpkt"];
514--2715[label="0.00501253;2pkt 2fpkt"];
514--2767[label="0.079235;29pkt 29fpkt"];
514--2858[label="0.0045045;1pkt 1fpkt"];
514--2933[label="0.00909091;3pkt 3fpkt"];
514--2968[label="0.00215517;1pkt 1fpkt"];
514--3068[label="0.0326923;17pkt 17fpkt"];
514--3100[label="0.00229358;1pkt 1fpkt"];
514--3138[label="0.0952381;2pkt 2fpkt"];
514--3182[label="0.010101;1pkt 1fpkt"];
514--3621[label="0.0037037;1pkt 1fpkt"];
514--3672[label="0.0361446;6pkt 6fpkt"];
514--3711[label="0.00763359;2pkt 2fpkt"];
514--3763[label="0.000827815;1pkt 1fpkt"];
514--3822[label="0.00704225;1pkt 1fpkt"];
514--3893[label="0.0888889;8pkt 8fpkt"];
514--3909[label="0.2;2pkt 2fpkt"];
514--3922[label="0.297872;14pkt 14fpkt"];
514--3992[label="0.391304;18pkt 18fpkt"];
514--4074[label="1;1pkt 1fpkt"];
514--4151[label="1;1pkt 1fpkt"];
514--4286[label="0.00105152;1pkt 1fpkt"];
514--4469[label="0.142857;1pkt 1fpkt"];
514--4580[label="0.00117371;1pkt 1fpkt"];
514--5141[label="0.0370169;68pkt 68fpkt"];
514--5304[label="0.00854701;1pkt 1fpkt"];
514--5367[label="0.0108108;2pkt 2fpkt"];
514--5549[label="0.0212766;2pkt 2fpkt"];
514--6507[label="0.00401606;1pkt 1fpkt"];
514--6522[label="0.166667;1pkt 1fpkt"];
514--6556[label="0.222222;2pkt 2fpkt"];
514--6596[label="0.00819672;1pkt 1fpkt"];
514--7206[label="1;2pkt 2fpkt"];
514--7216[label="0.113208;6pkt 6fpkt"];
514--7399[label="1;1pkt 1fpkt"];
514--7630[label="1;1pkt 1fpkt"];
514--8658[label="0.00197628;2pkt 2fpkt"];
514--8676[label="0.016331;30pkt 30fpkt"];
514--8684[label="0.0299401;55pkt 55fpkt"];
514--8685[label="0.000627746;1pkt 1fpkt"];
514--8696[label="0.00409836;7pkt 7fpkt"];
514--8738[label="0.00197628;2pkt 2fpkt"];
514--8761[label="0.0299401;55pkt 55fpkt"];
514--8762[label="0.000627746;1pkt 1fpkt"];
514--8773[label="0.00409836;7pkt 7fpkt"];
514--8787[label="0.00197628;2pkt 2fpkt"];
514--8807[label="0.0299401;55pkt 55fpkt"];
514--8808[label="0.000627746;1pkt 1fpkt"];
514--8819[label="0.00409836;7pkt 7fpkt"];
514--8838[label="0.0434783;1pkt 1fpkt"];
514--8956[label="0.00961538;1pkt 1fpkt"];
514--8994[label="0.0344828;1pkt 1fpkt"];
514--9440[label="0.0268199;7pkt 7fpkt"];
514--9635[label="1;8pkt 8fpkt"];
514--9730[label="0.00436681;1pkt 1fpkt"];
514--9749[label="0.020202;2pkt 2fpkt"];
514--9794[label="1;6pkt 6fpkt"];
514--9925[label="0.0192308;2pkt 2fpkt"];
514--10093[label="0.00458716;1pkt 1fpkt"];
514--10115[label="0.000768049;1pkt 1fpkt"];
514--10224[label="0.0117994;4pkt 4fpkt"];
514--10324[label="1;1pkt 1fpkt"];
514--10538[label="0.0909091;1pkt 1fpkt"];
514--10549[label="0.0869565;8pkt 8fpkt"];
514--10636[label="0.0138889;1pkt 1fpkt"];
514--10662[label="0.0168539;3pkt 3fpkt"];
514--10715[label="1;3pkt 3fpkt"];
514--10720[label="0.0116279;1pkt 1fpkt"];
514--10734[label="1;1pkt 1fpkt"];
514--10741[label="0.00757576;1pkt 1fpkt"];
514--10805[label="0.013245;2pkt 2fpkt"];
514--11041[label="0.240964;20pkt 20fpkt"];
514--11054[label="0.0121951;1pkt 1fpkt"];
514--11171[label="0.00671141;1pkt 1fpkt"];
514--11530[label="0.0384615;1pkt 1fpkt"];
514--11622[label="1;5pkt 5fpkt"];
514--11787[label="0.0645161;2pkt 2fpkt"];
514--11928[label="1;2pkt 2fpkt"];
514--12142[label="1;10pkt 10fpkt"];
514--12356[label="0.00473934;2pkt 2fpkt"];
514--12504[label="1;3pkt 3fpkt"];
514--12522[label="0.0243902;1pkt 1fpkt"];
514--12651[label="0.0108696;2pkt 2fpkt"];
514--12757[label="0.00961538;1pkt 1fpkt"];
514--12772[label="0.0333333;1pkt 1fpkt"];
514--12990[label="0.0267176;7pkt 7fpkt"];
514--13083[label="1;8pkt 8fpkt"];
514--13135[label="0.00438596;1pkt 1fpkt"];
514--13147[label="0.0204082;2pkt 2fpkt"];
514--13296[label="0.00458716;1pkt 1fpkt"];
514--13354[label="0.0117994;4pkt 4fpkt"];
514--13542[label="0.0138889;1pkt 1fpkt"];
514--13553[label="0.0169492;3pkt 3fpkt"];
514--13579[label="0.0114943;1pkt 1fpkt"];
514--13592[label="0.0075188;1pkt 1fpkt"];
514--13943[label="0.0384615;1pkt 1fpkt"];
514--13987[label="1;6pkt 6fpkt"];
514--14121[label="1;1pkt 1fpkt"];
514--14438[label="0.0108108;2pkt 2fpkt"];
514--14496[label="0.00961538;1pkt 1fpkt"];
514--14503[label="0.0344828;1pkt 1fpkt"];
514--14648[label="1;8pkt 8fpkt"];
514--14670[label="0.00436681;1pkt 1fpkt"];
514--14864[label="0.00757576;1pkt 1fpkt"];
514--15022[label="0.0384615;1pkt 1fpkt"];
514--15048[label="1;5pkt 5fpkt"];
2089--3736[label="1;1pkt 1fpkt"];
2089--8994[label="0.25;1pkt 1fpkt"];
2089--12772[label="0.25;1pkt 1fpkt"];
2089--14503[label="0.25;1pkt 1fpkt"];
2132--3995[label="0.0123457;1pkt 1fpkt"];
2132--8396[label="0.0123457;1pkt 1fpkt"];
2132--8684[label="0.0987654;8pkt 8fpkt"];
2132--8761[label="0.0987654;8pkt 8fpkt"];
2132--8807[label="0.0987654;8pkt 8fpkt"];
2516--11041[label="0.777778;7pkt 7fpkt"];
2593--3909[label="0.8;8pkt 8fpkt"];
2593--4146[label="1;1pkt 1fpkt"];
2593--4256[label="0.222222;4pkt 4fpkt"];
2593--6695[label="0.0555556;1pkt 1fpkt"];
2593--9627[label="0.0555556;1pkt 1fpkt"];
2593--10224[label="0.0555556;1pkt 1fpkt"];
2593--11331[label="0.5;1pkt 1fpkt"];
2593--11889[label="0.0769231;1pkt 1fpkt"];
2593--12544[label="0.0555556;1pkt 1fpkt"];
2593--13079[label="0.0555556;1pkt 1fpkt"];
2593--13354[label="0.0555556;1pkt 1fpkt"];
2593--13850[label="0.5;1pkt 1fpkt"];
3618--3705[label="0.04;1pkt 1fpkt"];
3618--7639[label="1;2pkt 2fpkt"];
3618--8684[label="0.08;2pkt 2fpkt"];
3618--8761[label="0.08;2pkt 2fpkt"];
3618--8807[label="0.08;2pkt 2fpkt"];
3618--9003[label="1;1pkt 1fpkt"];
3618--9865[label="0.5;1pkt 1fpkt"];
3618--11041[label="0.72;18pkt 18fpkt"];
3618--12778[label="1;1pkt 1fpkt"];
3992--3995[label="0.0434783;2pkt 2fpkt"];
3992--4644[label="0.0454545;1pkt 1fpkt"];
3992--4869[label="0.0869565;4pkt 4fpkt"];
4146--11331[label="1;1pkt 1fpkt"];
4146--13850[label="1;1pkt 1fpkt"];
5718--9865[label="1;1pkt 1fpkt"];
7206--10324[label="1;1pkt 1fpkt"];
7639--9003[label="1;1pkt 1fpkt"];
7639--12778[label="1;1pkt 1fpkt"];
7894--11041[label="0.875;7pkt 7fpkt"];
8994--12772[label="1;29pkt 29fpkt"];
8994--14503[label="1;29pkt 29fpkt"];
9003--12778[label="1;1pkt 1fpkt"];
9635--13083[label="1;8pkt 8fpkt"];
9635--14648[label="1;8pkt 8fpkt"];
11331--13850[label="1;2pkt 2fpkt"];
11622--13987[label="1;5pkt 5fpkt"];
11622--15048[label="1;5pkt 5fpkt"];
12772--14503[label="1;29pkt 29fpkt"];
13083--14648[label="1;8pkt 8fpkt"];
13987--15048[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.200.34" src_port="53"/>
      <filter dst_ip="210.42.200.34" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.1.229.43"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.10.64.44"/>
    </slice>
    <from sec="1289451926" usec="0"/>
    <to sec="1289452020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
9649[label="9.55.214.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13094[label="9.55.214.44;2pkt 2fpkt", shape=invtriangle, color=brown];
14653[label="9.55.214.44;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.214.44:22, 200.244.253.242:50051}[50%]&lt;BR/&gt;{9.55.214.44:22, 200.244.253.242:50135}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 50135: (25%)&lt;BR/&gt; 50051: (25%)&gt;];
}
9649--13094[label="1;2pkt 2fpkt"];
9649--14653[label="1;2pkt 2fpkt"];
13094--14653[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="50135" src_ip="9.55.214.44" src_port="22"/>
      <filter dst_ip="200.244.253.242" dst_port="50051" src_ip="9.55.214.44" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.149.33.45"/>
    </slice>
    <from sec="1289451777" usec="0"/>
    <to sec="1289451789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
9659[label="198.243.128.45;62pkt 62fpkt", shape=pentagon, color=darkviolet];
13101[label="198.243.128.45;62pkt 62fpkt", shape=invtriangle, color=brown];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.243.128.45:*, 166.26.179.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14325: (0.806452%)&lt;BR/&gt; 14234: (0.806452%)&lt;BR/&gt; 14206: (0.806452%)&lt;BR/&gt; 14192: (0.806452%)&gt;];
}
9659--13101[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.81" dst_port="80" src_ip="198.243.128.45"/>
    </slice>
    <from sec="1289452463" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.189.167.45"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.157.204.45"/>
    </slice>
    <from sec="1289452085" usec="0"/>
    <to sec="1289452094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
463[label="211.185.156.83;d;291pkt 291fpkt", shape=diamond, color=yellow];
1167[label="32.34.86.29;s;129pkt 129fpkt", shape=diamond, color=yellow];
1198[label="211.185.158.151;d;291pkt 291fpkt", shape=diamond, color=yellow];
1507[label="203.47.62.29;s;7pkt 7fpkt", shape=diamond, color=yellow];
1788[label="210.42.229.81;d;307pkt 307fpkt", shape=diamond, color=yellow];
1826[label="43.65.148.52;s;63pkt 63fpkt", shape=diamond, color=yellow];
1952[label="211.185.156.26;d;217pkt 217fpkt", shape=diamond, color=yellow];
2338[label="210.33.104.151;d;2pkt 2fpkt", shape=diamond, color=yellow];
2350[label="210.33.111.59;d;78pkt 78fpkt", shape=diamond, color=yellow];
2502[label="52.241.105.12;s;160pkt 160fpkt", shape=diamond, color=yellow];
2625[label="146.5.17.133;s;28pkt 28fpkt", shape=diamond, color=yellow];
3037[label="166.26.234.111;d;88pkt 88fpkt", shape=diamond, color=yellow];
3123[label="188.232.159.21;s;96pkt 96fpkt", shape=diamond, color=yellow];
3589[label="42.146.67.108;s;13pkt 13fpkt", shape=diamond, color=yellow];
3598[label="49.19.49.202;s;42pkt 42fpkt", shape=diamond, color=yellow];
3845[label="133.4.155.80;d;30pkt 30fpkt", shape=diamond, color=yellow];
5463[label="210.33.107.100;d;10pkt 10fpkt", shape=diamond, color=yellow];
6503[label="211.185.155.21;d;57pkt 57fpkt", shape=diamond, color=yellow];
7457[label="80.42.13.27;s;20pkt 20fpkt", shape=diamond, color=yellow];
9050[label="52.241.105.12;159pkt 159fpkt", shape=pentagon, color=darkviolet];
9328[label="80.42.13.27;19pkt 19fpkt", shape=pentagon, color=darkviolet];
9366[label="203.47.62.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9677[label="210.43.185.46;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10198[label="35.145.25.79;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10354[label="26.69.36.89;44pkt 44fpkt", shape=pentagon, color=darkviolet];
10635[label="42.146.67.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11242[label="43.166.146.147;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11978[label="35.145.66.198;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12299[label="47.128.13.220;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12801[label="52.241.105.12;160pkt 160fpkt", shape=invtriangle, color=brown];
12929[label="80.42.13.27;20pkt 20fpkt", shape=invtriangle, color=brown];
12954[label="203.47.62.29;8pkt 8fpkt", shape=invtriangle, color=brown];
13110[label="210.43.185.46;5pkt 5fpkt", shape=invtriangle, color=brown];
13342[label="35.145.25.79;16pkt 16fpkt", shape=invtriangle, color=brown];
13541[label="42.146.67.108;1pkt 1fpkt", shape=invtriangle, color=brown];
13789[label="35.226.34.144;1pkt 1fpkt", shape=invtriangle, color=brown];
13812[label="43.166.146.147;17pkt 17fpkt", shape=invtriangle, color=brown];
14585[label="80.42.13.27;19pkt 19fpkt", shape=invhouse, color=bisque];
14841[label="42.146.67.108;1pkt 1fpkt", shape=invhouse, color=bisque];
14950[label="35.226.34.144;1pkt 1fpkt", shape=invhouse, color=bisque];
14960[label="43.166.146.147;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[23.9635%]&lt;BR/&gt;{*:*, 210.42.229.81:*}[21.7147%]&lt;BR/&gt;{*:*, 211.185.158.151:*}[20.4498%]&lt;BR/&gt;{*:*, 211.185.156.83:80}[20.0984%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.141%)&lt;BR/&gt; 80: (14.726%)&lt;BR/&gt; 53: (7.31265%)&lt;BR/&gt; 113: (2.05479%)&lt;BR/&gt; 0: (0.322321%)&gt;];
}
463--1507[label="0.428571;3pkt 3fpkt"];
463--1826[label="0.952381;60pkt 60fpkt"];
463--3589[label="0.769231;10pkt 10fpkt"];
463--3598[label="1;42pkt 42fpkt"];
463--4096[label="0.161512;47pkt 47fpkt"];
463--6484[label="0.00343643;1pkt 1fpkt"];
463--7293[label="0.111111;1pkt 1fpkt"];
463--7457[label="1;20pkt 20fpkt"];
463--8562[label="0.00343643;1pkt 1fpkt"];
463--8650[label="0.00343643;1pkt 1fpkt"];
463--8664[label="0.0412371;12pkt 12fpkt"];
463--8666[label="0.00343643;1pkt 1fpkt"];
463--8688[label="0.0515464;15pkt 15fpkt"];
463--8703[label="0.00343643;1pkt 1fpkt"];
463--8743[label="0.0412371;12pkt 12fpkt"];
463--8745[label="0.00343643;1pkt 1fpkt"];
463--8765[label="0.0515464;15pkt 15fpkt"];
463--8780[label="0.00343643;1pkt 1fpkt"];
463--8790[label="0.0412371;12pkt 12fpkt"];
463--8792[label="0.00343643;1pkt 1fpkt"];
463--8811[label="0.0515464;15pkt 15fpkt"];
463--8826[label="0.00343643;1pkt 1fpkt"];
463--9328[label="1;19pkt 19fpkt"];
463--9366[label="0.5;4pkt 4fpkt"];
463--10354[label="1;44pkt 44fpkt"];
463--10635[label="1;1pkt 1fpkt"];
463--11242[label="0.176471;3pkt 3fpkt"];
463--11922[label="0.0833333;1pkt 1fpkt"];
463--12405[label="0.00343643;1pkt 1fpkt"];
463--12929[label="1;20pkt 20fpkt"];
463--12954[label="0.5;4pkt 4fpkt"];
463--13541[label="1;1pkt 1fpkt"];
463--13812[label="0.176471;3pkt 3fpkt"];
463--14348[label="0.00343643;1pkt 1fpkt"];
463--14585[label="1;19pkt 19fpkt"];
463--14841[label="1;1pkt 1fpkt"];
463--14960[label="0.176471;3pkt 3fpkt"];
463--15217[label="0.00343643;1pkt 1fpkt"];
1167--1952[label="0.00775194;1pkt 1fpkt"];
1167--2312[label="0.00775194;1pkt 1fpkt"];
1167--2338[label="0.5;1pkt 1fpkt"];
1167--2819[label="0.00775194;1pkt 1fpkt"];
1167--3037[label="0.909091;80pkt 80fpkt"];
1167--5180[label="0.00775194;1pkt 1fpkt"];
1167--5261[label="0.0155039;2pkt 2fpkt"];
1167--5463[label="0.1;1pkt 1fpkt"];
1167--6503[label="0.438596;25pkt 25fpkt"];
1167--8063[label="0.00775194;1pkt 1fpkt"];
1198--1507[label="0.142857;1pkt 1fpkt"];
1198--1774[label="0.00687285;2pkt 2fpkt"];
1198--1794[label="0.00392157;1pkt 1fpkt"];
1198--4388[label="0.00343643;1pkt 1fpkt"];
1198--4434[label="0.00343643;1pkt 1fpkt"];
1198--4507[label="0.00687285;2pkt 2fpkt"];
1198--4549[label="0.00343643;1pkt 1fpkt"];
1198--5139[label="0.00343643;1pkt 1fpkt"];
1198--5141[label="0.103093;30pkt 30fpkt"];
1198--5929[label="0.00343643;1pkt 1fpkt"];
1198--6484[label="0.00343643;1pkt 1fpkt"];
1198--6507[label="0.0240964;6pkt 6fpkt"];
1198--7038[label="0.00343643;1pkt 1fpkt"];
1198--8562[label="0.00343643;1pkt 1fpkt"];
1198--8650[label="0.00343643;1pkt 1fpkt"];
1198--8664[label="0.00343643;1pkt 1fpkt"];
1198--8696[label="0.0412371;12pkt 12fpkt"];
1198--8703[label="0.00343643;1pkt 1fpkt"];
1198--8743[label="0.00343643;1pkt 1fpkt"];
1198--8773[label="0.0412371;12pkt 12fpkt"];
1198--8780[label="0.00343643;1pkt 1fpkt"];
1198--8790[label="0.00343643;1pkt 1fpkt"];
1198--8819[label="0.0412371;12pkt 12fpkt"];
1198--8826[label="0.00343643;1pkt 1fpkt"];
1198--9366[label="0.125;1pkt 1fpkt"];
1198--10662[label="0.0168539;3pkt 3fpkt"];
1198--11011[label="0.00343643;1pkt 1fpkt"];
1198--11167[label="0.0740741;2pkt 2fpkt"];
1198--12405[label="0.00343643;1pkt 1fpkt"];
1198--12954[label="0.125;1pkt 1fpkt"];
1198--13553[label="0.0169492;3pkt 3fpkt"];
1198--14348[label="0.00343643;1pkt 1fpkt"];
1198--15217[label="0.00343643;1pkt 1fpkt"];
1507--1952[label="0.285714;2pkt 2fpkt"];
1507--2338[label="0.5;1pkt 1fpkt"];
1507--9366[label="1;7pkt 7fpkt"];
1507--12954[label="1;7pkt 7fpkt"];
1788--2502[label="1;160pkt 160fpkt"];
1788--8994[label="0.0344828;1pkt 1fpkt"];
1788--9050[label="1;159pkt 159fpkt"];
1788--9677[label="0.333333;2pkt 2fpkt"];
1788--11978[label="0.538462;7pkt 7fpkt"];
1788--12772[label="0.0333333;1pkt 1fpkt"];
1788--12801[label="1;160pkt 160fpkt"];
1788--13110[label="0.2;1pkt 1fpkt"];
1788--14503[label="0.0344828;1pkt 1fpkt"];
1826--5804[label="0.015873;1pkt 1fpkt"];
1826--8664[label="0.0634921;4pkt 4fpkt"];
1826--8666[label="0.015873;1pkt 1fpkt"];
1826--8688[label="0.047619;3pkt 3fpkt"];
1826--8743[label="0.0634921;4pkt 4fpkt"];
1826--8745[label="0.015873;1pkt 1fpkt"];
1826--8765[label="0.047619;3pkt 3fpkt"];
1826--8790[label="0.0634921;4pkt 4fpkt"];
1826--8792[label="0.015873;1pkt 1fpkt"];
1826--8811[label="0.047619;3pkt 3fpkt"];
1952--3123[label="1;96pkt 96fpkt"];
1952--6484[label="0.00460829;1pkt 1fpkt"];
1952--8562[label="0.00460829;1pkt 1fpkt"];
1952--8650[label="0.00460829;1pkt 1fpkt"];
1952--8703[label="0.00460829;1pkt 1fpkt"];
1952--8780[label="0.00460829;1pkt 1fpkt"];
1952--8826[label="0.00460829;1pkt 1fpkt"];
1952--9366[label="0.25;2pkt 2fpkt"];
1952--12299[label="0.75;3pkt 3fpkt"];
1952--12405[label="0.00460829;1pkt 1fpkt"];
1952--12954[label="0.25;2pkt 2fpkt"];
1952--14348[label="0.00460829;1pkt 1fpkt"];
1952--15217[label="0.00460829;1pkt 1fpkt"];
2338--9366[label="0.5;1pkt 1fpkt"];
2338--12954[label="0.5;1pkt 1fpkt"];
2350--2625[label="1;28pkt 28fpkt"];
2350--3589[label="0.153846;2pkt 2fpkt"];
2350--8664[label="0.0128205;1pkt 1fpkt"];
2350--8688[label="0.0128205;1pkt 1fpkt"];
2350--8743[label="0.0128205;1pkt 1fpkt"];
2350--8765[label="0.0128205;1pkt 1fpkt"];
2350--8790[label="0.0128205;1pkt 1fpkt"];
2350--8811[label="0.0128205;1pkt 1fpkt"];
2350--11805[label="0.111111;1pkt 1fpkt"];
2502--9050[label="1;159pkt 159fpkt"];
2502--12801[label="1;160pkt 160fpkt"];
3037--9677[label="0.166667;1pkt 1fpkt"];
3037--11978[label="0.0769231;1pkt 1fpkt"];
3037--13110[label="0.2;1pkt 1fpkt"];
3037--13789[label="1;1pkt 1fpkt"];
3037--14950[label="1;1pkt 1fpkt"];
3589--8664[label="0.0769231;1pkt 1fpkt"];
3589--8688[label="0.153846;2pkt 2fpkt"];
3589--8743[label="0.0769231;1pkt 1fpkt"];
3589--8765[label="0.153846;2pkt 2fpkt"];
3589--8790[label="0.0769231;1pkt 1fpkt"];
3589--8811[label="0.153846;2pkt 2fpkt"];
3589--10635[label="1;1pkt 1fpkt"];
3589--13541[label="1;1pkt 1fpkt"];
3589--14841[label="1;1pkt 1fpkt"];
3845--8664[label="0.233333;7pkt 7fpkt"];
3845--8743[label="0.233333;7pkt 7fpkt"];
3845--8790[label="0.233333;7pkt 7fpkt"];
3845--11242[label="0.235294;4pkt 4fpkt"];
3845--13812[label="0.235294;4pkt 4fpkt"];
3845--14960[label="0.235294;4pkt 4fpkt"];
5463--9677[label="0.166667;1pkt 1fpkt"];
5463--11978[label="0.1;1pkt 1fpkt"];
5463--13110[label="0.2;1pkt 1fpkt"];
6503--8562[label="0.0175439;1pkt 1fpkt"];
6503--8650[label="0.0175439;1pkt 1fpkt"];
6503--8664[label="0.0175439;1pkt 1fpkt"];
6503--8703[label="0.0175439;1pkt 1fpkt"];
6503--8743[label="0.0175439;1pkt 1fpkt"];
6503--8780[label="0.0175439;1pkt 1fpkt"];
6503--8790[label="0.0175439;1pkt 1fpkt"];
6503--8826[label="0.0175439;1pkt 1fpkt"];
6503--10198[label="0.3125;5pkt 5fpkt"];
6503--11978[label="0.0769231;1pkt 1fpkt"];
6503--12405[label="0.0175439;1pkt 1fpkt"];
6503--13342[label="0.3125;5pkt 5fpkt"];
6503--14348[label="0.0175439;1pkt 1fpkt"];
6503--15217[label="0.0175439;1pkt 1fpkt"];
7457--8688[label="0.45;9pkt 9fpkt"];
7457--8765[label="0.45;9pkt 9fpkt"];
7457--8811[label="0.45;9pkt 9fpkt"];
7457--9328[label="1;19pkt 19fpkt"];
7457--12929[label="1;20pkt 20fpkt"];
7457--14585[label="1;19pkt 19fpkt"];
9050--12801[label="1;159pkt 159fpkt"];
9328--12929[label="1;19pkt 19fpkt"];
9328--14585[label="1;19pkt 19fpkt"];
9366--12954[label="1;8pkt 8fpkt"];
9677--13110[label="1;5pkt 5fpkt"];
10198--13342[label="1;16pkt 16fpkt"];
10635--13541[label="1;1pkt 1fpkt"];
10635--14841[label="1;1pkt 1fpkt"];
11242--13812[label="1;17pkt 17fpkt"];
11242--14960[label="1;17pkt 17fpkt"];
12929--14585[label="1;19pkt 19fpkt"];
13541--14841[label="1;1pkt 1fpkt"];
13789--14950[label="1;1pkt 1fpkt"];
13812--14960[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.229.81"/>
      <filter dst_ip="211.185.158.151"/>
      <filter dst_port="25"/>
      <filter dst_ip="211.185.156.83" dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.80.30.47"/>
    </slice>
    <from sec="1289452282" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.218.69.47"/>
    </slice>
    <from sec="1289452336" usec="0"/>
    <to sec="1289452402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.139.151.47"/>
    </slice>
    <from sec="1289451819" usec="0"/>
    <to sec="1289451852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.18.48"/>
    </slice>
    <from sec="1289451647" usec="0"/>
    <to sec="1289451655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
9699[label="133.4.28.48;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13123[label="133.4.28.48;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.28.48:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61347: (2.63158%)&lt;BR/&gt; 55075: (2.63158%)&lt;BR/&gt; 51729: (2.63158%)&lt;BR/&gt; 51636: (2.63158%)&gt;];
}
9699--13123[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.28.48" src_port="25"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
9716[label="146.82.229.48;350pkt 350fpkt", shape=pentagon, color=darkviolet];
13128[label="146.82.229.48;350pkt 350fpkt", shape=invtriangle, color=brown];
14669[label="146.82.229.48;351pkt 351fpkt", shape=invhouse, color=bisque];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.82.229.48:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9716--13128[label="1;350pkt 350fpkt"];
9716--14669[label="1;350pkt 350fpkt"];
13128--14669[label="1;350pkt 350fpkt"];
</description>
    <slice>
      <filter src_ip="146.82.229.48"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.187.168.49"/>
    </slice>
    <from sec="1289452255" usec="0"/>
    <to sec="1289452492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
9729[label="17.90.190.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13134[label="17.90.190.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.90.190.49:50554, 211.185.145.108:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50554: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9729--13134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="17.90.190.49" src_port="50554"/>
    </slice>
    <from sec="1289451763" usec="0"/>
    <to sec="1289452409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.68.218.49"/>
    </slice>
    <from sec="1289452205" usec="0"/>
    <to sec="1289452211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.55.3.50"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.136.50.50"/>
    </slice>
    <from sec="1289451764" usec="0"/>
    <to sec="1289452433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.135.24.51"/>
    </slice>
    <from sec="1289452179" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
9764[label="211.185.157.51;113pkt 113fpkt", shape=pentagon, color=darkviolet];
13156[label="211.185.157.51;112pkt 112fpkt", shape=invtriangle, color=brown];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.157.51:0, *:0}[99.115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1111%)&lt;BR/&gt; 6000: (0.444444%)&lt;BR/&gt; 4899: (0.444444%)&gt;];
}
9764--13156[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.157.51"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
9795[label="210.33.133.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13165[label="210.33.133.53;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.133.53:0, 52.174.136.230:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9795--13165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="52.174.136.230" src_ip="210.33.133.53"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.69.199.53"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
9810[label="133.4.81.54;46pkt 46fpkt", shape=pentagon, color=darkviolet];
13169[label="133.4.81.54;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.81.54:52201, *:*}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52201: (43.4783%)&lt;BR/&gt; 27250: (2.17391%)&lt;BR/&gt; 443: (2.17391%)&lt;BR/&gt; 63233: (1.08696%)&lt;BR/&gt; 60593: (1.08696%)&gt;];
}
9810--13169[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.81.54" src_port="52201"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
9822[label="199.27.237.54;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13173[label="199.27.237.54;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.27.237.54:*, 128.1.28.40:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54132: (9.09091%)&lt;BR/&gt; 54131: (9.09091%)&lt;BR/&gt; 54128: (9.09091%)&lt;BR/&gt; 54127: (9.09091%)&gt;];
}
9822--13173[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.28.40" dst_port="80" src_ip="199.27.237.54"/>
    </slice>
    <from sec="1289452335" usec="0"/>
    <to sec="1289452352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
9824[label="81.31.10.55;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13174[label="81.31.10.55;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.31.10.55:*, 166.26.179.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1916: (4.54545%)&lt;BR/&gt; 1914: (4.54545%)&lt;BR/&gt; 1913: (4.54545%)&lt;BR/&gt; 1912: (4.54545%)&gt;];
}
9824--13174[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.81" dst_port="80" src_ip="81.31.10.55"/>
    </slice>
    <from sec="1289452417" usec="0"/>
    <to sec="1289452441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.243.42.55"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
7110[label="218.155.156.55;s;267pkt 267fpkt", shape=diamond, color=yellow];
9833[label="218.155.156.55;285pkt 285fpkt", shape=pentagon, color=darkviolet];
13179[label="218.155.156.55;284pkt 284fpkt", shape=invtriangle, color=brown];
14686[label="218.155.156.55;285pkt 285fpkt", shape=invhouse, color=bisque];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.155.156.55:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7110--9833[label="0.996255;266pkt 266fpkt"];
7110--13179[label="0.992509;265pkt 265fpkt"];
7110--14686[label="0.996255;266pkt 266fpkt"];
9833--13179[label="1;284pkt 284fpkt"];
9833--14686[label="1;285pkt 285fpkt"];
13179--14686[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter src_ip="218.155.156.55"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.244.85.56"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.56"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289451765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
9861[label="133.4.19.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13192[label="133.4.19.57;2pkt 2fpkt", shape=invtriangle, color=brown];
14692[label="133.4.19.57;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.19.57:65448, 146.5.29.90:443}[50%]&lt;BR/&gt;{133.4.19.57:65453, 146.5.29.90:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 65453: (25%)&lt;BR/&gt; 65448: (25%)&gt;];
}
9861--13192[label="1;2pkt 2fpkt"];
9861--14692[label="1;2pkt 2fpkt"];
13192--14692[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.5.29.90" dst_port="443" src_ip="133.4.19.57" src_port="65453"/>
      <filter dst_ip="146.5.29.90" dst_port="443" src_ip="133.4.19.57" src_port="65448"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
9870[label="133.4.169.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13195[label="133.4.169.57;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.169.57:57432, 134.153.218.220:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57432: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9870--13195[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.153.218.220" dst_port="80" src_ip="133.4.169.57" src_port="57432"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.86.189.57"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289451742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
9878[label="128.7.71.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13200[label="128.7.71.58;2pkt 2fpkt", shape=invtriangle, color=brown];
14694[label="128.7.71.58;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.71.58:80, 42.146.68.104:58643}[50%]&lt;BR/&gt;{128.7.71.58:80, 42.146.68.104:60366}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60366: (25%)&lt;BR/&gt; 58643: (25%)&gt;];
}
9878--13200[label="1;2pkt 2fpkt"];
9878--14694[label="1;2pkt 2fpkt"];
13200--14694[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.104" dst_port="60366" src_ip="128.7.71.58" src_port="80"/>
      <filter dst_ip="42.146.68.104" dst_port="58643" src_ip="128.7.71.58" src_port="80"/>
    </slice>
    <from sec="1289451745" usec="0"/>
    <to sec="1289452075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.57.89.58"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289452438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.211.165.58"/>
    </slice>
    <from sec="1289451769" usec="0"/>
    <to sec="1289452459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.58"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289452062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.69.33.59"/>
    </slice>
    <from sec="1289451926" usec="0"/>
    <to sec="1289451950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.144.80.61"/>
    </slice>
    <from sec="1289451967" usec="0"/>
    <to sec="1289452037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.156.81.61"/>
    </slice>
    <from sec="1289452141" usec="0"/>
    <to sec="1289452205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.53.7.62"/>
    </slice>
    <from sec="1289452026" usec="0"/>
    <to sec="1289452053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
9930[label="133.4.152.62;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13225[label="133.4.152.62;14pkt 14fpkt", shape=invtriangle, color=brown];
14703[label="133.4.152.62;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.152.62:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64507: (3.48837%)&lt;BR/&gt; 55157: (3.48837%)&lt;BR/&gt; 44924: (3.48837%)&lt;BR/&gt; 34061: (3.48837%)&gt;];
}
9930--13225[label="1;14pkt 14fpkt"];
9930--14703[label="1;14pkt 14fpkt"];
13225--14703[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.152.62" src_port="25"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289452472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
9937[label="197.190.65.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13228[label="197.190.65.63;1pkt 1fpkt", shape=invtriangle, color=brown];
14706[label="197.190.65.63;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.190.65.63:4532, 211.185.145.69:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4532: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9937--13228[label="1;1pkt 1fpkt"];
9937--14706[label="1;1pkt 1fpkt"];
13228--14706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.69" dst_port="80" src_ip="197.190.65.63" src_port="4532"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.65.174.63"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.166.17.65"/>
    </slice>
    <from sec="1289452425" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,053,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.49.180.65"/>
    </slice>
    <from sec="1289451741" usec="0"/>
    <to sec="1289452352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.74.203.65"/>
    </slice>
    <from sec="1289451665" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
9996[label="15.74.203.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13252[label="15.74.203.66;2pkt 2fpkt", shape=invtriangle, color=brown];
14718[label="15.74.203.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.74.203.66:80, 133.4.151.20:55140}[50%]&lt;BR/&gt;{15.74.203.66:80, 133.4.151.20:59135}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59135: (25%)&lt;BR/&gt; 55140: (25%)&gt;];
}
9996--13252[label="1;2pkt 2fpkt"];
9996--14718[label="1;2pkt 2fpkt"];
13252--14718[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.151.20" dst_port="59135" src_ip="15.74.203.66" src_port="80"/>
      <filter dst_ip="133.4.151.20" dst_port="55140" src_ip="15.74.203.66" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.9.67"/>
    </slice>
    <from sec="1289451781" usec="0"/>
    <to sec="1289451795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.69.194.67"/>
    </slice>
    <from sec="1289452164" usec="0"/>
    <to sec="1289452186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.1.68"/>
    </slice>
    <from sec="1289451873" usec="0"/>
    <to sec="1289451896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
10025[label="128.7.128.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13266[label="128.7.128.68;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.128.68:80, 203.47.62.30:36158}[50%]&lt;BR/&gt;{128.7.128.68:53, 42.146.67.234:42275}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42275: (25%)&lt;BR/&gt; 36158: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
10025--13266[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.234" dst_port="42275" src_ip="128.7.128.68" src_port="53"/>
      <filter dst_ip="203.47.62.30" dst_port="36158" src_ip="128.7.128.68" src_port="80"/>
    </slice>
    <from sec="1289452165" usec="0"/>
    <to sec="1289452168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.74.200.68"/>
    </slice>
    <from sec="1289452295" usec="0"/>
    <to sec="1289452330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.146.128.69"/>
    </slice>
    <from sec="1289452032" usec="0"/>
    <to sec="1289452056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="163.91.129.71"/>
    </slice>
    <from sec="1289452439" usec="0"/>
    <to sec="1289452453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.130.164.72"/>
    </slice>
    <from sec="1289451933" usec="0"/>
    <to sec="1289451936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.126.55.73"/>
    </slice>
    <from sec="1289451747" usec="0"/>
    <to sec="1289452231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
4341[label="133.4.21.39;d;95pkt 95fpkt", shape=diamond, color=yellow];
10114[label="9.183.209.73;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13302[label="9.183.209.73;7pkt 7fpkt", shape=invtriangle, color=brown];
14740[label="9.183.209.73;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.4.21.39:*}[43.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.7241%)&lt;BR/&gt; 47520: (6.89655%)&lt;BR/&gt; 443: (6.89655%)&lt;BR/&gt; 60683: (4.74138%)&lt;BR/&gt; 7024: (4.74138%)&gt;];
}
4341--4495[label="0.0105263;1pkt 1fpkt"];
4341--4508[label="0.0210526;2pkt 2fpkt"];
4341--4560[label="0.0105263;1pkt 1fpkt"];
4341--5138[label="0.0105263;1pkt 1fpkt"];
4341--5912[label="0.0105263;1pkt 1fpkt"];
4341--7307[label="0.0133333;1pkt 1fpkt"];
4341--8684[label="0.0210526;2pkt 2fpkt"];
4341--8685[label="0.0210526;2pkt 2fpkt"];
4341--8761[label="0.0210526;2pkt 2fpkt"];
4341--8762[label="0.0210526;2pkt 2fpkt"];
4341--8807[label="0.0210526;2pkt 2fpkt"];
4341--8808[label="0.0210526;2pkt 2fpkt"];
4341--9083[label="0.0105263;1pkt 1fpkt"];
4341--9627[label="0.0105263;1pkt 1fpkt"];
4341--9730[label="0.0105263;1pkt 1fpkt"];
4341--9854[label="0.0105263;1pkt 1fpkt"];
4341--10062[label="0.0144928;1pkt 1fpkt"];
4341--10114[label="1;7pkt 7fpkt"];
4341--10345[label="0.0105263;1pkt 1fpkt"];
4341--11000[label="0.0105263;1pkt 1fpkt"];
4341--11499[label="0.011236;1pkt 1fpkt"];
4341--11588[label="0.0105263;1pkt 1fpkt"];
4341--12251[label="0.0128205;1pkt 1fpkt"];
4341--12359[label="0.0105263;1pkt 1fpkt"];
4341--12370[label="0.0105263;1pkt 1fpkt"];
4341--12594[label="0.0105263;1pkt 1fpkt"];
4341--13079[label="0.0105263;1pkt 1fpkt"];
4341--13135[label="0.0105263;1pkt 1fpkt"];
4341--13188[label="0.0105263;1pkt 1fpkt"];
4341--13282[label="0.0144928;1pkt 1fpkt"];
4341--13302[label="1;7pkt 7fpkt"];
4341--13415[label="0.0105263;1pkt 1fpkt"];
4341--13709[label="0.0105263;1pkt 1fpkt"];
4341--13970[label="0.0105263;1pkt 1fpkt"];
4341--14670[label="0.0105263;1pkt 1fpkt"];
4341--14740[label="1;7pkt 7fpkt"];
10114--13302[label="1;7pkt 7fpkt"];
10114--14740[label="1;7pkt 7fpkt"];
13302--14740[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.21.39" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
10135[label="24.38.212.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13307[label="24.38.212.74;1pkt 1fpkt", shape=invtriangle, color=brown];
14743[label="24.38.212.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.38.212.74:36157, 128.19.208.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36157: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10135--13307[label="1;1pkt 1fpkt"];
10135--14743[label="1;1pkt 1fpkt"];
13307--14743[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.208.132" dst_port="80" src_ip="24.38.212.74" src_port="36157"/>
    </slice>
    <from sec="1289452372" usec="0"/>
    <to sec="1289452392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.8.75"/>
    </slice>
    <from sec="1289451868" usec="0"/>
    <to sec="1289451872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.146.34.75"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1192{
style=filled;
color=gray75;
4025[label="211.185.157.162;d;39pkt 39fpkt", shape=diamond, color=yellow];
7641[label="14.8.48.224;s;2pkt 2fpkt", shape=diamond, color=yellow];
10043[label="81.102.165.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10153[label="14.9.108.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12340[label="14.8.48.224;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12390[label="198.210.164.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13277[label="81.102.165.69;1pkt 1fpkt", shape=invtriangle, color=brown];
13318[label="14.9.108.76;1pkt 1fpkt", shape=invtriangle, color=brown];
14310[label="14.8.48.224;4pkt 4fpkt", shape=invtriangle, color=brown];
14335[label="198.210.164.227;1pkt 1fpkt", shape=invtriangle, color=brown];
14747[label="14.9.108.76;1pkt 1fpkt", shape=invhouse, color=bisque];
15210[label="198.210.164.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.185.157.162:2000}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (37.2881%)&lt;BR/&gt; 0: (6.77966%)&lt;BR/&gt; 4754: (3.38983%)&lt;BR/&gt; 4750: (3.38983%)&lt;BR/&gt; 3762: (3.38983%)&gt;];
}
4025--6484[label="0.025641;1pkt 1fpkt"];
4025--7641[label="1;2pkt 2fpkt"];
4025--8562[label="0.025641;1pkt 1fpkt"];
4025--8650[label="0.025641;1pkt 1fpkt"];
4025--8703[label="0.025641;1pkt 1fpkt"];
4025--8780[label="0.025641;1pkt 1fpkt"];
4025--8826[label="0.025641;1pkt 1fpkt"];
4025--10043[label="1;1pkt 1fpkt"];
4025--10153[label="1;2pkt 2fpkt"];
4025--12340[label="1;4pkt 4fpkt"];
4025--12390[label="1;2pkt 2fpkt"];
4025--12405[label="0.025641;1pkt 1fpkt"];
4025--13277[label="1;1pkt 1fpkt"];
4025--13318[label="1;1pkt 1fpkt"];
4025--14310[label="1;4pkt 4fpkt"];
4025--14335[label="1;1pkt 1fpkt"];
4025--14348[label="0.025641;1pkt 1fpkt"];
4025--14747[label="1;1pkt 1fpkt"];
4025--15210[label="1;1pkt 1fpkt"];
4025--15217[label="0.025641;1pkt 1fpkt"];
7641--12340[label="1;2pkt 2fpkt"];
7641--14310[label="1;2pkt 2fpkt"];
10043--13277[label="1;1pkt 1fpkt"];
10153--13318[label="1;1pkt 1fpkt"];
10153--14747[label="1;1pkt 1fpkt"];
12340--14310[label="1;4pkt 4fpkt"];
12390--14335[label="1;1pkt 1fpkt"];
12390--15210[label="1;1pkt 1fpkt"];
13318--14747[label="1;1pkt 1fpkt"];
14335--15210[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.162" dst_port="2000"/>
    </slice>
    <from sec="1289451659" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.65.111.76"/>
    </slice>
    <from sec="1289452367" usec="0"/>
    <to sec="1289452384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.177.136.78"/>
    </slice>
    <from sec="1289452470" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.145.144.78"/>
    </slice>
    <from sec="1289452238" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
10194[label="133.4.185.78;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13339[label="133.4.185.78;16pkt 16fpkt", shape=invtriangle, color=brown];
14758[label="133.4.185.78;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.185.78:*, 202.19.37.139:80}[50%]&lt;BR/&gt;{133.4.185.78:*, 202.19.37.215:80}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50755: (3.125%)&lt;BR/&gt; 50754: (3.125%)&lt;BR/&gt; 50751: (3.125%)&lt;BR/&gt; 50749: (3.125%)&gt;];
}
10194--13339[label="1;16pkt 16fpkt"];
10194--14758[label="1;16pkt 16fpkt"];
13339--14758[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="202.19.37.139" dst_port="80" src_ip="133.4.185.78"/>
      <filter dst_ip="202.19.37.215" dst_port="80" src_ip="133.4.185.78"/>
    </slice>
    <from sec="1289452441" usec="0"/>
    <to sec="1289452468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.188.243.79"/>
    </slice>
    <from sec="1289451661" usec="0"/>
    <to sec="1289451674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
10231[label="170.20.207.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13357[label="170.20.207.80;7pkt 7fpkt", shape=invtriangle, color=brown];
14763[label="170.20.207.80;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.20.207.80:80, 164.251.121.187:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49417: (7.5%)&lt;BR/&gt; 49415: (7.5%)&lt;BR/&gt; 49414: (7.5%)&lt;BR/&gt; 49413: (7.5%)&gt;];
}
10231--13357[label="1;6pkt 6fpkt"];
10231--14763[label="1;6pkt 6fpkt"];
13357--14763[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.121.187" src_ip="170.20.207.80" src_port="80"/>
    </slice>
    <from sec="1289452099" usec="0"/>
    <to sec="1289452111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.16.176.81"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.140.193.81"/>
    </slice>
    <from sec="1289451842" usec="0"/>
    <to sec="1289451957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.19.230.81"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.97.82"/>
    </slice>
    <from sec="1289451686" usec="0"/>
    <to sec="1289451690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.951603,3.56288,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
7669[label="158.196.21.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
13387[label="158.196.21.84;1pkt 1fpkt", shape=invtriangle, color=brown];
14778[label="158.196.21.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.21.84:80, 42.146.64.34:49116}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49116: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7669--13387[label="1;1pkt 1fpkt"];
7669--14778[label="1;1pkt 1fpkt"];
13387--14778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.64.34" dst_port="49116" src_ip="158.196.21.84" src_port="80"/>
    </slice>
    <from sec="1289452421" usec="0"/>
    <to sec="1289452431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.77.92.84"/>
    </slice>
    <from sec="1289452368" usec="0"/>
    <to sec="1289452442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
395[label="210.33.136.122;d;2pkt 2fpkt", shape=diamond, color=yellow];
777[label="211.185.158.172;d;555pkt 555fpkt", shape=diamond, color=yellow];
2150[label="210.33.108.162;d;351pkt 351fpkt", shape=diamond, color=yellow];
2615[label="193.4.204.152;s;7pkt 7fpkt", shape=diamond, color=yellow];
2745[label="8.41.209.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
3970[label="166.26.246.1;d;319pkt 319fpkt", shape=diamond, color=yellow];
4233[label="4.192.32.70;s;260pkt 260fpkt", shape=diamond, color=yellow];
4619[label="166.26.206.51;d;58pkt 58fpkt", shape=diamond, color=yellow];
5188[label="210.33.144.198;d;138pkt 138fpkt", shape=diamond, color=yellow];
5268[label="47.44.9.8;s;53pkt 53fpkt", shape=diamond, color=yellow];
5843[label="166.26.194.72;d;50pkt 50fpkt", shape=diamond, color=yellow];
6894[label="162.200.203.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
6896[label="60.135.24.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
7454[label="18.165.198.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
7850[label="210.33.108.162;d;31pkt 31fpkt", shape=hexagon, color=black];
8139[label="210.33.136.122;d;2pkt 2fpkt", shape=hexagon, color=black];
8431[label="211.185.158.172;d;552pkt 552fpkt", shape=hexagon, color=black];
9173[label="202.9.134.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9660[label="202.9.134.45;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9813[label="202.9.134.54;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9863[label="42.146.68.57;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10048[label="4.192.32.70;344pkt 344fpkt", shape=pentagon, color=darkviolet];
10304[label="210.43.18.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10590[label="210.43.187.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10994[label="67.80.67.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11166[label="176.64.145.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11186[label="9.183.212.143;84pkt 84fpkt", shape=pentagon, color=darkviolet];
11307[label="193.4.204.152;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11554[label="35.204.136.168;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12061[label="171.139.175.204;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12608[label="14.213.156.245;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13102[label="202.9.134.45;6pkt 6fpkt", shape=invtriangle, color=brown];
13170[label="202.9.134.54;8pkt 8fpkt", shape=invtriangle, color=brown];
13278[label="4.192.32.70;344pkt 344fpkt", shape=invtriangle, color=brown];
13395[label="210.43.18.85;1pkt 1fpkt", shape=invtriangle, color=brown];
13787[label="9.183.212.143;84pkt 84fpkt", shape=invtriangle, color=brown];
13837[label="193.4.204.152;6pkt 6fpkt", shape=invtriangle, color=brown];
13957[label="35.204.136.168;5pkt 5fpkt", shape=invtriangle, color=brown];
14657[label="202.9.134.45;7pkt 7fpkt", shape=invhouse, color=bisque];
14682[label="202.9.134.54;9pkt 9fpkt", shape=invhouse, color=bisque];
14728[label="4.192.32.70;344pkt 344fpkt", shape=invhouse, color=bisque];
14784[label="210.43.18.85;1pkt 1fpkt", shape=invhouse, color=bisque];
14949[label="9.183.212.143;83pkt 83fpkt", shape=invhouse, color=bisque];
14970[label="193.4.204.152;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 211.185.158.172:*}[34.1176%]&lt;BR/&gt;{*:80, 210.33.108.162:*}[22.9412%]&lt;BR/&gt;{4.192.32.70:80, *:*}[22.4837%]&lt;BR/&gt;{*:80, 166.26.246.1:*}[20.8497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6082%)&lt;BR/&gt; 443: (0.715801%)&lt;BR/&gt; 1252: (0.145811%)&lt;BR/&gt; 17362: (0.132556%)&lt;BR/&gt; 0: (0.106045%)&gt;];
}
395--2745[label="1;1pkt 1fpkt"];
395--5268[label="0.5;1pkt 1fpkt"];
395--8139[label="1;2pkt 2fpkt"];
777--860[label="0.0018018;1pkt 1fpkt"];
777--1077[label="0.00280899;1pkt 1fpkt"];
777--1158[label="0.00184502;1pkt 1fpkt"];
777--1344[label="0.0052356;1pkt 1fpkt"];
777--1653[label="0.00389105;1pkt 1fpkt"];
777--1674[label="0.00248139;1pkt 1fpkt"];
777--1805[label="0.0060241;1pkt 1fpkt"];
777--2024[label="0.00224719;1pkt 1fpkt"];
777--2050[label="0.0018018;1pkt 1fpkt"];
777--2161[label="0.00617284;1pkt 1fpkt"];
777--2174[label="0.00406504;1pkt 1fpkt"];
777--2223[label="0.00740741;1pkt 1fpkt"];
777--2441[label="0.0714286;1pkt 1fpkt"];
777--2767[label="0.00273224;1pkt 1fpkt"];
777--2852[label="0.027027;1pkt 1fpkt"];
777--2942[label="0.00215517;1pkt 1fpkt"];
777--3100[label="0.00229358;1pkt 1fpkt"];
777--3103[label="0.025641;1pkt 1fpkt"];
777--3120[label="0.00552486;1pkt 1fpkt"];
777--3276[label="0.0526316;1pkt 1fpkt"];
777--3561[label="0.00473934;1pkt 1fpkt"];
777--3639[label="0.0196078;1pkt 1fpkt"];
777--3861[label="0.0555556;1pkt 1fpkt"];
777--4286[label="0.0036036;2pkt 2fpkt"];
777--4313[label="0.0018018;1pkt 1fpkt"];
777--4495[label="0.00735294;1pkt 1fpkt"];
777--4558[label="0.0322581;1pkt 1fpkt"];
777--4560[label="0.01;1pkt 1fpkt"];
777--4804[label="0.025;1pkt 1fpkt"];
777--5138[label="0.0018018;1pkt 1fpkt"];
777--5267[label="0.0128205;1pkt 1fpkt"];
777--5426[label="0.0151515;1pkt 1fpkt"];
777--6484[label="0.0018018;1pkt 1fpkt"];
777--7222[label="0.027027;1pkt 1fpkt"];
777--7407[label="0.25;1pkt 1fpkt"];
777--8431[label="1;552pkt 552fpkt"];
777--8562[label="0.0018018;1pkt 1fpkt"];
777--8650[label="0.0018018;1pkt 1fpkt"];
777--8684[label="0.0036036;2pkt 2fpkt"];
777--8685[label="0.0036036;2pkt 2fpkt"];
777--8703[label="0.0018018;1pkt 1fpkt"];
777--8761[label="0.0036036;2pkt 2fpkt"];
777--8762[label="0.0036036;2pkt 2fpkt"];
777--8780[label="0.0018018;1pkt 1fpkt"];
777--8807[label="0.0036036;2pkt 2fpkt"];
777--8808[label="0.0036036;2pkt 2fpkt"];
777--8826[label="0.0018018;1pkt 1fpkt"];
777--9052[label="0.0625;1pkt 1fpkt"];
777--9069[label="0.0294118;1pkt 1fpkt"];
777--9083[label="0.0018018;1pkt 1fpkt"];
777--9173[label="0.333333;1pkt 1fpkt"];
777--9362[label="0.0140845;1pkt 1fpkt"];
777--9441[label="0.0263158;1pkt 1fpkt"];
777--9660[label="0.166667;1pkt 1fpkt"];
777--10265[label="0.0238095;1pkt 1fpkt"];
777--10345[label="0.00260417;1pkt 1fpkt"];
777--10642[label="0.027027;1pkt 1fpkt"];
777--10994[label="0.333333;1pkt 1fpkt"];
777--11000[label="0.00714286;1pkt 1fpkt"];
777--11166[label="1;1pkt 1fpkt"];
777--11488[label="0.015625;1pkt 1fpkt"];
777--11536[label="0.111111;1pkt 1fpkt"];
777--11554[label="0.25;1pkt 1fpkt"];
777--11588[label="0.00990099;1pkt 1fpkt"];
777--11752[label="0.0217391;1pkt 1fpkt"];
777--12061[label="0.5;1pkt 1fpkt"];
777--12137[label="0.0909091;1pkt 1fpkt"];
777--12405[label="0.0018018;1pkt 1fpkt"];
777--12594[label="0.0018018;1pkt 1fpkt"];
777--12803[label="0.0588235;1pkt 1fpkt"];
777--12810[label="0.0285714;1pkt 1fpkt"];
777--12951[label="0.0138889;1pkt 1fpkt"];
777--12991[label="0.025641;1pkt 1fpkt"];
777--13102[label="0.166667;1pkt 1fpkt"];
777--13379[label="0.0238095;1pkt 1fpkt"];
777--13415[label="0.00261097;1pkt 1fpkt"];
777--13544[label="0.027027;1pkt 1fpkt"];
777--13709[label="0.00719424;1pkt 1fpkt"];
777--13926[label="0.015625;1pkt 1fpkt"];
777--13957[label="0.2;1pkt 1fpkt"];
777--13970[label="0.00990099;1pkt 1fpkt"];
777--14348[label="0.0018018;1pkt 1fpkt"];
777--14520[label="0.0625;1pkt 1fpkt"];
777--14526[label="0.0285714;1pkt 1fpkt"];
777--14657[label="0.142857;1pkt 1fpkt"];
777--14775[label="0.0238095;1pkt 1fpkt"];
777--15217[label="0.0018018;1pkt 1fpkt"];
2150--2615[label="1;7pkt 7fpkt"];
2150--3247[label="0.00833333;1pkt 1fpkt"];
2150--3561[label="0.00473934;1pkt 1fpkt"];
2150--3893[label="0.0111111;1pkt 1fpkt"];
2150--4286[label="0.017094;6pkt 6fpkt"];
2150--4457[label="0.02;1pkt 1fpkt"];
2150--4508[label="0.00301205;1pkt 1fpkt"];
2150--4691[label="0.0222222;1pkt 1fpkt"];
2150--5377[label="0.0336538;7pkt 7fpkt"];
2150--6596[label="0.0163934;2pkt 2fpkt"];
2150--6702[label="0.037037;1pkt 1fpkt"];
2150--7850[label="1;31pkt 31fpkt"];
2150--8684[label="0.00854701;3pkt 3fpkt"];
2150--8761[label="0.00854701;3pkt 3fpkt"];
2150--8807[label="0.00854701;3pkt 3fpkt"];
2150--9088[label="0.0384615;1pkt 1fpkt"];
2150--9147[label="0.0408163;2pkt 2fpkt"];
2150--9484[label="0.0833333;1pkt 1fpkt"];
2150--9526[label="0.0243902;1pkt 1fpkt"];
2150--9578[label="0.047619;1pkt 1fpkt"];
2150--9668[label="0.0294118;1pkt 1fpkt"];
2150--9684[label="0.037037;1pkt 1fpkt"];
2150--9922[label="0.0526316;1pkt 1fpkt"];
2150--10048[label="0.244186;84pkt 84fpkt"];
2150--10304[label="1;1pkt 1fpkt"];
2150--10549[label="0.0108696;1pkt 1fpkt"];
2150--10590[label="1;1pkt 1fpkt"];
2150--10741[label="0.0151515;2pkt 2fpkt"];
2150--11186[label="1;84pkt 84fpkt"];
2150--11249[label="0.0384615;1pkt 1fpkt"];
2150--11307[label="1;7pkt 7fpkt"];
2150--11389[label="0.025641;1pkt 1fpkt"];
2150--11489[label="0.03125;1pkt 1fpkt"];
2150--12061[label="0.5;1pkt 1fpkt"];
2150--12082[label="0.25;1pkt 1fpkt"];
2150--12608[label="0.75;6pkt 6fpkt"];
2150--13036[label="0.025;1pkt 1fpkt"];
2150--13106[label="0.030303;1pkt 1fpkt"];
2150--13278[label="0.244186;84pkt 84fpkt"];
2150--13395[label="1;1pkt 1fpkt"];
2150--13592[label="0.0150376;2pkt 2fpkt"];
2150--13787[label="1;84pkt 84fpkt"];
2150--13837[label="1;6pkt 6fpkt"];
2150--13878[label="0.025;1pkt 1fpkt"];
2150--14728[label="0.244186;84pkt 84fpkt"];
2150--14784[label="1;1pkt 1fpkt"];
2150--14864[label="0.0151515;2pkt 2fpkt"];
2150--14949[label="1;83pkt 83fpkt"];
2150--14970[label="1;6pkt 6fpkt"];
2150--14989[label="0.025;1pkt 1fpkt"];
2615--7850[label="1;7pkt 7fpkt"];
2615--11307[label="1;7pkt 7fpkt"];
2615--13837[label="1;6pkt 6fpkt"];
2615--14970[label="1;6pkt 6fpkt"];
2745--8139[label="1;1pkt 1fpkt"];
3970--4233[label="1;260pkt 260fpkt"];
3970--4293[label="0.0031348;1pkt 1fpkt"];
3970--4508[label="0.0031348;1pkt 1fpkt"];
3970--5318[label="0.365079;46pkt 46fpkt"];
3970--6596[label="0.0163934;2pkt 2fpkt"];
3970--8684[label="0.00940439;3pkt 3fpkt"];
3970--8761[label="0.00940439;3pkt 3fpkt"];
3970--8807[label="0.00940439;3pkt 3fpkt"];
3970--9484[label="0.0833333;1pkt 1fpkt"];
3970--9922[label="0.0526316;1pkt 1fpkt"];
3970--10048[label="0.815047;260pkt 260fpkt"];
3970--10741[label="0.0151515;2pkt 2fpkt"];
3970--11489[label="0.03125;1pkt 1fpkt"];
3970--13278[label="0.815047;260pkt 260fpkt"];
3970--13592[label="0.0150376;2pkt 2fpkt"];
3970--14728[label="0.815047;260pkt 260fpkt"];
3970--14864[label="0.0151515;2pkt 2fpkt"];
4233--10048[label="1;260pkt 260fpkt"];
4233--13278[label="1;260pkt 260fpkt"];
4233--14728[label="1;260pkt 260fpkt"];
4619--4691[label="0.0222222;1pkt 1fpkt"];
4619--5138[label="0.0172414;1pkt 1fpkt"];
4619--5426[label="0.0172414;1pkt 1fpkt"];
4619--5549[label="0.0172414;1pkt 1fpkt"];
4619--5910[label="0.0175439;1pkt 1fpkt"];
4619--6669[label="0.0555556;1pkt 1fpkt"];
4619--7055[label="0.0175439;1pkt 1fpkt"];
4619--7088[label="0.0172414;1pkt 1fpkt"];
4619--7203[label="0.0172414;1pkt 1fpkt"];
4619--7216[label="0.0188679;1pkt 1fpkt"];
4619--7307[label="0.0172414;1pkt 1fpkt"];
4619--8684[label="0.0344828;2pkt 2fpkt"];
4619--8685[label="0.0172414;1pkt 1fpkt"];
4619--8761[label="0.0344828;2pkt 2fpkt"];
4619--8762[label="0.0172414;1pkt 1fpkt"];
4619--8807[label="0.0344828;2pkt 2fpkt"];
4619--8808[label="0.0172414;1pkt 1fpkt"];
4619--8855[label="0.0172414;1pkt 1fpkt"];
4619--9083[label="0.0172414;1pkt 1fpkt"];
4619--9362[label="0.0172414;1pkt 1fpkt"];
4619--9749[label="0.0172414;1pkt 1fpkt"];
4619--10224[label="0.0172414;1pkt 1fpkt"];
4619--11000[label="0.0172414;1pkt 1fpkt"];
4619--11121[label="0.0172414;1pkt 1fpkt"];
4619--11554[label="0.25;1pkt 1fpkt"];
4619--11588[label="0.0172414;1pkt 1fpkt"];
4619--11950[label="0.0172414;1pkt 1fpkt"];
4619--11979[label="0.0172414;1pkt 1fpkt"];
4619--12251[label="0.0172414;1pkt 1fpkt"];
4619--12302[label="0.0588235;1pkt 1fpkt"];
4619--12707[label="0.0172414;1pkt 1fpkt"];
4619--12951[label="0.0172414;1pkt 1fpkt"];
4619--13147[label="0.0172414;1pkt 1fpkt"];
4619--13354[label="0.0172414;1pkt 1fpkt"];
4619--13709[label="0.0172414;1pkt 1fpkt"];
4619--13762[label="0.0172414;1pkt 1fpkt"];
4619--13957[label="0.2;1pkt 1fpkt"];
4619--13970[label="0.0172414;1pkt 1fpkt"];
4619--14142[label="0.0172414;1pkt 1fpkt"];
5188--5268[label="0.339623;18pkt 18fpkt"];
5188--5400[label="0.0169492;1pkt 1fpkt"];
5188--6694[label="0.0333333;1pkt 1fpkt"];
5188--6894[label="1;1pkt 1fpkt"];
5188--6896[label="1;1pkt 1fpkt"];
5188--7055[label="0.0175439;1pkt 1fpkt"];
5188--7214[label="0.0625;1pkt 1fpkt"];
5188--7224[label="0.0243902;1pkt 1fpkt"];
5188--7384[label="0.0789474;3pkt 3fpkt"];
5188--7454[label="1;1pkt 1fpkt"];
5188--8684[label="0.123188;17pkt 17fpkt"];
5188--8761[label="0.123188;17pkt 17fpkt"];
5188--8807[label="0.123188;17pkt 17fpkt"];
5188--9026[label="0.00724638;1pkt 1fpkt"];
5188--9173[label="0.333333;1pkt 1fpkt"];
5188--9813[label="0.111111;1pkt 1fpkt"];
5188--9843[label="0.0333333;1pkt 1fpkt"];
5188--9854[label="0.00724638;1pkt 1fpkt"];
5188--9904[label="0.0769231;1pkt 1fpkt"];
5188--10920[label="0.0277778;1pkt 1fpkt"];
5188--11013[label="0.0136986;1pkt 1fpkt"];
5188--11632[label="0.0555556;1pkt 1fpkt"];
5188--12082[label="0.25;1pkt 1fpkt"];
5188--12256[label="0.0454545;1pkt 1fpkt"];
5188--12592[label="0.0172414;1pkt 1fpkt"];
5188--12594[label="0.0289855;4pkt 4fpkt"];
5188--13170[label="0.125;1pkt 1fpkt"];
5188--13183[label="0.0333333;1pkt 1fpkt"];
5188--13188[label="0.00724638;1pkt 1fpkt"];
5188--13213[label="0.0833333;1pkt 1fpkt"];
5188--14682[label="0.111111;1pkt 1fpkt"];
5268--7688[label="0.0377358;2pkt 2fpkt"];
5268--8139[label="0.5;1pkt 1fpkt"];
5268--8684[label="0.0943396;5pkt 5fpkt"];
5268--8761[label="0.0943396;5pkt 5fpkt"];
5268--8807[label="0.0943396;5pkt 5fpkt"];
5843--8664[label="0.1;5pkt 5fpkt"];
5843--8688[label="0.1;5pkt 5fpkt"];
5843--8743[label="0.1;5pkt 5fpkt"];
5843--8765[label="0.1;5pkt 5fpkt"];
5843--8790[label="0.1;5pkt 5fpkt"];
5843--8811[label="0.1;5pkt 5fpkt"];
5843--9813[label="0.111111;1pkt 1fpkt"];
5843--9863[label="0.846154;11pkt 11fpkt"];
5843--13170[label="0.125;1pkt 1fpkt"];
5843--14682[label="0.111111;1pkt 1fpkt"];
7850--9526[label="0.0322581;1pkt 1fpkt"];
7850--9668[label="0.0322581;1pkt 1fpkt"];
7850--9684[label="0.037037;1pkt 1fpkt"];
7850--9922[label="0.0526316;1pkt 1fpkt"];
7850--10304[label="1;1pkt 1fpkt"];
7850--10590[label="1;1pkt 1fpkt"];
7850--10741[label="0.0322581;1pkt 1fpkt"];
7850--11307[label="1;7pkt 7fpkt"];
7850--12082[label="0.25;1pkt 1fpkt"];
7850--13036[label="0.0322581;1pkt 1fpkt"];
7850--13106[label="0.0322581;1pkt 1fpkt"];
7850--13395[label="1;1pkt 1fpkt"];
7850--13592[label="0.0322581;1pkt 1fpkt"];
7850--13837[label="1;6pkt 6fpkt"];
7850--14784[label="1;1pkt 1fpkt"];
7850--14864[label="0.0322581;1pkt 1fpkt"];
7850--14970[label="1;6pkt 6fpkt"];
8431--8562[label="0.00181159;1pkt 1fpkt"];
8431--8650[label="0.00181159;1pkt 1fpkt"];
8431--8684[label="0.00362319;2pkt 2fpkt"];
8431--8685[label="0.00362319;2pkt 2fpkt"];
8431--8703[label="0.00181159;1pkt 1fpkt"];
8431--8761[label="0.00362319;2pkt 2fpkt"];
8431--8762[label="0.00362319;2pkt 2fpkt"];
8431--8780[label="0.00181159;1pkt 1fpkt"];
8431--8807[label="0.00362319;2pkt 2fpkt"];
8431--8808[label="0.00362319;2pkt 2fpkt"];
8431--8826[label="0.00181159;1pkt 1fpkt"];
8431--9052[label="0.0625;1pkt 1fpkt"];
8431--9069[label="0.0294118;1pkt 1fpkt"];
8431--9173[label="0.333333;1pkt 1fpkt"];
8431--9362[label="0.0140845;1pkt 1fpkt"];
8431--9441[label="0.0263158;1pkt 1fpkt"];
8431--9660[label="0.166667;1pkt 1fpkt"];
8431--10265[label="0.0238095;1pkt 1fpkt"];
8431--10345[label="0.00260417;1pkt 1fpkt"];
8431--10642[label="0.027027;1pkt 1fpkt"];
8431--10994[label="0.333333;1pkt 1fpkt"];
8431--11000[label="0.00714286;1pkt 1fpkt"];
8431--11166[label="1;1pkt 1fpkt"];
8431--11488[label="0.015625;1pkt 1fpkt"];
8431--11536[label="0.111111;1pkt 1fpkt"];
8431--11554[label="0.25;1pkt 1fpkt"];
8431--11588[label="0.00990099;1pkt 1fpkt"];
8431--11752[label="0.0217391;1pkt 1fpkt"];
8431--12061[label="0.5;1pkt 1fpkt"];
8431--12405[label="0.00181159;1pkt 1fpkt"];
8431--12594[label="0.00181159;1pkt 1fpkt"];
8431--12803[label="0.0588235;1pkt 1fpkt"];
8431--12810[label="0.0285714;1pkt 1fpkt"];
8431--12951[label="0.0138889;1pkt 1fpkt"];
8431--12991[label="0.025641;1pkt 1fpkt"];
8431--13102[label="0.166667;1pkt 1fpkt"];
8431--13379[label="0.0238095;1pkt 1fpkt"];
8431--13415[label="0.00261097;1pkt 1fpkt"];
8431--13544[label="0.027027;1pkt 1fpkt"];
8431--13709[label="0.00719424;1pkt 1fpkt"];
8431--13926[label="0.015625;1pkt 1fpkt"];
8431--13957[label="0.2;1pkt 1fpkt"];
8431--13970[label="0.00990099;1pkt 1fpkt"];
8431--14348[label="0.00181159;1pkt 1fpkt"];
8431--14520[label="0.0625;1pkt 1fpkt"];
8431--14526[label="0.0285714;1pkt 1fpkt"];
8431--14657[label="0.142857;1pkt 1fpkt"];
8431--14775[label="0.0238095;1pkt 1fpkt"];
8431--15217[label="0.00181159;1pkt 1fpkt"];
9660--13102[label="1;6pkt 6fpkt"];
9660--14657[label="1;6pkt 6fpkt"];
9813--13170[label="1;8pkt 8fpkt"];
9813--14682[label="1;9pkt 9fpkt"];
10048--13278[label="1;344pkt 344fpkt"];
10048--14728[label="1;344pkt 344fpkt"];
10304--13395[label="1;1pkt 1fpkt"];
10304--14784[label="1;1pkt 1fpkt"];
11186--13787[label="1;84pkt 84fpkt"];
11186--14949[label="1;83pkt 83fpkt"];
11307--13837[label="1;6pkt 6fpkt"];
11307--14970[label="1;6pkt 6fpkt"];
11554--13957[label="1;4pkt 4fpkt"];
13102--14657[label="1;6pkt 6fpkt"];
13170--14682[label="1;8pkt 8fpkt"];
13278--14728[label="1;344pkt 344fpkt"];
13395--14784[label="1;1pkt 1fpkt"];
13787--14949[label="1;83pkt 83fpkt"];
13837--14970[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="4.192.32.70" src_port="80"/>
      <filter dst_ip="211.185.158.172" src_port="80"/>
      <filter dst_ip="210.33.108.162" src_port="80"/>
      <filter dst_ip="166.26.246.1" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.185.178.87"/>
    </slice>
    <from sec="1289452132" usec="0"/>
    <to sec="1289452177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
10339[label="84.173.240.87;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13411[label="84.173.240.87;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.173.240.87:*, 211.185.144.18:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50910: (2.85714%)&lt;BR/&gt; 50909: (2.85714%)&lt;BR/&gt; 50908: (2.85714%)&lt;BR/&gt; 50907: (2.85714%)&gt;];
}
10339--13411[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.144.18" dst_port="80" src_ip="84.173.240.87"/>
    </slice>
    <from sec="1289452442" usec="0"/>
    <to sec="1289452472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.45.84.88"/>
    </slice>
    <from sec="1289452378" usec="0"/>
    <to sec="1289452393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.150.93.88"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289452275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.23.193.88"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.186.103.89"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.168.44.90"/>
    </slice>
    <from sec="1289452187" usec="0"/>
    <to sec="1289452216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1214{
style=filled;
color=gray75;
10416[label="8.188.243.92;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13449[label="8.188.243.92;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1214[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.188.243.92:*, 166.26.179.89:80}[55%]&lt;BR/&gt;{8.188.243.92:*, 166.26.179.81:80}[45%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54918: (2.5641%)&lt;BR/&gt; 54574: (2.5641%)&lt;BR/&gt; 54572: (2.5641%)&lt;BR/&gt; 54568: (2.5641%)&gt;];
}
10416--13449[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.89" dst_port="80" src_ip="8.188.243.92"/>
      <filter dst_ip="166.26.179.81" dst_port="80" src_ip="8.188.243.92"/>
    </slice>
    <from sec="1289452488" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.102.153.93"/>
    </slice>
    <from sec="1289452374" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
622[label="166.26.165.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
2734[label="166.26.234.78;d;60pkt 60fpkt", shape=diamond, color=yellow];
2799[label="8.75.1.93;s;5pkt 5fpkt", shape=diamond, color=yellow];
5151[label="81.102.118.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
6164[label="5.84.109.161;s;13pkt 13fpkt", shape=diamond, color=yellow];
7806[label="166.26.165.55;d;2pkt 2fpkt", shape=hexagon, color=black];
9004[label="35.145.98.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10442[label="84.133.57.95;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11435[label="5.84.109.161;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11689[label="203.47.8.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11747[label="203.47.8.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12219[label="81.103.48.215;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12468[label="203.47.104.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12779[label="35.145.98.9;1pkt 1fpkt", shape=invtriangle, color=brown];
13465[label="84.133.57.95;3pkt 3fpkt", shape=invtriangle, color=brown];
13897[label="5.84.109.161;14pkt 14fpkt", shape=invtriangle, color=brown];
14018[label="203.47.8.177;1pkt 1fpkt", shape=invtriangle, color=brown];
14810[label="84.133.57.95;3pkt 3fpkt", shape=invhouse, color=bisque];
14996[label="5.84.109.161;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 166.26.234.78:993}[24.2424%]&lt;BR/&gt;{5.84.109.161:*, 166.26.234.78:995}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (32.4138%)&lt;BR/&gt; 993: (8.62069%)&lt;BR/&gt; 443: (5.86207%)&lt;BR/&gt; 4500: (3.10345%)&lt;BR/&gt; 25048: (1.72414%)&gt;];
}
622--2799[label="0.5;1pkt 1fpkt"];
622--5151[label="1;1pkt 1fpkt"];
622--7806[label="1;2pkt 2fpkt"];
2734--2799[label="0.8;4pkt 4fpkt"];
2734--6164[label="1;13pkt 13fpkt"];
2734--8666[label="0.0166667;1pkt 1fpkt"];
2734--8745[label="0.0166667;1pkt 1fpkt"];
2734--8792[label="0.0166667;1pkt 1fpkt"];
2734--9004[label="1;1pkt 1fpkt"];
2734--10442[label="1;3pkt 3fpkt"];
2734--11435[label="0.928571;13pkt 13fpkt"];
2734--11689[label="1;1pkt 1fpkt"];
2734--11747[label="1;1pkt 1fpkt"];
2734--12219[label="0.5;3pkt 3fpkt"];
2734--12468[label="1;1pkt 1fpkt"];
2734--12779[label="1;1pkt 1fpkt"];
2734--13465[label="1;3pkt 3fpkt"];
2734--13897[label="0.928571;13pkt 13fpkt"];
2734--14018[label="1;1pkt 1fpkt"];
2734--14810[label="1;3pkt 3fpkt"];
2734--14996[label="0.923077;12pkt 12fpkt"];
2799--7806[label="0.5;1pkt 1fpkt"];
2799--8666[label="0.2;1pkt 1fpkt"];
2799--8745[label="0.2;1pkt 1fpkt"];
2799--8792[label="0.2;1pkt 1fpkt"];
5151--7806[label="1;1pkt 1fpkt"];
6164--11435[label="1;13pkt 13fpkt"];
6164--13897[label="1;13pkt 13fpkt"];
6164--14996[label="0.923077;12pkt 12fpkt"];
9004--12779[label="1;1pkt 1fpkt"];
10442--13465[label="1;3pkt 3fpkt"];
10442--14810[label="1;3pkt 3fpkt"];
11435--13897[label="1;14pkt 14fpkt"];
11435--14996[label="1;13pkt 13fpkt"];
11689--14018[label="1;1pkt 1fpkt"];
13465--14810[label="1;3pkt 3fpkt"];
13897--14996[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.234.78" dst_port="993"/>
      <filter dst_ip="166.26.234.78" dst_port="995" src_ip="5.84.109.161"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.171.68.96"/>
    </slice>
    <from sec="1289451999" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
3417[label="128.19.145.141;s;98pkt 98fpkt", shape=diamond, color=yellow];
11151[label="128.19.145.141;97pkt 97fpkt", shape=pentagon, color=darkviolet];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.145.141:*, 35.162.48.18:80}[37.7551%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50865: (0.512821%)&lt;BR/&gt; 50863: (0.512821%)&lt;BR/&gt; 50862: (0.512821%)&lt;BR/&gt; 50861: (0.512821%)&gt;];
}
3417--7340[label="0.0309278;3pkt 3fpkt"];
3417--11151[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="35.162.48.18" dst_port="80" src_ip="128.19.145.141"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289452046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.34.174.96"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289451682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.93.117.99"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.21.131.100"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.216.211.101"/>
    </slice>
    <from sec="1289452262" usec="0"/>
    <to sec="1289452311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
10550[label="205.211.84.102;64pkt 64fpkt", shape=pentagon, color=darkviolet];
13503[label="205.211.84.102;63pkt 63fpkt", shape=invtriangle, color=brown];
14824[label="205.211.84.102;63pkt 63fpkt", shape=invhouse, color=bisque];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.211.84.102:*, 166.26.105.161:80}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2205: (0.789474%)&lt;BR/&gt; 2195: (0.789474%)&lt;BR/&gt; 2190: (0.789474%)&lt;BR/&gt; 2181: (0.789474%)&gt;];
}
10550--13503[label="1;63pkt 63fpkt"];
10550--14824[label="1;63pkt 63fpkt"];
13503--14824[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.105.161" dst_port="80" src_ip="205.211.84.102"/>
    </slice>
    <from sec="1289452148" usec="0"/>
    <to sec="1289452174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
10551[label="210.33.107.102;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13504[label="210.33.107.102;3pkt 3fpkt", shape=invtriangle, color=brown];
14825[label="210.33.107.102;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.107.102:59084, 194.210.78.48:443}[25%]&lt;BR/&gt;{210.33.107.102:123, 215.44.207.77:123}[25%]&lt;BR/&gt;{210.33.107.102:59304, 41.142.128.118:80}[25%]&lt;BR/&gt;{210.33.107.102:59305, 35.40.116.210:8000}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59305: (15%)&lt;BR/&gt; 59304: (15%)&lt;BR/&gt; 59084: (15%)&lt;BR/&gt; 8000: (15%)&lt;BR/&gt; 443: (15%)&gt;];
}
10551--13504[label="1;3pkt 3fpkt"];
10551--14825[label="1;3pkt 3fpkt"];
13504--14825[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="35.40.116.210" dst_port="8000" src_ip="210.33.107.102" src_port="59305"/>
      <filter dst_ip="41.142.128.118" dst_port="80" src_ip="210.33.107.102" src_port="59304"/>
      <filter dst_ip="215.44.207.77" dst_port="123" src_ip="210.33.107.102" src_port="123"/>
      <filter dst_ip="194.210.78.48" dst_port="443" src_ip="210.33.107.102" src_port="59084"/>
    </slice>
    <from sec="1289451841" usec="0"/>
    <to sec="1289452475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1225{
style=filled;
color=gray75;
10554[label="128.19.146.102;30pkt 30fpkt", shape=pentagon, color=darkviolet];
13506[label="128.19.146.102;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1225[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.146.102:*, 184.187.149.179:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1115: (1.66667%)&lt;BR/&gt; 1101: (1.66667%)&lt;BR/&gt; 1099: (1.66667%)&lt;BR/&gt; 1095: (1.66667%)&gt;];
}
10554--13506[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="184.187.149.179" dst_port="80" src_ip="128.19.146.102"/>
    </slice>
    <from sec="1289452459" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.198.219.103"/>
    </slice>
    <from sec="1289451850" usec="0"/>
    <to sec="1289451905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1228{
style=filled;
color=gray75;
10585[label="128.19.150.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13519[label="128.19.150.104;1pkt 1fpkt", shape=invtriangle, color=brown];
14831[label="128.19.150.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1228[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.150.104:53117, 84.106.218.29:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53117: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10585--13519[label="1;1pkt 1fpkt"];
10585--14831[label="1;1pkt 1fpkt"];
13519--14831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.106.218.29" dst_port="80" src_ip="128.19.150.104" src_port="53117"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
10592[label="128.19.209.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13523[label="128.19.209.104;1pkt 1fpkt", shape=invtriangle, color=brown];
14834[label="128.19.209.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.209.104:50150, 202.19.37.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50150: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10592--13523[label="1;1pkt 1fpkt"];
10592--14834[label="1;1pkt 1fpkt"];
13523--14834[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.19.37.139" dst_port="80" src_ip="128.19.209.104" src_port="50150"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1230{
style=filled;
color=gray75;
10607[label="166.26.46.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13529[label="166.26.46.106;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1230[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.46.106:2576, 40.19.218.69:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2576: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
10607--13529[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.19.218.69" dst_port="443" src_ip="166.26.46.106" src_port="2576"/>
    </slice>
    <from sec="1289452426" usec="0"/>
    <to sec="1289452445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1231{
style=filled;
color=gray75;
10611[label="133.4.129.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13531[label="133.4.129.106;1pkt 1fpkt", shape=invtriangle, color=brown];
14837[label="133.4.129.106;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1231[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.129.106:80, 213.179.183.166:21300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21300: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10611--13531[label="1;1pkt 1fpkt"];
10611--14837[label="1;1pkt 1fpkt"];
13531--14837[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.179.183.166" dst_port="21300" src_ip="133.4.129.106" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.250.90.107"/>
    </slice>
    <from sec="1289451711" usec="0"/>
    <to sec="1289451985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.139.136.107"/>
    </slice>
    <from sec="1289451922" usec="0"/>
    <to sec="1289451936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.208.108"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.194.149.109"/>
    </slice>
    <from sec="1289451668" usec="0"/>
    <to sec="1289451678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1236{
style=filled;
color=gray75;
10678[label="19.18.72.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13560[label="19.18.72.111;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1236[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.18.72.111:64414, 211.185.145.108:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64414: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10678--13560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="19.18.72.111" src_port="64414"/>
    </slice>
    <from sec="1289451670" usec="0"/>
    <to sec="1289452308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
10689[label="186.219.2.112;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13565[label="186.219.2.112;4pkt 4fpkt", shape=invtriangle, color=brown];
14851[label="186.219.2.112;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{186.219.2.112:54101, 166.26.179.88:8080}[25%]&lt;BR/&gt;{186.219.2.112:54102, 166.26.179.88:8080}[25%]&lt;BR/&gt;{186.219.2.112:54103, 166.26.179.88:8080}[25%]&lt;BR/&gt;{186.219.2.112:54104, 166.26.179.88:8080}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 54104: (13.6364%)&lt;BR/&gt; 54103: (13.6364%)&lt;BR/&gt; 54102: (13.6364%)&lt;BR/&gt; 54101: (9.09091%)&gt;];
}
10689--13565[label="1;4pkt 4fpkt"];
10689--14851[label="1;3pkt 3fpkt"];
13565--14851[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.88" dst_port="8080" src_ip="186.219.2.112" src_port="54104"/>
      <filter dst_ip="166.26.179.88" dst_port="8080" src_ip="186.219.2.112" src_port="54103"/>
      <filter dst_ip="166.26.179.88" dst_port="8080" src_ip="186.219.2.112" src_port="54102"/>
      <filter dst_ip="166.26.179.88" dst_port="8080" src_ip="186.219.2.112" src_port="54101"/>
    </slice>
    <from sec="1289452436" usec="0"/>
    <to sec="1289452442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.238.42.112"/>
    </slice>
    <from sec="1289451634" usec="0"/>
    <to sec="1289451658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.188.76.112"/>
    </slice>
    <from sec="1289451796" usec="0"/>
    <to sec="1289451816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1241{
style=filled;
color=gray75;
10699[label="14.209.198.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13571[label="14.209.198.112;9pkt 9fpkt", shape=invtriangle, color=brown];
14855[label="14.209.198.112;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1241[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.209.198.112:*, 166.26.179.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1126: (5.55556%)&lt;BR/&gt; 1125: (5.55556%)&lt;BR/&gt; 1124: (5.55556%)&lt;BR/&gt; 1123: (5.55556%)&gt;];
}
10699--13571[label="1;9pkt 9fpkt"];
10699--14855[label="1;9pkt 9fpkt"];
13571--14855[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="14.209.198.112"/>
    </slice>
    <from sec="1289452382" usec="0"/>
    <to sec="1289452389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.114.22.113"/>
    </slice>
    <from sec="1289452053" usec="0"/>
    <to sec="1289452066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1243{
style=filled;
color=gray75;
2178[label="128.165.211.210;d;37pkt 37fpkt", shape=diamond, color=yellow];
8965[label="62.91.55.7;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12763[label="62.91.55.7;12pkt 12fpkt", shape=invtriangle, color=brown];
14497[label="62.91.55.7;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1243[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.91.55.7:80, 128.165.211.210:*}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3056%)&lt;BR/&gt; 34600: (2.77778%)&lt;BR/&gt; 34599: (2.77778%)&lt;BR/&gt; 34598: (2.77778%)&lt;BR/&gt; 34597: (2.77778%)&gt;];
}
2178--3810[label="0.0588235;1pkt 1fpkt"];
2178--7341[label="0.04;1pkt 1fpkt"];
2178--8965[label="1;12pkt 12fpkt"];
2178--11369[label="0.04;1pkt 1fpkt"];
2178--12763[label="1;12pkt 12fpkt"];
2178--14497[label="1;11pkt 11fpkt"];
8965--12763[label="1;12pkt 12fpkt"];
8965--14497[label="1;11pkt 11fpkt"];
12763--14497[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.211.210" src_ip="62.91.55.7" src_port="80"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289452425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.16.160.113"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289451630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.53.183.114"/>
    </slice>
    <from sec="1289452074" usec="0"/>
    <to sec="1289452077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
10737[label="204.135.4.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13590[label="204.135.4.115;1pkt 1fpkt", shape=invtriangle, color=brown];
14862[label="204.135.4.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.4.115:4973, 211.185.144.18:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4973: (50%)&lt;BR/&gt; 3124: (50%)&gt;];
}
10737--13590[label="1;1pkt 1fpkt"];
10737--14862[label="1;1pkt 1fpkt"];
13590--14862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.144.18" dst_port="3124" src_ip="204.135.4.115" src_port="4973"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.118.115"/>
    </slice>
    <from sec="1289452220" usec="0"/>
    <to sec="1289452233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.34.18.116"/>
    </slice>
    <from sec="1289452028" usec="0"/>
    <to sec="1289452039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1249{
style=filled;
color=gray75;
13598[label="128.19.152.116;120pkt 120fpkt", shape=invtriangle, color=brown];
stat1249[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.152.116:29384, *:*}[82.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29384: (41.25%)&lt;BR/&gt; 80: (3.75%)&lt;BR/&gt; 52803: (1.25%)&lt;BR/&gt; 20500: (1.25%)&lt;BR/&gt; 64588: (0.833333%)&gt;];
}
</description>
    <slice>
      <filter src_ip="128.19.152.116" src_port="29384"/>
    </slice>
    <from sec="1289451623" usec="0"/>
    <to sec="1289452367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.173.235.118"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289451924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.151.113.119"/>
    </slice>
    <from sec="1289451649" usec="0"/>
    <to sec="1289451771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.68.120"/>
    </slice>
    <from sec="1289451687" usec="0"/>
    <to sec="1289451698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.79.89.121"/>
    </slice>
    <from sec="1289451904" usec="0"/>
    <to sec="1289452255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
10812[label="128.19.144.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13623[label="128.19.144.121;1pkt 1fpkt", shape=invtriangle, color=brown];
14875[label="128.19.144.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.144.121:52588, 34.115.113.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52588: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10812--13623[label="1;1pkt 1fpkt"];
10812--14875[label="1;1pkt 1fpkt"];
13623--14875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.115.113.31" dst_port="80" src_ip="128.19.144.121" src_port="52588"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.106.18.122"/>
    </slice>
    <from sec="1289451758" usec="0"/>
    <to sec="1289451916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.152.110.122"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.144.13.123"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289451615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.99.37.123"/>
    </slice>
    <from sec="1289451625" usec="0"/>
    <to sec="1289451638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.236.7.125"/>
    </slice>
    <from sec="1289452453" usec="0"/>
    <to sec="1289452466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
10855[label="197.81.21.125;186pkt 186fpkt", shape=pentagon, color=darkviolet];
13641[label="197.81.21.125;186pkt 186fpkt", shape=invtriangle, color=brown];
14883[label="197.81.21.125;186pkt 186fpkt", shape=invhouse, color=bisque];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.81.21.125:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
10855--13641[label="1;186pkt 186fpkt"];
10855--14883[label="1;186pkt 186fpkt"];
13641--14883[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="197.81.21.125" src_port="5060"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1261{
style=filled;
color=gray75;
87[label="133.4.49.25;d;439pkt 439fpkt", shape=diamond, color=yellow];
193[label="133.4.182.164;d;164pkt 164fpkt", shape=diamond, color=yellow];
2411[label="42.59.66.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
2724[label="133.4.210.239;d;26pkt 26fpkt", shape=diamond, color=yellow];
2762[label="46.198.218.126;s;94pkt 94fpkt", shape=diamond, color=yellow];
2819[label="211.185.147.94;d;296pkt 296fpkt", shape=diamond, color=yellow];
3312[label="166.26.194.239;d;195pkt 195fpkt", shape=diamond, color=yellow];
3549[label="41.205.55.244;s;383pkt 383fpkt", shape=diamond, color=yellow];
4400[label="133.4.130.95;d;66pkt 66fpkt", shape=diamond, color=yellow];
4947[label="164.251.36.224;d;35pkt 35fpkt", shape=diamond, color=yellow];
5689[label="42.131.121.126;s;4pkt 4fpkt", shape=diamond, color=yellow];
5766[label="128.19.208.132;d;350pkt 350fpkt", shape=diamond, color=yellow];
5877[label="41.102.255.191;s;251pkt 251fpkt", shape=diamond, color=yellow];
6388[label="80.145.72.18;s;8pkt 8fpkt", shape=diamond, color=yellow];
6562[label="164.251.36.195;d;586pkt 586fpkt", shape=diamond, color=yellow];
6617[label="164.251.36.202;d;519pkt 519fpkt", shape=diamond, color=yellow];
7065[label="67.86.99.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
7138[label="133.4.117.115;d;81pkt 81fpkt", shape=diamond, color=yellow];
8063[label="211.185.147.94;d;210pkt 210fpkt", shape=hexagon, color=black];
8128[label="133.4.182.164;d;129pkt 129fpkt", shape=hexagon, color=black];
8340[label="164.251.36.224;d;26pkt 26fpkt", shape=hexagon, color=black];
9058[label="54.50.206.12;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9060[label="24.38.215.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9478[label="46.40.227.35;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9486[label="171.55.83.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9774[label="14.84.28.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10001[label="219.33.51.67;31pkt 31fpkt", shape=pentagon, color=darkviolet];
10031[label="219.200.186.68;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10407[label="14.82.103.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10638[label="202.9.134.108;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10869[label="42.131.121.126;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10874[label="46.198.218.126;182pkt 182fpkt", shape=pentagon, color=darkviolet];
10909[label="180.51.119.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11650[label="43.65.148.174;52pkt 52fpkt", shape=pentagon, color=darkviolet];
11845[label="84.106.212.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12417[label="8.33.117.229;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12654[label="81.12.211.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13256[label="219.33.51.67;31pkt 31fpkt", shape=invtriangle, color=brown];
13268[label="219.200.186.68;6pkt 6fpkt", shape=invtriangle, color=brown];
13444[label="14.82.103.92;1pkt 1fpkt", shape=invtriangle, color=brown];
13650[label="42.131.121.126;8pkt 8fpkt", shape=invtriangle, color=brown];
13667[label="180.51.119.129;4pkt 4fpkt", shape=invtriangle, color=brown];
14001[label="43.65.148.174;53pkt 53fpkt", shape=invtriangle, color=brown];
14719[label="219.33.51.67;31pkt 31fpkt", shape=invhouse, color=bisque];
14721[label="219.200.186.68;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1261[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[46.7462%]&lt;BR/&gt;{*:*, *:53}[40.6133%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5753%)&lt;BR/&gt; 53: (15.5101%)&lt;BR/&gt; 25: (0.532038%)&lt;BR/&gt; 0: (0.416378%)&lt;BR/&gt; 2117: (0.346981%)&gt;];
}
87--251[label="0.00921659;2pkt 2fpkt"];
87--253[label="0.00502513;1pkt 1fpkt"];
87--860[label="0.00455581;2pkt 2fpkt"];
87--1158[label="0.0022779;1pkt 1fpkt"];
87--1244[label="0.00358423;1pkt 1fpkt"];
87--1347[label="0.00392157;1pkt 1fpkt"];
87--1653[label="0.0077821;2pkt 2fpkt"];
87--1719[label="0.0189873;3pkt 3fpkt"];
87--1737[label="0.00321543;1pkt 1fpkt"];
87--1774[label="0.0022779;1pkt 1fpkt"];
87--2174[label="0.00406504;1pkt 1fpkt"];
87--2280[label="0.00436681;1pkt 1fpkt"];
87--2330[label="0.0041841;1pkt 1fpkt"];
87--2411[label="1;1pkt 1fpkt"];
87--2762[label="0.0425532;4pkt 4fpkt"];
87--2942[label="0.0022779;1pkt 1fpkt"];
87--2987[label="0.0022779;1pkt 1fpkt"];
87--2993[label="0.00460829;1pkt 1fpkt"];
87--3068[label="0.0022779;1pkt 1fpkt"];
87--3100[label="0.00229358;1pkt 1fpkt"];
87--3182[label="0.010101;1pkt 1fpkt"];
87--3304[label="0.00851064;2pkt 2fpkt"];
87--3549[label="0.287206;110pkt 110fpkt"];
87--3621[label="0.0037037;1pkt 1fpkt"];
87--3763[label="0.0022779;1pkt 1fpkt"];
87--3819[label="0.0023753;1pkt 1fpkt"];
87--4313[label="0.0318907;14pkt 14fpkt"];
87--4382[label="0.0022779;1pkt 1fpkt"];
87--4388[label="0.0022779;1pkt 1fpkt"];
87--4495[label="0.00735294;1pkt 1fpkt"];
87--4505[label="0.00367647;1pkt 1fpkt"];
87--4515[label="0.00571429;1pkt 1fpkt"];
87--4548[label="0.0555556;1pkt 1fpkt"];
87--5138[label="0.0205011;9pkt 9fpkt"];
87--5877[label="0.207171;52pkt 52fpkt"];
87--6537[label="0.0037594;1pkt 1fpkt"];
87--6547[label="0.0022779;1pkt 1fpkt"];
87--7038[label="0.0022779;1pkt 1fpkt"];
87--7065[label="1;1pkt 1fpkt"];
87--7077[label="0.2;4pkt 4fpkt"];
87--7150[label="0.0277778;1pkt 1fpkt"];
87--7293[label="0.111111;1pkt 1fpkt"];
87--8664[label="0.0296128;13pkt 13fpkt"];
87--8676[label="0.00683371;3pkt 3fpkt"];
87--8684[label="0.0113895;5pkt 5fpkt"];
87--8688[label="0.0296128;13pkt 13fpkt"];
87--8743[label="0.0296128;13pkt 13fpkt"];
87--8761[label="0.0113895;5pkt 5fpkt"];
87--8765[label="0.0296128;13pkt 13fpkt"];
87--8790[label="0.0296128;13pkt 13fpkt"];
87--8807[label="0.0113895;5pkt 5fpkt"];
87--8811[label="0.0296128;13pkt 13fpkt"];
87--9083[label="0.0205011;9pkt 9fpkt"];
87--9196[label="0.1;1pkt 1fpkt"];
87--9730[label="0.00873362;2pkt 2fpkt"];
87--9774[label="0.333333;1pkt 1fpkt"];
87--9780[label="0.00471698;1pkt 1fpkt"];
87--9854[label="0.0083682;2pkt 2fpkt"];
87--10115[label="0.0022779;1pkt 1fpkt"];
87--10638[label="0.333333;1pkt 1fpkt"];
87--10874[label="0.032967;6pkt 6fpkt"];
87--11571[label="0.0357143;1pkt 1fpkt"];
87--12001[label="0.00373134;1pkt 1fpkt"];
87--12417[label="0.75;3pkt 3fpkt"];
87--12463[label="0.00740741;1pkt 1fpkt"];
87--12594[label="0.0318907;14pkt 14fpkt"];
87--12654[label="0.5;1pkt 1fpkt"];
87--12864[label="0.0909091;1pkt 1fpkt"];
87--13135[label="0.00877193;2pkt 2fpkt"];
87--13188[label="0.0083682;2pkt 2fpkt"];
87--14371[label="0.00740741;1pkt 1fpkt"];
87--14670[label="0.00873362;2pkt 2fpkt"];
193--2762[label="0.12766;12pkt 12fpkt"];
193--3549[label="0.323171;53pkt 53fpkt"];
193--5877[label="0.152439;25pkt 25fpkt"];
193--8128[label="1;129pkt 129fpkt"];
193--8664[label="0.0365854;6pkt 6fpkt"];
193--8688[label="0.054878;9pkt 9fpkt"];
193--8743[label="0.0365854;6pkt 6fpkt"];
193--8765[label="0.054878;9pkt 9fpkt"];
193--8790[label="0.0365854;6pkt 6fpkt"];
193--8811[label="0.054878;9pkt 9fpkt"];
193--9478[label="1;10pkt 10fpkt"];
193--10874[label="0.219512;36pkt 36fpkt"];
193--10909[label="1;4pkt 4fpkt"];
193--13667[label="1;4pkt 4fpkt"];
2724--2762[label="0.0769231;2pkt 2fpkt"];
2724--3032[label="0.0769231;2pkt 2fpkt"];
2724--7077[label="0.2;4pkt 4fpkt"];
2724--8688[label="0.115385;3pkt 3fpkt"];
2724--8765[label="0.115385;3pkt 3fpkt"];
2724--8811[label="0.115385;3pkt 3fpkt"];
2724--8859[label="0.0384615;1pkt 1fpkt"];
2724--9060[label="1;1pkt 1fpkt"];
2724--10874[label="0.153846;4pkt 4fpkt"];
2724--11845[label="1;1pkt 1fpkt"];
2724--11982[label="0.176471;3pkt 3fpkt"];
2762--2819[label="0.0425532;4pkt 4fpkt"];
2762--2887[label="0.12766;12pkt 12fpkt"];
2762--3312[label="0.12766;12pkt 12fpkt"];
2762--4400[label="0.363636;24pkt 24fpkt"];
2762--5766[label="0.0106383;1pkt 1fpkt"];
2762--8063[label="0.0425532;4pkt 4fpkt"];
2762--8128[label="0.12766;12pkt 12fpkt"];
2762--8664[label="0.0531915;5pkt 5fpkt"];
2762--8743[label="0.0531915;5pkt 5fpkt"];
2762--8790[label="0.0531915;5pkt 5fpkt"];
2762--10874[label="1;94pkt 94fpkt"];
2819--6484[label="0.00337838;1pkt 1fpkt"];
2819--6507[label="0.00401606;1pkt 1fpkt"];
2819--7077[label="0.1;2pkt 2fpkt"];
2819--8063[label="1;210pkt 210fpkt"];
2819--8562[label="0.00337838;1pkt 1fpkt"];
2819--8650[label="0.00337838;1pkt 1fpkt"];
2819--8664[label="0.0337838;10pkt 10fpkt"];
2819--8676[label="0.00337838;1pkt 1fpkt"];
2819--8688[label="0.0540541;16pkt 16fpkt"];
2819--8703[label="0.00337838;1pkt 1fpkt"];
2819--8743[label="0.0337838;10pkt 10fpkt"];
2819--8765[label="0.0540541;16pkt 16fpkt"];
2819--8780[label="0.00337838;1pkt 1fpkt"];
2819--8790[label="0.0337838;10pkt 10fpkt"];
2819--8811[label="0.0540541;16pkt 16fpkt"];
2819--8826[label="0.00337838;1pkt 1fpkt"];
2819--9058[label="0.8;8pkt 8fpkt"];
2819--10001[label="0.225806;7pkt 7fpkt"];
2819--10031[label="1;6pkt 6fpkt"];
2819--10198[label="0.0625;1pkt 1fpkt"];
2819--10869[label="0.125;1pkt 1fpkt"];
2819--10874[label="0.032967;6pkt 6fpkt"];
2819--10945[label="0.0144928;1pkt 1fpkt"];
2819--11403[label="0.0869565;4pkt 4fpkt"];
2819--12356[label="0.00337838;1pkt 1fpkt"];
2819--12405[label="0.00337838;1pkt 1fpkt"];
2819--13256[label="0.225806;7pkt 7fpkt"];
2819--13268[label="1;6pkt 6fpkt"];
2819--13342[label="0.0625;1pkt 1fpkt"];
2819--13650[label="0.125;1pkt 1fpkt"];
2819--13682[label="0.0142857;1pkt 1fpkt"];
2819--14348[label="0.00337838;1pkt 1fpkt"];
2819--14719[label="0.225806;7pkt 7fpkt"];
2819--14721[label="1;6pkt 6fpkt"];
2819--15217[label="0.00337838;1pkt 1fpkt"];
3312--4096[label="0.158974;31pkt 31fpkt"];
3312--7293[label="0.111111;1pkt 1fpkt"];
3312--8688[label="0.0564103;11pkt 11fpkt"];
3312--8765[label="0.0564103;11pkt 11fpkt"];
3312--8811[label="0.0564103;11pkt 11fpkt"];
3312--10001[label="0.677419;21pkt 21fpkt"];
3312--10874[label="0.0989011;18pkt 18fpkt"];
3312--13256[label="0.677419;21pkt 21fpkt"];
3312--14719[label="0.677419;21pkt 21fpkt"];
3549--5766[label="0.557143;195pkt 195fpkt"];
3549--8128[label="0.325581;42pkt 42fpkt"];
3549--8664[label="0.0574413;22pkt 22fpkt"];
3549--8688[label="0.0600522;23pkt 23fpkt"];
3549--8743[label="0.0574413;22pkt 22fpkt"];
3549--8765[label="0.0600522;23pkt 23fpkt"];
3549--8790[label="0.0574413;22pkt 22fpkt"];
3549--8811[label="0.0600522;23pkt 23fpkt"];
4400--6388[label="0.25;2pkt 2fpkt"];
4400--7077[label="0.2;4pkt 4fpkt"];
4400--7293[label="0.222222;2pkt 2fpkt"];
4400--8664[label="0.030303;2pkt 2fpkt"];
4400--8688[label="0.0454545;3pkt 3fpkt"];
4400--8743[label="0.030303;2pkt 2fpkt"];
4400--8765[label="0.0454545;3pkt 3fpkt"];
4400--8790[label="0.030303;2pkt 2fpkt"];
4400--8811[label="0.0454545;3pkt 3fpkt"];
4400--10407[label="1;1pkt 1fpkt"];
4400--10874[label="0.545455;36pkt 36fpkt"];
4400--13444[label="1;1pkt 1fpkt"];
4947--5689[label="1;4pkt 4fpkt"];
4947--7479[label="1;3pkt 3fpkt"];
4947--8340[label="1;26pkt 26fpkt"];
4947--8688[label="0.342857;12pkt 12fpkt"];
4947--8765[label="0.342857;12pkt 12fpkt"];
4947--8811[label="0.342857;12pkt 12fpkt"];
4947--9486[label="1;1pkt 1fpkt"];
4947--10376[label="0.5;2pkt 2fpkt"];
4947--10869[label="0.875;7pkt 7fpkt"];
4947--11650[label="0.485714;17pkt 17fpkt"];
4947--13650[label="0.875;7pkt 7fpkt"];
4947--14001[label="0.485714;17pkt 17fpkt"];
5689--8340[label="1;4pkt 4fpkt"];
5689--10869[label="1;4pkt 4fpkt"];
5689--13650[label="1;4pkt 4fpkt"];
5766--5877[label="0.525896;132pkt 132fpkt"];
5766--7077[label="0.2;4pkt 4fpkt"];
5766--8664[label="0.0828571;29pkt 29fpkt"];
5766--8688[label="0.0771429;27pkt 27fpkt"];
5766--8743[label="0.0828571;29pkt 29fpkt"];
5766--8765[label="0.0771429;27pkt 27fpkt"];
5766--8790[label="0.0828571;29pkt 29fpkt"];
5766--8811[label="0.0771429;27pkt 27fpkt"];
5766--10874[label="0.00549451;1pkt 1fpkt"];
5877--8128[label="0.155039;20pkt 20fpkt"];
5877--8664[label="0.0717131;18pkt 18fpkt"];
5877--8688[label="0.0717131;18pkt 18fpkt"];
5877--8743[label="0.0717131;18pkt 18fpkt"];
5877--8765[label="0.0717131;18pkt 18fpkt"];
5877--8790[label="0.0717131;18pkt 18fpkt"];
5877--8811[label="0.0717131;18pkt 18fpkt"];
6388--8056[label="0.125;1pkt 1fpkt"];
6562--7135[label="0.00310559;1pkt 1fpkt"];
6562--8676[label="0.00170648;1pkt 1fpkt"];
6562--8906[label="0.00869565;1pkt 1fpkt"];
6562--9206[label="0.0182927;3pkt 3fpkt"];
6562--10487[label="0.0438596;5pkt 5fpkt"];
6562--10521[label="0.0363636;4pkt 4fpkt"];
6562--10766[label="0.0333333;5pkt 5fpkt"];
6562--11650[label="0.115385;6pkt 6fpkt"];
6562--12732[label="0.00877193;1pkt 1fpkt"];
6562--14001[label="0.113208;6pkt 6fpkt"];
6617--8676[label="0.00192678;1pkt 1fpkt"];
6617--8937[label="0.00819672;1pkt 1fpkt"];
6617--9206[label="0.00609756;1pkt 1fpkt"];
6617--10487[label="0.0438596;5pkt 5fpkt"];
6617--10521[label="0.0363636;4pkt 4fpkt"];
6617--10766[label="0.0333333;5pkt 5fpkt"];
6617--11650[label="0.134615;7pkt 7fpkt"];
6617--14001[label="0.132075;7pkt 7fpkt"];
7138--8684[label="0.0246914;2pkt 2fpkt"];
7138--8761[label="0.0246914;2pkt 2fpkt"];
7138--8807[label="0.0246914;2pkt 2fpkt"];
7138--9627[label="0.0246914;2pkt 2fpkt"];
7138--9774[label="0.666667;2pkt 2fpkt"];
7138--10065[label="0.0571429;2pkt 2fpkt"];
7138--12359[label="0.0123457;1pkt 1fpkt"];
7138--12370[label="0.0123457;1pkt 1fpkt"];
7138--12417[label="0.25;1pkt 1fpkt"];
7138--12654[label="0.5;1pkt 1fpkt"];
7138--13079[label="0.0246914;2pkt 2fpkt"];
8063--8664[label="0.047619;10pkt 10fpkt"];
8063--8676[label="0.0047619;1pkt 1fpkt"];
8063--8743[label="0.047619;10pkt 10fpkt"];
8063--8790[label="0.047619;10pkt 10fpkt"];
8063--9058[label="0.6;6pkt 6fpkt"];
8063--10001[label="0.0967742;3pkt 3fpkt"];
8063--10031[label="0.666667;4pkt 4fpkt"];
8063--10198[label="0.0625;1pkt 1fpkt"];
8063--10874[label="0.021978;4pkt 4fpkt"];
8063--10945[label="0.0144928;1pkt 1fpkt"];
8063--11403[label="0.0434783;2pkt 2fpkt"];
8063--12356[label="0.0047619;1pkt 1fpkt"];
8063--13256[label="0.0967742;3pkt 3fpkt"];
8063--13268[label="0.666667;4pkt 4fpkt"];
8063--13342[label="0.0625;1pkt 1fpkt"];
8063--13682[label="0.0142857;1pkt 1fpkt"];
8063--14719[label="0.0967742;3pkt 3fpkt"];
8063--14721[label="0.666667;4pkt 4fpkt"];
8128--8664[label="0.0465116;6pkt 6fpkt"];
8128--8688[label="0.0387597;5pkt 5fpkt"];
8128--8743[label="0.0465116;6pkt 6fpkt"];
8128--8765[label="0.0387597;5pkt 5fpkt"];
8128--8790[label="0.0465116;6pkt 6fpkt"];
8128--8811[label="0.0387597;5pkt 5fpkt"];
8128--9478[label="1;10pkt 10fpkt"];
8128--10874[label="0.186047;24pkt 24fpkt"];
8128--10909[label="1;4pkt 4fpkt"];
8128--13667[label="1;4pkt 4fpkt"];
8340--8688[label="0.192308;5pkt 5fpkt"];
8340--8765[label="0.192308;5pkt 5fpkt"];
8340--8811[label="0.192308;5pkt 5fpkt"];
8340--9486[label="1;1pkt 1fpkt"];
8340--10376[label="0.5;2pkt 2fpkt"];
8340--10869[label="0.875;7pkt 7fpkt"];
8340--11650[label="0.423077;11pkt 11fpkt"];
8340--13650[label="0.875;7pkt 7fpkt"];
8340--14001[label="0.423077;11pkt 11fpkt"];
10001--13256[label="1;31pkt 31fpkt"];
10001--14719[label="1;31pkt 31fpkt"];
10031--13268[label="1;6pkt 6fpkt"];
10031--14721[label="1;6pkt 6fpkt"];
10407--13444[label="1;1pkt 1fpkt"];
10869--13650[label="1;8pkt 8fpkt"];
10909--13667[label="1;4pkt 4fpkt"];
11650--14001[label="1;52pkt 52fpkt"];
13256--14719[label="1;31pkt 31fpkt"];
13268--14721[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1262{
style=filled;
color=gray75;
10936[label="9.62.187.130;55pkt 55fpkt", shape=pentagon, color=darkviolet];
13676[label="9.62.187.130;55pkt 55fpkt", shape=invtriangle, color=brown];
14898[label="9.62.187.130;54pkt 54fpkt", shape=invhouse, color=bisque];
stat1262[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.62.187.130:80, 210.33.108.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41245: (0.914634%)&lt;BR/&gt; 41243: (0.914634%)&lt;BR/&gt; 41242: (0.914634%)&lt;BR/&gt; 41241: (0.914634%)&gt;];
}
10936--13676[label="1;55pkt 55fpkt"];
10936--14898[label="1;54pkt 54fpkt"];
13676--14898[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.108.162" src_ip="9.62.187.130" src_port="80"/>
    </slice>
    <from sec="1289452439" usec="0"/>
    <to sec="1289452447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
5896[label="197.72.60.186;d;246pkt 246fpkt", shape=diamond, color=yellow];
7122[label="133.4.89.37;s;174pkt 174fpkt", shape=diamond, color=yellow];
10938[label="128.19.192.130;80pkt 80fpkt", shape=pentagon, color=darkviolet];
13677[label="128.19.192.130;80pkt 80fpkt", shape=invtriangle, color=brown];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.89.37:*, 197.72.60.186:400}[32.1569%]&lt;BR/&gt;{128.19.192.130:*, 197.72.60.186:*}[31.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 400: (25.3448%)&lt;BR/&gt; 8000: (8.96552%)&lt;BR/&gt; 600: (7.06897%)&lt;BR/&gt; 80: (5.68966%)&lt;BR/&gt; 500: (2.75862%)&gt;];
}
5896--7122[label="0.988506;172pkt 172fpkt"];
5896--8664[label="0.00813008;2pkt 2fpkt"];
5896--8688[label="0.00406504;1pkt 1fpkt"];
5896--8743[label="0.00813008;2pkt 2fpkt"];
5896--8765[label="0.00406504;1pkt 1fpkt"];
5896--8790[label="0.00813008;2pkt 2fpkt"];
5896--8811[label="0.00406504;1pkt 1fpkt"];
5896--10938[label="0.9125;73pkt 73fpkt"];
5896--13677[label="0.9125;73pkt 73fpkt"];
7122--8664[label="0.0114943;2pkt 2fpkt"];
7122--8688[label="0.00574713;1pkt 1fpkt"];
7122--8743[label="0.0114943;2pkt 2fpkt"];
7122--8765[label="0.00574713;1pkt 1fpkt"];
7122--8790[label="0.0114943;2pkt 2fpkt"];
7122--8811[label="0.00574713;1pkt 1fpkt"];
10938--13677[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="197.72.60.186" src_ip="128.19.192.130"/>
      <filter dst_ip="197.72.60.186" dst_port="400" src_ip="133.4.89.37"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1264{
style=filled;
color=gray75;
10939[label="81.152.198.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13678[label="81.152.198.130;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1264[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.152.198.130:64404, 211.185.145.108:80}[33.3333%]&lt;BR/&gt;{81.152.198.130:64541, 211.185.145.111:80}[33.3333%]&lt;BR/&gt;{81.152.198.130:64565, 211.185.145.111:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64565: (16.6667%)&lt;BR/&gt; 64541: (16.6667%)&lt;BR/&gt; 64404: (16.6667%)&gt;];
}
10939--13678[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.111" dst_port="80" src_ip="81.152.198.130" src_port="64565"/>
      <filter dst_ip="211.185.145.111" dst_port="80" src_ip="81.152.198.130" src_port="64541"/>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="81.152.198.130" src_port="64404"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1265{
style=filled;
color=gray75;
5294[label="210.33.155.24;d;67pkt 67fpkt", shape=diamond, color=yellow];
10355[label="35.165.40.89;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat1265[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.165.40.89:80, 210.33.155.24:*}[53.7313%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1748%)&lt;BR/&gt; 443: (3.39806%)&lt;BR/&gt; 64421: (1.45631%)&lt;BR/&gt; 53679: (0.970874%)&lt;BR/&gt; 52386: (0.970874%)&gt;];
}
5294--6655[label="0.0588235;1pkt 1fpkt"];
5294--6726[label="0.05;1pkt 1fpkt"];
5294--10355[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.155.24" src_ip="35.165.40.89" src_port="80"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289451998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.5.34.132"/>
    </slice>
    <from sec="1289452000" usec="0"/>
    <to sec="1289452021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.153.126.132"/>
    </slice>
    <from sec="1289452393" usec="0"/>
    <to sec="1289452415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
5634[label="164.251.42.37;d;83pkt 83fpkt", shape=diamond, color=yellow];
9442[label="52.180.8.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10993[label="168.124.52.133;65pkt 65fpkt", shape=pentagon, color=darkviolet];
12992[label="52.180.8.34;1pkt 1fpkt", shape=invtriangle, color=brown];
13707[label="168.124.52.133;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.124.52.133:8080, 164.251.42.37:*}[70.2381%]&lt;BR/&gt;{*:80, 164.251.42.37:*}[26.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (41.1628%)&lt;BR/&gt; 80: (8.37209%)&lt;BR/&gt; 49708: (0.697674%)&lt;BR/&gt; 49707: (0.697674%)&lt;BR/&gt; 49706: (0.697674%)&gt;];
}
5634--8684[label="0.0843373;7pkt 7fpkt"];
5634--8685[label="0.0120482;1pkt 1fpkt"];
5634--8761[label="0.0843373;7pkt 7fpkt"];
5634--8762[label="0.0120482;1pkt 1fpkt"];
5634--8807[label="0.0843373;7pkt 7fpkt"];
5634--8808[label="0.0120482;1pkt 1fpkt"];
5634--9442[label="1;1pkt 1fpkt"];
5634--10363[label="0.0555556;1pkt 1fpkt"];
5634--10993[label="0.984615;64pkt 64fpkt"];
5634--12992[label="1;1pkt 1fpkt"];
5634--13423[label="0.0526316;1pkt 1fpkt"];
5634--13707[label="0.984615;64pkt 64fpkt"];
9442--12992[label="1;1pkt 1fpkt"];
10993--13707[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.42.37" src_port="80"/>
      <filter dst_ip="164.251.42.37" src_ip="168.124.52.133" src_port="8080"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289452459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.95.168.133"/>
    </slice>
    <from sec="1289452144" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.172.204.133"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289451835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.18.162.134"/>
    </slice>
    <from sec="1289451891" usec="0"/>
    <to sec="1289452382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.34.71.135"/>
    </slice>
    <from sec="1289451873" usec="0"/>
    <to sec="1289451886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1273{
style=filled;
color=gray75;
11053[label="133.4.180.135;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13735[label="133.4.180.135;5pkt 5fpkt", shape=invtriangle, color=brown];
14925[label="133.4.180.135;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1273[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.180.135:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58615: (8.82353%)&lt;BR/&gt; 45691: (8.82353%)&lt;BR/&gt; 37610: (8.82353%)&lt;BR/&gt; 28689: (8.82353%)&gt;];
}
11053--13735[label="1;5pkt 5fpkt"];
11053--14925[label="1;6pkt 6fpkt"];
13735--14925[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.180.135" src_port="80"/>
    </slice>
    <from sec="1289451653" usec="0"/>
    <to sec="1289452416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.169.36.136"/>
    </slice>
    <from sec="1289451821" usec="0"/>
    <to sec="1289452269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716444,3.58199,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
4886[label="210.33.107.74;d;9pkt 9fpkt", shape=diamond, color=yellow];
13739[label="35.145.99.136;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.33.107.74:995}[66.6667%]&lt;BR/&gt;{*:*, 210.33.107.74:993}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (35%)&lt;BR/&gt; 56361: (10%)&lt;BR/&gt; 993: (10%)&lt;BR/&gt; 0: (10%)&lt;BR/&gt; 64726: (5%)&gt;];
}
4886--13739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.107.74" dst_port="995"/>
      <filter dst_ip="210.33.107.74" dst_port="993"/>
    </slice>
    <from sec="1289451813" usec="0"/>
    <to sec="1289452140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1276{
style=filled;
color=gray75;
11068[label="17.97.149.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13742[label="17.97.149.136;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1276[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.97.149.136:56806, 128.19.147.190:25982}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56806: (50%)&lt;BR/&gt; 25982: (50%)&gt;];
}
11068--13742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.147.190" dst_port="25982" src_ip="17.97.149.136" src_port="56806"/>
    </slice>
    <from sec="1289451866" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.186.160.136"/>
    </slice>
    <from sec="1289452115" usec="0"/>
    <to sec="1289452118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.247.75.137"/>
    </slice>
    <from sec="1289452187" usec="0"/>
    <to sec="1289452201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.158.83.137"/>
    </slice>
    <from sec="1289451698" usec="0"/>
    <to sec="1289451725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1280{
style=filled;
color=gray75;
11081[label="133.4.98.137;164pkt 164fpkt", shape=pentagon, color=darkviolet];
13750[label="133.4.98.137;163pkt 163fpkt", shape=invtriangle, color=brown];
stat1280[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.98.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11081--13750[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.98.137"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
11089[label="15.74.199.137;50pkt 50fpkt", shape=pentagon, color=darkviolet];
13752[label="15.74.199.137;50pkt 50fpkt", shape=invtriangle, color=brown];
14933[label="15.74.199.137;50pkt 50fpkt", shape=invhouse, color=bisque];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.74.199.137:*, 128.1.188.78:*}[40%]&lt;BR/&gt;{15.74.199.137:21, 128.1.162.18:*}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27%)&lt;BR/&gt; 63622: (1%)&lt;BR/&gt; 63495: (1%)&lt;BR/&gt; 63381: (1%)&lt;BR/&gt; 62898: (1%)&gt;];
}
11089--13752[label="1;50pkt 50fpkt"];
11089--14933[label="1;50pkt 50fpkt"];
13752--14933[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.188.78" src_ip="15.74.199.137"/>
      <filter dst_ip="128.1.162.18" src_ip="15.74.199.137" src_port="21"/>
    </slice>
    <from sec="1289452223" usec="0"/>
    <to sec="1289452258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.165.76.138"/>
    </slice>
    <from sec="1289452037" usec="0"/>
    <to sec="1289452051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.250.138"/>
    </slice>
    <from sec="1289451985" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.181.74.139"/>
    </slice>
    <from sec="1289452394" usec="0"/>
    <to sec="1289452423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
500[label="166.26.204.41;d;178pkt 178fpkt", shape=diamond, color=yellow];
502[label="210.3.98.213;s;52pkt 52fpkt", shape=diamond, color=yellow];
890[label="166.26.0.28;d;25pkt 25fpkt", shape=diamond, color=yellow];
1004[label="210.3.98.209;s;45pkt 45fpkt", shape=diamond, color=yellow];
8150[label="166.26.204.41;d;178pkt 178fpkt", shape=hexagon, color=black];
12139[label="210.3.98.209;72pkt 72fpkt", shape=pentagon, color=darkviolet];
12191[label="210.3.98.213;64pkt 64fpkt", shape=pentagon, color=darkviolet];
12446[label="210.3.98.231;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14236[label="210.3.98.213;63pkt 63fpkt", shape=invtriangle, color=brown];
14251[label="210.3.98.215;1pkt 1fpkt", shape=invtriangle, color=brown];
14360[label="210.3.98.231;3pkt 3fpkt", shape=invtriangle, color=brown];
15224[label="210.3.98.231;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.3.98.209:80, 166.26.204.41:*}[35.9606%]&lt;BR/&gt;{210.3.98.213:80, 166.26.204.41:*}[30.0493%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4876%)&lt;BR/&gt; 843: (1.67394%)&lt;BR/&gt; 12000: (1.38282%)&lt;BR/&gt; 11000: (1.23726%)&lt;BR/&gt; 57879: (0.363901%)&gt;];
}
500--502[label="0.942308;49pkt 49fpkt"];
500--682[label="0.0280899;5pkt 5fpkt"];
500--1004[label="0.977778;44pkt 44fpkt"];
500--4256[label="0.0280899;5pkt 5fpkt"];
500--4359[label="0.0227273;3pkt 3fpkt"];
500--7133[label="0.0322581;1pkt 1fpkt"];
500--8150[label="1;178pkt 178fpkt"];
500--12139[label="1;72pkt 72fpkt"];
500--12191[label="0.953125;61pkt 61fpkt"];
500--12446[label="0.666667;2pkt 2fpkt"];
500--14236[label="0.952381;60pkt 60fpkt"];
500--14360[label="0.666667;2pkt 2fpkt"];
500--15224[label="0.666667;2pkt 2fpkt"];
502--890[label="0.12;3pkt 3fpkt"];
502--8150[label="0.942308;49pkt 49fpkt"];
502--12191[label="1;52pkt 52fpkt"];
502--14236[label="0.980769;51pkt 51fpkt"];
890--1004[label="0.04;1pkt 1fpkt"];
890--1100[label="0.04;1pkt 1fpkt"];
890--1121[label="0.04;1pkt 1fpkt"];
890--1220[label="0.04;1pkt 1fpkt"];
890--2161[label="0.04;1pkt 1fpkt"];
890--2280[label="0.04;1pkt 1fpkt"];
890--4256[label="0.04;1pkt 1fpkt"];
890--4548[label="0.0555556;1pkt 1fpkt"];
890--8684[label="0.04;1pkt 1fpkt"];
890--8761[label="0.04;1pkt 1fpkt"];
890--8807[label="0.04;1pkt 1fpkt"];
890--11121[label="0.04;1pkt 1fpkt"];
890--12191[label="0.12;3pkt 3fpkt"];
890--12359[label="0.04;1pkt 1fpkt"];
890--12446[label="0.333333;1pkt 1fpkt"];
890--13762[label="0.04;1pkt 1fpkt"];
890--14236[label="0.12;3pkt 3fpkt"];
890--14251[label="1;1pkt 1fpkt"];
890--14360[label="0.333333;1pkt 1fpkt"];
890--15224[label="0.333333;1pkt 1fpkt"];
1004--8150[label="0.977778;44pkt 44fpkt"];
1004--12139[label="0.955556;43pkt 43fpkt"];
8150--12139[label="1;72pkt 72fpkt"];
8150--12191[label="0.953125;61pkt 61fpkt"];
8150--12446[label="0.666667;2pkt 2fpkt"];
8150--14236[label="0.952381;60pkt 60fpkt"];
8150--14360[label="0.666667;2pkt 2fpkt"];
8150--15224[label="0.666667;2pkt 2fpkt"];
12191--14236[label="1;63pkt 63fpkt"];
12446--14360[label="1;3pkt 3fpkt"];
12446--15224[label="1;3pkt 3fpkt"];
14360--15224[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.204.41" src_ip="210.3.98.209" src_port="80"/>
      <filter dst_ip="166.26.204.41" src_ip="210.3.98.213" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
11160[label="202.41.19.142;97pkt 97fpkt", shape=pentagon, color=darkviolet];
13776[label="202.41.19.142;97pkt 97fpkt", shape=invtriangle, color=brown];
14945[label="202.41.19.142;98pkt 98fpkt", shape=invhouse, color=bisque];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.41.19.142:80, 211.185.146.174:*}[98.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8288%)&lt;BR/&gt; 58299: (0.513699%)&lt;BR/&gt; 58297: (0.513699%)&lt;BR/&gt; 58295: (0.513699%)&lt;BR/&gt; 58293: (0.513699%)&gt;];
}
11160--13776[label="1;97pkt 97fpkt"];
11160--14945[label="1;97pkt 97fpkt"];
13776--14945[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.146.174" src_ip="202.41.19.142" src_port="80"/>
    </slice>
    <from sec="1289452306" usec="0"/>
    <to sec="1289452341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.40.36.143"/>
    </slice>
    <from sec="1289452118" usec="0"/>
    <to sec="1289452128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.98.66.143"/>
    </slice>
    <from sec="1289452145" usec="0"/>
    <to sec="1289452176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="184.98.76.143"/>
    </slice>
    <from sec="1289451841" usec="0"/>
    <to sec="1289451912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.33.104.146"/>
    </slice>
    <from sec="1289452256" usec="0"/>
    <to sec="1289452268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.141.233.147"/>
    </slice>
    <from sec="1289452232" usec="0"/>
    <to sec="1289452244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.47.156.148"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.168.0.150"/>
    </slice>
    <from sec="1289451897" usec="0"/>
    <to sec="1289451915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.182.150"/>
    </slice>
    <from sec="1289451771" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1295{
style=filled;
color=gray75;
2020[label="210.42.220.250;d;2253pkt 2253fpkt", shape=diamond, color=yellow];
3747[label="57.132.94.86;s;1273pkt 1273fpkt", shape=diamond, color=yellow];
5535[label="197.119.111.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
5892[label="211.185.157.200;d;690pkt 690fpkt", shape=diamond, color=yellow];
11291[label="182.37.120.151;194pkt 194fpkt", shape=pentagon, color=darkviolet];
13832[label="182.37.120.151;194pkt 194fpkt", shape=invtriangle, color=brown];
stat1295[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.132.94.86:*, 210.42.220.250:53}[30.9331%]&lt;BR/&gt;{*:53, 210.42.220.250:*}[27.4848%]&lt;BR/&gt;{*:*, 211.185.157.200:53}[23.259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.0119%)&lt;BR/&gt; 0: (1.5418%)&lt;BR/&gt; 25: (0.141151%)&lt;BR/&gt; 58883: (0.0542888%)&lt;BR/&gt; 11287: (0.0542888%)&gt;];
}
2020--2715[label="0.047619;19pkt 19fpkt"];
2020--2782[label="0.0420168;5pkt 5fpkt"];
2020--2858[label="0.0045045;1pkt 1fpkt"];
2020--2914[label="0.0204082;2pkt 2fpkt"];
2020--2933[label="0.0393939;13pkt 13fpkt"];
2020--2968[label="0.0258621;12pkt 12fpkt"];
2020--3621[label="0.0037037;1pkt 1fpkt"];
2020--3711[label="0.00381679;1pkt 1fpkt"];
2020--3715[label="0.00653595;1pkt 1fpkt"];
2020--3747[label="0.64022;815pkt 815fpkt"];
2020--3763[label="0.000827815;1pkt 1fpkt"];
2020--4481[label="0.00253165;1pkt 1fpkt"];
2020--4515[label="0.00571429;1pkt 1fpkt"];
2020--5141[label="0.0159787;36pkt 36fpkt"];
2020--5535[label="1;1pkt 1fpkt"];
2020--6507[label="0.00401606;1pkt 1fpkt"];
2020--7081[label="0.00461538;3pkt 3fpkt"];
2020--8676[label="0.0346205;78pkt 78fpkt"];
2020--8838[label="0.0434783;1pkt 1fpkt"];
2020--8937[label="0.00819672;1pkt 1fpkt"];
2020--8972[label="0.00724638;1pkt 1fpkt"];
2020--9206[label="0.00609756;1pkt 1fpkt"];
2020--9440[label="0.00766284;2pkt 2fpkt"];
2020--9925[label="0.00961538;1pkt 1fpkt"];
2020--10115[label="0.000768049;1pkt 1fpkt"];
2020--10119[label="0.00806452;1pkt 1fpkt"];
2020--10656[label="0.0056338;2pkt 2fpkt"];
2020--10805[label="0.00662252;1pkt 1fpkt"];
2020--11054[label="0.0121951;1pkt 1fpkt"];
2020--11291[label="0.92268;179pkt 179fpkt"];
2020--11783[label="0.00601202;3pkt 3fpkt"];
2020--12356[label="0.0450237;19pkt 19fpkt"];
2020--12522[label="0.0243902;1pkt 1fpkt"];
2020--12651[label="0.0271739;5pkt 5fpkt"];
2020--12990[label="0.00763359;2pkt 2fpkt"];
2020--13551[label="0.0056338;2pkt 2fpkt"];
2020--13832[label="0.92268;179pkt 179fpkt"];
2020--14061[label="0.0060241;3pkt 3fpkt"];
2020--14438[label="0.027027;5pkt 5fpkt"];
2020--15081[label="0.0060241;3pkt 3fpkt"];
3747--5892[label="0.663768;458pkt 458fpkt"];
5892--6484[label="0.00144928;1pkt 1fpkt"];
5892--8562[label="0.00144928;1pkt 1fpkt"];
5892--8650[label="0.00144928;1pkt 1fpkt"];
5892--8703[label="0.00144928;1pkt 1fpkt"];
5892--8780[label="0.00144928;1pkt 1fpkt"];
5892--8826[label="0.00144928;1pkt 1fpkt"];
5892--12405[label="0.00144928;1pkt 1fpkt"];
5892--14348[label="0.00144928;1pkt 1fpkt"];
5892--15217[label="0.00144928;1pkt 1fpkt"];
11291--13832[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.220.250" src_port="53"/>
      <filter dst_ip="211.185.157.200" dst_port="53"/>
      <filter dst_ip="210.42.220.250" dst_port="53" src_ip="57.132.94.86"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1296{
style=filled;
color=gray75;
319[label="166.26.114.19;d;59pkt 59fpkt", shape=diamond, color=yellow];
1516[label="41.83.92.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
3239[label="214.167.198.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
11299[label="213.50.54.152;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11636[label="214.167.198.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13834[label="213.50.54.152;6pkt 6fpkt", shape=invtriangle, color=brown];
13993[label="214.167.198.173;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1296[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.114.19:*}[98.3051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3421%)&lt;BR/&gt; 50141: (2.63158%)&lt;BR/&gt; 50207: (1.97368%)&lt;BR/&gt; 50206: (1.97368%)&lt;BR/&gt; 50205: (1.97368%)&gt;];
}
319--360[label="0.0169492;1pkt 1fpkt"];
319--1516[label="1;1pkt 1fpkt"];
319--2861[label="0.0847458;5pkt 5fpkt"];
319--3239[label="1;1pkt 1fpkt"];
319--3573[label="0.130435;3pkt 3fpkt"];
319--4256[label="0.118644;7pkt 7fpkt"];
319--9000[label="0.111111;1pkt 1fpkt"];
319--11299[label="1;7pkt 7fpkt"];
319--11636[label="1;1pkt 1fpkt"];
319--13834[label="1;6pkt 6fpkt"];
319--13993[label="1;1pkt 1fpkt"];
3239--11636[label="1;1pkt 1fpkt"];
3239--13993[label="1;1pkt 1fpkt"];
11299--13834[label="1;6pkt 6fpkt"];
11636--13993[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.114.19" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.51.196.153"/>
    </slice>
    <from sec="1289452447" usec="0"/>
    <to sec="1289452479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.170.73.154"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.80.67.155"/>
    </slice>
    <from sec="1289452306" usec="0"/>
    <to sec="1289452317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.208.86.155"/>
    </slice>
    <from sec="1289451644" usec="0"/>
    <to sec="1289451650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.191.0.156"/>
    </slice>
    <from sec="1289452351" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1302{
style=filled;
color=gray75;
11357[label="146.82.6.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13862[label="146.82.6.156;2pkt 2fpkt", shape=invtriangle, color=brown];
14981[label="146.82.6.156;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1302[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.82.6.156:53, 214.109.110.104:57575}[50%]&lt;BR/&gt;{146.82.6.156:40948, 146.82.6.156:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 57575: (25%)&lt;BR/&gt; 40948: (25%)&gt;];
}
11357--13862[label="1;2pkt 2fpkt"];
11357--14981[label="1;2pkt 2fpkt"];
13862--14981[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.82.6.156" dst_port="53" src_ip="146.82.6.156" src_port="40948"/>
      <filter dst_ip="214.109.110.104" dst_port="57575" src_ip="146.82.6.156" src_port="53"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1303{
style=filled;
color=gray75;
11376[label="166.26.118.157;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13869[label="166.26.118.157;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1303[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.118.157:*, 197.87.73.235:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1988: (2.12766%)&lt;BR/&gt; 1982: (2.12766%)&lt;BR/&gt; 1978: (2.12766%)&lt;BR/&gt; 1942: (2.12766%)&gt;];
}
11376--13869[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="197.87.73.235" dst_port="80" src_ip="166.26.118.157"/>
    </slice>
    <from sec="1289451882" usec="0"/>
    <to sec="1289452312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.25.87.158"/>
    </slice>
    <from sec="1289452195" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1307{
style=filled;
color=gray75;
11393[label="166.26.234.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13880[label="166.26.234.158;1pkt 1fpkt", shape=invtriangle, color=brown];
14990[label="166.26.234.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1307[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.234.158:53, 117.154.118.192:23300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23300: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
11393--13880[label="1;1pkt 1fpkt"];
11393--14990[label="1;1pkt 1fpkt"];
13880--14990[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="117.154.118.192" dst_port="23300" src_ip="166.26.234.158" src_port="53"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.198.238.158"/>
    </slice>
    <from sec="1289452078" usec="0"/>
    <to sec="1289452093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.160.163.159"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.246.149.160"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.249.90.161"/>
    </slice>
    <from sec="1289451943" usec="0"/>
    <to sec="1289452328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.10.164.161"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289451857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.26.218.161"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289451914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.0.65.162"/>
    </slice>
    <from sec="1289452446" usec="0"/>
    <to sec="1289452463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.166.75.162"/>
    </slice>
    <from sec="1289452181" usec="0"/>
    <to sec="1289452237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.13.182.162"/>
    </slice>
    <from sec="1289451646" usec="0"/>
    <to sec="1289452332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1318{
style=filled;
color=gray75;
11480[label="184.24.182.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13920[label="184.24.182.163;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1318[shape=component, label=&lt;Rules:&lt;BR/&gt;{184.24.182.163:80, 166.26.23.19:64020}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64020: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11480--13920[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.23.19" dst_port="64020" src_ip="184.24.182.163" src_port="80"/>
    </slice>
    <from sec="1289452175" usec="0"/>
    <to sec="1289452432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.163"/>
    </slice>
    <from sec="1289451949" usec="0"/>
    <to sec="1289451961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
11500[label="203.47.62.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13930[label="203.47.62.165;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.47.62.165:50020, 166.26.237.72:80}[50%]&lt;BR/&gt;{203.47.62.165:58549, 166.26.34.160:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58549: (25%)&lt;BR/&gt; 50020: (25%)&gt;];
}
11500--13930[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.34.160" dst_port="80" src_ip="203.47.62.165" src_port="58549"/>
      <filter dst_ip="166.26.237.72" dst_port="80" src_ip="203.47.62.165" src_port="50020"/>
    </slice>
    <from sec="1289451655" usec="0"/>
    <to sec="1289451764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1322{
style=filled;
color=gray75;
316[label="166.26.115.229;d;63pkt 63fpkt", shape=diamond, color=yellow];
3572[label="211.32.32.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
4053[label="5.109.94.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
6309[label="5.182.28.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
7593[label="211.32.32.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
7697[label="166.26.115.229;d;53pkt 53fpkt", shape=hexagon, color=black];
9157[label="193.149.196.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12953[label="192.146.56.29;1pkt 1fpkt", shape=invtriangle, color=brown];
13932[label="5.182.28.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1322[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 166.26.115.229:5041}[36.5079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (59.3496%)&lt;BR/&gt; 80: (4.87805%)&lt;BR/&gt; 4000: (2.03252%)&lt;BR/&gt; 8000: (1.62602%)&lt;BR/&gt; 57910: (1.21951%)&gt;];
}
316--3572[label="1;1pkt 1fpkt"];
316--4053[label="1;1pkt 1fpkt"];
316--4256[label="0.015873;1pkt 1fpkt"];
316--6309[label="1;1pkt 1fpkt"];
316--7593[label="1;1pkt 1fpkt"];
316--7697[label="1;53pkt 53fpkt"];
316--9157[label="1;1pkt 1fpkt"];
316--12953[label="1;1pkt 1fpkt"];
316--13932[label="1;1pkt 1fpkt"];
3572--7697[label="1;1pkt 1fpkt"];
4053--7697[label="1;1pkt 1fpkt"];
6309--7697[label="1;1pkt 1fpkt"];
6309--13932[label="1;1pkt 1fpkt"];
7697--9157[label="1;1pkt 1fpkt"];
7697--12953[label="1;1pkt 1fpkt"];
7697--13932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.115.229" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.77.54.166"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.62.97.166"/>
    </slice>
    <from sec="1289451727" usec="0"/>
    <to sec="1289451745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
11513[label="158.196.97.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13936[label="158.196.97.166;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.97.166:50784, 14.21.0.166:59629}[50%]&lt;BR/&gt;{158.196.97.166:80, 42.146.68.182:44952}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59629: (25%)&lt;BR/&gt; 50784: (25%)&lt;BR/&gt; 44952: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
11513--13936[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.182" dst_port="44952" src_ip="158.196.97.166" src_port="80"/>
      <filter dst_ip="14.21.0.166" dst_port="59629" src_ip="158.196.97.166" src_port="50784"/>
    </slice>
    <from sec="1289451723" usec="0"/>
    <to sec="1289452168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1326{
style=filled;
color=gray75;
11527[label="15.74.205.166;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13941[label="15.74.205.166;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1326[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.74.205.166:80, 133.4.142.37:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4116: (9.09091%)&lt;BR/&gt; 4114: (9.09091%)&lt;BR/&gt; 4112: (9.09091%)&lt;BR/&gt; 4110: (9.09091%)&gt;];
}
11527--13941[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.142.37" src_ip="15.74.205.166" src_port="80"/>
    </slice>
    <from sec="1289452471" usec="0"/>
    <to sec="1289452482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.141.78.167"/>
    </slice>
    <from sec="1289451906" usec="0"/>
    <to sec="1289452014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,012,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
11544[label="61.17.44.168;44pkt 44fpkt", shape=pentagon, color=darkviolet];
13950[label="61.17.44.168;44pkt 44fpkt", shape=invtriangle, color=brown];
15026[label="61.17.44.168;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.17.44.168:3277, 164.251.17.174:*}[50%]&lt;BR/&gt;{61.17.44.168:3277, 164.251.25.51:*}[43.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3277: (46.5909%)&lt;BR/&gt; 7266: (2.27273%)&lt;BR/&gt; 57620: (1.13636%)&lt;BR/&gt; 53629: (1.13636%)&lt;BR/&gt; 53611: (1.13636%)&gt;];
}
11544--13950[label="1;44pkt 44fpkt"];
11544--15026[label="1;44pkt 44fpkt"];
13950--15026[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="164.251.17.174" src_ip="61.17.44.168" src_port="3277"/>
      <filter dst_ip="164.251.25.51" src_ip="61.17.44.168" src_port="3277"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1330{
style=filled;
color=gray75;
11547[label="53.106.52.168;39pkt 39fpkt", shape=pentagon, color=darkviolet];
13951[label="53.106.52.168;39pkt 39fpkt", shape=invtriangle, color=brown];
15027[label="53.106.52.168;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1330[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.106.52.168:*, 128.158.242.131:41311}[25.641%]&lt;BR/&gt;{53.106.52.168:59041, 128.158.242.131:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41311: (12.8205%)&lt;BR/&gt; 59041: (10.2564%)&lt;BR/&gt; 41298: (8.97436%)&lt;BR/&gt; 41309: (7.69231%)&lt;BR/&gt; 41307: (6.41026%)&gt;];
}
11547--13951[label="1;39pkt 39fpkt"];
11547--15027[label="1;39pkt 39fpkt"];
13951--15027[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="128.158.242.131" src_ip="53.106.52.168" src_port="59041"/>
      <filter dst_ip="128.158.242.131" dst_port="41311" src_ip="53.106.52.168"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.227.67.168"/>
    </slice>
    <from sec="1289452130" usec="0"/>
    <to sec="1289452135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.172.119.168"/>
    </slice>
    <from sec="1289452480" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.3.169"/>
    </slice>
    <from sec="1289451969" usec="0"/>
    <to sec="1289451974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.8.169"/>
    </slice>
    <from sec="1289452194" usec="0"/>
    <to sec="1289452200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1335{
style=filled;
color=gray75;
229[label="200.226.3.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
2606[label="67.70.84.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2703[label="133.4.112.91;s;1016pkt 1016fpkt", shape=diamond, color=yellow];
4278[label="166.26.112.30;s;169pkt 169fpkt", shape=diamond, color=yellow];
5134[label="46.212.241.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
7059[label="162.248.234.251;d;56pkt 56fpkt", shape=diamond, color=yellow];
10394[label="133.4.112.91;1070pkt 1070fpkt", shape=pentagon, color=darkviolet];
13437[label="133.4.112.91;1070pkt 1070fpkt", shape=invtriangle, color=brown];
14800[label="133.4.112.91;1071pkt 1071fpkt", shape=invhouse, color=bisque];
stat1335[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.112.91:*, *:80}[54.4355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.9877%)&lt;BR/&gt; 53: (10.7407%)&lt;BR/&gt; 443: (6.94725%)&lt;BR/&gt; 36995: (0.852974%)&lt;BR/&gt; 1863: (0.325477%)&gt;];
}
229--2703[label="1;1pkt 1fpkt"];
229--8664[label="1;1pkt 1fpkt"];
229--8743[label="1;1pkt 1fpkt"];
229--8790[label="1;1pkt 1fpkt"];
229--10394[label="1;1pkt 1fpkt"];
229--13437[label="1;1pkt 1fpkt"];
229--14800[label="1;1pkt 1fpkt"];
2606--2703[label="1;1pkt 1fpkt"];
2606--10394[label="1;1pkt 1fpkt"];
2606--13437[label="1;1pkt 1fpkt"];
2606--14800[label="1;1pkt 1fpkt"];
2703--2722[label="0.00540541;1pkt 1fpkt"];
2703--2948[label="0.000984252;1pkt 1fpkt"];
2703--2958[label="0.0240964;4pkt 4fpkt"];
2703--2974[label="0.00920245;3pkt 3fpkt"];
2703--3024[label="0.0165746;3pkt 3fpkt"];
2703--3119[label="0.019544;6pkt 6fpkt"];
2703--3620[label="0.0147638;15pkt 15fpkt"];
2703--3698[label="0.00787402;8pkt 8fpkt"];
2703--3745[label="0.00727273;2pkt 2fpkt"];
2703--3839[label="0.0113636;2pkt 2fpkt"];
2703--3852[label="0.0185185;4pkt 4fpkt"];
2703--3936[label="0.0123457;1pkt 1fpkt"];
2703--3951[label="0.0075188;1pkt 1fpkt"];
2703--4323[label="0.0107527;1pkt 1fpkt"];
2703--4480[label="0.00323276;3pkt 3fpkt"];
2703--4514[label="0.00645161;1pkt 1fpkt"];
2703--4559[label="0.0243902;5pkt 5fpkt"];
2703--4564[label="0.00877193;1pkt 1fpkt"];
2703--4680[label="0.00546448;1pkt 1fpkt"];
2703--4790[label="0.0491803;3pkt 3fpkt"];
2703--5193[label="0.00285307;2pkt 2fpkt"];
2703--5257[label="0.03125;1pkt 1fpkt"];
2703--5303[label="0.0254237;3pkt 3fpkt"];
2703--5330[label="0.00980392;1pkt 1fpkt"];
2703--5808[label="0.0117647;1pkt 1fpkt"];
2703--5814[label="0.00262812;2pkt 2fpkt"];
2703--5822[label="0.00367197;3pkt 3fpkt"];
2703--5872[label="0.00699301;1pkt 1fpkt"];
2703--5905[label="0.00203252;2pkt 2fpkt"];
2703--5909[label="0.00529661;5pkt 5fpkt"];
2703--5963[label="0.0173913;10pkt 10fpkt"];
2703--6007[label="0.0166667;10pkt 10fpkt"];
2703--6012[label="0.0333333;3pkt 3fpkt"];
2703--6132[label="0.0561798;5pkt 5fpkt"];
2703--6157[label="0.0128205;2pkt 2fpkt"];
2703--6194[label="0.0131579;1pkt 1fpkt"];
2703--6687[label="0.030303;1pkt 1fpkt"];
2703--6727[label="0.0144928;1pkt 1fpkt"];
2703--6753[label="0.0365854;3pkt 3fpkt"];
2703--7059[label="1;56pkt 56fpkt"];
2703--7075[label="0.00380952;2pkt 2fpkt"];
2703--7082[label="0.00816327;4pkt 4fpkt"];
2703--7690[label="0.00819672;1pkt 1fpkt"];
2703--7815[label="0.0206693;21pkt 21fpkt"];
2703--7848[label="0.0133333;2pkt 2fpkt"];
2703--7942[label="0.016129;7pkt 7fpkt"];
2703--8036[label="0.00276243;1pkt 1fpkt"];
2703--8041[label="0.0049505;2pkt 2fpkt"];
2703--8059[label="0.00574713;1pkt 1fpkt"];
2703--8131[label="0.0125;5pkt 5fpkt"];
2703--8193[label="0.00590551;6pkt 6fpkt"];
2703--8210[label="0.0258065;4pkt 4fpkt"];
2703--8218[label="0.0105105;7pkt 7fpkt"];
2703--8228[label="0.00402685;3pkt 3fpkt"];
2703--8249[label="0.0529595;17pkt 17fpkt"];
2703--8420[label="0.0114943;1pkt 1fpkt"];
2703--8432[label="0.00607903;2pkt 2fpkt"];
2703--8449[label="0.00833333;1pkt 1fpkt"];
2703--8452[label="0.00522193;4pkt 4fpkt"];
2703--8580[label="0.00380952;2pkt 2fpkt"];
2703--8596[label="0.00809717;2pkt 2fpkt"];
2703--8664[label="0.0364173;37pkt 37fpkt"];
2703--8666[label="0.00885827;9pkt 9fpkt"];
2703--8688[label="0.0895669;91pkt 91fpkt"];
2703--8689[label="0.011811;12pkt 12fpkt"];
2703--8743[label="0.0364173;37pkt 37fpkt"];
2703--8745[label="0.00885827;9pkt 9fpkt"];
2703--8765[label="0.0895669;91pkt 91fpkt"];
2703--8766[label="0.011811;12pkt 12fpkt"];
2703--8790[label="0.0364173;37pkt 37fpkt"];
2703--8792[label="0.00885827;9pkt 9fpkt"];
2703--8811[label="0.0895669;91pkt 91fpkt"];
2703--8812[label="0.011811;12pkt 12fpkt"];
2703--10394[label="0.999016;1015pkt 1015fpkt"];
2703--13437[label="0.999016;1015pkt 1015fpkt"];
2703--14800[label="1;1016pkt 1016fpkt"];
4278--5134[label="1;1pkt 1fpkt"];
4278--6132[label="0.134831;12pkt 12fpkt"];
4278--8124[label="0.00591716;1pkt 1fpkt"];
4278--8664[label="0.0177515;3pkt 3fpkt"];
4278--8666[label="0.00591716;1pkt 1fpkt"];
4278--8688[label="0.035503;6pkt 6fpkt"];
4278--8689[label="0.00591716;1pkt 1fpkt"];
4278--8743[label="0.0177515;3pkt 3fpkt"];
4278--8745[label="0.00591716;1pkt 1fpkt"];
4278--8765[label="0.035503;6pkt 6fpkt"];
4278--8766[label="0.00591716;1pkt 1fpkt"];
4278--8790[label="0.0177515;3pkt 3fpkt"];
4278--8792[label="0.00591716;1pkt 1fpkt"];
4278--8811[label="0.035503;6pkt 6fpkt"];
4278--8812[label="0.00591716;1pkt 1fpkt"];
7059--8666[label="0.0714286;4pkt 4fpkt"];
7059--8689[label="0.0714286;4pkt 4fpkt"];
7059--8745[label="0.0714286;4pkt 4fpkt"];
7059--8766[label="0.0714286;4pkt 4fpkt"];
7059--8792[label="0.0714286;4pkt 4fpkt"];
7059--8812[label="0.0714286;4pkt 4fpkt"];
7059--10394[label="1;56pkt 56fpkt"];
7059--13437[label="1;56pkt 56fpkt"];
7059--14800[label="1;56pkt 56fpkt"];
10394--13437[label="1;1070pkt 1070fpkt"];
10394--14800[label="1;1070pkt 1070fpkt"];
13437--14800[label="1;1070pkt 1070fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.112.91"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1336{
style=filled;
color=gray75;
11593[label="133.4.237.170;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13972[label="133.4.237.170;17pkt 17fpkt", shape=invtriangle, color=brown];
15039[label="133.4.237.170;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1336[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.237.170:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49435: (2.88462%)&lt;BR/&gt; 49425: (2.88462%)&lt;BR/&gt; 49416: (2.88462%)&lt;BR/&gt; 49408: (2.88462%)&gt;];
}
11593--13972[label="1;17pkt 17fpkt"];
11593--15039[label="1;17pkt 17fpkt"];
13972--15039[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.4.237.170"/>
    </slice>
    <from sec="1289452001" usec="0"/>
    <to sec="1289452008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.106.14.171"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
6689[label="128.19.147.98;d;22pkt 22fpkt", shape=diamond, color=yellow];
9227[label="202.28.151.20;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11605[label="202.28.151.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12877[label="202.28.151.20;1pkt 1fpkt", shape=invtriangle, color=brown];
13979[label="202.28.151.171;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.19.147.98:3731}[44%]&lt;BR/&gt;{*:80, 128.19.147.98:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 3731: (18.3333%)&lt;BR/&gt; 51453: (5%)&lt;BR/&gt; 51448: (5%)&lt;BR/&gt; 63324: (3.33333%)&gt;];
}
6689--7203[label="0.0454545;1pkt 1fpkt"];
6689--8685[label="0.0454545;1pkt 1fpkt"];
6689--8762[label="0.0454545;1pkt 1fpkt"];
6689--8808[label="0.0454545;1pkt 1fpkt"];
6689--9227[label="0.5;1pkt 1fpkt"];
6689--10345[label="0.0454545;1pkt 1fpkt"];
6689--10728[label="0.0454545;1pkt 1fpkt"];
6689--11605[label="0.333333;1pkt 1fpkt"];
6689--12877[label="1;1pkt 1fpkt"];
6689--13415[label="0.0454545;1pkt 1fpkt"];
6689--13584[label="0.0454545;1pkt 1fpkt"];
6689--13979[label="0.5;1pkt 1fpkt"];
9227--12877[label="1;1pkt 1fpkt"];
11605--13979[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.147.98" src_port="80"/>
      <filter dst_ip="128.19.147.98" dst_port="3731"/>
    </slice>
    <from sec="1289451607" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="120.16.37.172"/>
    </slice>
    <from sec="1289452441" usec="0"/>
    <to sec="1289452458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1340{
style=filled;
color=gray75;
1684[label="133.4.100.172;s;131pkt 131fpkt", shape=diamond, color=yellow];
11616[label="133.4.100.172;134pkt 134fpkt", shape=pentagon, color=darkviolet];
13984[label="133.4.100.172;134pkt 134fpkt", shape=invtriangle, color=brown];
stat1340[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.100.172:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64335: (0.37594%)&lt;BR/&gt; 64030: (0.37594%)&lt;BR/&gt; 63816: (0.37594%)&lt;BR/&gt; 63709: (0.37594%)&gt;];
}
1684--11616[label="0.992366;130pkt 130fpkt"];
1684--13984[label="0.992366;130pkt 130fpkt"];
11616--13984[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.100.172" src_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.162.229.172"/>
    </slice>
    <from sec="1289452103" usec="0"/>
    <to sec="1289452285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1343{
style=filled;
color=gray75;
11654[label="128.19.208.174;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14003[label="128.19.208.174;11pkt 11fpkt", shape=invtriangle, color=brown];
15056[label="128.19.208.174;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1343[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.208.174:*, *:53}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 56164: (4.54545%)&lt;BR/&gt; 50013: (4.54545%)&lt;BR/&gt; 44662: (4.54545%)&lt;BR/&gt; 43303: (4.54545%)&gt;];
}
11654--14003[label="1;11pkt 11fpkt"];
11654--15056[label="1;11pkt 11fpkt"];
14003--15056[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.19.208.174"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.68.238.175"/>
    </slice>
    <from sec="1289452175" usec="0"/>
    <to sec="1289452226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.99.78.176"/>
    </slice>
    <from sec="1289452343" usec="0"/>
    <to sec="1289452349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.82.20.177"/>
    </slice>
    <from sec="1289451969" usec="0"/>
    <to sec="1289452337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.62.177"/>
    </slice>
    <from sec="1289451801" usec="0"/>
    <to sec="1289451815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
11710[label="158.196.151.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14025[label="158.196.151.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.151.178:80, 42.146.67.154:34436}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34436: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11710--14025[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.154" dst_port="34436" src_ip="158.196.151.178" src_port="80"/>
    </slice>
    <from sec="1289451746" usec="0"/>
    <to sec="1289451748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
11733[label="128.7.73.180;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14037[label="128.7.73.180;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.73.180:*, 211.0.98.49:113}[44.4444%]&lt;BR/&gt;{128.7.73.180:25, 211.0.98.49:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (23.5294%)&lt;BR/&gt; 25: (20.5882%)&lt;BR/&gt; 64582: (5.88235%)&lt;BR/&gt; 63556: (5.88235%)&lt;BR/&gt; 63164: (5.88235%)&gt;];
}
11733--14037[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.0.98.49" src_ip="128.7.73.180" src_port="25"/>
      <filter dst_ip="211.0.98.49" dst_port="113" src_ip="128.7.73.180"/>
    </slice>
    <from sec="1289451830" usec="0"/>
    <to sec="1289452228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1351{
style=filled;
color=gray75;
11736[label="146.0.99.180;25pkt 25fpkt", shape=pentagon, color=darkviolet];
14038[label="146.0.99.180;26pkt 26fpkt", shape=invtriangle, color=brown];
15071[label="146.0.99.180;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1351[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.0.99.180:*, 80.99.132.239:80}[57.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1053%)&lt;BR/&gt; 16881: (3.94737%)&lt;BR/&gt; 13000: (3.94737%)&lt;BR/&gt; 60001: (1.97368%)&lt;BR/&gt; 14674: (1.97368%)&gt;];
}
11736--14038[label="1;25pkt 25fpkt"];
11736--15071[label="1;25pkt 25fpkt"];
14038--15071[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="80.99.132.239" dst_port="80" src_ip="146.0.99.180"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.44.181"/>
    </slice>
    <from sec="1289452207" usec="0"/>
    <to sec="1289452210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1353{
style=filled;
color=gray75;
2883[label="128.158.195.80;d;421pkt 421fpkt", shape=diamond, color=yellow];
10091[label="180.55.181.72;28pkt 28fpkt", shape=pentagon, color=darkviolet];
11760[label="208.28.169.182;52pkt 52fpkt", shape=pentagon, color=darkviolet];
13295[label="180.55.181.72;28pkt 28fpkt", shape=invtriangle, color=brown];
14051[label="208.28.169.182;52pkt 52fpkt", shape=invtriangle, color=brown];
14736[label="180.55.181.72;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1353[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.158.195.80:25}[92.399%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7537%)&lt;BR/&gt; 64970: (0.328407%)&lt;BR/&gt; 64966: (0.328407%)&lt;BR/&gt; 64957: (0.328407%)&lt;BR/&gt; 64954: (0.328407%)&gt;];
}
2883--10091[label="1;28pkt 28fpkt"];
2883--11760[label="1;52pkt 52fpkt"];
2883--13295[label="1;28pkt 28fpkt"];
2883--14051[label="1;52pkt 52fpkt"];
2883--14736[label="1;28pkt 28fpkt"];
10091--13295[label="1;28pkt 28fpkt"];
10091--14736[label="1;28pkt 28fpkt"];
11760--14051[label="1;52pkt 52fpkt"];
13295--14736[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="128.158.195.80" dst_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
11767[label="7.0.7.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14055[label="7.0.7.183;1pkt 1fpkt", shape=invtriangle, color=brown];
15077[label="7.0.7.183;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.0.7.183:59510, 166.26.179.18:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59510: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11767--14055[label="1;1pkt 1fpkt"];
11767--15077[label="1;1pkt 1fpkt"];
14055--15077[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.18" dst_port="80" src_ip="7.0.7.183" src_port="59510"/>
    </slice>
    <from sec="1289451869" usec="0"/>
    <to sec="1289452477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1355{
style=filled;
color=gray75;
5349[label="42.146.67.245;d;15pkt 15fpkt", shape=diamond, color=yellow];
5350[label="158.196.179.12;s;12pkt 12fpkt", shape=diamond, color=yellow];
6370[label="42.146.70.221;d;4pkt 4fpkt", shape=diamond, color=yellow];
6464[label="132.110.45.41;s;2pkt 2fpkt", shape=diamond, color=yellow];
9056[label="158.196.179.12;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11774[label="132.110.184.183;264pkt 264fpkt", shape=pentagon, color=darkviolet];
14057[label="132.110.184.183;264pkt 264fpkt", shape=invtriangle, color=brown];
stat1355[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.110.184.183:53, *:*}[92.9577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.1204%)&lt;BR/&gt; 80: (2.6178%)&lt;BR/&gt; 32768: (0.69808%)&lt;BR/&gt; 24040: (0.34904%)&lt;BR/&gt; 64135: (0.26178%)&gt;];
}
5349--5350[label="0.833333;10pkt 10fpkt"];
5349--8684[label="0.0666667;1pkt 1fpkt"];
5349--8761[label="0.0666667;1pkt 1fpkt"];
5349--8807[label="0.0666667;1pkt 1fpkt"];
5349--9056[label="0.75;9pkt 9fpkt"];
5349--11774[label="0.0666667;1pkt 1fpkt"];
5349--14057[label="0.0666667;1pkt 1fpkt"];
5350--8684[label="0.0833333;1pkt 1fpkt"];
5350--8761[label="0.0833333;1pkt 1fpkt"];
5350--8807[label="0.0833333;1pkt 1fpkt"];
5350--9056[label="0.916667;11pkt 11fpkt"];
6370--6464[label="1;2pkt 2fpkt"];
6370--11774[label="0.25;1pkt 1fpkt"];
6370--14057[label="0.25;1pkt 1fpkt"];
11774--14057[label="1;264pkt 264fpkt"];
</description>
    <slice>
      <filter src_ip="132.110.184.183" src_port="53"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.148.66.185"/>
    </slice>
    <from sec="1289452454" usec="0"/>
    <to sec="1289452467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.179.110.185"/>
    </slice>
    <from sec="1289451672" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1358{
style=filled;
color=gray75;
1677[label="128.19.208.225;d;300pkt 300fpkt", shape=diamond, color=yellow];
1986[label="211.185.130.101;d;522pkt 522fpkt", shape=diamond, color=yellow];
5785[label="133.4.224.141;d;85pkt 85fpkt", shape=diamond, color=yellow];
5958[label="211.185.154.77;d;110pkt 110fpkt", shape=diamond, color=yellow];
9377[label="0.69.13.30;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11189[label="203.47.8.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11799[label="203.47.8.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12557[label="187.31.18.241;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12960[label="0.69.13.30;6pkt 6fpkt", shape=invtriangle, color=brown];
13373[label="14.123.56.82;1pkt 1fpkt", shape=invtriangle, color=brown];
13788[label="203.47.8.144;2pkt 2fpkt", shape=invtriangle, color=brown];
14070[label="203.47.8.186;1pkt 1fpkt", shape=invtriangle, color=brown];
14594[label="0.69.13.30;5pkt 5fpkt", shape=invhouse, color=bisque];
14771[label="14.123.56.82;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1358[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.185.130.101:53}[39.4146%]&lt;BR/&gt;{*:*, 128.19.208.225:25}[22.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.8517%)&lt;BR/&gt; 53: (19.3916%)&lt;BR/&gt; 0: (1.9962%)&lt;BR/&gt; 995: (1.14068%)&lt;BR/&gt; 113: (0.522814%)&gt;];
}
1677--9377[label="0.6;3pkt 3fpkt"];
1677--12557[label="0.416667;5pkt 5fpkt"];
1677--12960[label="0.5;3pkt 3fpkt"];
1677--14594[label="0.6;3pkt 3fpkt"];
1986--6484[label="0.00191571;1pkt 1fpkt"];
1986--7145[label="0.0909091;1pkt 1fpkt"];
1986--8562[label="0.00191571;1pkt 1fpkt"];
1986--8650[label="0.00191571;1pkt 1fpkt"];
1986--8703[label="0.00191571;1pkt 1fpkt"];
1986--8780[label="0.00191571;1pkt 1fpkt"];
1986--8826[label="0.00191571;1pkt 1fpkt"];
1986--9126[label="0.0769231;1pkt 1fpkt"];
1986--9206[label="0.00609756;1pkt 1fpkt"];
1986--9377[label="0.2;1pkt 1fpkt"];
1986--9461[label="0.010989;2pkt 2fpkt"];
1986--10487[label="0.0263158;3pkt 3fpkt"];
1986--10766[label="0.0266667;4pkt 4fpkt"];
1986--12099[label="0.0163934;2pkt 2fpkt"];
1986--12361[label="0.047619;1pkt 1fpkt"];
1986--12405[label="0.00191571;1pkt 1fpkt"];
1986--12960[label="0.166667;1pkt 1fpkt"];
1986--13373[label="1;1pkt 1fpkt"];
1986--14320[label="0.047619;1pkt 1fpkt"];
1986--14348[label="0.00191571;1pkt 1fpkt"];
1986--14594[label="0.2;1pkt 1fpkt"];
1986--14771[label="1;1pkt 1fpkt"];
1986--15217[label="0.00191571;1pkt 1fpkt"];
5785--12557[label="0.0833333;1pkt 1fpkt"];
5958--6484[label="0.00909091;1pkt 1fpkt"];
5958--8562[label="0.00909091;1pkt 1fpkt"];
5958--8650[label="0.00909091;1pkt 1fpkt"];
5958--8703[label="0.00909091;1pkt 1fpkt"];
5958--8780[label="0.00909091;1pkt 1fpkt"];
5958--8826[label="0.00909091;1pkt 1fpkt"];
5958--9377[label="0.2;1pkt 1fpkt"];
5958--11189[label="1;1pkt 1fpkt"];
5958--11799[label="1;1pkt 1fpkt"];
5958--12405[label="0.00909091;1pkt 1fpkt"];
5958--12960[label="0.166667;1pkt 1fpkt"];
5958--13788[label="0.5;1pkt 1fpkt"];
5958--14070[label="1;1pkt 1fpkt"];
5958--14348[label="0.00909091;1pkt 1fpkt"];
5958--14594[label="0.2;1pkt 1fpkt"];
5958--15217[label="0.00909091;1pkt 1fpkt"];
9377--12960[label="1;5pkt 5fpkt"];
9377--14594[label="1;5pkt 5fpkt"];
11189--13788[label="1;1pkt 1fpkt"];
11799--14070[label="1;1pkt 1fpkt"];
12960--14594[label="1;5pkt 5fpkt"];
13373--14771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.130.101" dst_port="53"/>
      <filter dst_ip="128.19.208.225" dst_port="25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1359{
style=filled;
color=gray75;
3290[label="166.26.234.9;d;4pkt 4fpkt", shape=diamond, color=yellow];
10330[label="42.146.68.87;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11819[label="203.47.62.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14077[label="203.47.62.187;1pkt 1fpkt", shape=invtriangle, color=brown];
15089[label="203.47.62.187;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1359[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.65.134.140:56506, 166.26.234.9:80}[20%]&lt;BR/&gt;{203.47.62.187:40828, 166.26.234.9:80}[20%]&lt;BR/&gt;{42.146.68.87:34751, 166.26.234.9:80}[20%]&lt;BR/&gt;{42.146.68.87:40030, 166.26.234.9:80}[20%]&lt;BR/&gt;{42.146.68.87:57450, 166.26.234.9:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40828: (22.2222%)&lt;BR/&gt; 34751: (11.1111%)&lt;BR/&gt; 57450: (5.55556%)&lt;BR/&gt; 56506: (5.55556%)&gt;];
}
3290--10330[label="0.5;1pkt 1fpkt"];
3290--11819[label="1;1pkt 1fpkt"];
3290--14077[label="1;1pkt 1fpkt"];
3290--15089[label="1;1pkt 1fpkt"];
11819--14077[label="1;1pkt 1fpkt"];
11819--15089[label="1;1pkt 1fpkt"];
14077--15089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.234.9" dst_port="80" src_ip="42.146.68.87" src_port="57450"/>
      <filter dst_ip="166.26.234.9" dst_port="80" src_ip="42.146.68.87" src_port="40030"/>
      <filter dst_ip="166.26.234.9" dst_port="80" src_ip="42.146.68.87" src_port="34751"/>
      <filter dst_ip="166.26.234.9" dst_port="80" src_ip="203.47.62.187" src_port="40828"/>
      <filter dst_ip="166.26.234.9" dst_port="80" src_ip="43.65.134.140" src_port="56506"/>
    </slice>
    <from sec="1289451638" usec="0"/>
    <to sec="1289452299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1360{
style=filled;
color=gray75;
11824[label="197.68.170.187;86pkt 86fpkt", shape=pentagon, color=darkviolet];
14079[label="197.68.170.187;85pkt 85fpkt", shape=invtriangle, color=brown];
stat1360[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.170.187:*, 166.26.179.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48687: (0.584795%)&lt;BR/&gt; 48685: (0.584795%)&lt;BR/&gt; 48684: (0.584795%)&lt;BR/&gt; 48683: (0.584795%)&gt;];
}
11824--14079[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.81" dst_port="80" src_ip="197.68.170.187"/>
    </slice>
    <from sec="1289452472" usec="0"/>
    <to sec="1289452497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.79.91.188"/>
    </slice>
    <from sec="1289451894" usec="0"/>
    <to sec="1289451907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1362{
style=filled;
color=gray75;
11841[label="36.2.175.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14084[label="36.2.175.188;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1362[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.2.175.188:22302, 211.185.157.227:44564}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44564: (50%)&lt;BR/&gt; 22302: (50%)&gt;];
}
11841--14084[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.227" dst_port="44564" src_ip="36.2.175.188" src_port="22302"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
11856[label="15.45.219.189;85pkt 85fpkt", shape=pentagon, color=darkviolet];
14090[label="15.45.219.189;84pkt 84fpkt", shape=invtriangle, color=brown];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.45.219.189:*, 166.26.179.90:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1336: (0.591716%)&lt;BR/&gt; 1335: (0.591716%)&lt;BR/&gt; 1334: (0.591716%)&lt;BR/&gt; 1333: (0.591716%)&gt;];
}
11856--14090[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.90" dst_port="80" src_ip="15.45.219.189"/>
    </slice>
    <from sec="1289452440" usec="0"/>
    <to sec="1289452461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1365{
style=filled;
color=gray75;
11859[label="9.126.64.190;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14093[label="9.126.64.190;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1365[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.126.64.190:49920, 211.185.157.120:80}[20%]&lt;BR/&gt;{9.126.64.190:49923, 211.185.157.120:80}[20%]&lt;BR/&gt;{9.126.64.190:49924, 211.185.157.120:80}[20%]&lt;BR/&gt;{9.126.64.190:49925, 211.185.157.120:80}[20%]&lt;BR/&gt;{9.126.64.190:49926, 211.185.157.120:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49926: (10%)&lt;BR/&gt; 49925: (10%)&lt;BR/&gt; 49924: (10%)&lt;BR/&gt; 49923: (10%)&gt;];
}
11859--14093[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.120" dst_port="80" src_ip="9.126.64.190" src_port="49926"/>
      <filter dst_ip="211.185.157.120" dst_port="80" src_ip="9.126.64.190" src_port="49925"/>
      <filter dst_ip="211.185.157.120" dst_port="80" src_ip="9.126.64.190" src_port="49924"/>
      <filter dst_ip="211.185.157.120" dst_port="80" src_ip="9.126.64.190" src_port="49923"/>
      <filter dst_ip="211.185.157.120" dst_port="80" src_ip="9.126.64.190" src_port="49920"/>
    </slice>
    <from sec="1289452419" usec="0"/>
    <to sec="1289452425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.66.52.191"/>
    </slice>
    <from sec="1289451661" usec="0"/>
    <to sec="1289451818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580267,3.57744,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1367{
style=filled;
color=gray75;
4623[label="128.19.150.192;s;163pkt 163fpkt", shape=diamond, color=yellow];
11894[label="128.19.150.192;199pkt 199fpkt", shape=pentagon, color=darkviolet];
stat1367[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.150.192:17355, *:*}[36.6834%]&lt;BR/&gt;{128.19.150.192:*, 134.93.117.170:443}[35.6784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17355: (20.1657%)&lt;BR/&gt; 443: (16.7127%)&lt;BR/&gt; 80: (7.0442%)&lt;BR/&gt; 7024: (6.07735%)&lt;BR/&gt; 55418: (3.03867%)&gt;];
}
4623--8666[label="0.00613497;1pkt 1fpkt"];
4623--8745[label="0.00613497;1pkt 1fpkt"];
4623--8792[label="0.00613497;1pkt 1fpkt"];
4623--11894[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.150.192" src_port="17355"/>
      <filter dst_ip="134.93.117.170" dst_port="443" src_ip="128.19.150.192"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.227.194.192"/>
    </slice>
    <from sec="1289451955" usec="0"/>
    <to sec="1289451982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
11921[label="42.209.156.194;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14119[label="42.209.156.194;12pkt 12fpkt", shape=invtriangle, color=brown];
15107[label="42.209.156.194;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.209.156.194:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11921--14119[label="1;11pkt 11fpkt"];
11921--15107[label="1;11pkt 11fpkt"];
14119--15107[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="42.209.156.194"/>
    </slice>
    <from sec="1289452031" usec="0"/>
    <to sec="1289452359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1371{
style=filled;
color=gray75;
11936[label="133.4.142.195;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14124[label="133.4.142.195;21pkt 21fpkt", shape=invtriangle, color=brown];
15112[label="133.4.142.195;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1371[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.142.195:4439, *:7024}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7024: (28.9062%)&lt;BR/&gt; 4439: (24.2188%)&lt;BR/&gt; 80: (9.375%)&lt;BR/&gt; 995: (4.6875%)&lt;BR/&gt; 4434: (2.34375%)&gt;];
}
11936--14124[label="1;21pkt 21fpkt"];
11936--15112[label="1;21pkt 21fpkt"];
14124--15112[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="7024" src_ip="133.4.142.195" src_port="4439"/>
    </slice>
    <from sec="1289451610" usec="0"/>
    <to sec="1289452467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702829,3.5557,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1372{
style=filled;
color=gray75;
4920[label="202.9.132.236;d;50pkt 50fpkt", shape=diamond, color=yellow];
5580[label="128.165.163.224;s;26pkt 26fpkt", shape=diamond, color=yellow];
11938[label="128.19.153.195;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14126[label="128.19.153.195;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1372[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.163.224:*, *:80}[35.1351%]&lt;BR/&gt;{128.19.85.184:*, 202.9.132.236:80}[22.973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60091: (1.59574%)&lt;BR/&gt; 60090: (1.59574%)&lt;BR/&gt; 60087: (1.59574%)&lt;BR/&gt; 60086: (1.59574%)&gt;];
}
4920--5044[label="0.06;3pkt 3fpkt"];
4920--5131[label="0.06;3pkt 3fpkt"];
4920--5422[label="0.04;2pkt 2fpkt"];
4920--5442[label="0.12;6pkt 6fpkt"];
4920--5464[label="0.34;17pkt 17fpkt"];
4920--5580[label="0.192308;5pkt 5fpkt"];
4920--7234[label="0.02;1pkt 1fpkt"];
4920--8688[label="0.12;6pkt 6fpkt"];
4920--8765[label="0.12;6pkt 6fpkt"];
4920--8811[label="0.12;6pkt 6fpkt"];
4920--9412[label="0.04;2pkt 2fpkt"];
4920--9990[label="0.04;2pkt 2fpkt"];
4920--10364[label="0.02;1pkt 1fpkt"];
4920--11938[label="0.666667;6pkt 6fpkt"];
4920--12977[label="0.04;2pkt 2fpkt"];
4920--14126[label="0.666667;6pkt 6fpkt"];
4920--14603[label="0.04;2pkt 2fpkt"];
11938--14126[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.165.163.224"/>
      <filter dst_ip="202.9.132.236" dst_port="80" src_ip="128.19.85.184"/>
    </slice>
    <from sec="1289451873" usec="0"/>
    <to sec="1289452429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.237.173.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.105.197.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.229.47.197"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.152.199.198"/>
    </slice>
    <from sec="1289451998" usec="0"/>
    <to sec="1289452011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.236.24.200"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.109.23.203"/>
    </slice>
    <from sec="1289451963" usec="0"/>
    <to sec="1289452032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
12044[label="128.7.100.203;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14167[label="128.7.100.203;10pkt 10fpkt", shape=invtriangle, color=brown];
15127[label="128.7.100.203;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.100.203:80, 42.146.67.211:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65486: (5.17241%)&lt;BR/&gt; 62800: (5.17241%)&lt;BR/&gt; 56281: (5.17241%)&lt;BR/&gt; 52067: (5.17241%)&gt;];
}
12044--14167[label="1;10pkt 10fpkt"];
12044--15127[label="1;9pkt 9fpkt"];
14167--15127[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.67.211" src_ip="128.7.100.203" src_port="80"/>
    </slice>
    <from sec="1289451603" usec="0"/>
    <to sec="1289452430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1381{
style=filled;
color=gray75;
12045[label="158.196.173.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14168[label="158.196.173.203;1pkt 1fpkt", shape=invtriangle, color=brown];
15128[label="158.196.173.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1381[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.173.203:80, 32.34.71.3:62128}[50%]&lt;BR/&gt;{158.196.173.203:80, 42.146.64.139:35575}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35575: (37.5%)&lt;BR/&gt; 62128: (12.5%)&gt;];
}
12045--14168[label="1;1pkt 1fpkt"];
12045--15128[label="1;1pkt 1fpkt"];
14168--15128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.64.139" dst_port="35575" src_ip="158.196.173.203" src_port="80"/>
      <filter dst_ip="32.34.71.3" dst_port="62128" src_ip="158.196.173.203" src_port="80"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289452195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="184.100.121.204"/>
    </slice>
    <from sec="1289451855" usec="0"/>
    <to sec="1289451888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.36.25.205"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.131.60.205"/>
    </slice>
    <from sec="1289452337" usec="0"/>
    <to sec="1289452381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1385{
style=filled;
color=gray75;
3412[label="166.26.58.52;d;147pkt 147fpkt", shape=diamond, color=yellow];
12070[label="39.80.87.205;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12119[label="43.79.84.208;90pkt 90fpkt", shape=pentagon, color=darkviolet];
14181[label="39.80.87.205;14pkt 14fpkt", shape=invtriangle, color=brown];
15134[label="39.80.87.205;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1385[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.79.84.208:80, 166.26.58.52:*}[48.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8201%)&lt;BR/&gt; 50785: (0.719424%)&lt;BR/&gt; 50784: (0.719424%)&lt;BR/&gt; 50783: (0.719424%)&lt;BR/&gt; 50782: (0.719424%)&gt;];
}
3412--3561[label="0.00680272;1pkt 1fpkt"];
3412--4256[label="0.00680272;1pkt 1fpkt"];
3412--4284[label="0.0544218;8pkt 8fpkt"];
3412--4551[label="0.0344828;1pkt 1fpkt"];
3412--4552[label="0.0333333;1pkt 1fpkt"];
3412--8958[label="0.1;1pkt 1fpkt"];
3412--9196[label="0.1;1pkt 1fpkt"];
3412--10904[label="0.00680272;1pkt 1fpkt"];
3412--11118[label="0.0333333;1pkt 1fpkt"];
3412--12070[label="1;14pkt 14fpkt"];
3412--12119[label="0.855556;77pkt 77fpkt"];
3412--12864[label="0.0909091;1pkt 1fpkt"];
3412--14181[label="1;14pkt 14fpkt"];
3412--15134[label="1;13pkt 13fpkt"];
12070--14181[label="1;14pkt 14fpkt"];
12070--15134[label="1;13pkt 13fpkt"];
14181--15134[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.58.52" src_ip="43.79.84.208" src_port="80"/>
    </slice>
    <from sec="1289451783" usec="0"/>
    <to sec="1289452455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716444,3.58199,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1386{
style=filled;
color=gray75;
2851[label="210.33.155.79;d;4pkt 4fpkt", shape=diamond, color=yellow];
14184[label="202.30.96.206;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1386[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.42.76.2:80, 210.33.155.79:58418}[25%]&lt;BR/&gt;{202.30.96.5:80, 210.33.155.79:58858}[25%]&lt;BR/&gt;{117.152.181.55:8102, 210.33.155.79:49154}[25%]&lt;BR/&gt;{202.30.96.206:80, 210.33.155.79:58624}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 58624: (20%)&lt;BR/&gt; 58858: (10%)&lt;BR/&gt; 58418: (10%)&lt;BR/&gt; 49154: (10%)&gt;];
}
2851--2852[label="0.25;1pkt 1fpkt"];
2851--14184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.155.79" dst_port="58624" src_ip="202.30.96.206" src_port="80"/>
      <filter dst_ip="210.33.155.79" dst_port="49154" src_ip="117.152.181.55" src_port="8102"/>
      <filter dst_ip="210.33.155.79" dst_port="58858" src_ip="202.30.96.5" src_port="80"/>
      <filter dst_ip="210.33.155.79" dst_port="58418" src_ip="214.42.76.2" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
12091[label="81.103.142.206;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14187[label="81.103.142.206;5pkt 5fpkt", shape=invtriangle, color=brown];
15140[label="81.103.142.206;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.103.142.206:49177, 166.26.179.31:80}[20%]&lt;BR/&gt;{81.103.142.206:49178, 166.26.179.31:80}[20%]&lt;BR/&gt;{81.103.142.206:49179, 166.26.179.31:80}[20%]&lt;BR/&gt;{81.103.142.206:49180, 166.26.179.31:80}[20%]&lt;BR/&gt;{81.103.142.206:49181, 166.26.179.31:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49181: (10%)&lt;BR/&gt; 49180: (10%)&lt;BR/&gt; 49179: (10%)&lt;BR/&gt; 49178: (10%)&gt;];
}
12091--14187[label="1;5pkt 5fpkt"];
12091--15140[label="1;5pkt 5fpkt"];
14187--15140[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="81.103.142.206" src_port="49181"/>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="81.103.142.206" src_port="49180"/>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="81.103.142.206" src_port="49179"/>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="81.103.142.206" src_port="49178"/>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="81.103.142.206" src_port="49177"/>
    </slice>
    <from sec="1289452420" usec="0"/>
    <to sec="1289452433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.220.85.207"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289451639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.52.52.208"/>
    </slice>
    <from sec="1289451733" usec="0"/>
    <to sec="1289452258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.90.68.208"/>
    </slice>
    <from sec="1289452250" usec="0"/>
    <to sec="1289452263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.10.70.208"/>
    </slice>
    <from sec="1289452263" usec="0"/>
    <to sec="1289452340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1392{
style=filled;
color=gray75;
12124[label="201.129.128.208;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14206[label="201.129.128.208;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1392[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.129.128.208:80, 146.5.17.131:*}[55.5556%]&lt;BR/&gt;{201.129.128.208:0, *:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (35.2941%)&lt;BR/&gt; 80: (26.4706%)&lt;BR/&gt; 59005: (5.88235%)&lt;BR/&gt; 49058: (5.88235%)&lt;BR/&gt; 49016: (5.88235%)&gt;];
}
12124--14206[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="146.5.17.131" src_ip="201.129.128.208" src_port="80"/>
      <filter src_ip="201.129.128.208"/>
    </slice>
    <from sec="1289451660" usec="0"/>
    <to sec="1289452256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1393{
style=filled;
color=gray75;
12125[label="211.185.153.208;95pkt 95fpkt", shape=pentagon, color=darkviolet];
14207[label="211.185.153.208;95pkt 95fpkt", shape=invtriangle, color=brown];
stat1393[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.153.208:53, *:*}[97.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 65181: (0.526316%)&lt;BR/&gt; 65063: (0.526316%)&lt;BR/&gt; 65000: (0.526316%)&lt;BR/&gt; 62172: (0.526316%)&gt;];
}
12125--14207[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="211.185.153.208" src_port="53"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1394{
style=filled;
color=gray75;
12126[label="210.33.155.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14208[label="210.33.155.208;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1394[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.155.208:*, 203.47.52.200:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 63450: (9.09091%)&lt;BR/&gt; 63449: (9.09091%)&lt;BR/&gt; 63448: (9.09091%)&lt;BR/&gt; 63447: (9.09091%)&gt;];
}
12126--14208[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="203.47.52.200" dst_port="80" src_ip="210.33.155.208"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1395{
style=filled;
color=gray75;
12131[label="133.4.205.208;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14211[label="133.4.205.208;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1395[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.205.208:56689, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56689: (50%)&lt;BR/&gt; 60597: (6.66667%)&lt;BR/&gt; 55871: (6.66667%)&lt;BR/&gt; 53120: (6.66667%)&lt;BR/&gt; 27018: (6.66667%)&gt;];
}
12131--14211[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.205.208" src_port="56689"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1396{
style=filled;
color=gray75;
12134[label="128.165.39.209;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14212[label="128.165.39.209;3pkt 3fpkt", shape=invtriangle, color=brown];
15152[label="128.165.39.209;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1396[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.165.39.209:64434, 108.138.141.168:80}[33.3333%]&lt;BR/&gt;{128.165.39.209:64436, 108.138.141.171:80}[33.3333%]&lt;BR/&gt;{128.165.39.209:64438, 108.138.141.171:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64438: (18.75%)&lt;BR/&gt; 64436: (18.75%)&lt;BR/&gt; 64434: (12.5%)&gt;];
}
12134--14212[label="1;3pkt 3fpkt"];
12134--15152[label="1;2pkt 2fpkt"];
14212--15152[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="108.138.141.171" dst_port="80" src_ip="128.165.39.209" src_port="64438"/>
      <filter dst_ip="108.138.141.171" dst_port="80" src_ip="128.165.39.209" src_port="64436"/>
      <filter dst_ip="108.138.141.168" dst_port="80" src_ip="128.165.39.209" src_port="64434"/>
    </slice>
    <from sec="1289451675" usec="0"/>
    <to sec="1289451767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1397{
style=filled;
color=gray75;
122[label="210.33.154.53;d;2224pkt 2224fpkt", shape=diamond, color=yellow];
409[label="32.170.165.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1204[label="24.114.52.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1282[label="219.187.75.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
2110[label="39.195.36.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
2309[label="192.130.142.47;s;7pkt 7fpkt", shape=diamond, color=yellow];
3111[label="24.38.83.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
3354[label="192.0.62.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
3377[label="9.126.55.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
3961[label="1.136.105.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
4092[label="192.173.235.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
4598[label="84.78.149.168;s;12pkt 12fpkt", shape=diamond, color=yellow];
5135[label="2.66.152.140;s;2pkt 2fpkt", shape=diamond, color=yellow];
5302[label="81.156.50.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
5308[label="84.70.113.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
5370[label="214.58.154.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
6081[label="80.84.177.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
6094[label="1.46.246.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
8904[label="7.176.54.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9271[label="24.114.52.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10169[label="198.196.38.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10514[label="2.72.128.99;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10748[label="8.191.108.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11112[label="0.138.220.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11148[label="1.170.109.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11869[label="25.20.42.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11939[label="0.92.169.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11951[label="24.181.84.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12013[label="2.79.12.201;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12138[label="16.13.80.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12352[label="0.92.13.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12568[label="0.43.73.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12570[label="9.204.87.242;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13596[label="8.191.108.116;2pkt 2fpkt", shape=invtriangle, color=brown];
14213[label="16.13.80.209;1pkt 1fpkt", shape=invtriangle, color=brown];
14416[label="9.204.87.242;17pkt 17fpkt", shape=invtriangle, color=brown];
15153[label="16.13.80.209;1pkt 1fpkt", shape=invhouse, color=bisque];
15252[label="9.204.87.242;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1397[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.33.154.53:16001}[28.2269%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16001: (13.6248%)&lt;BR/&gt; 8892: (10.6961%)&lt;BR/&gt; 10028: (9.76231%)&lt;BR/&gt; 80: (3.92615%)&lt;BR/&gt; 17368: (1.74024%)&gt;];
}
122--409[label="1;1pkt 1fpkt"];
122--559[label="0.0625;1pkt 1fpkt"];
122--1095[label="0.016129;2pkt 2fpkt"];
122--1204[label="1;1pkt 1fpkt"];
122--1282[label="1;1pkt 1fpkt"];
122--1892[label="0.0754717;4pkt 4fpkt"];
122--2044[label="0.0769231;1pkt 1fpkt"];
122--2110[label="1;1pkt 1fpkt"];
122--2309[label="1;7pkt 7fpkt"];
122--2938[label="0.0434783;5pkt 5fpkt"];
122--3111[label="1;2pkt 2fpkt"];
122--3354[label="1;1pkt 1fpkt"];
122--3377[label="1;1pkt 1fpkt"];
122--3670[label="0.0192308;2pkt 2fpkt"];
122--3961[label="1;1pkt 1fpkt"];
122--4092[label="1;1pkt 1fpkt"];
122--4598[label="1;12pkt 12fpkt"];
122--5135[label="1;2pkt 2fpkt"];
122--5302[label="1;1pkt 1fpkt"];
122--5308[label="1;1pkt 1fpkt"];
122--5370[label="1;1pkt 1fpkt"];
122--5976[label="0.0909091;1pkt 1fpkt"];
122--6081[label="1;1pkt 1fpkt"];
122--6094[label="1;1pkt 1fpkt"];
122--7165[label="0.212121;7pkt 7fpkt"];
122--7214[label="0.1875;3pkt 3fpkt"];
122--7329[label="0.05;1pkt 1fpkt"];
122--8684[label="0.000899281;2pkt 2fpkt"];
122--8761[label="0.000899281;2pkt 2fpkt"];
122--8807[label="0.000899281;2pkt 2fpkt"];
122--8904[label="1;1pkt 1fpkt"];
122--8958[label="0.2;2pkt 2fpkt"];
122--9271[label="1;1pkt 1fpkt"];
122--10169[label="1;1pkt 1fpkt"];
122--10327[label="0.0526316;1pkt 1fpkt"];
122--10514[label="0.25;4pkt 4fpkt"];
122--10748[label="1;2pkt 2fpkt"];
122--11112[label="1;2pkt 2fpkt"];
122--11148[label="1;1pkt 1fpkt"];
122--11846[label="0.212121;7pkt 7fpkt"];
122--11869[label="1;1pkt 1fpkt"];
122--11939[label="1;2pkt 2fpkt"];
122--11951[label="1;1pkt 1fpkt"];
122--11970[label="0.0909091;1pkt 1fpkt"];
122--12013[label="1;6pkt 6fpkt"];
122--12138[label="1;1pkt 1fpkt"];
122--12352[label="1;2pkt 2fpkt"];
122--12432[label="0.1;1pkt 1fpkt"];
122--12568[label="1;3pkt 3fpkt"];
122--12570[label="0.823529;14pkt 14fpkt"];
122--13404[label="0.0526316;1pkt 1fpkt"];
122--13596[label="1;2pkt 2fpkt"];
122--14213[label="1;1pkt 1fpkt"];
122--14416[label="0.823529;14pkt 14fpkt"];
122--15153[label="1;1pkt 1fpkt"];
122--15252[label="0.833333;15pkt 15fpkt"];
1204--9271[label="1;1pkt 1fpkt"];
10748--13596[label="1;2pkt 2fpkt"];
12138--14213[label="1;1pkt 1fpkt"];
12138--15153[label="1;1pkt 1fpkt"];
12570--14416[label="1;17pkt 17fpkt"];
12570--15252[label="1;17pkt 17fpkt"];
14213--15153[label="1;1pkt 1fpkt"];
14416--15252[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.154.53" dst_port="16001"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.65.16.210"/>
    </slice>
    <from sec="1289452250" usec="0"/>
    <to sec="1289452263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.73.92.210"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1400{
style=filled;
color=gray75;
12158[label="128.7.253.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14225[label="128.7.253.210;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1400[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.7.253.210:80, 42.146.68.166:51847}[50%]&lt;BR/&gt;{128.7.253.210:80, 42.146.68.166:57479}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51847: (33.3333%)&lt;BR/&gt; 57479: (16.6667%)&gt;];
}
12158--14225[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.146.68.166" dst_port="57479" src_ip="128.7.253.210" src_port="80"/>
      <filter dst_ip="42.146.68.166" dst_port="51847" src_ip="128.7.253.210" src_port="80"/>
    </slice>
    <from sec="1289451836" usec="0"/>
    <to sec="1289452480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.68.186.211"/>
    </slice>
    <from sec="1289452294" usec="0"/>
    <to sec="1289452323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
12170[label="166.26.206.211;90pkt 90fpkt", shape=pentagon, color=darkviolet];
14230[label="166.26.206.211;91pkt 91fpkt", shape=invtriangle, color=brown];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.206.211:51415, *:*}[87.9121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51415: (43.9227%)&lt;BR/&gt; 80: (3.31492%)&lt;BR/&gt; 443: (2.20994%)&lt;BR/&gt; 53360: (1.10497%)&lt;BR/&gt; 49367: (1.10497%)&gt;];
}
12170--14230[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="166.26.206.211" src_port="51415"/>
    </slice>
    <from sec="1289451622" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.211"/>
    </slice>
    <from sec="1289452141" usec="0"/>
    <to sec="1289452193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.212.184.213"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1405{
style=filled;
color=gray75;
12202[label="146.82.226.213;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14240[label="146.82.226.213;4pkt 4fpkt", shape=invtriangle, color=brown];
15168[label="146.82.226.213;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1405[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.82.226.213:0, 193.144.8.27:0}[25%]&lt;BR/&gt;{146.82.226.213:0, 192.232.214.182:0}[25%]&lt;BR/&gt;{146.82.226.213:0, 210.144.103.183:0}[25%]&lt;BR/&gt;{146.82.226.213:0, 210.147.142.250:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12202--14240[label="1;4pkt 4fpkt"];
12202--15168[label="1;4pkt 4fpkt"];
14240--15168[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="210.147.142.250" src_ip="146.82.226.213"/>
      <filter dst_ip="210.144.103.183" src_ip="146.82.226.213"/>
      <filter dst_ip="192.232.214.182" src_ip="146.82.226.213"/>
      <filter dst_ip="193.144.8.27" src_ip="146.82.226.213"/>
    </slice>
    <from sec="1289451614" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.83.224.214"/>
    </slice>
    <from sec="1289451694" usec="0"/>
    <to sec="1289451751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.176.21.215"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.157.197.215"/>
    </slice>
    <from sec="1289451712" usec="0"/>
    <to sec="1289451725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.82.23.216"/>
    </slice>
    <from sec="1289451815" usec="0"/>
    <to sec="1289451865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.52.72.216"/>
    </slice>
    <from sec="1289451605" usec="0"/>
    <to sec="1289452491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.225.115.216"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.216"/>
    </slice>
    <from sec="1289452399" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.52.97.217"/>
    </slice>
    <from sec="1289451631" usec="0"/>
    <to sec="1289451645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.98.97.218"/>
    </slice>
    <from sec="1289451732" usec="0"/>
    <to sec="1289451745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1416{
style=filled;
color=gray75;
12271[label="158.196.106.218;27pkt 27fpkt", shape=pentagon, color=darkviolet];
14278[label="158.196.106.218;26pkt 26fpkt", shape=invtriangle, color=brown];
15187[label="158.196.106.218;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1416[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.196.106.218:25, *:*}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.125%)&lt;BR/&gt; 64086: (1.875%)&lt;BR/&gt; 63177: (1.875%)&lt;BR/&gt; 62324: (1.875%)&lt;BR/&gt; 61079: (1.875%)&gt;];
}
12271--14278[label="1;26pkt 26fpkt"];
12271--15187[label="1;27pkt 27fpkt"];
14278--15187[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="158.196.106.218" src_port="25"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20602,3.53146,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1417{
style=filled;
color=gray75;
283[label="2.66.152.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
408[label="32.170.165.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
434[label="81.171.13.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
780[label="211.55.224.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
919[label="81.168.130.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
934[label="81.171.80.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="15.22.6.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
1139[label="81.171.21.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1203[label="24.114.52.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1281[label="219.187.75.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
1377[label="1.136.105.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
1671[label="8.42.94.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
2109[label="39.195.36.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
2259[label="84.78.149.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
2308[label="192.130.142.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
2326[label="186.166.172.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
2334[label="25.25.142.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
2362[label="1.46.246.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
2538[label="15.22.58.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2540[label="81.169.191.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
2688[label="210.33.154.53;s;2079pkt 2079fpkt", shape=diamond, color=yellow];
2835[label="184.53.83.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
3353[label="192.0.62.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
3404[label="81.168.179.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
3834[label="81.156.50.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
4065[label="9.126.55.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
4091[label="192.173.235.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
4611[label="24.38.83.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
4689[label="209.162.135.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
5086[label="81.171.154.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
5641[label="81.171.54.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
5805[label="81.174.33.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
6043[label="14.92.132.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
6080[label="80.84.177.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
6935[label="81.170.86.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
6943[label="25.17.69.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
6955[label="81.171.31.71;d;2pkt 2fpkt", shape=diamond, color=yellow];
6992[label="81.171.88.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
7167[label="84.70.113.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
7218[label="214.58.154.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
7790[label="32.170.165.7;d;1pkt 1fpkt", shape=hexagon, color=black];
8003[label="219.187.75.78;d;1pkt 1fpkt", shape=hexagon, color=black];
8043[label="186.166.172.214;d;1pkt 1fpkt", shape=hexagon, color=black];
8270[label="14.92.132.80;d;1pkt 1fpkt", shape=hexagon, color=black];
8325[label="81.169.191.59;d;1pkt 1fpkt", shape=hexagon, color=black];
8430[label="81.174.33.152;d;1pkt 1fpkt", shape=hexagon, color=black];
8525[label="9.126.55.73;d;1pkt 1fpkt", shape=hexagon, color=black];
9798[label="210.33.154.53;2205pkt 2205fpkt", shape=pentagon, color=darkviolet];
stat1417[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.33.154.53:16001, *:*}[32.4717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16001: (16.3897%)&lt;BR/&gt; 8892: (9.10665%)&lt;BR/&gt; 80: (3.49723%)&lt;BR/&gt; 17368: (2.70083%)&lt;BR/&gt; 2051: (2.42382%)&gt;];
}
283--2688[label="1;1pkt 1fpkt"];
283--9798[label="1;1pkt 1fpkt"];
408--2688[label="1;1pkt 1fpkt"];
408--7790[label="1;1pkt 1fpkt"];
408--9798[label="1;1pkt 1fpkt"];
434--2688[label="1;1pkt 1fpkt"];
434--9798[label="1;1pkt 1fpkt"];
780--2688[label="1;1pkt 1fpkt"];
780--9798[label="1;1pkt 1fpkt"];
919--2688[label="1;1pkt 1fpkt"];
919--9798[label="1;1pkt 1fpkt"];
934--2688[label="1;1pkt 1fpkt"];
934--9798[label="1;1pkt 1fpkt"];
1078--2688[label="1;1pkt 1fpkt"];
1078--9798[label="1;1pkt 1fpkt"];
1139--2688[label="1;1pkt 1fpkt"];
1139--9798[label="1;1pkt 1fpkt"];
1203--2688[label="1;1pkt 1fpkt"];
1203--9798[label="1;1pkt 1fpkt"];
1281--2688[label="1;1pkt 1fpkt"];
1281--8003[label="1;1pkt 1fpkt"];
1281--9798[label="1;1pkt 1fpkt"];
1377--2688[label="1;1pkt 1fpkt"];
1377--9798[label="1;1pkt 1fpkt"];
1671--2688[label="1;1pkt 1fpkt"];
1671--9798[label="1;1pkt 1fpkt"];
2109--2688[label="1;1pkt 1fpkt"];
2109--9798[label="1;1pkt 1fpkt"];
2259--2688[label="1;2pkt 2fpkt"];
2259--9798[label="1;2pkt 2fpkt"];
2308--2688[label="1;1pkt 1fpkt"];
2308--9798[label="1;1pkt 1fpkt"];
2326--2688[label="1;1pkt 1fpkt"];
2326--8043[label="1;1pkt 1fpkt"];
2326--9798[label="1;1pkt 1fpkt"];
2334--2688[label="1;1pkt 1fpkt"];
2334--9798[label="1;1pkt 1fpkt"];
2362--2688[label="1;1pkt 1fpkt"];
2362--9798[label="1;1pkt 1fpkt"];
2538--2688[label="1;1pkt 1fpkt"];
2538--9798[label="1;1pkt 1fpkt"];
2540--2688[label="1;1pkt 1fpkt"];
2540--8325[label="1;1pkt 1fpkt"];
2540--9798[label="1;1pkt 1fpkt"];
2688--2835[label="1;1pkt 1fpkt"];
2688--2912[label="0.00383142;1pkt 1fpkt"];
2688--2994[label="0.0131579;2pkt 2fpkt"];
2688--3353[label="1;1pkt 1fpkt"];
2688--3404[label="1;1pkt 1fpkt"];
2688--3834[label="1;1pkt 1fpkt"];
2688--4065[label="1;1pkt 1fpkt"];
2688--4091[label="1;1pkt 1fpkt"];
2688--4387[label="0.0117647;2pkt 2fpkt"];
2688--4611[label="1;1pkt 1fpkt"];
2688--4689[label="1;1pkt 1fpkt"];
2688--4826[label="0.166667;1pkt 1fpkt"];
2688--5086[label="1;1pkt 1fpkt"];
2688--5305[label="0.0963855;8pkt 8fpkt"];
2688--5641[label="1;1pkt 1fpkt"];
2688--5805[label="1;1pkt 1fpkt"];
2688--6043[label="1;1pkt 1fpkt"];
2688--6080[label="1;1pkt 1fpkt"];
2688--6544[label="0.0140845;1pkt 1fpkt"];
2688--6935[label="1;1pkt 1fpkt"];
2688--6943[label="1;1pkt 1fpkt"];
2688--6955[label="1;2pkt 2fpkt"];
2688--6992[label="1;1pkt 1fpkt"];
2688--7167[label="1;1pkt 1fpkt"];
2688--7218[label="1;1pkt 1fpkt"];
2688--7328[label="0.025;1pkt 1fpkt"];
2688--7790[label="1;1pkt 1fpkt"];
2688--8003[label="1;1pkt 1fpkt"];
2688--8043[label="1;1pkt 1fpkt"];
2688--8074[label="0.0175439;2pkt 2fpkt"];
2688--8201[label="0.0413793;6pkt 6fpkt"];
2688--8270[label="1;1pkt 1fpkt"];
2688--8325[label="1;1pkt 1fpkt"];
2688--8430[label="1;1pkt 1fpkt"];
2688--8525[label="1;1pkt 1fpkt"];
2688--8664[label="0.001443;3pkt 3fpkt"];
2688--8688[label="0.000962001;2pkt 2fpkt"];
2688--8743[label="0.001443;3pkt 3fpkt"];
2688--8765[label="0.000962001;2pkt 2fpkt"];
2688--8790[label="0.001443;3pkt 3fpkt"];
2688--8811[label="0.000962001;2pkt 2fpkt"];
2688--9798[label="1;2079pkt 2079fpkt"];
2835--9798[label="1;1pkt 1fpkt"];
3353--9798[label="1;1pkt 1fpkt"];
3404--9798[label="1;1pkt 1fpkt"];
3834--9798[label="1;1pkt 1fpkt"];
4065--8525[label="1;1pkt 1fpkt"];
4065--9798[label="1;1pkt 1fpkt"];
4091--9798[label="1;1pkt 1fpkt"];
4611--9798[label="1;1pkt 1fpkt"];
4689--9798[label="1;1pkt 1fpkt"];
5086--9798[label="1;1pkt 1fpkt"];
5641--9798[label="1;1pkt 1fpkt"];
5805--8430[label="1;1pkt 1fpkt"];
5805--9798[label="1;1pkt 1fpkt"];
6043--8270[label="1;1pkt 1fpkt"];
6043--9798[label="1;1pkt 1fpkt"];
6080--9798[label="1;1pkt 1fpkt"];
6935--9798[label="1;1pkt 1fpkt"];
6943--9798[label="1;1pkt 1fpkt"];
6955--9798[label="1;2pkt 2fpkt"];
6992--9798[label="1;1pkt 1fpkt"];
7167--9798[label="1;1pkt 1fpkt"];
7218--9798[label="1;1pkt 1fpkt"];
7790--9798[label="1;1pkt 1fpkt"];
8003--9798[label="1;1pkt 1fpkt"];
8043--9798[label="1;1pkt 1fpkt"];
8270--9798[label="1;1pkt 1fpkt"];
8325--9798[label="1;1pkt 1fpkt"];
8430--9798[label="1;1pkt 1fpkt"];
8525--9798[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.33.154.53" src_port="16001"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.174.162.218"/>
    </slice>
    <from sec="1289451945" usec="0"/>
    <to sec="1289451995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.3.63.219"/>
    </slice>
    <from sec="1289452232" usec="0"/>
    <to sec="1289452499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
4764[label="128.165.171.162;d;60pkt 60fpkt", shape=diamond, color=yellow];
10470[label="218.184.18.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12292[label="32.129.203.219;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14288[label="32.129.203.219;6pkt 6fpkt", shape=invtriangle, color=brown];
14535[label="19.36.194.14;1pkt 1fpkt", shape=invhouse, color=bisque];
15191[label="32.129.203.219;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.26.29.29:80, 128.165.171.162:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51439: (2.5%)&lt;BR/&gt; 51438: (2.5%)&lt;BR/&gt; 51437: (2.5%)&lt;BR/&gt; 51435: (2.5%)&gt;];
}
4764--8684[label="0.0833333;5pkt 5fpkt"];
4764--8761[label="0.0833333;5pkt 5fpkt"];
4764--8807[label="0.0833333;5pkt 5fpkt"];
4764--10470[label="1;2pkt 2fpkt"];
4764--12292[label="1;6pkt 6fpkt"];
4764--14288[label="1;6pkt 6fpkt"];
4764--14535[label="1;1pkt 1fpkt"];
4764--15191[label="1;5pkt 5fpkt"];
12292--14288[label="1;6pkt 6fpkt"];
12292--15191[label="1;5pkt 5fpkt"];
14288--15191[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.165.171.162" src_ip="202.26.29.29" src_port="80"/>
    </slice>
    <from sec="1289451626" usec="0"/>
    <to sec="1289452332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.219"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.153.94.220"/>
    </slice>
    <from sec="1289452474" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.47.104.220"/>
    </slice>
    <from sec="1289452264" usec="0"/>
    <to sec="1289452271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.65.172.220"/>
    </slice>
    <from sec="1289452123" usec="0"/>
    <to sec="1289452129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1425{
style=filled;
color=gray75;
6112[label="128.19.145.232;d;73pkt 73fpkt", shape=diamond, color=yellow];
11193[label="0.219.105.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13791[label="0.219.105.144;1pkt 1fpkt", shape=invtriangle, color=brown];
14952[label="0.219.105.144;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1425[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.19.145.232:13268}[28.7671%]&lt;BR/&gt;{8.218.73.94:80, 128.19.145.232:*}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.8462%)&lt;BR/&gt; 13268: (13.4615%)&lt;BR/&gt; 8000: (4.48718%)&lt;BR/&gt; 4466: (3.84615%)&lt;BR/&gt; 1515: (2.5641%)&gt;];
}
6112--8684[label="0.0547945;4pkt 4fpkt"];
6112--8761[label="0.0547945;4pkt 4fpkt"];
6112--8807[label="0.0547945;4pkt 4fpkt"];
6112--11193[label="1;2pkt 2fpkt"];
6112--13791[label="1;1pkt 1fpkt"];
6112--14952[label="1;2pkt 2fpkt"];
11193--13791[label="1;1pkt 1fpkt"];
11193--14952[label="1;2pkt 2fpkt"];
13791--14952[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.19.145.232" dst_port="13268"/>
      <filter dst_ip="128.19.145.232" src_ip="8.218.73.94" src_port="80"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.148.148.223"/>
    </slice>
    <from sec="1289452334" usec="0"/>
    <to sec="1289452347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.93.117.224"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1428{
style=filled;
color=gray75;
12357[label="133.4.89.225;56pkt 56fpkt", shape=pentagon, color=darkviolet];
14318[label="133.4.89.225;56pkt 56fpkt", shape=invtriangle, color=brown];
stat1428[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.89.225:0, *:0}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (64.2857%)&lt;BR/&gt; 25: (10.7143%)&lt;BR/&gt; 53: (6.25%)&lt;BR/&gt; 63381: (5.35714%)&lt;BR/&gt; 63697: (0.892857%)&gt;];
}
12357--14318[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.89.225"/>
    </slice>
    <from sec="1289451624" usec="0"/>
    <to sec="1289452433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1430{
style=filled;
color=gray75;
12376[label="9.55.215.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14328[label="9.55.215.226;1pkt 1fpkt", shape=invtriangle, color=brown];
15207[label="9.55.215.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1430[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.55.215.226:22, 200.244.253.242:50823}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50823: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
12376--14328[label="1;1pkt 1fpkt"];
12376--15207[label="1;1pkt 1fpkt"];
14328--15207[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.244.253.242" dst_port="50823" src_ip="9.55.215.226" src_port="22"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.8.90.227"/>
    </slice>
    <from sec="1289451752" usec="0"/>
    <to sec="1289451754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.33.155.227"/>
    </slice>
    <from sec="1289451608" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.210.184.227"/>
    </slice>
    <from sec="1289451715" usec="0"/>
    <to sec="1289451718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.52.209.227"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.132.19.228"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="178.5.51.228"/>
    </slice>
    <from sec="1289452129" usec="0"/>
    <to sec="1289452143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
12410[label="166.26.208.228;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14352[label="166.26.208.228;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.26.208.228:80, 43.65.151.13:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 123: (12.5%)&lt;BR/&gt; 65310: (6.25%)&lt;BR/&gt; 56827: (6.25%)&lt;BR/&gt; 46940: (6.25%)&gt;];
}
12410--14352[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="43.65.151.13" src_ip="166.26.208.228" src_port="80"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289452485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.105.108.230"/>
    </slice>
    <from sec="1289452257" usec="0"/>
    <to sec="1289452262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1439{
style=filled;
color=gray75;
563[label="171.55.189.127;d;2pkt 2fpkt", shape=diamond, color=yellow];
1154[label="41.36.35.131;d;3pkt 3fpkt", shape=diamond, color=yellow];
1689[label="133.4.19.106;s;100pkt 100fpkt", shape=diamond, color=yellow];
2016[label="133.4.217.118;s;1224pkt 1224fpkt", shape=diamond, color=yellow];
2094[label="133.4.65.151;s;307pkt 307fpkt", shape=diamond, color=yellow];
2147[label="211.185.157.77;s;14pkt 14fpkt", shape=diamond, color=yellow];
2924[label="38.200.14.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
3244[label="128.165.171.188;s;50pkt 50fpkt", shape=diamond, color=yellow];
3558[label="35.145.127.79;d;21pkt 21fpkt", shape=diamond, color=yellow];
3910[label="42.129.44.33;d;140pkt 140fpkt", shape=diamond, color=yellow];
4433[label="46.33.47.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
4531[label="67.86.101.113;d;180pkt 180fpkt", shape=diamond, color=yellow];
4745[label="192.1.197.21;d;9pkt 9fpkt", shape=diamond, color=yellow];
5207[label="211.185.157.230;s;105pkt 105fpkt", shape=diamond, color=yellow];
5354[label="171.55.135.96;d;121pkt 121fpkt", shape=diamond, color=yellow];
5368[label="128.19.150.42;s;28pkt 28fpkt", shape=diamond, color=yellow];
5441[label="133.4.50.208;s;65pkt 65fpkt", shape=diamond, color=yellow];
5938[label="221.115.150.39;d;137pkt 137fpkt", shape=diamond, color=yellow];
6200[label="201.11.149.154;d;7pkt 7fpkt", shape=diamond, color=yellow];
7249[label="42.129.37.106;d;73pkt 73fpkt", shape=diamond, color=yellow];
7419[label="128.19.144.71;s;11pkt 11fpkt", shape=diamond, color=yellow];
8125[label="35.145.127.79;d;21pkt 21fpkt", shape=hexagon, color=black];
8276[label="42.129.44.33;d;130pkt 130fpkt", shape=hexagon, color=black];
8464[label="41.36.35.131;d;3pkt 3fpkt", shape=hexagon, color=black];
9218[label="133.4.60.20;109pkt 109fpkt", shape=pentagon, color=darkviolet];
9350[label="133.4.95.28;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9613[label="128.19.150.42;36pkt 36fpkt", shape=pentagon, color=darkviolet];
10070[label="128.19.144.71;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10176[label="211.185.157.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10272[label="133.4.44.83;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10283[label="10.100.1.84;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10383[label="211.185.151.90;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11423[label="133.4.143.160;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11788[label="128.165.211.184;27pkt 27fpkt", shape=pentagon, color=darkviolet];
12113[label="133.4.50.208;65pkt 65fpkt", shape=pentagon, color=darkviolet];
12144[label="133.4.164.209;29pkt 29fpkt", shape=pentagon, color=darkviolet];
12438[label="211.185.157.230;122pkt 122fpkt", shape=pentagon, color=darkviolet];
12872[label="133.4.60.20;109pkt 109fpkt", shape=invtriangle, color=brown];
12942[label="133.4.95.28;11pkt 11fpkt", shape=invtriangle, color=brown];
13072[label="128.19.150.42;36pkt 36fpkt", shape=invtriangle, color=brown];
13286[label="128.19.144.71;11pkt 11fpkt", shape=invtriangle, color=brown];
13383[label="133.4.44.83;24pkt 24fpkt", shape=invtriangle, color=brown];
13386[label="10.100.1.84;15pkt 15fpkt", shape=invtriangle, color=brown];
14063[label="128.165.211.184;28pkt 28fpkt", shape=invtriangle, color=brown];
14216[label="133.4.164.209;28pkt 28fpkt", shape=invtriangle, color=brown];
14358[label="211.185.157.230;121pkt 121fpkt", shape=invtriangle, color=brown];
14777[label="10.100.1.84;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1439[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[51.4317%]&lt;BR/&gt;{133.4.217.118:*, *:*}[45.2643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.4229%)&lt;BR/&gt; 0: (6.32389%)&lt;BR/&gt; 5867: (3.62936%)&lt;BR/&gt; 443: (2.40583%)&lt;BR/&gt; 993: (1.47099%)&gt;];
}
563--5368[label="1;2pkt 2fpkt"];
563--9613[label="1;2pkt 2fpkt"];
563--13072[label="1;2pkt 2fpkt"];
1154--2094[label="0.333333;1pkt 1fpkt"];
1154--2147[label="0.333333;1pkt 1fpkt"];
1154--5368[label="0.333333;1pkt 1fpkt"];
1154--8464[label="1;3pkt 3fpkt"];
1154--9613[label="0.333333;1pkt 1fpkt"];
1154--10176[label="1;1pkt 1fpkt"];
1154--13072[label="0.333333;1pkt 1fpkt"];
1689--1905[label="0.01;1pkt 1fpkt"];
1689--2130[label="0.01;1pkt 1fpkt"];
1689--2282[label="0.01;1pkt 1fpkt"];
1689--2313[label="0.0285714;1pkt 1fpkt"];
1689--2488[label="0.03;3pkt 3fpkt"];
1689--2976[label="0.02;2pkt 2fpkt"];
1689--4433[label="1;1pkt 1fpkt"];
1689--4531[label="0.04;4pkt 4fpkt"];
1689--4680[label="0.01;1pkt 1fpkt"];
1689--4725[label="0.0240964;2pkt 2fpkt"];
1689--5891[label="0.01;1pkt 1fpkt"];
1689--6728[label="0.0149254;1pkt 1fpkt"];
1689--7228[label="0.0140845;1pkt 1fpkt"];
1689--8278[label="0.01;1pkt 1fpkt"];
1689--8596[label="0.03;3pkt 3fpkt"];
1689--8664[label="0.04;4pkt 4fpkt"];
1689--8743[label="0.04;4pkt 4fpkt"];
1689--8790[label="0.04;4pkt 4fpkt"];
2016--2085[label="0.00869565;5pkt 5fpkt"];
2016--2108[label="0.00265957;1pkt 1fpkt"];
2016--2130[label="0.0106101;4pkt 4fpkt"];
2016--2133[label="0.00247525;1pkt 1fpkt"];
2016--2152[label="0.0431211;21pkt 21fpkt"];
2016--2251[label="0.00980392;1pkt 1fpkt"];
2016--2811[label="0.0103627;2pkt 2fpkt"];
2016--2924[label="1;1pkt 1fpkt"];
2016--3119[label="0.00325733;1pkt 1fpkt"];
2016--3764[label="0.00606061;1pkt 1fpkt"];
2016--3910[label="0.0285714;4pkt 4fpkt"];
2016--3913[label="0.0330189;7pkt 7fpkt"];
2016--3929[label="0.0146628;5pkt 5fpkt"];
2016--3936[label="0.0123457;1pkt 1fpkt"];
2016--4269[label="0.2;1pkt 1fpkt"];
2016--4436[label="0.0217391;4pkt 4fpkt"];
2016--4478[label="0.00719424;2pkt 2fpkt"];
2016--4531[label="0.0444444;8pkt 8fpkt"];
2016--4725[label="0.0240964;2pkt 2fpkt"];
2016--4745[label="0.555556;5pkt 5fpkt"];
2016--4810[label="0.0185185;2pkt 2fpkt"];
2016--5176[label="0.0382514;7pkt 7fpkt"];
2016--5332[label="0.224719;20pkt 20fpkt"];
2016--5907[label="0.0144928;1pkt 1fpkt"];
2016--6012[label="0.0111111;1pkt 1fpkt"];
2016--6132[label="0.011236;1pkt 1fpkt"];
2016--6195[label="0.0759494;6pkt 6fpkt"];
2016--6570[label="0.0263158;1pkt 1fpkt"];
2016--6580[label="0.015873;2pkt 2fpkt"];
2016--6612[label="0.0137931;2pkt 2fpkt"];
2016--6699[label="0.0119048;1pkt 1fpkt"];
2016--7698[label="0.0119048;1pkt 1fpkt"];
2016--7704[label="0.032967;3pkt 3fpkt"];
2016--7848[label="0.0266667;4pkt 4fpkt"];
2016--8027[label="0.00226757;2pkt 2fpkt"];
2016--8036[label="0.00276243;1pkt 1fpkt"];
2016--8131[label="0.01;4pkt 4fpkt"];
2016--8235[label="0.0569106;21pkt 21fpkt"];
2016--8243[label="0.00571429;2pkt 2fpkt"];
2016--8276[label="0.0307692;4pkt 4fpkt"];
2016--8395[label="0.0198675;3pkt 3fpkt"];
2016--8424[label="0.00724638;1pkt 1fpkt"];
2016--8453[label="0.00803213;2pkt 2fpkt"];
2016--8664[label="0.0669935;82pkt 82fpkt"];
2016--8666[label="0.000816993;1pkt 1fpkt"];
2016--8688[label="0.00653595;8pkt 8fpkt"];
2016--8689[label="0.000816993;1pkt 1fpkt"];
2016--8743[label="0.0669935;82pkt 82fpkt"];
2016--8745[label="0.000816993;1pkt 1fpkt"];
2016--8765[label="0.00653595;8pkt 8fpkt"];
2016--8766[label="0.000816993;1pkt 1fpkt"];
2016--8790[label="0.0669935;82pkt 82fpkt"];
2016--8792[label="0.000816993;1pkt 1fpkt"];
2016--8811[label="0.00653595;8pkt 8fpkt"];
2016--8812[label="0.000816993;1pkt 1fpkt"];
2094--2191[label="0.0246914;6pkt 6fpkt"];
2094--2810[label="0.0103093;1pkt 1fpkt"];
2094--2955[label="0.0212766;5pkt 5fpkt"];
2094--3023[label="0.0113636;1pkt 1fpkt"];
2094--3620[label="0.00325733;1pkt 1fpkt"];
2094--3698[label="0.00325733;1pkt 1fpkt"];
2094--3731[label="0.0239521;4pkt 4fpkt"];
2094--3781[label="0.00325733;1pkt 1fpkt"];
2094--3973[label="0.0487805;2pkt 2fpkt"];
2094--4280[label="0.00325733;1pkt 1fpkt"];
2094--4416[label="0.0264901;4pkt 4fpkt"];
2094--4478[label="0.00719424;2pkt 2fpkt"];
2094--4733[label="0.0357143;2pkt 2fpkt"];
2094--4814[label="0.012987;1pkt 1fpkt"];
2094--5401[label="0.0298507;2pkt 2fpkt"];
2094--5814[label="0.00325733;1pkt 1fpkt"];
2094--5872[label="0.00699301;1pkt 1fpkt"];
2094--5907[label="0.101449;7pkt 7fpkt"];
2094--5909[label="0.00325733;1pkt 1fpkt"];
2094--6007[label="0.00325733;1pkt 1fpkt"];
2094--6054[label="0.00740741;1pkt 1fpkt"];
2094--6075[label="0.013245;2pkt 2fpkt"];
2094--6146[label="0.166667;6pkt 6fpkt"];
2094--7061[label="0.0178571;1pkt 1fpkt"];
2094--7082[label="0.00325733;1pkt 1fpkt"];
2094--7308[label="0.0340909;3pkt 3fpkt"];
2094--7853[label="0.027027;2pkt 2fpkt"];
2094--7996[label="0.00537634;1pkt 1fpkt"];
2094--8027[label="0.00651466;2pkt 2fpkt"];
2094--8131[label="0.00977199;3pkt 3fpkt"];
2094--8228[label="0.00325733;1pkt 1fpkt"];
2094--8297[label="0.0571429;2pkt 2fpkt"];
2094--8449[label="0.00833333;1pkt 1fpkt"];
2094--8453[label="0.00803213;2pkt 2fpkt"];
2094--8464[label="0.333333;1pkt 1fpkt"];
2094--8582[label="0.0212766;5pkt 5fpkt"];
2094--8664[label="0.0814332;25pkt 25fpkt"];
2094--8666[label="0.00325733;1pkt 1fpkt"];
2094--8688[label="0.0390879;12pkt 12fpkt"];
2094--8743[label="0.0814332;25pkt 25fpkt"];
2094--8745[label="0.00325733;1pkt 1fpkt"];
2094--8765[label="0.0390879;12pkt 12fpkt"];
2094--8790[label="0.0814332;25pkt 25fpkt"];
2094--8792[label="0.00325733;1pkt 1fpkt"];
2094--8811[label="0.0390879;12pkt 12fpkt"];
2147--6483[label="0.0714286;1pkt 1fpkt"];
2147--6731[label="0.2;1pkt 1fpkt"];
2147--8464[label="0.333333;1pkt 1fpkt"];
2147--10176[label="1;1pkt 1fpkt"];
3244--3558[label="0.142857;3pkt 3fpkt"];
3244--3910[label="0.06;3pkt 3fpkt"];
3244--4587[label="0.02;1pkt 1fpkt"];
3244--5548[label="0.08;4pkt 4fpkt"];
3244--5943[label="0.037037;1pkt 1fpkt"];
3244--8125[label="0.142857;3pkt 3fpkt"];
3244--8203[label="0.04;2pkt 2fpkt"];
3244--8218[label="0.1;5pkt 5fpkt"];
3244--8276[label="0.06;3pkt 3fpkt"];
3244--8664[label="0.02;1pkt 1fpkt"];
3244--8666[label="0.02;1pkt 1fpkt"];
3244--8688[label="0.02;1pkt 1fpkt"];
3244--8743[label="0.02;1pkt 1fpkt"];
3244--8745[label="0.02;1pkt 1fpkt"];
3244--8765[label="0.02;1pkt 1fpkt"];
3244--8790[label="0.02;1pkt 1fpkt"];
3244--8792[label="0.02;1pkt 1fpkt"];
3244--8811[label="0.02;1pkt 1fpkt"];
3558--3978[label="0.047619;1pkt 1fpkt"];
3558--5207[label="0.0952381;2pkt 2fpkt"];
3558--6605[label="0.1;1pkt 1fpkt"];
3558--8125[label="1;21pkt 21fpkt"];
3558--10283[label="0.733333;11pkt 11fpkt"];
3558--11071[label="0.047619;1pkt 1fpkt"];
3558--11169[label="0.047619;1pkt 1fpkt"];
3558--12438[label="0.0952381;2pkt 2fpkt"];
3558--13386[label="0.733333;11pkt 11fpkt"];
3558--13745[label="0.047619;1pkt 1fpkt"];
3558--13778[label="0.047619;1pkt 1fpkt"];
3558--14358[label="0.0952381;2pkt 2fpkt"];
3558--14777[label="0.6875;11pkt 11fpkt"];
3558--14929[label="0.047619;1pkt 1fpkt"];
3558--14946[label="0.047619;1pkt 1fpkt"];
3910--4128[label="0.00714286;1pkt 1fpkt"];
3910--4453[label="0.00854701;1pkt 1fpkt"];
3910--4592[label="0.00714286;1pkt 1fpkt"];
3910--4626[label="0.00714286;1pkt 1fpkt"];
3910--5441[label="0.0769231;5pkt 5fpkt"];
3910--6119[label="0.00714286;1pkt 1fpkt"];
3910--6690[label="0.0135135;1pkt 1fpkt"];
3910--8276[label="1;130pkt 130fpkt"];
3910--8664[label="0.0357143;5pkt 5fpkt"];
3910--8666[label="0.0214286;3pkt 3fpkt"];
3910--8688[label="0.0357143;5pkt 5fpkt"];
3910--8689[label="0.0142857;2pkt 2fpkt"];
3910--8743[label="0.0357143;5pkt 5fpkt"];
3910--8745[label="0.0214286;3pkt 3fpkt"];
3910--8765[label="0.0357143;5pkt 5fpkt"];
3910--8766[label="0.0142857;2pkt 2fpkt"];
3910--8790[label="0.0357143;5pkt 5fpkt"];
3910--8792[label="0.0214286;3pkt 3fpkt"];
3910--8811[label="0.0357143;5pkt 5fpkt"];
3910--8812[label="0.0142857;2pkt 2fpkt"];
3910--9024[label="0.00714286;1pkt 1fpkt"];
3910--9298[label="0.0214286;3pkt 3fpkt"];
3910--9350[label="0.3;3pkt 3fpkt"];
3910--9431[label="0.0142857;2pkt 2fpkt"];
3910--9509[label="0.0263158;1pkt 1fpkt"];
3910--9726[label="0.0113636;1pkt 1fpkt"];
3910--10504[label="0.0142857;2pkt 2fpkt"];
3910--11100[label="0.0285714;4pkt 4fpkt"];
3910--11423[label="0.117647;2pkt 2fpkt"];
3910--11685[label="0.0142857;2pkt 2fpkt"];
3910--12113[label="0.0769231;5pkt 5fpkt"];
3910--12672[label="0.03125;1pkt 1fpkt"];
3910--12790[label="0.00714286;1pkt 1fpkt"];
3910--12914[label="0.0214286;3pkt 3fpkt"];
3910--12942[label="0.272727;3pkt 3fpkt"];
3910--13131[label="0.0113636;1pkt 1fpkt"];
3910--13486[label="0.0142857;2pkt 2fpkt"];
3910--14451[label="0.0322581;1pkt 1fpkt"];
3910--14577[label="0.0214286;3pkt 3fpkt"];
4531--8656[label="0.00555556;1pkt 1fpkt"];
4531--8664[label="0.0666667;12pkt 12fpkt"];
4531--8678[label="0.00555556;1pkt 1fpkt"];
4531--8688[label="0.0722222;13pkt 13fpkt"];
4531--8736[label="0.00555556;1pkt 1fpkt"];
4531--8743[label="0.0666667;12pkt 12fpkt"];
4531--8755[label="0.00555556;1pkt 1fpkt"];
4531--8765[label="0.0722222;13pkt 13fpkt"];
4531--8785[label="0.00555556;1pkt 1fpkt"];
4531--8790[label="0.0666667;12pkt 12fpkt"];
4531--8801[label="0.00555556;1pkt 1fpkt"];
4531--8811[label="0.0722222;13pkt 13fpkt"];
4531--9298[label="0.0888889;16pkt 16fpkt"];
4531--11788[label="0.925926;25pkt 25fpkt"];
4531--12144[label="0.896552;26pkt 26fpkt"];
4531--12914[label="0.0888889;16pkt 16fpkt"];
4531--14063[label="0.928571;26pkt 26fpkt"];
4531--14216[label="0.892857;25pkt 25fpkt"];
4531--14577[label="0.0888889;16pkt 16fpkt"];
5207--5937[label="0.00952381;1pkt 1fpkt"];
5207--6483[label="0.00952381;1pkt 1fpkt"];
5207--6753[label="0.0243902;2pkt 2fpkt"];
5207--8125[label="0.0952381;2pkt 2fpkt"];
5207--8203[label="0.0571429;6pkt 6fpkt"];
5207--8210[label="0.00952381;1pkt 1fpkt"];
5207--8664[label="0.0285714;3pkt 3fpkt"];
5207--8666[label="0.0190476;2pkt 2fpkt"];
5207--8688[label="0.00952381;1pkt 1fpkt"];
5207--8689[label="0.00952381;1pkt 1fpkt"];
5207--8743[label="0.0285714;3pkt 3fpkt"];
5207--8745[label="0.0190476;2pkt 2fpkt"];
5207--8765[label="0.00952381;1pkt 1fpkt"];
5207--8766[label="0.00952381;1pkt 1fpkt"];
5207--8790[label="0.0285714;3pkt 3fpkt"];
5207--8792[label="0.0190476;2pkt 2fpkt"];
5207--8811[label="0.00952381;1pkt 1fpkt"];
5207--8812[label="0.00952381;1pkt 1fpkt"];
5207--12438[label="0.990476;104pkt 104fpkt"];
5207--14358[label="0.980952;103pkt 103fpkt"];
5354--5368[label="0.25;7pkt 7fpkt"];
5354--8656[label="0.0330579;4pkt 4fpkt"];
5354--8664[label="0.0743802;9pkt 9fpkt"];
5354--8688[label="0.0661157;8pkt 8fpkt"];
5354--8736[label="0.0330579;4pkt 4fpkt"];
5354--8743[label="0.0743802;9pkt 9fpkt"];
5354--8765[label="0.0661157;8pkt 8fpkt"];
5354--8785[label="0.0330579;4pkt 4fpkt"];
5354--8790[label="0.0743802;9pkt 9fpkt"];
5354--8811[label="0.0661157;8pkt 8fpkt"];
5354--9298[label="0.190083;23pkt 23fpkt"];
5354--9613[label="0.305556;11pkt 11fpkt"];
5354--10383[label="0.666667;12pkt 12fpkt"];
5354--12914[label="0.190083;23pkt 23fpkt"];
5354--13072[label="0.305556;11pkt 11fpkt"];
5354--14577[label="0.190083;23pkt 23fpkt"];
5368--5938[label="0.0357143;1pkt 1fpkt"];
5368--6736[label="0.0714286;2pkt 2fpkt"];
5368--8464[label="0.333333;1pkt 1fpkt"];
5368--9613[label="0.964286;27pkt 27fpkt"];
5368--13072[label="0.964286;27pkt 27fpkt"];
5441--6095[label="0.0153846;1pkt 1fpkt"];
5441--7941[label="0.0307692;2pkt 2fpkt"];
5441--8276[label="0.0769231;5pkt 5fpkt"];
5441--8453[label="0.0153846;1pkt 1fpkt"];
5441--12113[label="0.984615;64pkt 64fpkt"];
5938--5968[label="0.0123457;1pkt 1fpkt"];
5938--6173[label="0.02;1pkt 1fpkt"];
5938--6236[label="0.0125;1pkt 1fpkt"];
5938--7283[label="0.0121951;1pkt 1fpkt"];
5938--7288[label="0.00847458;1pkt 1fpkt"];
5938--7320[label="0.031746;2pkt 2fpkt"];
5938--7417[label="0.0169492;1pkt 1fpkt"];
5938--7448[label="0.0425532;2pkt 2fpkt"];
5938--7451[label="0.0145985;2pkt 2fpkt"];
5938--7558[label="0.00729927;1pkt 1fpkt"];
5938--8664[label="0.0145985;2pkt 2fpkt"];
5938--8688[label="0.109489;15pkt 15fpkt"];
5938--8743[label="0.0145985;2pkt 2fpkt"];
5938--8765[label="0.109489;15pkt 15fpkt"];
5938--8790[label="0.0145985;2pkt 2fpkt"];
5938--8811[label="0.109489;15pkt 15fpkt"];
5938--8954[label="0.0555556;1pkt 1fpkt"];
5938--9041[label="0.0555556;2pkt 2fpkt"];
5938--9298[label="0.00729927;1pkt 1fpkt"];
5938--9350[label="0.1;1pkt 1fpkt"];
5938--9606[label="0.03125;2pkt 2fpkt"];
5938--9613[label="0.0277778;1pkt 1fpkt"];
5938--10272[label="0.0416667;1pkt 1fpkt"];
5938--10880[label="0.0243902;1pkt 1fpkt"];
5938--11035[label="0.0384615;1pkt 1fpkt"];
5938--11105[label="0.1;2pkt 2fpkt"];
5938--11240[label="0.00729927;1pkt 1fpkt"];
5938--11255[label="0.0145985;2pkt 2fpkt"];
5938--11649[label="0.00729927;1pkt 1fpkt"];
5938--11681[label="0.00826446;1pkt 1fpkt"];
5938--11741[label="0.0526316;3pkt 3fpkt"];
5938--12135[label="0.0123457;1pkt 1fpkt"];
5938--12195[label="0.0224719;2pkt 2fpkt"];
5938--12796[label="0.0571429;2pkt 2fpkt"];
5938--12914[label="0.00729927;1pkt 1fpkt"];
5938--12942[label="0.181818;2pkt 2fpkt"];
5938--13071[label="0.0307692;2pkt 2fpkt"];
5938--13072[label="0.0277778;1pkt 1fpkt"];
5938--13383[label="0.0416667;1pkt 1fpkt"];
5938--13652[label="0.0243902;1pkt 1fpkt"];
5938--13730[label="0.0384615;1pkt 1fpkt"];
5938--13756[label="0.1;2pkt 2fpkt"];
5938--13811[label="0.00729927;1pkt 1fpkt"];
5938--13819[label="0.0145985;2pkt 2fpkt"];
5938--14041[label="0.0689655;4pkt 4fpkt"];
5938--14516[label="0.0571429;2pkt 2fpkt"];
5938--14577[label="0.00729927;1pkt 1fpkt"];
5938--14643[label="0.03125;2pkt 2fpkt"];
5938--14962[label="0.0145985;2pkt 2fpkt"];
6200--7419[label="0.857143;6pkt 6fpkt"];
6200--10070[label="0.857143;6pkt 6fpkt"];
6200--13286[label="0.857143;6pkt 6fpkt"];
7249--7419[label="0.181818;2pkt 2fpkt"];
7249--8664[label="0.0273973;2pkt 2fpkt"];
7249--8688[label="0.0136986;1pkt 1fpkt"];
7249--8743[label="0.0273973;2pkt 2fpkt"];
7249--8765[label="0.0136986;1pkt 1fpkt"];
7249--8790[label="0.0273973;2pkt 2fpkt"];
7249--8811[label="0.0136986;1pkt 1fpkt"];
7249--9024[label="0.0136986;1pkt 1fpkt"];
7249--9218[label="0.123288;9pkt 9fpkt"];
7249--9268[label="0.0136986;1pkt 1fpkt"];
7249--9298[label="0.0136986;1pkt 1fpkt"];
7249--9350[label="0.3;3pkt 3fpkt"];
7249--9516[label="0.0136986;1pkt 1fpkt"];
7249--10070[label="0.166667;2pkt 2fpkt"];
7249--10279[label="0.0136986;1pkt 1fpkt"];
7249--10726[label="0.0136986;1pkt 1fpkt"];
7249--11235[label="0.0136986;1pkt 1fpkt"];
7249--11263[label="0.0136986;1pkt 1fpkt"];
7249--12613[label="0.153846;2pkt 2fpkt"];
7249--12790[label="0.0136986;1pkt 1fpkt"];
7249--12872[label="0.123288;9pkt 9fpkt"];
7249--12914[label="0.0136986;1pkt 1fpkt"];
7249--12942[label="0.272727;3pkt 3fpkt"];
7249--13286[label="0.181818;2pkt 2fpkt"];
7249--13385[label="0.0136986;1pkt 1fpkt"];
7249--13809[label="0.0136986;1pkt 1fpkt"];
7249--14577[label="0.0136986;1pkt 1fpkt"];
7249--14959[label="0.0136986;1pkt 1fpkt"];
7419--8688[label="0.0909091;1pkt 1fpkt"];
7419--8765[label="0.0909091;1pkt 1fpkt"];
7419--8811[label="0.0909091;1pkt 1fpkt"];
7419--10070[label="1;11pkt 11fpkt"];
7419--13286[label="0.909091;10pkt 10fpkt"];
8125--10283[label="0.733333;11pkt 11fpkt"];
8125--11071[label="0.047619;1pkt 1fpkt"];
8125--11169[label="0.047619;1pkt 1fpkt"];
8125--12438[label="0.0952381;2pkt 2fpkt"];
8125--13386[label="0.733333;11pkt 11fpkt"];
8125--13745[label="0.047619;1pkt 1fpkt"];
8125--13778[label="0.047619;1pkt 1fpkt"];
8125--14358[label="0.0952381;2pkt 2fpkt"];
8125--14777[label="0.6875;11pkt 11fpkt"];
8125--14929[label="0.047619;1pkt 1fpkt"];
8125--14946[label="0.047619;1pkt 1fpkt"];
8276--8664[label="0.0384615;5pkt 5fpkt"];
8276--8666[label="0.0230769;3pkt 3fpkt"];
8276--8688[label="0.0384615;5pkt 5fpkt"];
8276--8689[label="0.0153846;2pkt 2fpkt"];
8276--8743[label="0.0384615;5pkt 5fpkt"];
8276--8745[label="0.0230769;3pkt 3fpkt"];
8276--8765[label="0.0384615;5pkt 5fpkt"];
8276--8766[label="0.0153846;2pkt 2fpkt"];
8276--8790[label="0.0384615;5pkt 5fpkt"];
8276--8792[label="0.0230769;3pkt 3fpkt"];
8276--8811[label="0.0384615;5pkt 5fpkt"];
8276--8812[label="0.0153846;2pkt 2fpkt"];
8276--9024[label="0.00769231;1pkt 1fpkt"];
8276--9298[label="0.0230769;3pkt 3fpkt"];
8276--9350[label="0.3;3pkt 3fpkt"];
8276--9431[label="0.0153846;2pkt 2fpkt"];
8276--9509[label="0.0263158;1pkt 1fpkt"];
8276--9726[label="0.0113636;1pkt 1fpkt"];
8276--10504[label="0.00769231;1pkt 1fpkt"];
8276--11100[label="0.00769231;1pkt 1fpkt"];
8276--11423[label="0.117647;2pkt 2fpkt"];
8276--11685[label="0.0153846;2pkt 2fpkt"];
8276--12113[label="0.0769231;5pkt 5fpkt"];
8276--12790[label="0.00769231;1pkt 1fpkt"];
8276--12914[label="0.0230769;3pkt 3fpkt"];
8276--12942[label="0.272727;3pkt 3fpkt"];
8276--13131[label="0.0113636;1pkt 1fpkt"];
8276--13486[label="0.00769231;1pkt 1fpkt"];
8276--14577[label="0.0230769;3pkt 3fpkt"];
8464--9613[label="0.333333;1pkt 1fpkt"];
8464--10176[label="1;1pkt 1fpkt"];
8464--13072[label="0.333333;1pkt 1fpkt"];
9218--12872[label="1;109pkt 109fpkt"];
9350--12942[label="1;10pkt 10fpkt"];
9613--13072[label="1;36pkt 36fpkt"];
10070--13286[label="1;11pkt 11fpkt"];
10272--13383[label="1;24pkt 24fpkt"];
10283--13386[label="1;15pkt 15fpkt"];
10283--14777[label="1;15pkt 15fpkt"];
11788--14063[label="1;27pkt 27fpkt"];
12144--14216[label="1;28pkt 28fpkt"];
12438--14358[label="1;121pkt 121fpkt"];
13386--14777[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.217.118"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
12440[label="44.194.176.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14359[label="44.194.176.230;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.194.176.230:0, 211.185.157.120:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12440--14359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.157.120" src_ip="44.194.176.230"/>
    </slice>
    <from sec="1289452480" usec="0"/>
    <to sec="1289452494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.200.173.231"/>
    </slice>
    <from sec="1289451991" usec="0"/>
    <to sec="1289451994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1442{
style=filled;
color=gray75;
12449[label="153.117.55.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14363[label="153.117.55.232;2pkt 2fpkt", shape=invtriangle, color=brown];
15227[label="153.117.55.232;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1442[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.117.55.232:65199, 211.185.145.108:80}[50%]&lt;BR/&gt;{153.117.55.232:52410, 211.185.145.111:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65199: (37.5%)&lt;BR/&gt; 52410: (12.5%)&gt;];
}
12449--14363[label="1;1pkt 1fpkt"];
12449--15227[label="1;1pkt 1fpkt"];
14363--15227[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.111" dst_port="80" src_ip="153.117.55.232" src_port="52410"/>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="153.117.55.232" src_port="65199"/>
    </slice>
    <from sec="1289451726" usec="0"/>
    <to sec="1289452367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.196.121.232"/>
    </slice>
    <from sec="1289451619" usec="0"/>
    <to sec="1289451630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.204.164.232"/>
    </slice>
    <from sec="1289452084" usec="0"/>
    <to sec="1289452102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
12459[label="46.229.202.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14369[label="46.229.202.232;7pkt 7fpkt", shape=invtriangle, color=brown];
15230[label="46.229.202.232;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.229.202.232:43459, 210.42.203.12:*}[57.1429%]&lt;BR/&gt;{46.229.202.232:49977, 210.42.203.12:*}[42.8571%]&lt;BR/&gt;{46.229.202.232:*, 210.42.203.12:33436}[28.5714%]&lt;BR/&gt;{46.229.202.232:*, 210.42.203.12:33437}[28.5714%]&lt;BR/&gt;{46.229.202.232:*, 210.42.203.12:33438}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43459: (28.5714%)&lt;BR/&gt; 49977: (21.4286%)&lt;BR/&gt; 33438: (14.2857%)&lt;BR/&gt; 33437: (14.2857%)&lt;BR/&gt; 33436: (14.2857%)&gt;];
}
12459--14369[label="1;7pkt 7fpkt"];
12459--15230[label="1;7pkt 7fpkt"];
14369--15230[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="210.42.203.12" src_ip="46.229.202.232" src_port="43459"/>
      <filter dst_ip="210.42.203.12" src_ip="46.229.202.232" src_port="49977"/>
      <filter dst_ip="210.42.203.12" dst_port="33438" src_ip="46.229.202.232"/>
      <filter dst_ip="210.42.203.12" dst_port="33437" src_ip="46.229.202.232"/>
      <filter dst_ip="210.42.203.12" dst_port="33436" src_ip="46.229.202.232"/>
    </slice>
    <from sec="1289452105" usec="0"/>
    <to sec="1289452134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.7.204.232"/>
    </slice>
    <from sec="1289452171" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
6720[label="133.4.19.57;d;10pkt 10fpkt", shape=diamond, color=yellow];
6748[label="17.113.145.135;s;20pkt 20fpkt", shape=diamond, color=yellow];
7159[label="133.4.113.90;d;112pkt 112fpkt", shape=diamond, color=yellow];
11051[label="17.113.145.135;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13734[label="17.113.145.135;20pkt 20fpkt", shape=invtriangle, color=brown];
14924[label="17.113.145.135;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.4.113.90:53}[62.6016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (23.0198%)&lt;BR/&gt; 53: (20.0495%)&lt;BR/&gt; 80: (4.9505%)&lt;BR/&gt; 25: (1.9802%)&lt;BR/&gt; 60534: (1.23762%)&gt;];
}
6720--6748[label="0.6;6pkt 6fpkt"];
6720--8664[label="0.1;1pkt 1fpkt"];
6720--8743[label="0.1;1pkt 1fpkt"];
6720--8790[label="0.1;1pkt 1fpkt"];
6720--11051[label="0.5;5pkt 5fpkt"];
6720--11571[label="0.1;1pkt 1fpkt"];
6720--13734[label="0.5;5pkt 5fpkt"];
6720--14924[label="0.5;5pkt 5fpkt"];
6748--7159[label="0.7;14pkt 14fpkt"];
6748--8664[label="0.05;1pkt 1fpkt"];
6748--8743[label="0.05;1pkt 1fpkt"];
6748--8790[label="0.05;1pkt 1fpkt"];
6748--11051[label="0.95;19pkt 19fpkt"];
6748--13734[label="0.95;19pkt 19fpkt"];
6748--14924[label="0.95;19pkt 19fpkt"];
7159--7191[label="0.00892857;1pkt 1fpkt"];
7159--8664[label="0.00892857;1pkt 1fpkt"];
7159--8688[label="0.0178571;2pkt 2fpkt"];
7159--8743[label="0.00892857;1pkt 1fpkt"];
7159--8765[label="0.0178571;2pkt 2fpkt"];
7159--8790[label="0.00892857;1pkt 1fpkt"];
7159--8811[label="0.0178571;2pkt 2fpkt"];
7159--9030[label="0.0181818;1pkt 1fpkt"];
7159--11051[label="0.7;14pkt 14fpkt"];
7159--12381[label="0.0315789;3pkt 3fpkt"];
7159--12463[label="0.0178571;2pkt 2fpkt"];
7159--12614[label="0.0266667;2pkt 2fpkt"];
7159--13734[label="0.7;14pkt 14fpkt"];
7159--14371[label="0.0178571;2pkt 2fpkt"];
7159--14924[label="0.7;14pkt 14fpkt"];
11051--13734[label="1;20pkt 20fpkt"];
11051--14924[label="1;20pkt 20fpkt"];
13734--14924[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.113.90" dst_port="53"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.200.233.234"/>
    </slice>
    <from sec="1289451874" usec="0"/>
    <to sec="1289451888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.20.173.235"/>
    </slice>
    <from sec="1289451618" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.77.181.235"/>
    </slice>
    <from sec="1289452402" usec="0"/>
    <to sec="1289452421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.7.169.236"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289451764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.83.190.236"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
12511[label="133.4.216.236;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14388[label="133.4.216.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.216.236:1615, 141.174.21.24:443}[50%]&lt;BR/&gt;{133.4.216.236:1614, 141.174.21.25:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1615: (33.3333%)&lt;BR/&gt; 1614: (16.6667%)&gt;];
}
12511--14388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.174.21.25" dst_port="443" src_ip="133.4.216.236" src_port="1614"/>
      <filter dst_ip="141.174.21.24" dst_port="443" src_ip="133.4.216.236" src_port="1615"/>
    </slice>
    <from sec="1289451989" usec="0"/>
    <to sec="1289452000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.8.40.237"/>
    </slice>
    <from sec="1289452190" usec="0"/>
    <to sec="1289452264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.248.148.238"/>
    </slice>
    <from sec="1289452477" usec="0"/>
    <to sec="1289452483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.200.203.239"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1458{
style=filled;
color=gray75;
12540[label="133.4.210.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14402[label="133.4.210.239;1pkt 1fpkt", shape=invtriangle, color=brown];
15245[label="133.4.210.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1458[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.210.239:80, 51.176.101.247:4274}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4274: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12540--14402[label="1;1pkt 1fpkt"];
12540--15245[label="1;1pkt 1fpkt"];
14402--15245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="51.176.101.247" dst_port="4274" src_ip="133.4.210.239" src_port="80"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.204.23.240"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.186.232.240"/>
    </slice>
    <from sec="1289452138" usec="0"/>
    <to sec="1289452149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1461{
style=filled;
color=gray75;
12564[label="9.143.18.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14412[label="9.143.18.242;2pkt 2fpkt", shape=invtriangle, color=brown];
15249[label="9.143.18.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1461[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.143.18.242:2242, 210.33.133.135:80}[50%]&lt;BR/&gt;{9.143.18.242:2280, 210.33.133.135:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2280: (25%)&lt;BR/&gt; 2242: (25%)&gt;];
}
12564--14412[label="1;2pkt 2fpkt"];
12564--15249[label="1;2pkt 2fpkt"];
14412--15249[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.133.135" dst_port="80" src_ip="9.143.18.242" src_port="2280"/>
      <filter dst_ip="210.33.133.135" dst_port="80" src_ip="9.143.18.242" src_port="2242"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.26.114.242"/>
    </slice>
    <from sec="1289452135" usec="0"/>
    <to sec="1289452147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1463{
style=filled;
color=gray75;
12634[label="211.185.157.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14433[label="211.185.157.248;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1463[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.157.248:34706, 210.43.50.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34706: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12634--14433[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.43.50.145" dst_port="80" src_ip="211.185.157.248" src_port="34706"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.164.198.248"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.134.232.250"/>
    </slice>
    <from sec="1289452360" usec="0"/>
    <to sec="1289452373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560312,3.58897,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1466{
style=filled;
color=gray75;
12659[label="7.110.19.251;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14444[label="7.110.19.251;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1466[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.110.19.251:*, 211.185.145.69:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3156: (9.09091%)&lt;BR/&gt; 3155: (9.09091%)&lt;BR/&gt; 3152: (9.09091%)&lt;BR/&gt; 3151: (9.09091%)&gt;];
}
12659--14444[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.69" dst_port="80" src_ip="7.110.19.251"/>
    </slice>
    <from sec="1289452455" usec="0"/>
    <to sec="1289452464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840361,3.5699,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
12666[label="80.153.29.252;19pkt 19fpkt", shape=pentagon, color=darkviolet];
14448[label="80.153.29.252;18pkt 18fpkt", shape=invtriangle, color=brown];
15272[label="80.153.29.252;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.153.29.252:*, 166.26.179.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10645: (2.72727%)&lt;BR/&gt; 10644: (2.72727%)&lt;BR/&gt; 10643: (2.72727%)&lt;BR/&gt; 10642: (2.72727%)&gt;];
}
12666--14448[label="1;18pkt 18fpkt"];
12666--15272[label="1;18pkt 18fpkt"];
14448--15272[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="80.153.29.252"/>
    </slice>
    <from sec="1289452314" usec="0"/>
    <to sec="1289452475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.39.177.252"/>
    </slice>
    <from sec="1289452151" usec="0"/>
    <to sec="1289452171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577297,3.61501,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.77.138.254"/>
    </slice>
    <from sec="1289451613" usec="0"/>
    <to sec="1289451725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.162.177.2"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.149.141.4"/>
    </slice>
    <from sec="1289452147" usec="0"/>
    <to sec="1289452164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.192.126.5"/>
    </slice>
    <from sec="53418600" usec="0"/>
    <to sec="53418600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="158.196.176.7"/>
    </slice>
    <from sec="1289451686" usec="0"/>
    <to sec="1289451698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.67.224.8"/>
    </slice>
    <from sec="1289452287" usec="0"/>
    <to sec="1289452310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.69.96.10"/>
    </slice>
    <from sec="1289451865" usec="0"/>
    <to sec="1289451891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.77.201.10"/>
    </slice>
    <from sec="1289451604" usec="0"/>
    <to sec="1289452488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,053,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.9.134.11"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.137.25.12"/>
    </slice>
    <from sec="1289452101" usec="0"/>
    <to sec="1289452143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.104.174.13"/>
    </slice>
    <from sec="1289452060" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.154.102.14"/>
    </slice>
    <from sec="1289451712" usec="0"/>
    <to sec="1289452412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.50.112.14"/>
    </slice>
    <from sec="1289452406" usec="0"/>
    <to sec="1289452410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.17.203.14"/>
    </slice>
    <from sec="1289452227" usec="0"/>
    <to sec="1289452448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.73.185.16"/>
    </slice>
    <from sec="1289451785" usec="0"/>
    <to sec="1289451788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.201.236.20"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289451797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.116.37.21"/>
    </slice>
    <from sec="1289452058" usec="0"/>
    <to sec="1289452064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.1.197.21"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289452322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.3.40.25"/>
    </slice>
    <from sec="1289451622" usec="0"/>
    <to sec="1289451730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.4.189.25"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289451666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.128.139.30"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.239.109.33"/>
    </slice>
    <from sec="1289452357" usec="0"/>
    <to sec="1289452377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.180.8.34"/>
    </slice>
    <from sec="1289452061" usec="0"/>
    <to sec="1289452083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.169.8.35"/>
    </slice>
    <from sec="1289452258" usec="0"/>
    <to sec="1289452266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.242.96.35"/>
    </slice>
    <from sec="1289452108" usec="0"/>
    <to sec="1289452132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.136.174.35"/>
    </slice>
    <from sec="1289451880" usec="0"/>
    <to sec="1289451891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="178.151.235.38"/>
    </slice>
    <from sec="1289452106" usec="0"/>
    <to sec="1289452120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.9.134.40"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.105.133.41"/>
    </slice>
    <from sec="1289451831" usec="0"/>
    <to sec="1289451957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41563,3.48994,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1498{
style=filled;
color=gray75;
446[label="34.1.233.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
1157[label="133.4.146.43;s;247pkt 247fpkt", shape=diamond, color=yellow];
1396[label="220.81.107.16;d;1047pkt 1047fpkt", shape=diamond, color=yellow];
2757[label="133.4.60.69;s;392pkt 392fpkt", shape=diamond, color=yellow];
3293[label="133.4.192.213;s;81pkt 81fpkt", shape=diamond, color=yellow];
4040[label="133.4.188.9;s;22pkt 22fpkt", shape=diamond, color=yellow];
4309[label="133.4.60.176;s;55pkt 55fpkt", shape=diamond, color=yellow];
4924[label="166.26.25.147;s;74pkt 74fpkt", shape=diamond, color=yellow];
5041[label="149.20.254.38;d;15pkt 15fpkt", shape=diamond, color=yellow];
5431[label="133.4.60.24;s;24pkt 24fpkt", shape=diamond, color=yellow];
6641[label="149.20.254.32;d;41pkt 41fpkt", shape=diamond, color=yellow];
7260[label="133.4.60.189;s;323pkt 323fpkt", shape=diamond, color=yellow];
7306[label="80.58.141.21;d;8pkt 8fpkt", shape=diamond, color=yellow];
7545[label="133.4.153.36;s;83pkt 83fpkt", shape=diamond, color=yellow];
7793[label="34.1.233.233;d;1pkt 1fpkt", shape=hexagon, color=black];
8354[label="149.20.254.38;d;9pkt 9fpkt", shape=hexagon, color=black];
9282[label="133.4.60.24;65pkt 65fpkt", shape=pentagon, color=darkviolet];
9493[label="133.4.153.36;105pkt 105fpkt", shape=pentagon, color=darkviolet];
9631[label="133.4.146.43;247pkt 247fpkt", shape=pentagon, color=darkviolet];
11848[label="133.4.60.189;322pkt 322fpkt", shape=pentagon, color=darkviolet];
12198[label="133.4.192.213;80pkt 80fpkt", shape=pentagon, color=darkviolet];
13017[label="133.4.153.36;105pkt 105fpkt", shape=invtriangle, color=brown];
13082[label="133.4.146.43;247pkt 247fpkt", shape=invtriangle, color=brown];
14238[label="133.4.192.213;78pkt 78fpkt", shape=invtriangle, color=brown];
14647[label="133.4.146.43;248pkt 248fpkt", shape=invhouse, color=bisque];
15167[label="133.4.192.213;75pkt 75fpkt", shape=invhouse, color=bisque];
stat1498[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 220.81.107.16:80}[64.8936%]&lt;BR/&gt;{133.4.60.69:*, *:*}[20.8511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3817%)&lt;BR/&gt; 33072: (1.16395%)&lt;BR/&gt; 56141: (0.750939%)&lt;BR/&gt; 443: (0.625782%)&lt;BR/&gt; 32161: (0.525657%)&gt;];
}
446--2757[label="1;1pkt 1fpkt"];
446--7793[label="1;1pkt 1fpkt"];
1157--1188[label="0.0283401;7pkt 7fpkt"];
1157--1396[label="0.574899;142pkt 142fpkt"];
1157--1608[label="0.00404858;1pkt 1fpkt"];
1157--1661[label="0.00404858;1pkt 1fpkt"];
1157--2085[label="0.0283401;7pkt 7fpkt"];
1157--2108[label="0.0161943;4pkt 4fpkt"];
1157--2349[label="0.0283401;7pkt 7fpkt"];
1157--3912[label="0.0301205;5pkt 5fpkt"];
1157--4009[label="0.068323;11pkt 11fpkt"];
1157--4564[label="0.0526316;6pkt 6fpkt"];
1157--4667[label="0.0169492;1pkt 1fpkt"];
1157--4728[label="0.0131579;2pkt 2fpkt"];
1157--5891[label="0.018018;2pkt 2fpkt"];
1157--6612[label="0.0137931;2pkt 2fpkt"];
1157--6685[label="0.0105263;1pkt 1fpkt"];
1157--6699[label="0.0238095;2pkt 2fpkt"];
1157--7308[label="0.0113636;1pkt 1fpkt"];
1157--8664[label="0.048583;12pkt 12fpkt"];
1157--8688[label="0.0202429;5pkt 5fpkt"];
1157--8743[label="0.048583;12pkt 12fpkt"];
1157--8765[label="0.0202429;5pkt 5fpkt"];
1157--8790[label="0.048583;12pkt 12fpkt"];
1157--8811[label="0.0202429;5pkt 5fpkt"];
1157--9631[label="0.995951;246pkt 246fpkt"];
1157--13082[label="0.995951;246pkt 246fpkt"];
1157--14647[label="1;247pkt 247fpkt"];
1396--2127[label="0.0854701;10pkt 10fpkt"];
1396--2270[label="0.0549451;10pkt 10fpkt"];
1396--2692[label="0.179561;188pkt 188fpkt"];
1396--2757[label="0.397959;156pkt 156fpkt"];
1396--2842[label="0.0566038;9pkt 9fpkt"];
1396--3104[label="0.00940439;3pkt 3fpkt"];
1396--3293[label="0.765432;62pkt 62fpkt"];
1396--4040[label="0.636364;14pkt 14fpkt"];
1396--4128[label="0.0525114;23pkt 23fpkt"];
1396--4309[label="0.490909;27pkt 27fpkt"];
1396--4924[label="0.337838;25pkt 25fpkt"];
1396--5419[label="0.1;10pkt 10fpkt"];
1396--5431[label="0.0833333;2pkt 2fpkt"];
1396--5508[label="0.238095;15pkt 15fpkt"];
1396--6977[label="0.973333;73pkt 73fpkt"];
1396--7260[label="0.356037;115pkt 115fpkt"];
1396--7545[label="0.144578;12pkt 12fpkt"];
1396--8656[label="0.00424929;3pkt 3fpkt"];
1396--8664[label="0.0296084;31pkt 31fpkt"];
1396--8678[label="0.00764088;8pkt 8fpkt"];
1396--8688[label="0.0964661;101pkt 101fpkt"];
1396--8736[label="0.00424929;3pkt 3fpkt"];
1396--8743[label="0.0296084;31pkt 31fpkt"];
1396--8755[label="0.00764088;8pkt 8fpkt"];
1396--8765[label="0.0964661;101pkt 101fpkt"];
1396--8785[label="0.00424929;3pkt 3fpkt"];
1396--8790[label="0.0296084;31pkt 31fpkt"];
1396--8801[label="0.00764088;8pkt 8fpkt"];
1396--8811[label="0.0964661;101pkt 101fpkt"];
1396--9282[label="0.0615385;4pkt 4fpkt"];
1396--9298[label="0.190067;199pkt 199fpkt"];
1396--9493[label="0.104762;11pkt 11fpkt"];
1396--9631[label="0.574899;142pkt 142fpkt"];
1396--9899[label="0.05;1pkt 1fpkt"];
1396--11848[label="0.357143;115pkt 115fpkt"];
1396--12021[label="0.209302;9pkt 9fpkt"];
1396--12198[label="0.7625;61pkt 61fpkt"];
1396--12914[label="0.190067;199pkt 199fpkt"];
1396--12981[label="0.616099;199pkt 199fpkt"];
1396--13017[label="0.104762;11pkt 11fpkt"];
1396--13082[label="0.574899;142pkt 142fpkt"];
1396--14238[label="0.782051;61pkt 61fpkt"];
1396--14577[label="0.190067;199pkt 199fpkt"];
1396--14647[label="0.572581;142pkt 142fpkt"];
1396--15167[label="0.8;60pkt 60fpkt"];
2757--2908[label="0.00255102;1pkt 1fpkt"];
2757--2940[label="0.00537634;1pkt 1fpkt"];
2757--4009[label="0.136646;22pkt 22fpkt"];
2757--4585[label="0.00255102;1pkt 1fpkt"];
2757--5775[label="0.00409836;1pkt 1fpkt"];
2757--6302[label="0.0851064;4pkt 4fpkt"];
2757--6667[label="0.00255102;1pkt 1fpkt"];
2757--6672[label="0.00510204;2pkt 2fpkt"];
2757--7306[label="1;8pkt 8fpkt"];
2757--7308[label="0.0568182;5pkt 5fpkt"];
2757--7793[label="1;1pkt 1fpkt"];
2757--7941[label="0.0116279;1pkt 1fpkt"];
2757--8664[label="0.114796;45pkt 45fpkt"];
2757--8666[label="0.00510204;2pkt 2fpkt"];
2757--8688[label="0.0127551;5pkt 5fpkt"];
2757--8743[label="0.114796;45pkt 45fpkt"];
2757--8745[label="0.00510204;2pkt 2fpkt"];
2757--8765[label="0.0127551;5pkt 5fpkt"];
2757--8790[label="0.114796;45pkt 45fpkt"];
2757--8792[label="0.00510204;2pkt 2fpkt"];
2757--8811[label="0.0127551;5pkt 5fpkt"];
3293--4009[label="0.123457;10pkt 10fpkt"];
3293--8235[label="0.0493827;4pkt 4fpkt"];
3293--8664[label="0.0123457;1pkt 1fpkt"];
3293--8743[label="0.0123457;1pkt 1fpkt"];
3293--8790[label="0.0123457;1pkt 1fpkt"];
3293--12198[label="1;80pkt 80fpkt"];
3293--14238[label="1;78pkt 78fpkt"];
3293--15167[label="1;75pkt 75fpkt"];
4040--4502[label="0.0909091;2pkt 2fpkt"];
4040--8582[label="0.0454545;1pkt 1fpkt"];
4309--4416[label="0.0363636;2pkt 2fpkt"];
4309--4618[label="0.0363636;2pkt 2fpkt"];
4309--6588[label="0.0185185;1pkt 1fpkt"];
4309--8088[label="0.0181818;1pkt 1fpkt"];
4309--8688[label="0.0181818;1pkt 1fpkt"];
4309--8765[label="0.0181818;1pkt 1fpkt"];
4309--8811[label="0.0181818;1pkt 1fpkt"];
4924--5317[label="0.0294118;1pkt 1fpkt"];
4924--5938[label="0.027027;2pkt 2fpkt"];
4924--7308[label="0.027027;2pkt 2fpkt"];
4924--8409[label="0.0135135;1pkt 1fpkt"];
4924--8688[label="0.0675676;5pkt 5fpkt"];
4924--8689[label="0.027027;2pkt 2fpkt"];
4924--8765[label="0.0675676;5pkt 5fpkt"];
4924--8766[label="0.027027;2pkt 2fpkt"];
4924--8811[label="0.0675676;5pkt 5fpkt"];
4924--8812[label="0.027027;2pkt 2fpkt"];
5041--5431[label="0.466667;7pkt 7fpkt"];
5041--8354[label="1;9pkt 9fpkt"];
5041--9282[label="0.933333;14pkt 14fpkt"];
5041--9298[label="0.0666667;1pkt 1fpkt"];
5041--12914[label="0.0666667;1pkt 1fpkt"];
5041--14577[label="0.0666667;1pkt 1fpkt"];
5431--6641[label="0.25;6pkt 6fpkt"];
5431--8354[label="0.777778;7pkt 7fpkt"];
5431--9282[label="1;24pkt 24fpkt"];
6641--8664[label="0.0243902;1pkt 1fpkt"];
6641--8688[label="0.0243902;1pkt 1fpkt"];
6641--8743[label="0.0243902;1pkt 1fpkt"];
6641--8765[label="0.0243902;1pkt 1fpkt"];
6641--8790[label="0.0243902;1pkt 1fpkt"];
6641--8811[label="0.0243902;1pkt 1fpkt"];
6641--9282[label="0.439024;18pkt 18fpkt"];
6641--11685[label="0.292683;12pkt 12fpkt"];
7260--7308[label="0.0227273;2pkt 2fpkt"];
7260--8045[label="0.0116279;1pkt 1fpkt"];
7260--8664[label="0.0123839;4pkt 4fpkt"];
7260--8688[label="0.157895;51pkt 51fpkt"];
7260--8743[label="0.0123839;4pkt 4fpkt"];
7260--8765[label="0.157895;51pkt 51fpkt"];
7260--8790[label="0.0123839;4pkt 4fpkt"];
7260--8811[label="0.157895;51pkt 51fpkt"];
7260--11848[label="1;322pkt 322fpkt"];
7306--8664[label="0.125;1pkt 1fpkt"];
7306--8666[label="0.125;1pkt 1fpkt"];
7306--8743[label="0.125;1pkt 1fpkt"];
7306--8745[label="0.125;1pkt 1fpkt"];
7306--8790[label="0.125;1pkt 1fpkt"];
7306--8792[label="0.125;1pkt 1fpkt"];
7545--9493[label="0.987952;82pkt 82fpkt"];
7545--13017[label="0.987952;82pkt 82fpkt"];
8354--9282[label="0.888889;8pkt 8fpkt"];
8354--9298[label="0.111111;1pkt 1fpkt"];
8354--12914[label="0.111111;1pkt 1fpkt"];
8354--14577[label="0.111111;1pkt 1fpkt"];
9493--13017[label="1;105pkt 105fpkt"];
9631--13082[label="1;247pkt 247fpkt"];
9631--14647[label="1;247pkt 247fpkt"];
12198--14238[label="1;78pkt 78fpkt"];
12198--15167[label="1;75pkt 75fpkt"];
13082--14647[label="1;247pkt 247fpkt"];
14238--15167[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="133.4.60.69"/>
      <filter dst_ip="220.81.107.16" dst_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.149.33.45"/>
    </slice>
    <from sec="1289451777" usec="0"/>
    <to sec="1289451789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.80.30.47"/>
    </slice>
    <from sec="1289452282" usec="0"/>
    <to sec="1289452419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.25.160.51"/>
    </slice>
    <from sec="1289451676" usec="0"/>
    <to sec="1289451724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.244.85.56"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.86.189.57"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289451742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.57.89.58"/>
    </slice>
    <from sec="1289451648" usec="0"/>
    <to sec="1289452438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.52.209.58"/>
    </slice>
    <from sec="1289451911" usec="0"/>
    <to sec="1289452062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.3.113.64"/>
    </slice>
    <from sec="1289451601" usec="0"/>
    <to sec="1289451961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.108.224.64"/>
    </slice>
    <from sec="1289451617" usec="0"/>
    <to sec="1289452496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.74.200.68"/>
    </slice>
    <from sec="1289452295" usec="0"/>
    <to sec="1289452330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.102.165.69"/>
    </slice>
    <from sec="1289452131" usec="0"/>
    <to sec="1289452155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.126.55.73"/>
    </slice>
    <from sec="1289451747" usec="0"/>
    <to sec="1289452231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.47.8.75"/>
    </slice>
    <from sec="1289451868" usec="0"/>
    <to sec="1289451872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85178,3.59608,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1512{
style=filled;
color=gray75;
13321[label="194.74.130.76;1pkt 1fpkt", shape=invtriangle, color=brown];
14748[label="194.74.130.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1512[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.74.130.76:80, 133.4.189.204:58960}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58960: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13321--14748[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.4.189.204" dst_port="58960" src_ip="194.74.130.76" src_port="80"/>
    </slice>
    <from sec="1289452340" usec="0"/>
    <to sec="1289452344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.145.144.78"/>
    </slice>
    <from sec="1289452238" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.140.147.79"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.230.176.81"/>
    </slice>
    <from sec="1289451919" usec="0"/>
    <to sec="1289451926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.142.174.87"/>
    </slice>
    <from sec="1289452183" usec="0"/>
    <to sec="1289452190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.185.178.87"/>
    </slice>
    <from sec="1289452132" usec="0"/>
    <to sec="1289452177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.168.44.90"/>
    </slice>
    <from sec="1289452187" usec="0"/>
    <to sec="1289452216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.225.99.97"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74091,3.59156,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1521{
style=filled;
color=gray75;
10478[label="128.19.150.97;69pkt 69fpkt", shape=pentagon, color=darkviolet];
14814[label="128.19.150.97;70pkt 70fpkt", shape=invhouse, color=bisque];
stat1521[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.150.97:41717, *:*}[75.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41717: (37.7698%)&lt;BR/&gt; 443: (6.47482%)&lt;BR/&gt; 80: (4.31655%)&lt;BR/&gt; 63476: (2.15827%)&lt;BR/&gt; 34341: (2.15827%)&gt;];
}
10478--14814[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.150.97" src_port="41717"/>
    </slice>
    <from sec="1289451602" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.216.211.101"/>
    </slice>
    <from sec="1289452262" usec="0"/>
    <to sec="1289452311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.147.196.102"/>
    </slice>
    <from sec="1289452003" usec="0"/>
    <to sec="1289452410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.250.90.107"/>
    </slice>
    <from sec="1289451711" usec="0"/>
    <to sec="1289451985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.194.149.109"/>
    </slice>
    <from sec="1289451668" usec="0"/>
    <to sec="1289451678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.115.4.111"/>
    </slice>
    <from sec="1289451681" usec="0"/>
    <to sec="1289451744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="188.188.76.112"/>
    </slice>
    <from sec="1289451796" usec="0"/>
    <to sec="1289451816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.53.183.114"/>
    </slice>
    <from sec="1289452074" usec="0"/>
    <to sec="1289452077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.7.118.115"/>
    </slice>
    <from sec="1289452220" usec="0"/>
    <to sec="1289452233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.22.247.117"/>
    </slice>
    <from sec="1289452075" usec="0"/>
    <to sec="1289452090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.173.235.118"/>
    </slice>
    <from sec="1289451795" usec="0"/>
    <to sec="1289451924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.151.113.119"/>
    </slice>
    <from sec="1289451649" usec="0"/>
    <to sec="1289451771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.99.37.123"/>
    </slice>
    <from sec="1289451625" usec="0"/>
    <to sec="1289451638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.133.204.125"/>
    </slice>
    <from sec="1289452078" usec="0"/>
    <to sec="1289452138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.33.47.131"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="184.96.158.131"/>
    </slice>
    <from sec="1289451709" usec="0"/>
    <to sec="1289451727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.68.23.132"/>
    </slice>
    <from sec="1289451612" usec="0"/>
    <to sec="1289452298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.5.34.132"/>
    </slice>
    <from sec="1289452000" usec="0"/>
    <to sec="1289452021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.73.71.132"/>
    </slice>
    <from sec="1289451651" usec="0"/>
    <to sec="1289451678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.95.168.133"/>
    </slice>
    <from sec="1289452144" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.16.227.134"/>
    </slice>
    <from sec="1289452035" usec="0"/>
    <to sec="1289452056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.247.75.137"/>
    </slice>
    <from sec="1289452187" usec="0"/>
    <to sec="1289452201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.158.83.137"/>
    </slice>
    <from sec="1289451698" usec="0"/>
    <to sec="1289451725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.7.250.138"/>
    </slice>
    <from sec="1289451985" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.21.24.139"/>
    </slice>
    <from sec="1289451714" usec="0"/>
    <to sec="1289451720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="177.181.74.139"/>
    </slice>
    <from sec="1289452394" usec="0"/>
    <to sec="1289452423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26955,3.50944,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1547{
style=filled;
color=gray75;
214[label="35.145.25.7;d;85pkt 85fpkt", shape=diamond, color=yellow];
824[label="35.145.124.178;d;13pkt 13fpkt", shape=diamond, color=yellow];
1238[label="168.118.16.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
1542[label="44.115.4.111;d;16pkt 16fpkt", shape=diamond, color=yellow];
1631[label="128.165.163.207;s;87pkt 87fpkt", shape=diamond, color=yellow];
2204[label="146.0.211.135;s;34pkt 34fpkt", shape=diamond, color=yellow];
2640[label="80.76.81.219;d;127pkt 127fpkt", shape=diamond, color=yellow];
4015[label="35.145.218.24;d;38pkt 38fpkt", shape=diamond, color=yellow];
4027[label="0.33.105.197;d;71pkt 71fpkt", shape=diamond, color=yellow];
4143[label="128.165.171.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
4149[label="166.26.105.102;s;290pkt 290fpkt", shape=diamond, color=yellow];
4305[label="214.178.209.38;d;56pkt 56fpkt", shape=diamond, color=yellow];
5610[label="198.236.87.56;d;45pkt 45fpkt", shape=diamond, color=yellow];
5778[label="211.185.146.174;s;1204pkt 1204fpkt", shape=diamond, color=yellow];
6842[label="196.59.36.33;d;27pkt 27fpkt", shape=diamond, color=yellow];
7019[label="202.41.19.142;d;97pkt 97fpkt", shape=diamond, color=yellow];
7765[label="44.115.4.111;d;8pkt 8fpkt", shape=hexagon, color=black];
7912[label="35.145.25.7;d;51pkt 51fpkt", shape=hexagon, color=black];
8097[label="0.33.105.197;d;59pkt 59fpkt", shape=hexagon, color=black];
8541[label="196.59.36.33;d;27pkt 27fpkt", shape=hexagon, color=black];
8603[label="198.236.87.56;d;45pkt 45fpkt", shape=hexagon, color=black];
8862[label="128.165.170.1;16pkt 16fpkt", shape=pentagon, color=darkviolet];
9059[label="128.165.211.12;16pkt 16fpkt", shape=pentagon, color=darkviolet];
11649[label="211.185.146.174;1472pkt 1472fpkt", shape=pentagon, color=darkviolet];
12106[label="128.165.163.207;95pkt 95fpkt", shape=pentagon, color=darkviolet];
12711[label="128.165.170.1;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1547[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.185.146.174:*, *:80}[54.9255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.3625%)&lt;BR/&gt; 443: (2.775%)&lt;BR/&gt; 993: (2.225%)&lt;BR/&gt; 995: (1.5625%)&lt;BR/&gt; 62806: (1.275%)&gt;];
}
214--1388[label="0.0117647;1pkt 1fpkt"];
214--1631[label="0.0117647;1pkt 1fpkt"];
214--2272[label="0.0196078;1pkt 1fpkt"];
214--2705[label="0.0235294;2pkt 2fpkt"];
214--4143[label="0.5;2pkt 2fpkt"];
214--5778[label="0.235294;20pkt 20fpkt"];
214--5949[label="0.0128205;1pkt 1fpkt"];
214--7912[label="1;51pkt 51fpkt"];
214--8862[label="0.6875;11pkt 11fpkt"];
214--9059[label="0.75;12pkt 12fpkt"];
214--9439[label="0.0196078;1pkt 1fpkt"];
214--9733[label="0.142857;1pkt 1fpkt"];
214--11649[label="0.235294;20pkt 20fpkt"];
214--12106[label="0.0117647;1pkt 1fpkt"];
214--12711[label="0.6875;11pkt 11fpkt"];
214--13137[label="0.25;2pkt 2fpkt"];
214--14671[label="0.142857;1pkt 1fpkt"];
824--2705[label="0.0769231;1pkt 1fpkt"];
824--5778[label="0.692308;9pkt 9fpkt"];
824--11649[label="0.692308;9pkt 9fpkt"];
1238--1631[label="1;1pkt 1fpkt"];
1238--12106[label="1;1pkt 1fpkt"];
1542--5778[label="1;16pkt 16fpkt"];
1542--7765[label="1;8pkt 8fpkt"];
1542--11649[label="1;16pkt 16fpkt"];
1631--4655[label="0.045977;4pkt 4fpkt"];
1631--4748[label="0.045977;4pkt 4fpkt"];
1631--5937[label="0.0114943;1pkt 1fpkt"];
1631--6182[label="0.0344828;3pkt 3fpkt"];
1631--6701[label="0.111111;1pkt 1fpkt"];
1631--7912[label="0.0196078;1pkt 1fpkt"];
1631--8301[label="0.045977;4pkt 4fpkt"];
1631--8689[label="0.0114943;1pkt 1fpkt"];
1631--8766[label="0.0114943;1pkt 1fpkt"];
1631--8812[label="0.0114943;1pkt 1fpkt"];
1631--12106[label="1;87pkt 87fpkt"];
2204--2640[label="1;34pkt 34fpkt"];
2640--3035[label="0.00787402;1pkt 1fpkt"];
2640--4149[label="0.133858;17pkt 17fpkt"];
2640--5778[label="0.0314961;4pkt 4fpkt"];
2640--8688[label="0.023622;3pkt 3fpkt"];
2640--8765[label="0.023622;3pkt 3fpkt"];
2640--8811[label="0.023622;3pkt 3fpkt"];
2640--11649[label="0.0314961;4pkt 4fpkt"];
4015--5778[label="0.552632;21pkt 21fpkt"];
4015--6173[label="0.0263158;1pkt 1fpkt"];
4015--9439[label="0.0263158;1pkt 1fpkt"];
4015--10913[label="0.0263158;1pkt 1fpkt"];
4015--11649[label="0.631579;24pkt 24fpkt"];
4015--13668[label="0.0263158;1pkt 1fpkt"];
4027--5778[label="0.690141;49pkt 49fpkt"];
4027--7494[label="0.028169;2pkt 2fpkt"];
4027--8097[label="1;59pkt 59fpkt"];
4027--8688[label="0.0140845;1pkt 1fpkt"];
4027--8765[label="0.0140845;1pkt 1fpkt"];
4027--8811[label="0.0140845;1pkt 1fpkt"];
4027--11649[label="0.690141;49pkt 49fpkt"];
4143--4196[label="0.333333;1pkt 1fpkt"];
4143--7912[label="0.25;1pkt 1fpkt"];
4149--8688[label="0.0344828;10pkt 10fpkt"];
4149--8765[label="0.0344828;10pkt 10fpkt"];
4149--8811[label="0.0344828;10pkt 10fpkt"];
4305--5778[label="1;56pkt 56fpkt"];
4305--8664[label="0.107143;6pkt 6fpkt"];
4305--8743[label="0.107143;6pkt 6fpkt"];
4305--8790[label="0.107143;6pkt 6fpkt"];
4305--11649[label="1;56pkt 56fpkt"];
5610--5778[label="0.955556;43pkt 43fpkt"];
5610--8603[label="1;45pkt 45fpkt"];
5610--8688[label="0.0888889;4pkt 4fpkt"];
5610--8765[label="0.0888889;4pkt 4fpkt"];
5610--8811[label="0.0888889;4pkt 4fpkt"];
5610--11649[label="0.977778;44pkt 44fpkt"];
5778--5937[label="0.00854701;1pkt 1fpkt"];
5778--6012[label="0.0111111;1pkt 1fpkt"];
5778--6095[label="0.0144928;2pkt 2fpkt"];
5778--6146[label="0.0555556;2pkt 2fpkt"];
5778--6302[label="0.0212766;1pkt 1fpkt"];
5778--6416[label="0.5;1pkt 1fpkt"];
5778--6483[label="0.00105708;1pkt 1fpkt"];
5778--6498[label="0.00847458;1pkt 1fpkt"];
5778--6545[label="0.00680272;1pkt 1fpkt"];
5778--6612[label="0.0137931;2pkt 2fpkt"];
5778--6660[label="0.0555556;1pkt 1fpkt"];
5778--6685[label="0.0210526;2pkt 2fpkt"];
5778--6842[label="0.814815;22pkt 22fpkt"];
5778--7308[label="0.113636;10pkt 10fpkt"];
5778--7698[label="0.0238095;2pkt 2fpkt"];
5778--7765[label="1;8pkt 8fpkt"];
5778--7815[label="0.00664452;8pkt 8fpkt"];
5778--7912[label="0.372549;19pkt 19fpkt"];
5778--7987[label="0.00718563;6pkt 6fpkt"];
5778--8036[label="0.00552486;2pkt 2fpkt"];
5778--8045[label="0.0232558;2pkt 2fpkt"];
5778--8059[label="0.00574713;1pkt 1fpkt"];
5778--8084[label="0.0172414;3pkt 3fpkt"];
5778--8097[label="0.830508;49pkt 49fpkt"];
5778--8149[label="0.117647;4pkt 4fpkt"];
5778--8210[label="0.00645161;1pkt 1fpkt"];
5778--8301[label="0.0243902;4pkt 4fpkt"];
5778--8412[label="0.00321543;1pkt 1fpkt"];
5778--8432[label="0.0121581;4pkt 4fpkt"];
5778--8519[label="0.0454545;2pkt 2fpkt"];
5778--8541[label="0.814815;22pkt 22fpkt"];
5778--8603[label="0.955556;43pkt 43fpkt"];
5778--8664[label="0.0415282;50pkt 50fpkt"];
5778--8666[label="0.00664452;8pkt 8fpkt"];
5778--8688[label="0.0631229;76pkt 76fpkt"];
5778--8689[label="0.00913621;11pkt 11fpkt"];
5778--8743[label="0.0415282;50pkt 50fpkt"];
5778--8745[label="0.00664452;8pkt 8fpkt"];
5778--8765[label="0.0631229;76pkt 76fpkt"];
5778--8766[label="0.00913621;11pkt 11fpkt"];
5778--8790[label="0.0415282;50pkt 50fpkt"];
5778--8792[label="0.00664452;8pkt 8fpkt"];
5778--8811[label="0.0631229;76pkt 76fpkt"];
5778--8812[label="0.00913621;11pkt 11fpkt"];
5778--11649[label="0.999169;1203pkt 1203fpkt"];
6842--8541[label="1;27pkt 27fpkt"];
6842--8688[label="0.222222;6pkt 6fpkt"];
6842--8765[label="0.222222;6pkt 6fpkt"];
6842--8811[label="0.222222;6pkt 6fpkt"];
6842--11649[label="1;27pkt 27fpkt"];
7019--11649[label="0.989691;96pkt 96fpkt"];
7765--11649[label="1;8pkt 8fpkt"];
7912--8862[label="0.25;4pkt 4fpkt"];
7912--9059[label="0.25;4pkt 4fpkt"];
7912--9439[label="0.0196078;1pkt 1fpkt"];
7912--11649[label="0.372549;19pkt 19fpkt"];
7912--12106[label="0.0196078;1pkt 1fpkt"];
7912--12711[label="0.25;4pkt 4fpkt"];
7912--13137[label="0.125;1pkt 1fpkt"];
8097--11649[label="0.830508;49pkt 49fpkt"];
8541--8688[label="0.222222;6pkt 6fpkt"];
8541--8765[label="0.222222;6pkt 6fpkt"];
8541--8811[label="0.222222;6pkt 6fpkt"];
8541--11649[label="1;27pkt 27fpkt"];
8603--8688[label="0.0888889;4pkt 4fpkt"];
8603--8765[label="0.0888889;4pkt 4fpkt"];
8603--8811[label="0.0888889;4pkt 4fpkt"];
8603--11649[label="0.977778;44pkt 44fpkt"];
8862--12711[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="211.185.146.174"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.40.36.143"/>
    </slice>
    <from sec="1289452118" usec="0"/>
    <to sec="1289452128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.141.233.147"/>
    </slice>
    <from sec="1289452232" usec="0"/>
    <to sec="1289452244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.11.101.152"/>
    </slice>
    <from sec="1289452062" usec="0"/>
    <to sec="1289452067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.170.73.154"/>
    </slice>
    <from sec="1289451609" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.191.0.156"/>
    </slice>
    <from sec="1289452351" usec="0"/>
    <to sec="1289452487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.217.86.158"/>
    </slice>
    <from sec="1289452217" usec="0"/>
    <to sec="1289452232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.52.209.161"/>
    </slice>
    <from sec="1289452128" usec="0"/>
    <to sec="1289452154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.47.8.162"/>
    </slice>
    <from sec="1289451680" usec="0"/>
    <to sec="1289451687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.166.75.162"/>
    </slice>
    <from sec="1289452181" usec="0"/>
    <to sec="1289452237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="184.24.182.163"/>
    </slice>
    <from sec="1289452175" usec="0"/>
    <to sec="1289452432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.182.28.166"/>
    </slice>
    <from sec="1289452048" usec="0"/>
    <to sec="1289452276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.62.97.166"/>
    </slice>
    <from sec="1289451727" usec="0"/>
    <to sec="1289451745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.941395,3.53646,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
820[label="166.26.115.45;d;128pkt 128fpkt", shape=diamond, color=yellow];
2664[label="4.130.164.76;s;2pkt 2fpkt", shape=diamond, color=yellow];
4198[label="193.141.78.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
10162[label="4.130.164.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13324[label="4.130.164.76;1pkt 1fpkt", shape=invtriangle, color=brown];
15024[label="193.141.78.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.26.115.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49993: (1.49254%)&lt;BR/&gt; 49823: (1.1194%)&lt;BR/&gt; 49729: (0.746269%)&lt;BR/&gt; 49831: (0.373134%)&gt;];
}
820--1448[label="0.166667;2pkt 2fpkt"];
820--2664[label="1;2pkt 2fpkt"];
820--4198[label="1;1pkt 1fpkt"];
820--8684[label="0.0078125;1pkt 1fpkt"];
820--8761[label="0.0078125;1pkt 1fpkt"];
820--8807[label="0.0078125;1pkt 1fpkt"];
820--10162[label="1;1pkt 1fpkt"];
820--11555[label="0.166667;2pkt 2fpkt"];
820--13324[label="1;1pkt 1fpkt"];
820--13914[label="0.434783;10pkt 10fpkt"];
820--15024[label="1;1pkt 1fpkt"];
2664--10162[label="1;1pkt 1fpkt"];
2664--13324[label="1;1pkt 1fpkt"];
4198--15024[label="1;1pkt 1fpkt"];
10162--13324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.115.45" src_port="80"/>
    </slice>
    <from sec="1289451600" usec="0"/>
    <to sec="1289452428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.227.67.168"/>
    </slice>
    <from sec="1289452130" usec="0"/>
    <to sec="1289452135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.47.3.169"/>
    </slice>
    <from sec="1289451969" usec="0"/>
    <to sec="1289451974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.106.14.171"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="120.16.37.172"/>
    </slice>
    <from sec="1289452441" usec="0"/>
    <to sec="1289452458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.167.198.173"/>
    </slice>
    <from sec="1289451620" usec="0"/>
    <to sec="1289451883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.50.110.174"/>
    </slice>
    <from sec="1289451933" usec="0"/>
    <to sec="1289451953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.68.238.175"/>
    </slice>
    <from sec="1289452175" usec="0"/>
    <to sec="1289452226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.99.78.176"/>
    </slice>
    <from sec="1289452343" usec="0"/>
    <to sec="1289452349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.82.20.177"/>
    </slice>
    <from sec="1289451969" usec="0"/>
    <to sec="1289452337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.26.135.179"/>
    </slice>
    <from sec="1289451840" usec="0"/>
    <to sec="1289451853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.178.102.185"/>
    </slice>
    <from sec="1289451983" usec="0"/>
    <to sec="1289451996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.179.110.185"/>
    </slice>
    <from sec="1289451672" usec="0"/>
    <to sec="1289452452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.94.104.188"/>
    </slice>
    <from sec="1289451632" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85178,3.59608,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1574{
style=filled;
color=gray75;
14096[label="203.47.8.191;1pkt 1fpkt", shape=invtriangle, color=brown];
15097[label="203.47.8.191;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1574[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.47.8.191:56036, 211.185.156.74:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56036: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
14096--15097[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.156.74" dst_port="995" src_ip="203.47.8.191" src_port="56036"/>
    </slice>
    <from sec="1289452482" usec="0"/>
    <to sec="1289452489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.162.194.191"/>
    </slice>
    <from sec="1289452222" usec="0"/>
    <to sec="1289452235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.9.12.192"/>
    </slice>
    <from sec="1289452030" usec="0"/>
    <to sec="1289452094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.227.194.192"/>
    </slice>
    <from sec="1289451955" usec="0"/>
    <to sec="1289451982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.7.117.195"/>
    </slice>
    <from sec="1289451895" usec="0"/>
    <to sec="1289451897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.237.173.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.105.197.195"/>
    </slice>
    <from sec="1289451628" usec="0"/>
    <to sec="1289452498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.58.48.199"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.236.24.200"/>
    </slice>
    <from sec="1289452172" usec="0"/>
    <to sec="1289452178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.36.25.205"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.59.37.206"/>
    </slice>
    <from sec="1289452336" usec="0"/>
    <to sec="1289452390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.160.77.206"/>
    </slice>
    <from sec="1289451704" usec="0"/>
    <to sec="1289451708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="178.159.199.206"/>
    </slice>
    <from sec="1289451749" usec="0"/>
    <to sec="1289451775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.210.113.207"/>
    </slice>
    <from sec="1289451823" usec="0"/>
    <to sec="1289451837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.10.70.208"/>
    </slice>
    <from sec="1289452263" usec="0"/>
    <to sec="1289452340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74091,3.59156,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1589{
style=filled;
color=gray75;
12169[label="25.68.186.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15162[label="25.68.186.211;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1589[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.68.186.211:2093, 211.185.145.108:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2093: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12169--15162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.185.145.108" dst_port="80" src_ip="25.68.186.211" src_port="2093"/>
    </slice>
    <from sec="1289452294" usec="0"/>
    <to sec="1289452323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.71.32.212"/>
    </slice>
    <from sec="1289451934" usec="0"/>
    <to sec="1289451961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.23.4.214"/>
    </slice>
    <from sec="1289452407" usec="0"/>
    <to sec="1289452442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.6.91.214"/>
    </slice>
    <from sec="1289451909" usec="0"/>
    <to sec="1289452157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.225.115.216"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.865037,3.58458,503,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1594{
style=filled;
color=gray75;
7650[label="202.52.209.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
15182[label="202.52.209.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1594[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.52.209.216:80, 210.33.110.38:41211}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41211: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7650--15182[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.33.110.38" dst_port="41211" src_ip="202.52.209.216" src_port="80"/>
    </slice>
    <from sec="1289452398" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.227.79.218"/>
    </slice>
    <from sec="1289451606" usec="0"/>
    <to sec="1289451627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.52.209.219"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.153.94.220"/>
    </slice>
    <from sec="1289452474" usec="0"/>
    <to sec="1289452493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.52.213.226"/>
    </slice>
    <from sec="1289451730" usec="0"/>
    <to sec="1289452356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.52.209.227"/>
    </slice>
    <from sec="1289452493" usec="0"/>
    <to sec="1289452500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="178.5.51.228"/>
    </slice>
    <from sec="1289452129" usec="0"/>
    <to sec="1289452143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.105.108.230"/>
    </slice>
    <from sec="1289452257" usec="0"/>
    <to sec="1289452262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.200.173.231"/>
    </slice>
    <from sec="1289451991" usec="0"/>
    <to sec="1289451994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85178,3.59608,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1604{
style=filled;
color=gray75;
14362[label="6.133.196.231;7pkt 7fpkt", shape=invtriangle, color=brown];
15226[label="6.133.196.231;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1604[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.133.196.231:*, 166.26.179.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1126: (7.14286%)&lt;BR/&gt; 1124: (7.14286%)&lt;BR/&gt; 1106: (7.14286%)&lt;BR/&gt; 1105: (7.14286%)&gt;];
}
14362--15226[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="166.26.179.31" dst_port="80" src_ip="6.133.196.231"/>
    </slice>
    <from sec="1289452426" usec="0"/>
    <to sec="1289452433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.9.12.234"/>
    </slice>
    <from sec="1289452338" usec="0"/>
    <to sec="1289452431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.200.203.239"/>
    </slice>
    <from sec="1289452174" usec="0"/>
    <to sec="1289452335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.186.232.240"/>
    </slice>
    <from sec="1289452138" usec="0"/>
    <to sec="1289452149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.26.114.242"/>
    </slice>
    <from sec="1289452135" usec="0"/>
    <to sec="1289452147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.164.198.248"/>
    </slice>
    <from sec="1289452500" usec="0"/>
    <to sec="1289452501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.753837,3.61758,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.134.232.250"/>
    </slice>
    <from sec="1289452360" usec="0"/>
    <to sec="1289452373" usec="0"/>
  </anomaly>

</admd:annotation>
